{
    "type": "bundle",
    "id": "bundle--55c902ef-1910-4904-8cee-41cc950d210b",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:50.000Z",
            "modified": "2015-09-30T08:58:50.000Z",
            "name": "CthulhuSPRL.be",
            "identity_class": "organization"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--55c902ef-1910-4904-8cee-41cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:50.000Z",
            "modified": "2015-09-30T08:58:50.000Z",
            "name": "OSINT Fidelis Threat Advisory #1018 Looking at the Sky for a DarkComet from the Fidelis Cybersecurity",
            "published": "2016-03-01T22:30:34Z",
            "object_refs": [
                "observed-data--55c90304-b238-4c61-b0d1-4296950d210b",
                "url--55c90304-b238-4c61-b0d1-4296950d210b",
                "indicator--55c9a6c0-1be8-475f-9ebc-354c950d210b",
                "indicator--55c9a6d5-3a24-4763-826a-4e27950d210b",
                "observed-data--560b9ec3-92d4-4caf-999c-41df950d210b",
                "url--560b9ec3-92d4-4caf-999c-41df950d210b",
                "observed-data--560b9ec4-e020-4211-95ef-4907950d210b",
                "url--560b9ec4-e020-4211-95ef-4907950d210b",
                "observed-data--560b9ec4-2660-47b9-9dc4-4013950d210b",
                "url--560b9ec4-2660-47b9-9dc4-4013950d210b",
                "indicator--560b9f3a-00c8-4e99-850a-430b950d210b",
                "indicator--560b9f3a-66b8-42a6-9b5c-4035950d210b",
                "indicator--560b9f3b-3cbc-40a7-9144-456f950d210b",
                "indicator--560b9f3b-0fe8-4edc-9e7a-4fee950d210b",
                "indicator--560b9f3c-e47c-480d-8b20-4f8f950d210b",
                "indicator--560b9f3c-5d30-43ac-9efa-424f950d210b",
                "indicator--560b9f3c-c90c-4ef0-83f1-468d950d210b",
                "indicator--560b9f3d-6a10-4708-b1fc-4ba6950d210b",
                "indicator--560b9f3d-f648-4fe4-9884-4000950d210b",
                "indicator--560b9f3d-d288-4872-8b63-45db950d210b",
                "indicator--560b9f3e-614c-4bb6-bdf8-4231950d210b",
                "indicator--560b9f3e-f884-48ce-a40d-4f0e950d210b",
                "indicator--560b9f3e-2fac-4fd2-9999-413d950d210b",
                "indicator--560b9f3f-c8a0-4c5b-befa-483a950d210b",
                "indicator--560b9f3f-ca70-47d0-9303-4b3c950d210b",
                "indicator--560b9f3f-c49c-4210-9ce4-444b950d210b",
                "indicator--560b9f40-8408-4ca9-a342-4dbf950d210b",
                "indicator--560b9f40-4d4c-4cb4-85c0-445b950d210b",
                "indicator--560b9f41-2ab0-4f88-9ac0-45ca950d210b",
                "indicator--560b9f41-a344-4659-858e-46d7950d210b",
                "indicator--560b9f41-f4e0-4be3-bae5-4b1f950d210b",
                "indicator--560b9f42-14a0-404e-a95c-4ae6950d210b",
                "indicator--560b9f42-e518-4411-b5ac-4b42950d210b",
                "indicator--560b9f42-a904-4a89-8749-4565950d210b",
                "indicator--560b9f43-f780-4984-a07c-4a8f950d210b",
                "indicator--560b9f43-9754-4d0c-86d9-4abe950d210b",
                "indicator--560b9f43-8920-47da-ab75-48c7950d210b",
                "indicator--560b9f44-bdf8-41cc-90e4-461b950d210b",
                "indicator--560b9f44-599c-47b6-991b-415d950d210b",
                "indicator--560b9f44-a858-45d8-b811-44a1950d210b",
                "indicator--560b9f45-d654-41a0-a875-4e29950d210b",
                "indicator--560b9f45-2488-4499-aafa-4e33950d210b",
                "indicator--560b9f45-46f8-48c5-bc5a-4aff950d210b",
                "indicator--560b9f46-adc8-407d-9b39-48d4950d210b",
                "indicator--560b9f46-f524-429d-aad8-47e2950d210b",
                "indicator--560b9f47-4eb4-43a1-9942-4a22950d210b",
                "indicator--560b9f47-6484-4d02-a64d-4682950d210b",
                "indicator--560b9f47-5e80-48c8-ad3d-40be950d210b",
                "indicator--560b9f48-3514-4310-90ba-41f8950d210b",
                "indicator--560b9f48-c2e0-437e-881c-427a950d210b",
                "indicator--560b9f48-feb0-4076-97fe-4a76950d210b",
                "indicator--560b9f49-df68-4cc2-aa06-48af950d210b",
                "indicator--560b9f49-5b18-46b7-8320-4b18950d210b",
                "indicator--560b9f49-7f84-4428-b597-4dee950d210b",
                "indicator--560b9f4a-c7fc-4da7-ab8a-429c950d210b",
                "indicator--560b9f4a-56b8-4a82-be98-4e19950d210b",
                "indicator--560b9f4a-c2b4-4874-adb6-4870950d210b",
                "indicator--560b9f4b-0570-403d-9d2a-45de950d210b",
                "indicator--560b9f4b-95e8-4a59-8ee1-4b22950d210b",
                "indicator--560b9f4b-6ee4-497a-a859-4d07950d210b",
                "indicator--560b9f4c-ca18-42ae-8503-4e52950d210b",
                "indicator--560b9f4c-49ec-441a-8724-4010950d210b",
                "indicator--560b9f4d-ad84-480a-82d5-48b5950d210b",
                "indicator--560b9f4d-e528-4d24-a545-4b82950d210b",
                "indicator--560b9f4d-8268-482a-9553-4199950d210b",
                "indicator--560b9f4e-3514-4f8f-b681-4287950d210b",
                "indicator--560b9f4e-5168-4439-8b1f-40e6950d210b",
                "indicator--560b9f4e-1dbc-4d0d-a3c6-447d950d210b",
                "indicator--560b9f4f-b6e4-4507-a03a-45cb950d210b",
                "indicator--560b9f4f-3bb8-494d-9f9e-4150950d210b",
                "indicator--560b9f4f-38b0-4133-b4c8-4c8d950d210b",
                "indicator--560b9f50-8c8c-4182-89cc-47a4950d210b",
                "indicator--560b9f50-5388-4a8b-9aa5-4aac950d210b",
                "indicator--560b9f50-dab4-422d-83d3-4874950d210b",
                "indicator--560b9f51-cec4-4c56-8363-484d950d210b",
                "indicator--560b9f51-67fc-4909-a6b4-439d950d210b",
                "indicator--560b9f51-a44c-4a9b-ab87-4bda950d210b",
                "indicator--560b9f52-76a4-4fd5-922b-4e34950d210b",
                "indicator--560b9f52-ba90-4317-8784-41bb950d210b",
                "indicator--560b9f53-7da4-4761-b19e-4a79950d210b",
                "indicator--560b9f53-7d54-4216-aa30-4aed950d210b",
                "indicator--560b9f53-39b8-414b-957c-4b0a950d210b",
                "indicator--560b9f54-7314-431c-91c5-496c950d210b",
                "indicator--560b9f54-b8b4-40eb-bdb7-46d0950d210b",
                "indicator--560b9f54-24ec-4081-bda6-4d50950d210b",
                "indicator--560b9f55-06a8-470f-abfa-49b7950d210b",
                "indicator--560b9f55-53f4-4f66-a554-4508950d210b",
                "indicator--560b9f55-fc40-4c15-94be-48da950d210b",
                "indicator--560b9f56-696c-4de3-8a07-4455950d210b",
                "indicator--560b9f56-3a88-49e1-ab32-4459950d210b",
                "indicator--560b9f56-3010-4642-a521-45ae950d210b",
                "indicator--560b9f57-1f64-47bb-ac6b-4e6b950d210b",
                "indicator--560b9f57-b074-4a22-ad4f-477e950d210b",
                "indicator--560b9f57-e07c-4f56-afd9-4a2a950d210b",
                "indicator--560b9f58-d098-471c-b3f6-4cd0950d210b",
                "indicator--560b9f58-60b4-4ffc-8b5a-4b0c950d210b",
                "indicator--560b9f58-52d4-4ae6-81ce-4041950d210b",
                "indicator--560b9f59-9340-47b4-847b-4014950d210b",
                "indicator--560b9f59-e780-4754-a72d-4358950d210b",
                "indicator--560b9f5a-b6b4-4d8c-97c8-4128950d210b",
                "indicator--560b9f5a-8c84-4dcf-9247-4bf1950d210b",
                "indicator--560b9f5a-5890-489e-9798-4a18950d210b",
                "indicator--560b9f5b-e96c-439b-86a0-444b950d210b",
                "indicator--560b9f5b-61c8-4fb8-ac86-4a03950d210b",
                "indicator--560b9f5b-731c-4c07-9f6d-4a1d950d210b",
                "indicator--560b9f5c-33c4-4287-af9a-424f950d210b",
                "indicator--560b9f5c-2a98-426d-ad19-4db1950d210b",
                "indicator--560b9f5c-b054-48b9-b360-45ad950d210b",
                "indicator--560b9f5d-ccdc-494c-b24f-412d950d210b",
                "indicator--560b9f5d-029c-4101-b1ad-4cd4950d210b",
                "indicator--560b9f5d-0c24-4d35-a34e-4f5a950d210b",
                "indicator--560b9f5e-ff30-4732-adaa-407e950d210b",
                "indicator--560b9f5e-82e8-42e6-9da8-4dec950d210b",
                "indicator--560b9f5e-6018-45c1-982f-496e950d210b",
                "indicator--560b9f5f-014c-4035-b7d8-41e1950d210b",
                "indicator--560b9f5f-3e38-408d-b988-4644950d210b",
                "indicator--560b9f60-b3a0-4a85-87be-4472950d210b",
                "indicator--560b9f60-9878-4707-b80a-4f73950d210b",
                "indicator--560b9f60-bec4-487d-998b-46ba950d210b",
                "indicator--560b9f61-ec80-495b-9fdc-4bfe950d210b",
                "indicator--560b9f61-d16c-46c8-beeb-478f950d210b",
                "indicator--560b9f61-d678-4228-8434-4670950d210b",
                "indicator--560b9f62-1384-4f5f-a336-46e7950d210b",
                "indicator--560b9f62-bfd8-4a73-acf0-4e6f950d210b",
                "indicator--560b9f62-da4c-4c43-aa2a-4eb7950d210b",
                "indicator--560b9f63-e18c-4eba-b018-43af950d210b",
                "indicator--560b9f63-35f8-4532-9db4-475e950d210b",
                "indicator--560b9f63-b49c-4166-af8f-4537950d210b",
                "indicator--560b9f64-3854-49bd-85c1-45d3950d210b",
                "indicator--560b9f64-a9d4-44c4-8cf8-47d6950d210b",
                "indicator--560b9f64-45d4-42dc-b0e3-46c6950d210b",
                "indicator--560b9f65-3a40-4eae-bd8c-4625950d210b",
                "indicator--560b9f65-0674-4992-9b6d-4bec950d210b",
                "indicator--560b9f66-d788-40eb-91c8-425f950d210b",
                "indicator--560b9f66-7af4-4b6c-ac1c-4253950d210b",
                "indicator--560b9f66-4bec-4e34-b94a-470a950d210b",
                "indicator--560b9f67-6af4-4d22-98eb-4027950d210b",
                "indicator--560b9f67-1570-44a6-9b16-4e9d950d210b",
                "indicator--560b9f67-043c-4de7-b10e-4b4c950d210b",
                "indicator--560b9f68-9828-42cc-a561-47d6950d210b",
                "indicator--560b9f68-0888-4878-ba84-4ebd950d210b",
                "indicator--560b9f68-a0c0-469b-a2ea-4191950d210b",
                "indicator--560b9f69-81e8-4c06-a05b-42cc950d210b",
                "indicator--560b9f69-b62c-4bb0-8922-44cf950d210b",
                "indicator--560b9f69-0824-450f-be4a-448f950d210b",
                "indicator--560b9f6a-d4a4-46da-b59f-4d13950d210b",
                "indicator--560b9f6a-4788-4df5-9386-442a950d210b",
                "indicator--560b9f6a-d58c-489e-8ac0-4da5950d210b",
                "indicator--560b9f6b-085c-4cd0-b2e1-4b82950d210b",
                "indicator--560b9f6b-b430-49ce-a4b8-4932950d210b",
                "indicator--560b9f6c-52f4-47d8-a1ed-4a28950d210b",
                "indicator--560b9f6c-ee84-40c9-9a09-4873950d210b",
                "indicator--560b9f6c-5714-4bc3-bf27-4ad0950d210b",
                "indicator--560b9f6d-1770-41d4-ad88-4ed4950d210b",
                "indicator--560b9f6d-8ee0-4baa-ad32-478e950d210b",
                "indicator--560b9f6d-2724-4598-9016-43f4950d210b",
                "indicator--560b9f6e-cc48-462a-8e30-4e9c950d210b",
                "indicator--560b9f6e-f880-4b12-b97a-4a71950d210b",
                "indicator--560b9f6e-fc0c-445d-b362-45b6950d210b",
                "indicator--560b9f6f-2d10-474d-80ec-463c950d210b",
                "indicator--560b9f6f-4418-4359-87a7-43a9950d210b",
                "indicator--560b9f6f-ff48-4992-bf06-40f2950d210b",
                "indicator--560b9f70-7ab8-474a-bb28-4117950d210b",
                "indicator--560b9f70-c070-4907-9193-4dc4950d210b",
                "indicator--560b9f70-d184-4848-bb47-404b950d210b",
                "indicator--560b9f71-9280-4258-8462-4ef8950d210b",
                "indicator--560b9f71-8e2c-484e-827d-4f26950d210b",
                "indicator--560b9f72-e6a8-4a67-813d-48a1950d210b",
                "indicator--560b9f72-5d6c-42e9-9f24-4de1950d210b",
                "indicator--560b9f72-cab0-4c64-9c89-4d5b950d210b",
                "indicator--560b9f73-6704-48ff-988d-4963950d210b",
                "indicator--560b9f73-2608-4941-9eeb-4374950d210b",
                "indicator--560b9f73-0780-46f5-a910-4588950d210b",
                "indicator--560b9f74-03cc-487b-ab6f-4e42950d210b",
                "indicator--560b9f74-4b8c-495b-8968-423d950d210b",
                "indicator--560b9f74-bc54-4316-9cd4-4f24950d210b",
                "indicator--560b9f75-5174-404d-8bb7-424c950d210b",
                "indicator--560b9f75-90f4-4ec1-9da6-4f7d950d210b",
                "indicator--560b9f75-c3ec-4532-a687-43e5950d210b",
                "indicator--560b9f76-6f58-4bbd-b948-4f2e950d210b",
                "indicator--560b9f76-d3a8-4036-8a2a-46f6950d210b",
                "indicator--560b9f77-c700-4acc-9a53-4228950d210b",
                "indicator--560b9f77-aa98-4aef-9b26-43db950d210b",
                "indicator--560b9f77-48ac-4833-99ae-4722950d210b",
                "indicator--560b9f78-5a44-4955-9a97-41e4950d210b",
                "indicator--560b9f78-9cc8-4490-a490-4ae4950d210b",
                "indicator--560b9f78-9e68-4667-90e5-4e6c950d210b",
                "indicator--560b9f79-d2c0-4c54-84d5-45f9950d210b",
                "indicator--560b9f79-f4b8-4545-b499-498b950d210b",
                "indicator--560b9f79-9414-4021-921f-4e71950d210b",
                "indicator--560b9f7a-f1bc-4acb-82e5-4601950d210b",
                "indicator--560b9f7a-2dd4-4aaa-b130-49a3950d210b",
                "indicator--560b9f7a-a134-4a33-ab92-4607950d210b",
                "indicator--560b9f7b-da20-486e-935d-4ae2950d210b",
                "indicator--560b9f7b-a1f8-40d1-a143-4c40950d210b",
                "indicator--560b9f7b-da80-4a2d-b342-4828950d210b",
                "indicator--560b9f7c-8af0-4fe7-8433-4ba0950d210b",
                "indicator--560b9f7c-9cc0-4b2f-9dba-44f7950d210b",
                "indicator--560b9f7d-1ffc-419e-b872-4fb5950d210b",
                "indicator--560b9f7d-6280-4d87-ae29-441b950d210b",
                "indicator--560b9f7d-3918-4b6c-ac5a-4729950d210b",
                "indicator--560b9f7e-9894-41c0-8cd6-4444950d210b",
                "indicator--560b9f7e-ba34-4c12-bc98-4d8a950d210b",
                "indicator--560b9f7e-5f44-4f43-adfa-4234950d210b",
                "indicator--560b9f7f-8864-4f59-bedb-4adf950d210b",
                "indicator--560b9f7f-b558-4d63-9345-40b4950d210b",
                "indicator--560b9f7f-2140-4714-adc6-4b78950d210b",
                "indicator--560b9f80-1410-4ed2-beed-4062950d210b",
                "indicator--560b9f80-0cc8-4f7c-a653-433f950d210b",
                "indicator--560b9f80-c8f8-4caa-8f2a-41bc950d210b",
                "indicator--560b9f81-0a40-46de-8606-40ed950d210b",
                "indicator--560b9f81-bffc-42f9-b8e6-45f7950d210b",
                "indicator--560b9f82-42f4-4974-8f12-442a950d210b",
                "indicator--560b9f82-cb54-45a0-90a8-4390950d210b",
                "indicator--560b9f82-07d8-4020-a009-4e5b950d210b",
                "indicator--560b9f83-fb8c-40f9-930b-4651950d210b",
                "indicator--560b9f83-80ac-48d8-8a78-4858950d210b",
                "indicator--560b9f83-87b8-4b8c-906d-43d5950d210b",
                "indicator--560b9f84-acfc-4ecb-b70a-4800950d210b",
                "indicator--560b9f84-1174-48f2-8289-4044950d210b",
                "indicator--560b9f84-d5a0-4b80-90c3-4b5b950d210b",
                "indicator--560b9f85-6298-4f56-a90b-4b58950d210b",
                "indicator--560b9f85-5b6c-4650-960c-4065950d210b",
                "indicator--560b9f85-f190-4244-b912-4b8e950d210b",
                "indicator--560b9f86-b6e4-4f5a-9e42-42ac950d210b",
                "indicator--560b9f86-ff20-4d69-a6ac-4c5d950d210b",
                "indicator--560b9f86-6bd8-4cca-8aaa-42ee950d210b",
                "indicator--560b9f87-c55c-4988-8372-4c90950d210b",
                "indicator--560b9f87-ca7c-4ed0-b196-4f39950d210b",
                "indicator--560b9f88-b04c-40e2-ad91-40ec950d210b",
                "indicator--560b9f88-b06c-45e6-9a9d-4052950d210b",
                "indicator--560b9f88-3804-4f21-9f9f-4935950d210b",
                "indicator--560b9f89-5610-4f3e-a112-461e950d210b",
                "indicator--560b9f89-e360-406e-b156-4867950d210b",
                "indicator--560b9f89-4f6c-48b5-a3e4-452e950d210b",
                "indicator--560b9f8a-c100-4bb5-85fd-4074950d210b",
                "indicator--560b9f8a-d1f8-45e7-8731-418b950d210b",
                "indicator--560b9f8a-f904-413f-ae44-4c85950d210b",
                "indicator--560b9f8b-ec80-43b8-ad78-4843950d210b",
                "indicator--560b9f8b-b184-431f-b9b4-4269950d210b",
                "indicator--560b9f8b-369c-405e-9535-4158950d210b",
                "indicator--560b9f8c-1aa8-4659-95cb-49ae950d210b",
                "indicator--560b9f8c-64e4-4ad8-a59b-4e9b950d210b",
                "indicator--560b9f8d-324c-4778-99d5-47be950d210b",
                "indicator--560b9f8d-11f4-4046-a688-4974950d210b",
                "indicator--560b9f8d-ef5c-4d66-8ce9-48d9950d210b",
                "indicator--560b9f8e-7d7c-4be3-a8b1-4f0d950d210b",
                "indicator--560b9f8e-4d74-456b-b948-4dc3950d210b",
                "indicator--560b9f8e-7288-42dc-9429-4849950d210b",
                "indicator--560b9f8f-af68-4de5-abee-4663950d210b",
                "indicator--560b9f8f-2e14-4ae9-b889-4f56950d210b",
                "indicator--560b9f8f-86d4-4e6a-8a09-4488950d210b",
                "indicator--560b9f90-1214-4004-b7a6-4a9c950d210b",
                "indicator--560b9f90-9d94-47e9-b1a5-4a02950d210b",
                "indicator--560b9f90-552c-4360-816f-48e5950d210b",
                "indicator--560b9f91-5f88-42ab-8d71-4b8b950d210b",
                "indicator--560b9f91-8720-40ff-8be5-4c71950d210b",
                "indicator--560b9f91-c674-430f-a450-4d39950d210b",
                "indicator--560b9f92-5a44-45bd-879a-4197950d210b",
                "indicator--560b9f92-673c-47f6-855a-4d6d950d210b",
                "indicator--560b9f92-3c60-428b-b362-488f950d210b",
                "indicator--560b9f93-c704-49b2-8450-4d1c950d210b",
                "indicator--560b9f93-6028-4ea6-8af5-4644950d210b",
                "indicator--560b9f94-7d78-455f-9771-4b29950d210b",
                "indicator--560b9f94-8d78-411f-b09d-4bca950d210b",
                "indicator--560b9f94-adec-449a-be82-43d9950d210b",
                "indicator--560b9f95-1810-411e-ae27-471c950d210b",
                "indicator--560b9f95-730c-4511-9368-4e22950d210b",
                "indicator--560b9f95-2e5c-467a-95b3-467d950d210b",
                "indicator--560b9f96-cd80-402b-acac-438c950d210b",
                "indicator--560b9f96-8284-4366-b1bb-4930950d210b",
                "indicator--560b9f96-9bd0-4857-af7a-4568950d210b",
                "indicator--560b9f97-d4a8-4f41-867f-4b5f950d210b",
                "indicator--560b9f97-e194-45e7-a976-420f950d210b",
                "indicator--560b9f97-8e34-4621-9ce4-4aea950d210b",
                "indicator--560b9f98-cd20-4e2d-80f8-4ab1950d210b",
                "indicator--560b9f98-9924-4271-bf32-4e33950d210b",
                "indicator--560b9f98-3148-411c-bbd7-49af950d210b",
                "indicator--560b9f99-abc4-4c60-b8fe-464c950d210b",
                "indicator--560b9f99-add0-416a-9518-40bc950d210b",
                "indicator--560b9f9a-5ef4-4f79-ab37-4f0a950d210b",
                "indicator--560b9f9a-90ac-4c12-80d4-4ce0950d210b",
                "indicator--560b9f9a-7f74-4a65-b5ae-4be4950d210b",
                "indicator--560b9f9b-94b4-4468-87b2-47a9950d210b",
                "indicator--560b9f9b-2130-43e3-bb3f-4565950d210b",
                "indicator--560b9f9b-01cc-4868-9220-453d950d210b",
                "indicator--560b9f9c-65e0-4256-9443-49b6950d210b",
                "indicator--560b9f9c-1180-4be4-acb1-4a2d950d210b",
                "indicator--560b9f9c-0674-4610-8bbb-41b8950d210b",
                "indicator--560b9f9d-3fdc-41cb-955a-4588950d210b",
                "indicator--560b9f9d-9c80-4b20-a997-405d950d210b",
                "indicator--560b9f9d-1004-45d7-8905-4d96950d210b",
                "indicator--560b9f9e-974c-4692-ac4b-4771950d210b",
                "indicator--560b9f9e-d988-4dbf-8598-4759950d210b",
                "indicator--560b9f9e-34a0-423c-9b7d-4474950d210b",
                "indicator--560b9f9f-ff64-4d1c-893b-437b950d210b",
                "indicator--560b9f9f-c1ac-4d10-ab15-4c18950d210b",
                "indicator--560b9fa0-732c-4c60-bc82-4259950d210b",
                "indicator--560b9fa0-dfd8-41f2-a948-4f3d950d210b",
                "indicator--560b9fa0-9fc8-4f97-8824-4360950d210b",
                "indicator--560b9fa1-9fb8-43ab-9dd1-47f9950d210b",
                "indicator--560b9fa1-5e2c-4955-bcce-422c950d210b",
                "indicator--560b9fa1-65ac-47e9-b274-480c950d210b",
                "indicator--560b9fa2-71a8-4805-a8df-46eb950d210b",
                "indicator--560b9fa2-c388-4936-8436-4309950d210b",
                "indicator--560b9fa2-5fa0-4a8b-a09e-4335950d210b",
                "indicator--560b9fee-85e4-44bd-8eaa-4abc950d210b",
                "indicator--560b9fef-9e64-4935-9431-4942950d210b",
                "indicator--560b9fef-cc10-45ee-826f-4a17950d210b",
                "indicator--560b9ff0-6b58-48fe-adb9-483e950d210b",
                "indicator--560b9ff0-ce98-4d08-94ef-4ef4950d210b",
                "indicator--560b9ff0-d160-4fe9-96e4-413b950d210b",
                "indicator--560b9ff1-ad18-4e59-8caf-4115950d210b",
                "indicator--560b9ff1-92f4-416c-81ed-47fa950d210b",
                "indicator--560b9ff2-d250-4957-b0cd-4512950d210b",
                "indicator--560b9ff2-6118-4efa-81bb-48b7950d210b",
                "indicator--560b9ff2-4f48-469a-b3fe-4b75950d210b",
                "indicator--560b9ff3-038c-4fe6-aad4-4173950d210b",
                "indicator--560b9ff3-5908-43ec-95ed-4a32950d210b",
                "indicator--560b9ff3-958c-4032-8325-4bcf950d210b",
                "indicator--560b9ff4-c908-4356-8122-4a39950d210b",
                "indicator--560b9ff4-9780-49c1-bb90-472e950d210b",
                "indicator--560b9ff4-d25c-474f-916b-4134950d210b",
                "indicator--560b9ff5-f6e4-4b04-a3af-4408950d210b",
                "indicator--560b9ff5-dc9c-4147-b007-4a71950d210b",
                "indicator--560b9ff5-085c-4d8d-a925-4810950d210b",
                "indicator--560b9ff6-8f08-40a0-b85b-49bd950d210b",
                "indicator--560b9ff6-52b4-4668-9ff6-40f5950d210b",
                "indicator--560b9ff7-5558-4e3f-9e2f-4a77950d210b",
                "indicator--560b9ff7-c520-4ff2-8e41-4988950d210b",
                "indicator--560b9ff7-d240-4baa-9be3-4354950d210b",
                "indicator--560b9ff8-b2c4-4f1f-920f-4807950d210b",
                "indicator--560b9ff8-ed8c-4fd1-8ec2-4494950d210b",
                "indicator--560b9ff8-9fc4-4858-b3b7-4905950d210b",
                "indicator--560b9ff9-e308-4ab4-a4e9-473b950d210b",
                "indicator--560b9ff9-f2e8-4be5-9022-49fb950d210b",
                "indicator--560b9ff9-92cc-4d8c-8dd9-44be950d210b",
                "indicator--560b9ffa-231c-4f46-8d16-4877950d210b",
                "indicator--560b9ffa-b928-4f09-a47e-402b950d210b",
                "indicator--560b9ffa-1c00-4b8c-a517-4dc5950d210b",
                "indicator--560b9ffb-04b4-4d74-a78f-44f0950d210b",
                "indicator--560b9ffb-ee60-4783-b6a4-4d19950d210b",
                "indicator--560b9ffb-1324-4aac-aa90-4b17950d210b",
                "indicator--560b9ffc-c7cc-42e2-9fcb-49c4950d210b",
                "indicator--560b9ffc-dcf0-4a80-bf15-4959950d210b",
                "indicator--560b9ffc-ca94-43d6-8554-4dc5950d210b",
                "indicator--560b9ffd-6894-4be5-8d69-4594950d210b",
                "indicator--560b9ffd-451c-46d4-b78b-4e39950d210b",
                "indicator--560b9ffd-f12c-4539-b119-45da950d210b",
                "indicator--560b9ffe-fde4-4ff2-94ff-4fc1950d210b",
                "indicator--560b9ffe-1f88-4886-888f-4bf1950d210b",
                "indicator--560b9fff-9788-41a7-a9f2-4379950d210b",
                "indicator--560b9fff-0a04-4533-8cfd-4588950d210b",
                "indicator--560b9fff-f21c-4dc2-b633-4548950d210b",
                "indicator--560ba000-7c0c-44cb-a345-4818950d210b",
                "indicator--560ba000-eff8-4d03-a105-46d3950d210b",
                "indicator--560ba000-6284-4a0a-9378-4aae950d210b",
                "indicator--560ba001-5e44-419c-ada7-46e0950d210b",
                "indicator--560ba001-3f08-4f36-9d33-4980950d210b",
                "indicator--560ba001-13a4-44c1-b27d-4429950d210b",
                "indicator--560ba002-2ed4-4d67-8113-490d950d210b",
                "indicator--560ba002-70ec-4212-8e31-411d950d210b",
                "indicator--560ba002-dd00-42fa-bbae-4bac950d210b",
                "indicator--560ba003-2fd0-4d60-803d-4ac6950d210b",
                "indicator--560ba003-17bc-411c-84ff-4a9b950d210b",
                "indicator--560ba004-e948-4cd6-8051-4d47950d210b",
                "indicator--560ba004-1720-4340-8035-42df950d210b",
                "indicator--560ba004-86e4-41eb-9dd1-4212950d210b",
                "indicator--560ba005-2dc0-4149-909b-43af950d210b",
                "indicator--560ba005-f804-4e88-af38-4f88950d210b",
                "indicator--560ba005-b5ec-408e-8068-4a09950d210b",
                "indicator--560ba006-bec8-47e4-8c1e-4453950d210b",
                "indicator--560ba006-2364-4ec1-8c78-47a7950d210b",
                "indicator--560ba007-7618-4778-8a43-4919950d210b",
                "indicator--560ba007-8d64-4bcb-a1a8-49b7950d210b",
                "indicator--560ba007-aca4-4da8-8d19-4738950d210b",
                "indicator--560ba008-4784-489f-84aa-458c950d210b",
                "indicator--560ba008-3d68-4df4-8d4e-4595950d210b",
                "indicator--560ba008-c3c4-4d6c-983f-4551950d210b",
                "indicator--560ba009-f424-4399-99c9-4d47950d210b",
                "indicator--560ba009-6eb4-46b6-83e2-455b950d210b",
                "indicator--560ba009-8ac0-4e5b-ac8b-443d950d210b",
                "indicator--560ba00a-b410-46ca-a423-4137950d210b",
                "indicator--560ba00a-37b8-4e98-987e-43cb950d210b",
                "indicator--560ba00a-2940-485f-8370-4471950d210b",
                "indicator--560ba00b-4890-49e1-b0e6-4d75950d210b",
                "indicator--560ba00b-ad14-4fc2-b2f8-4193950d210b",
                "indicator--560ba00b-8de4-4096-b656-4ad5950d210b",
                "indicator--560ba00c-c5b0-461b-8f7f-4e27950d210b",
                "indicator--560ba00c-aaac-4710-9212-4147950d210b",
                "indicator--560ba00d-8538-44db-b997-4486950d210b",
                "indicator--560ba00d-20e0-4deb-ada7-45cb950d210b",
                "indicator--560ba00d-9d84-4371-a7d4-4816950d210b",
                "indicator--560ba00e-a218-4cb6-9b6f-4b27950d210b",
                "indicator--560ba00e-720c-4ec5-87cf-42d5950d210b",
                "indicator--560ba00e-5230-426d-a498-4f30950d210b",
                "indicator--560ba00f-8eac-4a42-84bc-4006950d210b",
                "indicator--560ba00f-9050-41cd-9f29-4e7d950d210b",
                "indicator--560ba00f-9234-44a2-ae52-45f1950d210b",
                "indicator--560ba010-13a8-438a-b22c-4dc9950d210b",
                "indicator--560ba010-12ac-41b9-9003-4f44950d210b",
                "indicator--560ba010-8918-487c-9e21-4ad9950d210b",
                "indicator--560ba011-3c8c-414a-915f-4b53950d210b",
                "indicator--560ba011-7200-44eb-8c03-4ee6950d210b",
                "indicator--560ba011-f810-47ea-8a0a-4ed2950d210b",
                "indicator--560ba012-4b28-4807-bc48-4839950d210b",
                "indicator--560ba012-908c-448f-bd92-4236950d210b",
                "indicator--560ba012-5a60-406e-a747-4f46950d210b",
                "indicator--560ba013-19ec-4fb4-9c00-4ad4950d210b",
                "indicator--560ba013-f5b8-4749-9213-4e22950d210b",
                "indicator--560ba014-8b0c-4595-b7cc-499e950d210b",
                "indicator--560ba014-e928-4f63-a642-4d9f950d210b",
                "indicator--560ba014-884c-47a1-9818-4c64950d210b",
                "indicator--560ba015-f2c4-4eaa-aa96-4f0c950d210b",
                "indicator--560ba015-814c-41e6-b9c7-4260950d210b",
                "indicator--560ba015-d9b8-4d5f-9da5-4188950d210b",
                "indicator--560ba016-a43c-4ba7-a9a2-4fa0950d210b",
                "indicator--560ba016-0cd4-4661-a390-4afa950d210b",
                "indicator--560ba016-1b9c-49d4-b429-4064950d210b",
                "indicator--560ba017-d0c8-4da3-83ca-4671950d210b",
                "indicator--560ba017-64d0-4eb5-9223-4c39950d210b",
                "indicator--560ba017-38f4-418d-a7eb-475a950d210b",
                "indicator--560ba018-43f8-4d40-85cf-4da3950d210b",
                "indicator--560ba018-0aec-44d5-a5ee-4269950d210b",
                "indicator--560ba018-3720-4a24-91d2-4e19950d210b",
                "indicator--560ba019-306c-4e78-8e88-4483950d210b",
                "indicator--560ba019-b6bc-4c00-bc39-4470950d210b",
                "indicator--560ba01a-bcf4-422e-97f0-40d3950d210b",
                "indicator--560ba01a-5f08-4a1a-8469-4182950d210b",
                "indicator--560ba01a-ca94-4343-a67c-4965950d210b",
                "indicator--560ba01b-8c44-4ee6-84cb-442c950d210b",
                "indicator--560ba01b-bf44-4624-abac-456b950d210b",
                "indicator--560ba01b-b5f4-4f5a-befb-4edd950d210b",
                "indicator--560ba01c-95b8-489f-89bd-4802950d210b",
                "indicator--560ba01c-8ce0-4ba9-b648-4ff5950d210b",
                "indicator--560ba01c-1d48-4aa2-a968-42a9950d210b",
                "indicator--560ba01d-1e88-40af-b0ab-4568950d210b",
                "indicator--560ba01d-96a0-40db-96ce-438f950d210b",
                "indicator--560ba01d-a5e0-467a-8e67-4160950d210b",
                "indicator--560ba01e-23b8-4a8e-a7a2-47ea950d210b",
                "indicator--560ba01e-8d14-489e-8205-46f6950d210b",
                "indicator--560ba01e-b3cc-4b38-84bd-44c8950d210b",
                "indicator--560ba01f-29dc-45a7-8182-49fb950d210b",
                "indicator--560ba01f-d794-46ef-8b4a-47f0950d210b",
                "indicator--560ba01f-0c98-4a8b-ab1a-44d7950d210b",
                "indicator--560ba020-695c-4177-b5d9-4343950d210b",
                "indicator--560ba020-36d4-40cf-95f9-4d84950d210b",
                "indicator--560ba021-e400-4f47-b34f-42bd950d210b",
                "indicator--560ba021-41d4-4476-b23f-4c00950d210b",
                "indicator--560ba021-8258-4976-99f2-47f4950d210b",
                "indicator--560ba022-01c4-466c-bd07-41bd950d210b",
                "indicator--560ba022-99a0-4212-b35f-4dc8950d210b",
                "indicator--560ba022-2f28-4b23-8c47-4c1c950d210b",
                "indicator--560ba023-c0e0-4adc-9635-4dcb950d210b",
                "indicator--560ba023-d9a4-41bb-8ba3-4ceb950d210b",
                "indicator--560ba023-45a8-4a48-be75-4539950d210b",
                "indicator--560ba024-2970-44e5-aed5-44c8950d210b",
                "indicator--560ba024-4ba0-4720-a675-4364950d210b",
                "indicator--560ba024-5a7c-4a2b-b9e4-4939950d210b",
                "indicator--560ba025-1b54-478c-8d61-4e70950d210b",
                "indicator--560ba025-bd74-4838-b0a7-492e950d210b",
                "indicator--560ba025-0f6c-4a23-91f7-4b34950d210b",
                "indicator--560ba026-79dc-4f0d-a786-43fa950d210b",
                "indicator--560ba026-5300-4d68-ab83-4541950d210b",
                "indicator--560ba026-1848-4ad2-9fcf-4f5d950d210b",
                "indicator--560ba027-55e0-4d52-9f37-48f4950d210b",
                "indicator--560ba027-cc78-4106-969f-4aec950d210b",
                "indicator--560ba028-9bcc-4065-80e3-44ad950d210b",
                "indicator--560ba028-2f20-4b74-843e-4b00950d210b",
                "indicator--560ba028-77d4-456f-a96c-4cc7950d210b",
                "indicator--560ba029-4878-4e24-b769-4795950d210b",
                "indicator--560ba029-fa1c-4649-a3f4-4bab950d210b",
                "indicator--560ba029-8320-4439-8603-4c11950d210b",
                "indicator--560ba02a-7810-46e5-937a-4e6a950d210b",
                "indicator--560ba02a-1a0c-4ced-a778-432b950d210b",
                "indicator--560ba02a-054c-480b-a34d-4a4c950d210b",
                "indicator--560ba02b-1f88-48b0-8b88-48ba950d210b",
                "indicator--560ba02b-f174-4e41-9d19-48a2950d210b",
                "indicator--560ba02b-a85c-4f15-9583-4d50950d210b",
                "indicator--560ba02c-a91c-4bec-ad0c-4e34950d210b",
                "indicator--560ba02c-4a58-4904-849a-45d5950d210b",
                "indicator--560ba02c-b488-4694-9d8d-495b950d210b",
                "indicator--560ba02d-6f6c-4ddb-b33f-4fbd950d210b",
                "indicator--560ba02d-b40c-4af3-a118-46d8950d210b",
                "indicator--560ba02e-d124-42ee-97ab-40fb950d210b",
                "indicator--560ba02e-3578-4d08-a1d4-410c950d210b",
                "indicator--560ba02e-5ec0-4c6d-8ce9-4598950d210b",
                "indicator--560ba02f-f7b8-4d72-94da-4832950d210b",
                "indicator--560ba02f-19dc-4fe9-bb48-4ad7950d210b",
                "indicator--560ba02f-43d8-465a-a04f-4420950d210b",
                "indicator--560ba030-32a0-467a-99b8-4cf6950d210b",
                "indicator--560ba030-ff88-4b7d-a349-400a950d210b",
                "indicator--560ba030-1e14-474a-8e80-4667950d210b",
                "indicator--560ba031-1448-4b65-8442-4e3a950d210b",
                "indicator--560ba031-ebd4-40a1-8c3f-4ede950d210b",
                "indicator--560ba031-371c-4b91-8105-4772950d210b",
                "indicator--560ba032-c2b8-4de3-bf37-45ff950d210b",
                "indicator--560ba032-2164-4bfa-92b3-4cf6950d210b",
                "indicator--560ba032-6690-4ae6-9a3b-4962950d210b",
                "indicator--560ba033-100c-4eb2-8135-4078950d210b",
                "indicator--560ba033-2bf0-41d9-b69f-4db7950d210b",
                "indicator--560ba033-bd24-4585-97ff-45c0950d210b",
                "indicator--560ba034-a824-4784-8b79-4b37950d210b",
                "indicator--560ba034-f340-48e4-951d-4d54950d210b",
                "indicator--560ba035-a6ec-4275-ad6e-4f37950d210b",
                "indicator--560ba035-23c0-4591-97e3-49d0950d210b",
                "indicator--560ba035-9524-4fb3-8f7e-46a7950d210b",
                "indicator--560ba036-e83c-4d96-a25a-4611950d210b",
                "indicator--560ba036-a9e8-42aa-926b-451f950d210b",
                "indicator--560ba036-4f3c-46fb-98fa-44a6950d210b",
                "indicator--560ba037-151c-4d6f-aefe-4a2d950d210b",
                "indicator--560ba037-ef48-4209-82de-46bf950d210b",
                "indicator--560ba037-9cf0-4951-afa3-4b3a950d210b",
                "indicator--560ba038-00cc-42ae-b813-4dcf950d210b",
                "indicator--560ba038-c898-40c0-b8a7-4948950d210b",
                "indicator--560ba038-ca0c-441d-9b51-470f950d210b",
                "indicator--560ba039-2058-41b9-be2d-4cfe950d210b",
                "indicator--560ba039-36f8-439f-9a4c-4ebf950d210b",
                "indicator--560ba03a-e36c-424f-b377-4b8d950d210b",
                "indicator--560ba03a-e378-4a57-ab16-409b950d210b",
                "indicator--560ba03a-4f08-4bb4-aae9-4511950d210b",
                "indicator--560ba03b-4230-4fa2-8563-4b75950d210b",
                "indicator--560ba03b-b550-423f-8e1f-4fff950d210b",
                "indicator--560ba03b-9c34-4ad0-93f9-490e950d210b",
                "indicator--560ba03c-2280-4501-b5c0-4bce950d210b",
                "indicator--560ba03c-fb90-42c0-bb59-4930950d210b",
                "indicator--560ba03c-4744-4e25-b0f2-4e5c950d210b",
                "indicator--560ba03d-6ab8-4d03-b835-4479950d210b",
                "indicator--560ba03d-5ab4-4364-998e-495c950d210b",
                "indicator--560ba03d-3d4c-4143-aa2a-4365950d210b",
                "indicator--560ba03e-22f4-435f-8005-402e950d210b",
                "indicator--560ba03e-9728-4d70-bd98-4586950d210b",
                "indicator--560ba03f-e6e4-49a4-9552-413f950d210b",
                "indicator--560ba03f-e1a4-4179-a292-49d1950d210b",
                "indicator--560ba03f-e7c8-4e24-bee6-44f3950d210b",
                "indicator--560ba040-ce5c-4a09-8b3d-4b54950d210b",
                "indicator--560ba040-6370-43e6-96ad-43b8950d210b",
                "indicator--560ba040-12e4-40fb-aa0a-418d950d210b",
                "indicator--560ba041-5d58-4a4c-b290-4bef950d210b",
                "indicator--560ba041-0a24-4eed-be91-44c6950d210b",
                "indicator--560ba041-e604-41c6-bf2b-488c950d210b",
                "indicator--560ba042-24a8-4871-89e0-414c950d210b",
                "indicator--560ba042-5414-4203-8a5e-44bc950d210b",
                "indicator--560ba042-c04c-421f-b0a6-4882950d210b",
                "indicator--560ba043-c368-4ca0-b83d-4884950d210b",
                "indicator--560ba043-b3f0-46c6-abb8-4623950d210b",
                "indicator--560ba043-b49c-4590-87d7-452f950d210b",
                "indicator--560ba044-f748-4aa2-b11b-4d30950d210b",
                "indicator--560ba044-6098-4f30-91b7-4eeb950d210b",
                "indicator--560ba045-4ca8-43e7-a0c4-4e69950d210b",
                "indicator--560ba045-0b20-40aa-8618-4a37950d210b",
                "indicator--560ba045-0cd8-4b5d-a7ff-49c9950d210b",
                "indicator--560ba046-1b6c-43c7-85c0-45dd950d210b",
                "indicator--560ba046-a2f0-4f81-ae1b-4e15950d210b",
                "indicator--560ba046-43b8-4b0d-91e8-48e6950d210b",
                "indicator--560ba047-0168-4a6a-a3cc-4a7b950d210b",
                "indicator--560ba047-5800-46d3-905e-42cb950d210b",
                "indicator--560ba047-a7bc-43d5-a575-4bed950d210b",
                "indicator--560ba048-278c-467b-a72e-4f95950d210b",
                "indicator--560ba048-de30-4fb8-aa6e-4707950d210b",
                "indicator--560ba048-ab80-4f79-8725-4a00950d210b",
                "indicator--560ba049-d760-4c33-a05a-4655950d210b",
                "indicator--560ba049-fec8-44bf-a9ea-4d92950d210b",
                "indicator--560ba04a-590c-4b16-b9ba-4b09950d210b",
                "indicator--560ba04a-f590-4bf1-8e0d-4d9d950d210b",
                "indicator--560ba04a-5168-4caa-a5d0-4fc7950d210b",
                "indicator--560ba04b-1168-4874-8a43-4b81950d210b",
                "indicator--560ba04b-8a6c-46a7-9c7f-44b9950d210b",
                "indicator--560ba04b-6458-4ff4-a127-4b64950d210b",
                "indicator--560ba04c-fbac-4f48-b59f-48fb950d210b",
                "indicator--560ba04c-0e8c-41d9-8188-4abe950d210b",
                "indicator--560ba04c-c9f0-4129-a224-4788950d210b",
                "indicator--560ba04d-2588-4b54-8ac9-4bf0950d210b",
                "indicator--560ba04d-6074-4010-b90d-4e98950d210b",
                "indicator--560ba04d-38c4-4a45-8b55-46bb950d210b",
                "indicator--560ba04e-0e44-47d4-8170-4323950d210b",
                "indicator--560ba04e-c868-42b8-b791-4fc7950d210b",
                "indicator--560ba04e-df60-4736-891a-47f7950d210b",
                "indicator--560ba04f-fa3c-43c1-974e-4b0a950d210b",
                "indicator--560ba04f-cd30-43b0-96af-4a79950d210b",
                "indicator--560ba050-5344-41e8-9c81-46be950d210b",
                "indicator--560ba050-cd28-46ad-8b95-4fa2950d210b",
                "indicator--560ba050-9408-4d87-8c4e-471b950d210b",
                "indicator--560ba051-a744-4f24-b1ca-4ab5950d210b",
                "indicator--560ba051-c6c8-4193-906b-46f1950d210b",
                "indicator--560ba051-a288-4100-b5cc-403a950d210b",
                "indicator--560ba052-6ab0-475b-98b7-4348950d210b",
                "indicator--560ba052-7450-4f6f-9b9f-414b950d210b",
                "indicator--560ba052-9944-482a-9d4f-49c9950d210b",
                "indicator--560ba053-2e90-4477-98d1-48e5950d210b",
                "indicator--560ba053-f038-404d-823a-492f950d210b",
                "indicator--560ba053-ff78-425b-939e-4c78950d210b",
                "indicator--560ba054-ba20-4be4-acdb-4caf950d210b",
                "indicator--560ba054-d180-4963-b76a-4915950d210b",
                "indicator--560ba054-fd64-495a-b1d2-4bd4950d210b",
                "indicator--560ba055-4a80-4887-ab8f-4313950d210b",
                "indicator--560ba055-fa94-41e9-a85e-4c45950d210b",
                "indicator--560ba056-38a4-4baf-836e-41a0950d210b",
                "indicator--560ba056-a874-424a-b2a8-4181950d210b",
                "indicator--560ba056-d118-4a67-80a0-49fb950d210b",
                "indicator--560ba057-dfac-4ba6-8913-47eb950d210b",
                "indicator--560ba057-e898-458d-92fe-46aa950d210b",
                "indicator--560ba057-4f4c-4965-a742-4e99950d210b",
                "indicator--560ba058-5c2c-4bac-aa21-4d91950d210b",
                "indicator--560ba058-8140-487d-aedc-4ecb950d210b",
                "indicator--560ba058-d914-4f88-8d9d-4ad5950d210b",
                "indicator--560ba059-a4b4-4a2b-aefd-4b60950d210b",
                "indicator--560ba059-737c-4e0d-8153-4e04950d210b",
                "indicator--560ba059-bcdc-4096-a719-4893950d210b",
                "indicator--560ba05a-f8d8-4019-bcd0-4ab0950d210b",
                "indicator--560ba05a-c318-4846-901c-4c92950d210b",
                "indicator--560ba05a-6478-42f6-b0f2-43d5950d210b",
                "indicator--560ba05b-3e94-405b-af60-4a29950d210b",
                "indicator--560ba05b-2180-44f4-85c9-4e10950d210b",
                "indicator--560ba05b-3ef0-4182-8ff2-4ac8950d210b",
                "indicator--560ba05c-264c-48f9-86a1-424d950d210b",
                "indicator--560ba05c-387c-414c-9d90-42c7950d210b",
                "indicator--560ba05d-01a8-41b7-aa3b-4690950d210b",
                "indicator--560ba05d-b07c-4d0f-932e-4a17950d210b",
                "indicator--560ba05d-b158-4514-981f-49af950d210b",
                "indicator--560ba05e-6658-4860-939a-4b4e950d210b",
                "indicator--560ba05e-8e70-4ce2-9791-479b950d210b",
                "indicator--560ba05e-3844-4eff-bce7-46a2950d210b",
                "indicator--560ba05f-e9e0-4257-83e3-4818950d210b",
                "indicator--560ba05f-6438-4376-95c8-4892950d210b",
                "indicator--560ba05f-df64-402b-be89-4497950d210b",
                "indicator--560ba060-b364-4ba5-9629-447e950d210b",
                "indicator--560ba060-485c-46bd-865f-4385950d210b",
                "indicator--560ba060-fd8c-44d6-a470-4a5f950d210b",
                "indicator--560ba061-c1dc-4fbc-b1b1-4256950d210b",
                "indicator--560ba061-95a0-423c-a9ef-47f2950d210b",
                "indicator--560ba061-577c-4fb8-8a13-4aa1950d210b",
                "indicator--560ba062-4574-44f2-b387-412c950d210b",
                "indicator--560ba062-e8a0-47de-8043-4352950d210b",
                "indicator--560ba063-7eb0-4756-80f1-4fe5950d210b",
                "indicator--560ba063-f70c-4e8e-ab90-4ae2950d210b",
                "indicator--560ba063-b298-49a8-a071-41e8950d210b",
                "indicator--560ba064-5c28-4336-beb9-4b28950d210b",
                "indicator--560ba064-a9f8-4da6-b6d0-476a950d210b",
                "indicator--560ba064-f968-489c-a588-48c8950d210b",
                "indicator--560ba065-273c-402d-80d0-4e20950d210b",
                "indicator--560ba065-b38c-47df-aa23-4fc6950d210b",
                "indicator--560ba065-4234-4534-ad19-49dd950d210b",
                "indicator--560ba066-ddf8-4463-a2f1-4cee950d210b",
                "indicator--560ba066-6a88-43de-95a8-49a7950d210b",
                "indicator--560ba066-42a8-473b-acd7-44ee950d210b",
                "indicator--560ba067-640c-40d5-95bc-49e7950d210b",
                "indicator--560ba067-7404-449b-a242-42de950d210b",
                "indicator--560ba067-8034-4929-b8f1-46d2950d210b",
                "indicator--560ba068-dcb0-497c-9061-4764950d210b",
                "indicator--560ba068-acf0-4984-b56a-4fb4950d210b",
                "indicator--560ba068-ef50-4244-8b70-4c9b950d210b",
                "indicator--560ba069-b97c-42d2-a5b8-4726950d210b",
                "indicator--560ba069-cabc-4130-aa3a-45ff950d210b",
                "indicator--560ba06a-7230-4fef-b5b8-410e950d210b",
                "indicator--560ba06a-b8f4-4ab9-8cfc-4da4950d210b",
                "indicator--560ba06a-a570-4e98-85b4-4b50950d210b",
                "indicator--560ba06b-d038-4c99-9215-4f7c950d210b",
                "indicator--560ba06b-a4e8-4d75-bb80-4954950d210b",
                "indicator--560ba06b-2650-40f9-b02a-4456950d210b",
                "indicator--560ba06c-7668-4fd6-b2aa-4224950d210b",
                "indicator--560ba06c-1c64-473a-982f-4235950d210b",
                "indicator--560ba06c-2b10-4fcb-aba2-4a9c950d210b",
                "indicator--560ba06d-8134-4bd1-abdb-49bc950d210b",
                "indicator--560ba06d-0588-43d9-827c-4672950d210b",
                "indicator--560ba06d-e2d0-4a02-b2ee-40a7950d210b",
                "indicator--560ba06e-5dd0-4865-a404-4573950d210b",
                "indicator--560ba06e-c0cc-43cc-bddd-4da0950d210b",
                "indicator--560ba06e-1628-4fcc-886b-459f950d210b",
                "indicator--560ba06f-d7f0-4723-acee-439f950d210b",
                "indicator--560ba06f-6410-4426-9981-4e38950d210b",
                "indicator--560ba070-3864-4acb-bdbb-4539950d210b",
                "indicator--560ba070-1e20-412d-8ec2-4ca8950d210b",
                "indicator--560ba070-4c58-4fcb-b636-4732950d210b",
                "indicator--560ba071-e494-45a0-a6bf-4f6d950d210b",
                "indicator--560ba071-31d4-4cb3-9292-471d950d210b",
                "indicator--560ba071-c034-4bcb-bfc6-44e4950d210b",
                "indicator--560ba072-fe48-445c-afd4-4f71950d210b",
                "indicator--560ba072-cbcc-423d-bb26-4a89950d210b",
                "indicator--560ba073-3a14-4079-95e0-4586950d210b",
                "indicator--560ba073-eeb4-415d-b73a-4edf950d210b",
                "indicator--560ba073-9a6c-45b4-9fff-407f950d210b",
                "indicator--560ba074-30f0-4ff9-8c61-4d00950d210b",
                "indicator--560ba074-7cd4-493f-9664-43c3950d210b",
                "indicator--560ba074-b4b0-46be-8d44-4258950d210b",
                "indicator--560ba075-c13c-450b-b873-4eef950d210b",
                "indicator--560ba075-a9f8-4090-8d25-417b950d210b",
                "indicator--560ba075-2644-4443-a210-4148950d210b",
                "indicator--560ba076-5fac-4286-9e94-4d93950d210b",
                "indicator--560ba076-f718-4cb0-8307-49db950d210b",
                "indicator--560ba076-5d90-4e3e-84a0-4969950d210b",
                "indicator--560ba077-13dc-40dc-859a-42fb950d210b",
                "indicator--560ba077-51b0-4875-9a88-4c8c950d210b",
                "indicator--560ba077-3538-46ea-ba4f-4c85950d210b",
                "indicator--560ba078-7854-4825-9402-4370950d210b",
                "indicator--560ba078-1ecc-4f33-b5f7-43f1950d210b",
                "indicator--560ba079-19d8-4521-a736-478a950d210b",
                "indicator--560ba079-ee10-419b-987a-48cd950d210b",
                "indicator--560ba079-9480-4912-96c8-4309950d210b",
                "indicator--560ba079-ba78-4988-8d69-4c73950d210b",
                "indicator--560ba079-53a8-4d7f-b7ed-46ab950d210b",
                "indicator--560ba079-aba4-451a-b05f-4fba950d210b",
                "indicator--560ba07a-73dc-4f73-b4e5-4d35950d210b",
                "indicator--560ba07a-34cc-4788-a85f-40d7950d210b",
                "indicator--560ba07a-0978-461c-be56-4ef3950d210b",
                "indicator--560ba07a-f07c-4e6a-a0ef-41c9950d210b",
                "indicator--560ba07a-9860-46f0-b252-4647950d210b",
                "indicator--560ba07a-bce0-4a45-a359-4195950d210b",
                "indicator--560ba07b-5394-4352-bc55-45b5950d210b",
                "indicator--560ba07b-af94-4cea-b805-4da7950d210b",
                "indicator--560ba07b-7c1c-48fa-93e2-48c2950d210b",
                "indicator--560ba07b-8794-4dd6-967e-412c950d210b",
                "indicator--560ba07b-40cc-4059-8851-4424950d210b",
                "indicator--560ba07b-8494-452c-a8f2-44e5950d210b",
                "indicator--560ba07c-ef4c-41fe-8912-4d20950d210b",
                "indicator--560ba07c-42c0-4344-8858-4d83950d210b",
                "indicator--560ba07c-3d48-487f-991d-40da950d210b",
                "indicator--560ba07c-d8f4-43d0-87ed-4dd6950d210b",
                "indicator--560ba07c-3c08-46ad-9ee1-442f950d210b",
                "indicator--560ba07c-ca54-41cc-8991-43ed950d210b",
                "indicator--560ba07d-c2fc-4978-86f0-4388950d210b",
                "indicator--560ba07d-cff4-4b35-b45a-413e950d210b",
                "indicator--560ba07d-e8cc-43c1-9287-4b3f950d210b",
                "indicator--560ba07d-f304-4b89-904f-4f29950d210b",
                "indicator--560ba07d-ad48-454e-9563-4c32950d210b",
                "indicator--560ba07e-51e4-416f-8105-4172950d210b",
                "indicator--560ba07e-8f3c-46b0-a902-4ae6950d210b",
                "indicator--560ba07e-6b40-47f1-9cc9-4b78950d210b",
                "indicator--560ba07e-46b4-4ff9-abaf-4f22950d210b",
                "indicator--560ba07e-59f8-4d59-9d8a-4c71950d210b",
                "indicator--560ba07e-ea28-4f78-9061-4bb9950d210b",
                "indicator--560ba07f-47cc-49ad-87f5-4354950d210b",
                "indicator--560ba07f-8200-43ac-9258-432e950d210b",
                "indicator--560ba07f-0f3c-4430-ae9a-4f8e950d210b",
                "indicator--560ba07f-f8d0-44bd-9ac6-458b950d210b",
                "indicator--560ba07f-5e30-45f7-bdd5-4134950d210b",
                "indicator--560ba07f-2ad0-43ae-b69f-485a950d210b",
                "indicator--560ba080-f064-4dd4-91cd-48b9950d210b",
                "indicator--560ba080-9418-4361-a8d6-4c9b950d210b",
                "indicator--560ba080-93b8-42f5-a794-42e2950d210b",
                "indicator--560ba080-a6a0-45a7-a5bb-47fb950d210b",
                "indicator--560ba080-7584-48a9-84a6-46aa950d210b",
                "indicator--560ba080-be90-48bf-9dd2-42be950d210b",
                "indicator--560ba081-2c84-4651-901c-45e8950d210b",
                "indicator--560ba081-7188-4da4-9030-4a7b950d210b",
                "indicator--560ba081-0ca4-4f6b-8583-48af950d210b",
                "indicator--560ba081-b368-4064-8b24-4f51950d210b",
                "indicator--560ba081-c93c-4aeb-9156-4882950d210b",
                "indicator--560ba082-8a2c-4486-96c0-4e8a950d210b",
                "indicator--560ba082-ff54-463e-a27e-4b65950d210b",
                "indicator--560ba082-7bc0-4ed6-9909-45b6950d210b",
                "indicator--560ba082-3104-4106-8f7a-4ffc950d210b",
                "indicator--560ba082-c8e0-437e-a2e5-4378950d210b",
                "indicator--560ba082-ee44-497e-ac9c-4196950d210b",
                "indicator--560ba083-0870-41fd-921d-438e950d210b",
                "indicator--560ba083-1078-4e87-84f5-4e56950d210b",
                "indicator--560ba083-d9f0-4d53-b532-41c7950d210b",
                "indicator--560ba083-4bb0-4b5d-95fd-4ee4950d210b",
                "indicator--560ba083-930c-40e2-ada0-43ae950d210b",
                "indicator--560ba084-b38c-4e80-8a0f-476f950d210b",
                "indicator--560ba084-c924-482c-ac64-4097950d210b",
                "indicator--560ba084-d8d8-4c04-a5b2-4666950d210b",
                "indicator--560ba084-74f4-4325-ac0f-4d82950d210b",
                "indicator--560ba084-4900-4561-aeb6-4f82950d210b",
                "indicator--560ba084-4204-4b32-9523-41ae950d210b",
                "indicator--560ba085-3c44-45bf-874d-4490950d210b",
                "indicator--560ba085-d764-4919-aca2-45bd950d210b",
                "indicator--560ba085-a1ac-48e3-9464-4f21950d210b",
                "indicator--560ba085-40e0-4615-9537-4619950d210b",
                "indicator--560ba085-fbb4-4a78-8900-435d950d210b",
                "indicator--560ba085-26a8-4323-bfec-46dc950d210b",
                "indicator--560ba086-31ac-4fa3-8740-4c51950d210b",
                "indicator--560ba086-5910-4dcc-b11f-4e49950d210b",
                "indicator--560ba086-a2d4-41f6-94e9-4195950d210b",
                "indicator--560ba086-9db8-4b4c-b33b-43ff950d210b",
                "indicator--560ba086-b388-421a-bc5c-4009950d210b",
                "indicator--560ba086-583c-4473-9910-4965950d210b",
                "indicator--560ba087-5ac4-4639-b102-4ce9950d210b",
                "indicator--560ba087-4454-4b3a-bb23-41a9950d210b",
                "indicator--560ba087-fba4-4c76-9e6c-4415950d210b",
                "indicator--560ba087-4e00-4dd9-aec2-4be3950d210b",
                "indicator--560ba087-8398-47d5-bb49-4fb0950d210b",
                "indicator--560ba087-7d74-4304-a67d-46cd950d210b",
                "indicator--560ba088-93a8-4cf3-9c40-4e2c950d210b",
                "indicator--560ba088-8058-4e9c-9958-42c5950d210b",
                "indicator--560ba088-3cbc-4a17-b333-40b9950d210b",
                "indicator--560ba088-1dd8-44ee-93cf-400b950d210b",
                "indicator--560ba088-e088-4b96-aa44-44ec950d210b",
                "indicator--560ba089-43b8-4bab-82bd-4b4d950d210b",
                "indicator--560ba089-42cc-43c4-87a0-406c950d210b",
                "indicator--560ba089-ab34-4da3-b2d5-4682950d210b",
                "indicator--560ba089-9824-49aa-a449-4207950d210b",
                "indicator--560ba089-0ad8-4401-a745-48db950d210b",
                "indicator--560ba089-fbdc-4216-8c60-423b950d210b",
                "indicator--560ba08a-2f8c-4c96-b25c-439f950d210b",
                "indicator--560ba08a-79ec-4170-89aa-4140950d210b",
                "indicator--560ba08a-fefc-4d1d-8781-4c0d950d210b",
                "indicator--560ba08a-7408-453d-9604-4be3950d210b",
                "indicator--560ba08a-a0f4-4e1d-9253-4889950d210b",
                "indicator--560ba08b-a748-410f-970a-4229950d210b",
                "indicator--560ba08b-2efc-48ee-95ba-47b4950d210b",
                "indicator--560ba08b-8e28-4b30-a488-4374950d210b",
                "indicator--560ba08b-d764-4e7b-b7d0-46f2950d210b",
                "indicator--560ba08b-2f1c-4ac5-bf16-4477950d210b",
                "indicator--560ba08b-e218-43e7-87d8-412d950d210b",
                "indicator--560ba08c-63ac-44a5-afd0-455b950d210b",
                "indicator--560ba08c-5bf0-4762-afcb-4b33950d210b",
                "indicator--560ba08c-7acc-48f0-a761-4c1a950d210b",
                "indicator--560ba08c-eddc-4f95-9270-410a950d210b",
                "indicator--560ba08c-d27c-4e00-9519-4e88950d210b",
                "indicator--560ba08c-b8ac-4267-ba99-42e0950d210b",
                "indicator--560ba08d-6190-47b8-a0b9-4de8950d210b",
                "indicator--560ba08d-14b8-492c-bac7-4e98950d210b",
                "indicator--560ba08d-784c-4c49-9b02-4d72950d210b",
                "indicator--560ba08d-f848-4c45-923c-4fa5950d210b",
                "indicator--560ba08d-1ad8-46a5-8a99-4c94950d210b",
                "indicator--560ba08d-7b74-40dd-bdda-448b950d210b",
                "indicator--560ba08e-8cb4-41fc-b573-46a7950d210b",
                "indicator--560ba08e-4d78-4b70-9b51-4a48950d210b",
                "indicator--560ba08e-8f84-4577-8969-4dd3950d210b",
                "indicator--560ba08e-24d0-4084-9944-427f950d210b",
                "indicator--560ba08e-d794-4f6d-b4fb-47e7950d210b",
                "indicator--560ba08e-792c-4b00-9832-42f3950d210b",
                "indicator--560ba08f-0aa0-4b9f-a1a2-4bf8950d210b",
                "indicator--560ba08f-2728-43b2-ade4-4be9950d210b",
                "indicator--560ba08f-cb10-463a-a909-4df4950d210b",
                "indicator--560ba08f-7004-480b-b598-442d950d210b",
                "indicator--560ba08f-f2fc-42e3-8cf0-4175950d210b",
                "indicator--560ba090-aef0-45a7-be68-4a94950d210b",
                "indicator--560ba090-fd00-45c4-8edd-4590950d210b",
                "indicator--560ba090-1e94-4bc3-befe-4e86950d210b",
                "indicator--560ba090-22b0-4d3f-a1c2-4160950d210b",
                "indicator--560ba090-f41c-4f2b-acf6-475b950d210b",
                "indicator--560ba090-6f9c-4e95-a5aa-4027950d210b",
                "indicator--560ba091-cf2c-487b-ac32-44cb950d210b",
                "indicator--560ba091-c3ac-4e0d-9511-4285950d210b",
                "indicator--560ba091-ea28-42b9-b454-4ac5950d210b",
                "indicator--560ba091-d2e0-4c4f-94bd-4f59950d210b",
                "indicator--560ba091-16d4-414f-85b0-4c77950d210b",
                "indicator--560ba092-84d4-4e07-a385-47a9950d210b",
                "indicator--560ba092-4b18-42fd-8657-4be4950d210b",
                "indicator--560ba092-cea0-453d-a795-4a4f950d210b",
                "indicator--560ba092-a680-4ac8-9285-4d0d950d210b",
                "indicator--560ba092-0e7c-4bff-bf9d-49c2950d210b",
                "indicator--560ba092-c2a8-4c4d-9a10-424a950d210b",
                "indicator--560ba093-b0d0-411a-a71f-45aa950d210b",
                "indicator--560ba093-8668-4d75-b38f-400c950d210b",
                "indicator--560ba093-d568-4e8e-84c5-47c2950d210b",
                "indicator--560ba093-6604-4459-9b19-4cb1950d210b",
                "indicator--560ba093-aec8-4c4a-ac73-4619950d210b",
                "indicator--560ba093-8930-4474-8370-45c4950d210b",
                "indicator--560ba094-4efc-48ce-a11e-4c2f950d210b",
                "indicator--560ba094-0aa8-4952-8de6-4851950d210b",
                "indicator--560ba094-1918-41f1-8905-4b92950d210b",
                "indicator--560ba094-0754-41f7-81f3-4b24950d210b",
                "indicator--560ba094-8edc-4f3f-8980-427a950d210b",
                "indicator--560ba094-d6b4-4532-bb7f-43b4950d210b",
                "indicator--560ba095-20e4-49b3-ac11-4e48950d210b",
                "indicator--560ba095-3f54-4b66-9ba3-4f1c950d210b",
                "indicator--560ba095-8208-4f75-9944-4247950d210b",
                "indicator--560ba095-1d58-4cfe-97f6-484e950d210b",
                "indicator--560ba095-f108-455d-b3c9-4a01950d210b",
                "indicator--560ba095-2b48-4ae6-a5bb-4012950d210b",
                "indicator--560ba096-090c-4345-8bc4-4c36950d210b",
                "indicator--560ba096-6aa4-4523-bf1d-4c89950d210b",
                "indicator--560ba096-0338-4df2-9f9c-47bc950d210b",
                "indicator--560ba096-74e8-4eac-9a55-4c59950d210b",
                "indicator--560ba096-5e60-4b04-bd14-466c950d210b",
                "indicator--560ba097-a86c-4561-8bd2-4a04950d210b",
                "indicator--560ba097-18e4-4d3c-b82a-41fe950d210b",
                "indicator--560ba097-d3b8-4e5c-b4ae-4644950d210b",
                "indicator--560ba097-b258-4431-92a8-4f4f950d210b",
                "indicator--560ba097-db94-41fb-bb09-4236950d210b",
                "indicator--560ba098-1998-455a-8192-431a950d210b",
                "indicator--560ba098-b30c-4c97-9f9f-4538950d210b",
                "indicator--560ba098-3540-4733-ab79-4583950d210b",
                "indicator--560ba098-49a4-4a2b-8633-4d0d950d210b",
                "indicator--560ba098-1518-4b33-a524-4b9e950d210b",
                "indicator--560ba098-fa94-44ab-ad63-4e69950d210b",
                "indicator--560ba099-e018-4e72-930d-4844950d210b",
                "indicator--560ba099-57f4-44f6-8902-457d950d210b",
                "indicator--560ba099-8770-4596-ba6a-4a0c950d210b",
                "indicator--560ba099-c10c-4ee3-ace5-4457950d210b",
                "indicator--560ba099-77b0-4157-a6a8-4359950d210b",
                "indicator--560ba099-a2d8-446a-97b2-4e96950d210b",
                "indicator--560ba09a-9fc4-4f97-8eda-4683950d210b",
                "indicator--560ba09a-c988-4015-964f-4cc1950d210b",
                "indicator--560ba09a-5f3c-4d19-bfe9-489e950d210b",
                "indicator--560ba09a-c0e4-4280-b151-43e0950d210b",
                "indicator--560ba09a-5c08-44c6-8672-4000950d210b",
                "indicator--560ba09a-efe0-4838-b686-422a950d210b",
                "indicator--560ba09b-9150-4afe-87f7-4fb2950d210b",
                "indicator--560ba09b-4adc-491e-b11d-4705950d210b",
                "indicator--560ba09b-3208-4dfd-a211-4328950d210b",
                "indicator--560ba09b-3434-4f03-9de4-48da950d210b",
                "indicator--560ba09b-0440-400d-bd04-4cf1950d210b",
                "indicator--560ba09c-40b4-41b1-95f3-44bf950d210b",
                "indicator--560ba09c-c160-494f-8556-44ea950d210b",
                "indicator--560ba09c-ada8-49e8-a242-4de3950d210b",
                "indicator--560ba09c-981c-4e75-8e8a-487e950d210b",
                "indicator--560ba09c-42b4-4971-af0a-4214950d210b",
                "indicator--560ba09c-5454-4fe6-be33-44bb950d210b",
                "indicator--560ba09d-6d78-4096-b28d-42b4950d210b",
                "indicator--560ba09d-1eb8-45a7-a692-4994950d210b",
                "indicator--560ba09d-2234-4d87-bbf1-4192950d210b",
                "indicator--560ba09d-6c60-46a7-ae59-421c950d210b",
                "indicator--560ba09d-d618-4d6d-bcbb-4d3e950d210b",
                "indicator--560ba09e-8c78-4ba7-b3b4-4ca3950d210b",
                "indicator--560ba09e-a040-452e-b8ce-46b3950d210b",
                "indicator--560ba09e-d1f4-43b4-a1f3-41a4950d210b",
                "indicator--560ba09e-ef98-4841-b48e-41e9950d210b",
                "indicator--560ba09e-029c-4030-bebf-4727950d210b",
                "indicator--560ba09e-5498-475f-a126-4386950d210b",
                "indicator--560ba09f-b44c-4043-aea9-42e3950d210b",
                "indicator--560ba09f-3470-4ef0-b21e-4f0a950d210b",
                "indicator--560ba09f-7cd4-482e-ab83-4ada950d210b",
                "indicator--560ba09f-8bdc-463b-bb84-4987950d210b",
                "indicator--560ba09f-7c5c-4451-8862-47de950d210b",
                "indicator--560ba09f-0ec8-4826-a60b-4bba950d210b",
                "indicator--560ba0a0-22c0-4ee3-b37c-4b23950d210b",
                "indicator--560ba0a0-e624-4db7-8f09-49f8950d210b",
                "indicator--560ba0a0-5598-4885-acf5-439e950d210b",
                "indicator--560ba0a0-c210-4798-aea2-4623950d210b",
                "indicator--560ba0a0-a514-4fba-9eac-4817950d210b",
                "indicator--560ba0a1-68b8-43b4-924a-4c5d950d210b",
                "indicator--560ba0a1-04f4-42f9-a9ad-4693950d210b",
                "indicator--560ba0a1-3910-4e2a-b744-4844950d210b",
                "indicator--560ba0a1-b024-4960-abd7-429e950d210b",
                "indicator--560ba0a1-bddc-4a08-b8c2-425d950d210b",
                "indicator--560ba0a2-fb44-4b6a-a469-4f89950d210b",
                "indicator--560ba0a2-e0e0-406b-b6c0-4ec0950d210b",
                "indicator--560ba0a2-5b90-44a8-843e-46e8950d210b",
                "indicator--560ba0a2-04f8-4dec-a05a-4532950d210b",
                "indicator--560ba0a2-aa5c-4d03-bd23-4b28950d210b",
                "indicator--560ba0a2-890c-44dd-8295-419b950d210b",
                "indicator--560ba0a3-8ae8-44ee-ba69-48cc950d210b",
                "indicator--560ba0a3-f550-46fb-bf18-4341950d210b",
                "indicator--560ba0a3-1f08-46c0-af38-4e9f950d210b",
                "indicator--560ba0a3-6eec-499e-b2a6-42de950d210b",
                "indicator--560ba0a3-4e08-40c2-91ae-4f8b950d210b",
                "indicator--560ba0a3-568c-4c38-b831-4e26950d210b",
                "indicator--560ba0a4-35fc-4d79-bd05-4990950d210b",
                "indicator--560ba0a4-5b88-46ab-b9bb-4417950d210b",
                "indicator--560ba0a4-0ab0-4575-824e-4ee7950d210b",
                "indicator--560ba0a4-8e6c-4e51-94d3-418d950d210b",
                "indicator--560ba0a4-09b4-4352-8a29-4270950d210b",
                "indicator--560ba0a4-e55c-4b7a-8b2d-4e89950d210b",
                "indicator--560ba0a5-05c8-4140-954a-4cc6950d210b",
                "indicator--560ba0a5-edb0-4cb4-bd9d-47e8950d210b",
                "indicator--560ba0a5-35ac-4e3e-9e1b-41c1950d210b",
                "indicator--560ba0a5-fdf0-49a3-8a2d-43ce950d210b",
                "indicator--560ba0a5-5680-4cd2-963d-480c950d210b",
                "indicator--560ba0a6-2f68-4e78-b0dd-4c85950d210b",
                "indicator--560ba0a6-f4dc-43ab-910a-4e86950d210b",
                "indicator--560ba0a6-12a8-456a-951e-4097950d210b",
                "indicator--560ba0a6-4ab4-4ed6-8a9a-4fef950d210b",
                "indicator--560ba0a6-72f4-41c9-833b-4668950d210b",
                "indicator--560ba0a6-1610-40a5-8847-4cb8950d210b",
                "indicator--560ba0a7-06d4-4ea8-b103-4d30950d210b",
                "indicator--560ba0a7-4dc4-42f9-8d9e-4b8e950d210b",
                "indicator--560ba0a7-8690-4c21-8e12-4f7b950d210b",
                "indicator--560ba0a7-e448-4449-9acc-407d950d210b",
                "indicator--560ba0a7-ff60-4c6c-957a-4866950d210b",
                "indicator--560ba0a8-2a10-4372-b2f8-4ebd950d210b",
                "indicator--560ba0a8-6b04-46a5-a57f-4538950d210b",
                "indicator--560ba0a8-42cc-46b3-9f1a-4d2c950d210b",
                "indicator--560ba0a8-b678-4ca0-b000-4378950d210b",
                "indicator--560ba0a8-2894-4caa-975c-4eba950d210b",
                "indicator--560ba0a8-365c-45ff-958f-4ffb950d210b",
                "indicator--560ba0a9-f010-414a-921d-49c9950d210b",
                "indicator--560ba0a9-c5e0-40bc-ac08-4509950d210b",
                "indicator--560ba0a9-4ac0-431c-8489-468a950d210b",
                "indicator--560ba0a9-6e34-44c3-8b2e-4b3e950d210b",
                "indicator--560ba0a9-3cd8-44a3-a7d7-4f41950d210b",
                "indicator--560ba0a9-41b0-4302-9a94-4599950d210b",
                "indicator--560ba0aa-be3c-48b1-beb9-40aa950d210b",
                "indicator--560ba0aa-cc20-4f97-9c24-42fc950d210b",
                "indicator--560ba0aa-561c-4565-978a-4fb5950d210b",
                "indicator--560ba0aa-06e4-4231-acaf-4612950d210b",
                "indicator--560ba0aa-4550-401e-960d-4fd5950d210b",
                "indicator--560ba0ab-06dc-4a82-8e6a-45f8950d210b",
                "indicator--560ba0ab-cb4c-42b2-a6a4-4581950d210b",
                "indicator--560ba0ab-3474-476e-8ed7-48e8950d210b",
                "indicator--560ba0ab-9004-4581-b658-4b23950d210b",
                "indicator--560ba0ab-4de8-434f-b175-4e71950d210b",
                "indicator--560ba0ac-f49c-4327-b323-4688950d210b",
                "indicator--560ba0ac-19a8-453f-aeda-416d950d210b",
                "indicator--560ba0ac-701c-42b4-824f-48d7950d210b",
                "indicator--560ba0ac-ff44-4941-bf82-4b54950d210b",
                "indicator--560ba0ac-8d64-404f-a148-4aa7950d210b",
                "indicator--560ba0ac-48f8-4226-9c8f-4f45950d210b",
                "indicator--560ba0ad-d960-4239-870c-46ac950d210b",
                "indicator--560ba0ad-8ff4-43c9-878a-4e3e950d210b",
                "indicator--560ba0ad-1fb8-4b4f-93c9-4e22950d210b",
                "indicator--560ba0ad-bcf4-4e8b-a4e2-4492950d210b",
                "indicator--560ba0ad-6b6c-4279-9522-464b950d210b",
                "indicator--560ba0ad-4e18-45c2-a712-4e4e950d210b",
                "indicator--560ba0ae-75b8-4d3e-9991-4850950d210b",
                "indicator--560ba0ae-9c30-40c6-b0c7-46c0950d210b",
                "indicator--560ba0ae-2590-4b78-a5fa-4425950d210b",
                "indicator--560ba0ae-0304-463e-9e30-4c3f950d210b",
                "indicator--560ba0ae-8db8-422e-a7ad-4baf950d210b",
                "indicator--560ba0af-f168-4db8-8247-46c2950d210b",
                "indicator--560ba0af-fed4-4691-a9bc-4170950d210b",
                "indicator--560ba0af-807c-47f9-a4b2-484a950d210b",
                "indicator--560ba0af-1f08-4d27-99e2-4a5c950d210b",
                "indicator--560ba0af-d7a0-46c5-bf77-48f9950d210b",
                "indicator--560ba0af-ad6c-4bb5-9b4b-4ed5950d210b",
                "indicator--560ba0b0-b3c0-45ba-8cec-4d90950d210b",
                "indicator--560ba0b0-6888-4970-877b-4b44950d210b",
                "indicator--560ba0b0-d378-48ad-bf34-4d55950d210b",
                "indicator--560ba0b0-3e90-4ba1-b00b-4394950d210b",
                "indicator--560ba0b0-11dc-47ca-98e7-4457950d210b",
                "indicator--560ba0b1-41c8-4a32-8d00-4be0950d210b",
                "indicator--560ba0b1-f318-4009-9bc1-4b63950d210b",
                "indicator--560ba0b1-9c78-4ac1-bcfa-4df5950d210b",
                "indicator--560ba0b1-45b0-4853-876e-4d5b950d210b",
                "indicator--560ba0b1-5310-4138-be04-4510950d210b",
                "indicator--560ba0b1-4d00-446a-a0e7-4e33950d210b",
                "indicator--560ba0b2-54a8-4b44-b0dd-4576950d210b",
                "indicator--560ba0b2-b418-49aa-802d-4210950d210b",
                "indicator--560ba0b2-0360-4701-b4ea-496a950d210b",
                "indicator--560ba0b2-5854-4fdf-b20d-4e77950d210b",
                "indicator--560ba0b2-93b8-4770-af9d-4703950d210b",
                "indicator--560ba0b2-a230-4835-9c88-43fa950d210b",
                "indicator--560ba0b3-8140-41c2-b676-4cde950d210b",
                "indicator--560ba0b3-41c4-46bf-a34b-4550950d210b",
                "indicator--560ba0b3-0154-46c7-b0c9-449e950d210b",
                "indicator--560ba0b3-6660-475b-a89d-474e950d210b",
                "indicator--560ba0b3-0a74-412b-8fcf-4043950d210b",
                "indicator--560ba0b4-0e50-4ef8-9980-45ee950d210b",
                "indicator--560ba0b4-dea0-4a2c-828a-415e950d210b",
                "indicator--560ba0b4-419c-4b25-807c-4979950d210b",
                "indicator--560ba0b4-cdd8-4dca-9efe-4ccc950d210b",
                "indicator--560ba0b4-0f58-4819-8eb9-4560950d210b",
                "indicator--560ba0b5-9654-4139-beab-4e4b950d210b",
                "indicator--560ba0b5-d8a4-4565-a2c5-4cfe950d210b",
                "indicator--560ba0b5-f480-4d0a-b252-413c950d210b",
                "indicator--560ba0b5-ee44-40b6-9501-4e04950d210b",
                "indicator--560ba0b5-f47c-49c1-9b47-4501950d210b",
                "indicator--560ba0b5-19e4-486b-a748-496e950d210b",
                "indicator--560ba0b6-3fd0-4238-a3d4-4368950d210b",
                "indicator--560ba0b6-3f30-467e-87ea-49c3950d210b",
                "indicator--560ba0b6-6258-4859-bbee-4db9950d210b",
                "indicator--560ba0b6-dc04-4318-b7e3-4718950d210b",
                "indicator--560ba0b6-cf24-4264-b252-47c6950d210b",
                "indicator--560ba0b6-848c-4a70-a350-4ce0950d210b",
                "indicator--560ba0b7-fde8-4492-8bb9-473d950d210b",
                "indicator--560ba0b7-303c-431d-8d50-454c950d210b",
                "indicator--560ba0b7-9510-4100-a25d-4754950d210b",
                "indicator--560ba0b7-4400-421c-a286-49dd950d210b",
                "indicator--560ba0b7-50c4-49bd-909c-4146950d210b",
                "indicator--560ba0b8-e610-40da-a9b9-4747950d210b",
                "indicator--560ba0b8-81a4-465a-9d0a-4b2b950d210b",
                "indicator--560ba0b8-ec78-48ec-ac54-41ff950d210b",
                "indicator--560ba0b8-c230-42e0-9b02-4a86950d210b",
                "indicator--560ba0b8-dc4c-444b-b073-4c59950d210b",
                "indicator--560ba0b9-af14-4b8f-b053-4029950d210b",
                "indicator--560ba0b9-b8a4-46e9-aa43-4977950d210b",
                "indicator--560ba0b9-4d10-4026-af8e-4034950d210b",
                "indicator--560ba0b9-fd6c-4f57-8101-4c37950d210b",
                "indicator--560ba0b9-e9c4-42a0-913c-4488950d210b",
                "indicator--560ba0b9-6e68-49e1-a0b6-401f950d210b",
                "indicator--560ba0ba-9098-4e8f-9012-407f950d210b",
                "indicator--560ba0ba-f9e4-4728-84d5-4fc7950d210b",
                "indicator--560ba0ba-2880-4c14-97e9-4bd1950d210b",
                "indicator--560ba0ba-a0e4-4097-9952-4f9b950d210b",
                "indicator--560ba0ba-e924-4ce7-93b7-4830950d210b",
                "indicator--560ba0ba-cd34-4088-a11d-48c7950d210b",
                "indicator--560ba0bb-c424-402b-bc3d-4912950d210b",
                "indicator--560ba0bb-f9a8-49ca-9e9a-4cdb950d210b",
                "indicator--560ba0bb-17a4-4077-8a05-4be8950d210b",
                "indicator--560ba0bb-6c98-4971-9c15-4ccf950d210b",
                "indicator--560ba0bb-c944-43d0-9cec-4602950d210b",
                "indicator--560ba0bc-9fc4-4bec-af6f-40b4950d210b",
                "indicator--560ba0bc-3f68-4352-ae19-4ff3950d210b",
                "indicator--560ba0bc-e5e4-4dbe-8830-4eeb950d210b",
                "indicator--560ba0bc-d7cc-4fe8-b872-456f950d210b",
                "indicator--560ba0bc-78e4-4cca-9b2e-41de950d210b",
                "indicator--560ba0bc-65fc-4b20-8a81-4b47950d210b",
                "indicator--560ba0bd-4c54-4c46-9660-4923950d210b",
                "indicator--560ba0bd-fd44-4670-ac64-4c19950d210b",
                "indicator--560ba0bd-a4a0-48d6-aebd-40ca950d210b",
                "indicator--560ba0bd-980c-4a17-b49b-4d29950d210b",
                "indicator--560ba0bd-fce8-4b24-8613-42c0950d210b",
                "indicator--560ba0be-ea0c-457a-9fdf-4d67950d210b",
                "indicator--560ba0be-0770-4aa6-916b-473d950d210b",
                "indicator--560ba0be-9d50-4af3-8987-401c950d210b",
                "indicator--560ba0be-74d8-4a12-9772-4c71950d210b",
                "indicator--560ba0be-d3b4-413a-b711-470f950d210b",
                "indicator--560ba0be-aaf4-4a4e-b294-4277950d210b",
                "indicator--560ba0bf-998c-43b3-b215-4327950d210b",
                "indicator--560ba0bf-2f48-4cbc-831b-4cf1950d210b",
                "indicator--560ba0bf-dff8-49f7-8b54-4b8d950d210b",
                "indicator--560ba0bf-138c-420e-91f3-487d950d210b",
                "indicator--560ba0bf-0680-4e72-9cef-4446950d210b",
                "indicator--560ba0c0-d8ac-4375-8198-43bc950d210b",
                "indicator--560ba0c0-5410-4ebb-a629-4f54950d210b",
                "indicator--560ba0c0-070c-4f6a-886a-42f7950d210b",
                "indicator--560ba0c0-b82c-4629-9b98-446b950d210b",
                "indicator--560ba0c0-dccc-44a5-98f7-4f9e950d210b",
                "indicator--560ba0c1-ca30-49ba-b62c-40dd950d210b",
                "indicator--560ba0c1-121c-46a4-8f81-4709950d210b",
                "indicator--560ba0c1-df50-47f8-9612-457e950d210b",
                "indicator--560ba0c1-6fa4-426a-a1af-40cf950d210b",
                "indicator--560ba0c1-d694-4fe7-a95e-4f2f950d210b",
                "indicator--560ba0c1-2400-41c6-b6cb-43f9950d210b",
                "indicator--560ba0c2-4920-4d99-8d17-4ed4950d210b",
                "indicator--560ba0c2-1884-4a36-b9e9-40ce950d210b",
                "indicator--560ba0c2-6fcc-49d9-881c-481e950d210b",
                "indicator--560ba0c2-d510-4ec2-868b-4c09950d210b",
                "indicator--560ba0c2-57b0-453a-bbfc-4a7e950d210b",
                "indicator--560ba0c3-f794-44ea-a481-41f0950d210b",
                "indicator--560ba0c3-2d08-4a1e-ba94-4176950d210b",
                "indicator--560ba0c3-3a64-45cb-bc4c-4578950d210b",
                "indicator--560ba0c3-32ec-4b73-a77f-4e61950d210b",
                "indicator--560ba0c3-069c-4e4c-8c00-45b0950d210b",
                "indicator--560ba0c3-ec88-48ab-9119-406c950d210b",
                "indicator--560ba0c4-71d0-4f5f-b4af-4ed1950d210b",
                "indicator--560ba0c4-b400-4c42-a7a5-4b1f950d210b",
                "indicator--560ba0c4-2f00-47d7-9f2c-4184950d210b",
                "indicator--560ba0c4-8b28-4968-8ebe-4cbe950d210b",
                "indicator--560ba0c4-3990-4f76-b33f-4789950d210b",
                "indicator--560ba0c5-88e0-4425-9a4d-4caf950d210b",
                "indicator--560ba0c5-7ac0-4b89-9698-4252950d210b",
                "indicator--560ba0c5-a17c-4ecb-8a02-404a950d210b",
                "indicator--560ba0c5-ae00-4a9b-9799-4060950d210b",
                "indicator--560ba0c5-d3b4-4dfd-9c62-4ed3950d210b",
                "indicator--560ba0c5-eabc-4e79-a8af-4e9a950d210b",
                "indicator--560ba0c6-9970-4ba2-b1db-4f9a950d210b",
                "indicator--560ba0c6-b0e0-459e-b3b2-4d76950d210b",
                "indicator--560ba0c6-ca94-4e76-965c-4059950d210b",
                "indicator--560ba0c6-dc74-4eb1-b5f9-41bf950d210b",
                "indicator--560ba0c6-e058-4c91-9b8a-4603950d210b",
                "indicator--560ba0c6-77f4-43c0-bcee-4777950d210b",
                "indicator--560ba0c7-96a8-4aac-bcf8-46a4950d210b",
                "indicator--560ba0c7-4510-47c5-a1ae-4e2d950d210b",
                "indicator--560ba0c7-3e44-4666-a279-4b62950d210b",
                "indicator--560ba0c7-02d4-498e-8c98-409e950d210b",
                "indicator--560ba0c7-6494-419d-88b5-4e28950d210b",
                "indicator--560ba0c8-3ce4-41a2-baf4-4799950d210b",
                "indicator--560ba0c8-1f0c-4371-b409-4d12950d210b",
                "indicator--560ba0c8-afec-4661-a6ab-4120950d210b",
                "indicator--560ba0c8-6ef4-4f5a-a640-4299950d210b",
                "indicator--560ba0c8-cb44-46cf-9dbd-452f950d210b",
                "indicator--560ba0c9-d624-4135-a680-4c19950d210b",
                "indicator--560ba0c9-6850-4cee-9ece-4c4d950d210b",
                "indicator--560ba0c9-3bb8-4283-ae17-4f4a950d210b",
                "indicator--560ba0c9-ac44-42bf-a87b-40fd950d210b",
                "indicator--560ba0c9-e5b4-458e-997a-4a8a950d210b",
                "indicator--560ba0c9-8ae4-426b-9369-4e7d950d210b",
                "indicator--560ba0ca-5bd0-4a3c-86d8-48b0950d210b",
                "indicator--560ba0ca-9698-4130-a74d-4e76950d210b",
                "indicator--560ba0ca-8634-44be-89da-49d0950d210b",
                "indicator--560ba0ca-70cc-47fc-9b39-4a3a950d210b",
                "indicator--560ba0ca-e2d8-4725-9ed9-423e950d210b",
                "indicator--560ba0ca-3bec-4df7-ac9f-402e950d210b",
                "indicator--560ba0cb-a740-49b2-9c5b-407f950d210b",
                "indicator--560ba0cb-8b1c-467c-90df-4e96950d210b",
                "indicator--560ba0cb-3368-41a6-95d8-4c52950d210b",
                "indicator--560ba0cb-d378-41b4-9aea-4632950d210b",
                "indicator--560ba0cb-a5b0-4570-8344-4fae950d210b",
                "indicator--560ba0cc-4500-42d3-b2a8-4220950d210b",
                "indicator--560ba0cc-4dd4-44db-9544-45f8950d210b",
                "indicator--560ba0cc-02d8-4762-81c7-42d2950d210b",
                "indicator--560ba0cc-a104-47a4-b604-4e1a950d210b",
                "indicator--560ba0cc-5a00-4bf1-a120-4bc1950d210b",
                "indicator--560ba0cc-251c-47ef-9cfa-4baf950d210b",
                "indicator--560ba0cd-88e0-4f9a-bbc4-462d950d210b",
                "indicator--560ba0cd-5d90-4a24-9291-40a4950d210b",
                "indicator--560ba0cd-d718-4e9f-bd15-4371950d210b",
                "indicator--560ba0cd-0d28-4d47-b628-4532950d210b",
                "indicator--560ba0cd-93b8-4eeb-8286-4deb950d210b",
                "indicator--560ba0ce-6344-4768-aa6a-41cb950d210b",
                "indicator--560ba0ce-7864-4ba8-9d76-4172950d210b",
                "indicator--560ba0ce-68f4-4f51-948c-4e34950d210b",
                "indicator--560ba0ce-bf54-47d4-ade1-4e58950d210b",
                "indicator--560ba0ce-a480-4fe1-a661-4105950d210b",
                "indicator--560ba0ce-15b8-445c-a987-4608950d210b",
                "indicator--560ba0cf-b49c-474d-89bd-400b950d210b",
                "indicator--560ba0cf-5ea0-41f2-bbc8-40ce950d210b",
                "indicator--560ba0cf-7bb8-411e-9e4e-4ef3950d210b",
                "indicator--560ba0cf-68fc-4c16-a8cc-40f9950d210b",
                "indicator--560ba0cf-1fc8-4578-97b6-42b1950d210b",
                "indicator--560ba0cf-9f98-4f61-8107-470f950d210b",
                "indicator--560ba0d0-1d38-49c3-800c-441d950d210b",
                "indicator--560ba0d0-2590-442e-abc2-4616950d210b",
                "indicator--560ba0d0-3108-4bc0-8bd8-44e5950d210b",
                "indicator--560ba0d0-694c-4d52-9bd2-4a34950d210b",
                "indicator--560ba0d0-42c0-4677-abe6-4dce950d210b",
                "indicator--560ba0d1-e334-4de7-a48f-4b9b950d210b",
                "indicator--560ba0d1-97d0-49d4-b0a1-4919950d210b",
                "indicator--560ba0d1-ac08-4476-9e9f-4c85950d210b",
                "indicator--560ba0d1-5358-4a83-aed1-436c950d210b",
                "indicator--560ba0d1-9748-45ac-8b2f-430a950d210b",
                "indicator--560ba0d2-3dc8-42ac-b25b-42da950d210b",
                "indicator--560ba0d2-c714-4e0a-8652-4a95950d210b",
                "indicator--560ba0d2-3af8-408f-8ff7-46f1950d210b",
                "indicator--560ba0d2-f5f4-4110-8cd5-41f6950d210b",
                "indicator--560ba0d2-851c-42de-98b8-48cd950d210b",
                "indicator--560ba0d2-c9c8-4af1-8ef0-44c4950d210b",
                "indicator--560ba0d3-a3f4-43f4-b575-4eed950d210b",
                "indicator--560ba0d3-5aa8-4aad-9ccd-49a6950d210b",
                "indicator--560ba0d3-1954-458c-ad57-4de0950d210b",
                "indicator--560ba0d3-5c40-4a89-b1ba-4925950d210b",
                "indicator--560ba0d3-8194-409d-aaf8-4e23950d210b",
                "indicator--560ba0d4-26fc-4fb6-8296-4df6950d210b",
                "indicator--560ba0d4-06bc-471a-8b5b-4544950d210b",
                "indicator--560ba0d4-b61c-4444-bb27-4a8a950d210b",
                "indicator--560ba0d4-33d4-4553-86c5-4e7f950d210b",
                "indicator--560ba0d4-ae40-4611-b9ff-48e4950d210b",
                "indicator--560ba0d4-7188-4881-8caa-490a950d210b",
                "indicator--560ba0d5-de3c-4a2d-bc66-42c2950d210b",
                "indicator--560ba0d5-3680-40c6-9aed-4cd4950d210b",
                "indicator--560ba0d5-2fb0-4368-b010-4fc9950d210b",
                "indicator--560ba0d5-0604-4762-af86-45a4950d210b",
                "indicator--560ba0d5-6500-4922-a3ca-419a950d210b",
                "indicator--560ba0d6-71c8-4078-b212-446c950d210b",
                "indicator--560ba0d6-d764-402a-ace2-43eb950d210b",
                "indicator--560ba0d6-4ba0-4558-9de8-49cf950d210b",
                "indicator--560ba0d6-fee4-4a1c-a836-4be7950d210b",
                "indicator--560ba0d6-a424-4bad-9af7-461d950d210b",
                "indicator--560ba0d6-c6b0-42eb-8103-495b950d210b",
                "indicator--560ba0d7-9b00-45ee-afc5-45b0950d210b",
                "indicator--560ba0d7-0584-4b2d-8f99-413b950d210b",
                "indicator--560ba0d7-ebc8-4ecd-bde9-42d0950d210b",
                "indicator--560ba0d7-a290-4423-9549-46c9950d210b",
                "indicator--560ba0d7-8df4-42a3-88c2-4b29950d210b",
                "indicator--560ba0d8-0554-4ac0-b4e3-4fb3950d210b",
                "indicator--560ba0d8-dce8-4629-b4ea-4b15950d210b",
                "indicator--560ba0d8-89e8-46ba-9c5a-471b950d210b",
                "indicator--560ba0d8-4eb8-4e8f-bf23-4df0950d210b",
                "indicator--560ba0d8-a060-4185-9419-46cf950d210b",
                "indicator--560ba0d8-3ebc-474b-9515-4a95950d210b",
                "indicator--560ba0d9-4a88-4ed0-8d33-4be0950d210b",
                "indicator--560ba0d9-1954-4a78-b474-4cea950d210b",
                "indicator--560ba0d9-3fe8-42d4-b712-4399950d210b",
                "indicator--560ba0d9-4314-4ce5-a7ed-47ee950d210b",
                "indicator--560ba0d9-de80-4fb4-b251-412f950d210b",
                "indicator--560ba0da-9f10-44f7-8c9b-4747950d210b",
                "indicator--560ba0da-76a4-484f-8f03-4fb8950d210b",
                "indicator--560ba0da-b750-4dd1-8a2e-433b950d210b",
                "indicator--560ba0da-70cc-4250-88b2-4a29950d210b",
                "indicator--560ba0da-be84-46b8-8b99-4e50950d210b",
                "indicator--560ba0da-b0c4-4511-8764-4839950d210b",
                "indicator--560ba0db-ceb4-4a13-8b94-4961950d210b",
                "indicator--560ba0db-ccf8-4f4e-b556-4791950d210b",
                "indicator--560ba0db-29dc-4250-8366-4f00950d210b",
                "indicator--560ba0db-1dec-490d-9d97-4d4c950d210b",
                "indicator--560ba0db-96a8-47d7-8320-4ce6950d210b",
                "indicator--560ba0db-92a8-40b4-9515-4f67950d210b",
                "indicator--560ba0dc-ccfc-4a14-89a7-4bad950d210b",
                "indicator--560ba0dc-a490-40dc-8a03-4930950d210b",
                "indicator--560ba0dc-df54-43ed-85f1-4c6c950d210b",
                "indicator--560ba0dc-b380-4a3f-ba61-4ca0950d210b",
                "indicator--560ba0dc-5414-469e-ae90-4bdc950d210b",
                "indicator--560ba0dd-4d1c-4c9a-8b09-4009950d210b",
                "indicator--560ba0dd-7684-4a7e-9807-4f9d950d210b",
                "indicator--560ba0dd-759c-4487-855d-495d950d210b",
                "indicator--560ba0dd-5390-4a08-9590-42d6950d210b",
                "indicator--560ba0dd-4fc4-443b-b0c1-4bab950d210b",
                "indicator--560ba0dd-c7e4-49de-8a67-4b05950d210b",
                "indicator--560ba0de-152c-4751-b63b-4959950d210b",
                "indicator--560ba0de-94d0-4658-acf1-4010950d210b",
                "indicator--560ba0de-48ec-478e-8f0f-47c8950d210b",
                "indicator--560ba0de-d7c0-41a0-86a3-4949950d210b",
                "indicator--560ba0de-f13c-4274-a989-4e75950d210b",
                "indicator--560ba0df-1bd0-4d3a-986d-4d06950d210b",
                "indicator--560ba0df-6800-4638-8e80-4b93950d210b",
                "indicator--560ba0df-2e18-4fc8-8325-462b950d210b",
                "indicator--560ba0df-40a0-4ae5-9762-4ccf950d210b",
                "indicator--560ba0df-eb5c-4ee2-bc88-4757950d210b",
                "indicator--560ba0df-870c-4123-a8e0-46d3950d210b",
                "indicator--560ba0e0-b2ec-423e-9fb4-4a90950d210b",
                "indicator--560ba0e0-6f08-45f4-b7f0-44d1950d210b",
                "indicator--560ba0e0-cd20-49fe-be62-41b4950d210b",
                "indicator--560ba0e0-8838-4ddc-a4ee-4563950d210b",
                "indicator--560ba0e0-9bc8-44a7-a07b-4e46950d210b",
                "indicator--560ba0e0-0684-4d80-a14e-4464950d210b",
                "indicator--560ba0e1-97b0-4b6e-9ac9-4bc0950d210b",
                "indicator--560ba0e1-5ac8-40eb-9131-4ade950d210b",
                "indicator--560ba0e1-3c0c-4229-a714-4c5b950d210b",
                "indicator--560ba0e1-0d8c-492b-acbf-4b0c950d210b",
                "indicator--560ba0e1-8900-42c3-8c5e-4657950d210b",
                "indicator--560ba0e2-f098-4517-aea5-427b950d210b",
                "indicator--560ba0e2-a5c0-42b8-b6f9-443a950d210b",
                "indicator--560ba0e2-645c-40a7-bde0-4089950d210b",
                "indicator--560ba0e2-bab4-4679-81c6-4558950d210b",
                "indicator--560ba0e2-c04c-4e96-a8bd-4b46950d210b",
                "indicator--560ba0e3-57bc-4047-b66b-432f950d210b",
                "indicator--560ba0e3-1590-488b-9ec0-4f4e950d210b",
                "indicator--560ba0e3-e370-44a4-a781-4172950d210b",
                "indicator--560ba0e3-5aa8-43d6-84af-4cad950d210b",
                "indicator--560ba0e3-6874-4435-996b-41e1950d210b",
                "indicator--560ba0e3-e974-45e0-b686-4070950d210b",
                "indicator--560ba0e4-dc44-4241-9881-4489950d210b",
                "indicator--560ba0e4-6704-49cc-9913-460f950d210b",
                "indicator--560ba0e4-80ec-4aaa-981a-4680950d210b",
                "indicator--560ba0e4-aa74-4f15-b436-47fd950d210b",
                "indicator--560ba0e4-188c-4bcd-b64b-4ab1950d210b",
                "indicator--560ba0e4-54ac-4520-834b-444a950d210b",
                "indicator--560ba0e5-77c0-446f-abdb-4e05950d210b",
                "indicator--560ba0e5-97bc-450a-a20c-4690950d210b",
                "indicator--560ba0e5-934c-45f4-8a5e-436f950d210b",
                "indicator--560ba0e5-6b54-43b8-bf29-4265950d210b",
                "indicator--560ba0e5-e2c4-407a-9cf8-4754950d210b",
                "indicator--560ba0e6-f008-4e09-9524-4dd1950d210b",
                "indicator--560ba0e6-dfd8-46e1-a880-4e87950d210b",
                "indicator--560ba0e6-3080-417c-ade6-407f950d210b",
                "indicator--560ba0e6-5b98-4f70-bbf6-4d54950d210b",
                "indicator--560ba0e6-3334-4f53-b376-4ad3950d210b",
                "indicator--560ba0e6-9d44-4297-bda3-4454950d210b",
                "indicator--560ba0e7-ac8c-4384-a50c-4206950d210b",
                "indicator--560ba0e7-283c-4f29-a386-4e43950d210b",
                "indicator--560ba0e7-cf14-40a0-ba22-40c1950d210b",
                "indicator--560ba0e7-9690-40e9-8755-4bf3950d210b",
                "indicator--560ba0e7-fe18-4f3a-a78d-4865950d210b",
                "indicator--560ba0e8-b848-4b01-8019-4d01950d210b",
                "indicator--560ba0e8-c0f4-47e1-9638-45f6950d210b",
                "indicator--560ba0e8-342c-4e89-9841-4df7950d210b",
                "indicator--560ba0e8-76a0-41f8-bcf2-46c1950d210b",
                "indicator--560ba0e8-df64-4435-be5d-4f34950d210b",
                "indicator--560ba0e8-45c8-4d35-8307-49ac950d210b",
                "indicator--560ba0e9-e078-4f82-b789-4da2950d210b",
                "indicator--560ba0e9-c604-4435-a172-4fe5950d210b",
                "indicator--560ba0e9-f138-473c-9d3e-427d950d210b",
                "indicator--560ba0e9-c7ec-4b6a-acbf-4be0950d210b",
                "indicator--560ba0e9-9764-40ac-87df-4fb7950d210b",
                "indicator--560ba0ea-df00-4088-bc45-4cec950d210b",
                "indicator--560ba0ea-6e94-46db-bd47-456f950d210b",
                "indicator--560ba0ea-a750-482d-ac2e-420d950d210b",
                "indicator--560ba0ea-ee6c-46e7-a619-4bb1950d210b",
                "indicator--560ba0ea-d90c-40bb-a0e5-49e9950d210b",
                "indicator--560ba0ea-0904-4926-af00-4401950d210b",
                "indicator--560ba0eb-11f4-471a-a8c9-4059950d210b",
                "indicator--560ba0eb-86a8-4364-b7d4-459b950d210b",
                "indicator--560ba0eb-9d24-4327-8eac-4db9950d210b",
                "indicator--560ba0eb-d4f0-451e-9c3f-43c9950d210b",
                "indicator--560ba0eb-4730-4555-a674-4fd5950d210b",
                "indicator--560ba0ec-20cc-4f1f-9f29-4590950d210b",
                "indicator--560ba0ec-1a6c-42a8-a681-421d950d210b",
                "indicator--560ba0ec-0f70-4d42-bb2e-4104950d210b",
                "indicator--560ba0ec-0b70-4ff1-9df8-4313950d210b",
                "indicator--560ba0ec-04cc-486e-aed6-48a9950d210b",
                "indicator--560ba0ec-ba18-41d0-9d1a-49ce950d210b",
                "indicator--560ba0ed-8328-4ef7-a45a-46f0950d210b",
                "indicator--560ba0ed-d970-44b3-93da-42f0950d210b",
                "indicator--560ba0ed-fb38-41f2-8b31-4036950d210b",
                "indicator--560ba0ed-ba0c-4882-8ffe-4ed0950d210b",
                "indicator--560ba0ed-6bb0-452a-a4e7-4647950d210b",
                "indicator--560ba0ed-bca8-407b-8827-432d950d210b",
                "indicator--560ba0ee-a9d4-41c3-9037-458b950d210b",
                "indicator--560ba0ee-8a2c-47f6-8cd4-43ae950d210b",
                "indicator--560ba0ee-5d14-49a2-a278-4a52950d210b",
                "indicator--560ba0ee-8b70-494b-b50a-4084950d210b",
                "indicator--560ba0ee-52ac-45ec-bbcd-4cf3950d210b",
                "indicator--560ba0ef-b36c-433b-bb6b-4252950d210b",
                "indicator--560ba0ef-0ae4-4ae2-9bc1-4bd3950d210b",
                "indicator--560ba0ef-6db4-48d1-9460-45b6950d210b",
                "indicator--560ba0ef-0264-40ee-bfd7-4277950d210b",
                "indicator--560ba0ef-8dd0-4bd9-a5fc-41e3950d210b",
                "indicator--560ba0f0-affc-4b2a-ae42-4c35950d210b",
                "indicator--560ba0f0-1ecc-4a7a-bef1-40ab950d210b",
                "indicator--560ba0f0-e868-474a-bd09-4798950d210b",
                "indicator--560ba0f0-f2d4-4f27-811c-4c55950d210b",
                "indicator--560ba0f0-c1f0-4261-b6d6-4ead950d210b",
                "indicator--560ba0f0-a180-4428-81da-49f8950d210b",
                "indicator--560ba0f1-9fbc-4ab0-b759-44d7950d210b",
                "indicator--560ba0f1-2a1c-4a1d-8f4a-4a86950d210b",
                "indicator--560ba0f1-c200-43e7-bbac-4951950d210b",
                "indicator--560ba0f1-2eb8-4932-8c3f-4ec6950d210b",
                "indicator--560ba0f1-58b4-4292-b116-45a4950d210b",
                "indicator--560ba0f2-aff4-45dd-b79d-47cd950d210b",
                "indicator--560ba0f2-a6a0-4f1b-91de-4cd6950d210b",
                "indicator--560ba0f2-6e20-4c1a-b024-4ae7950d210b",
                "indicator--560ba0f2-2c54-4cc3-b2a2-49ce950d210b",
                "indicator--560ba0f2-a7bc-45da-99c2-4a76950d210b",
                "indicator--560ba0f2-5ca0-4d16-ae3e-4442950d210b",
                "indicator--560ba0f3-26a8-449c-94a2-447c950d210b",
                "indicator--560ba0f3-8f14-4349-8a05-41fe950d210b",
                "indicator--560ba0f3-9b54-48ae-a274-41e6950d210b",
                "indicator--560ba0f3-d388-4d75-ac3c-4e51950d210b",
                "indicator--560ba0f3-b748-485a-bc7c-47c3950d210b",
                "indicator--560ba0f4-4e0c-45d1-9118-472d950d210b",
                "indicator--560ba0f4-edc0-4f67-90c0-41c5950d210b",
                "indicator--560ba0f4-f8d0-452d-b115-4797950d210b",
                "indicator--560ba0f4-1584-4e79-b61c-4685950d210b",
                "indicator--560ba0f4-5a9c-4c13-814b-416b950d210b",
                "indicator--560ba0f5-2ba0-407a-9dc7-40f7950d210b",
                "indicator--560ba0f5-c52c-4ad0-9d33-48cc950d210b",
                "indicator--560ba0f5-b4bc-492d-a9c0-4e7c950d210b",
                "indicator--560ba0f5-4738-4cd5-a6e3-4433950d210b",
                "indicator--560ba0f5-0a14-4d7b-8dac-4ef9950d210b",
                "indicator--560ba0f6-b9f8-41ea-9cd7-4f9b950d210b",
                "indicator--560ba0f6-21f4-44a3-9c2e-4676950d210b",
                "indicator--560ba0f6-5ec4-4c28-9b19-4482950d210b",
                "indicator--560ba0f6-a35c-4742-ba80-4c8f950d210b",
                "indicator--560ba0f6-409c-4253-b9b0-4916950d210b",
                "indicator--560ba0f6-5d2c-429e-a995-4a02950d210b",
                "indicator--560ba0f6-a218-4d7d-b8a1-40c0950d210b",
                "observed-data--560ba0f6-bd84-4a23-b715-4608950d210b",
                "url--560ba0f6-bd84-4a23-b715-4608950d210b",
                "indicator--560ba0f6-ce84-4379-8c01-4f7b950d210b",
                "indicator--560ba0f7-ff58-4b41-a48e-46c8950d210b",
                "indicator--560ba0f7-42e0-4363-823c-4154950d210b",
                "indicator--560ba0f7-0cb0-4031-8769-4748950d210b",
                "indicator--560ba0f7-4f88-4f07-bd49-43c1950d210b",
                "indicator--560ba0f7-2fd8-4361-91ba-49c9950d210b",
                "indicator--560ba0f7-3494-409e-b10f-4783950d210b",
                "indicator--560ba0f7-3124-49a7-b7fb-4270950d210b",
                "observed-data--560ba0f7-d9b4-4917-b8d8-49c5950d210b",
                "url--560ba0f7-d9b4-4917-b8d8-49c5950d210b",
                "indicator--560ba0f7-f11c-4f49-8475-4de9950d210b",
                "indicator--560ba0f8-98ac-478d-96c5-4022950d210b",
                "indicator--560ba0f8-5d70-4f91-9408-46be950d210b",
                "indicator--560ba0f8-414c-41e8-9044-4663950d210b",
                "indicator--560ba0f8-3bd0-4e61-a4c9-417a950d210b",
                "indicator--560ba0f8-8358-4d89-91a2-411b950d210b",
                "indicator--560ba0f8-546c-42c6-9f45-46ad950d210b",
                "indicator--560ba0f8-2b20-4464-aced-4f1f950d210b",
                "observed-data--560ba0f8-355c-4c2c-b9a3-452c950d210b",
                "url--560ba0f8-355c-4c2c-b9a3-452c950d210b",
                "indicator--560ba0f9-efec-4fe9-aeaf-4d8f950d210b",
                "indicator--560ba0f9-2dc8-4645-939e-4535950d210b",
                "indicator--560ba0f9-4310-43b9-ba2b-44d4950d210b",
                "indicator--560ba0f9-ca48-448d-98c9-40da950d210b",
                "indicator--560ba0f9-0e80-4fd1-9920-47ed950d210b",
                "indicator--560ba0f9-ae68-481a-b4cb-4f07950d210b",
                "indicator--560ba0f9-f268-4232-9e5b-40f8950d210b",
                "indicator--560ba0f9-5794-4afe-97f0-4580950d210b",
                "observed-data--560ba0fa-6cf8-4ed9-ba4e-4cb8950d210b",
                "url--560ba0fa-6cf8-4ed9-ba4e-4cb8950d210b",
                "indicator--560ba0fa-1d28-44e8-a033-494b950d210b",
                "indicator--560ba0fa-cf08-4c5e-bd45-4546950d210b",
                "indicator--560ba0fa-56e4-4519-8353-4c05950d210b",
                "indicator--560ba0fa-30f0-4f8c-a0ef-4652950d210b",
                "indicator--560ba0fa-1320-4cdf-9315-41e8950d210b",
                "indicator--560ba0fa-16b4-4753-a2ed-4988950d210b",
                "indicator--560ba0fa-9e20-43ac-ba3f-46e1950d210b",
                "indicator--560ba0fa-1c8c-401f-9b04-4f4d950d210b",
                "observed-data--560ba0fb-303c-45f7-afb1-4c5f950d210b",
                "url--560ba0fb-303c-45f7-afb1-4c5f950d210b",
                "indicator--560ba0fb-c040-480f-a070-4a39950d210b",
                "indicator--560ba0fb-26b4-413b-b0bb-45d5950d210b",
                "indicator--560ba0fb-f7dc-4baf-be31-48df950d210b",
                "indicator--560ba0fb-b340-4cc1-b62d-467c950d210b",
                "indicator--560ba0fb-baac-48b3-aeba-440e950d210b",
                "indicator--560ba0fb-8840-46cd-b6d6-49fc950d210b",
                "indicator--560ba0fb-e970-4774-a8ec-42f3950d210b",
                "indicator--560ba0fc-7354-4405-97e6-48b2950d210b",
                "observed-data--560ba0fc-8f54-41b4-8ef6-4cbe950d210b",
                "url--560ba0fc-8f54-41b4-8ef6-4cbe950d210b",
                "indicator--560ba0fc-1218-4ad0-b158-421e950d210b",
                "indicator--560ba0fc-cc00-47dd-a209-47cc950d210b",
                "indicator--560ba0fc-0704-462f-b901-49bc950d210b",
                "indicator--560ba0fc-94f0-4bf8-a104-44fe950d210b",
                "indicator--560ba0fc-3fdc-4bfb-b287-4736950d210b",
                "indicator--560ba0fc-9d38-4596-915b-457a950d210b",
                "indicator--560ba0fd-b094-4645-acac-4eef950d210b",
                "indicator--560ba0fd-ffdc-4ff2-a1ed-4873950d210b",
                "observed-data--560ba0fd-e2a8-4e27-88a1-4e56950d210b",
                "url--560ba0fd-e2a8-4e27-88a1-4e56950d210b",
                "indicator--560ba0fd-08a0-4b69-9c6f-4b46950d210b",
                "indicator--560ba0fd-60c4-4655-bb0c-4680950d210b",
                "indicator--560ba0fd-7cac-4a21-b318-430b950d210b",
                "indicator--560ba0fd-a438-4c89-b504-40c8950d210b",
                "indicator--560ba0fd-5064-4d8d-9344-4fde950d210b",
                "indicator--560ba0fd-6c6c-4595-ab25-4322950d210b",
                "indicator--560ba0fe-eb6c-4a91-aead-41eb950d210b",
                "indicator--560ba0fe-1d00-4cca-bd06-406c950d210b",
                "observed-data--560ba0fe-4d88-4b7b-897a-4ecc950d210b",
                "url--560ba0fe-4d88-4b7b-897a-4ecc950d210b",
                "indicator--560ba0fe-7c98-4680-9352-4686950d210b",
                "indicator--560ba0fe-fb60-4c93-9ae8-4807950d210b",
                "indicator--560ba0fe-a4cc-41ab-9dfe-45ea950d210b",
                "indicator--560ba0fe-1f8c-43e4-ae4d-46ad950d210b",
                "indicator--560ba0fe-6558-4ee8-aefb-4c10950d210b",
                "indicator--560ba0ff-ea30-4141-85f0-437c950d210b",
                "indicator--560ba0ff-1eb4-4199-8bd7-4d3b950d210b",
                "indicator--560ba0ff-2154-49f2-ba92-4c55950d210b",
                "observed-data--560ba0ff-a3d4-4ee5-9514-43d0950d210b",
                "url--560ba0ff-a3d4-4ee5-9514-43d0950d210b",
                "indicator--560ba0ff-3de4-4afd-9562-4b40950d210b",
                "indicator--560ba0ff-8a94-4709-9a32-409a950d210b",
                "indicator--560ba0ff-3774-47d4-ae4b-4c74950d210b",
                "indicator--560ba0ff-2cd4-46f6-8a48-416e950d210b",
                "indicator--560ba100-c97c-416f-9a52-4d47950d210b",
                "indicator--560ba100-3434-4ceb-af66-447e950d210b",
                "indicator--560ba100-63e8-4fb3-9d4d-48f0950d210b",
                "indicator--560ba100-2a58-43c5-aa5f-468a950d210b",
                "observed-data--560ba100-ea9c-4350-8eea-4bc5950d210b",
                "url--560ba100-ea9c-4350-8eea-4bc5950d210b",
                "indicator--560ba100-39c8-4562-a82b-4e08950d210b",
                "indicator--560ba100-6fe8-4c96-8d71-4cfe950d210b",
                "indicator--560ba100-79c4-4741-b954-45d4950d210b",
                "indicator--560ba101-cfa8-4a3b-9ae7-4c24950d210b",
                "indicator--560ba101-a080-4bcd-9a32-4a8b950d210b",
                "indicator--560ba101-3704-43a5-8931-42cc950d210b",
                "indicator--560ba101-c740-4962-a08f-46f3950d210b",
                "observed-data--560ba101-0d1c-406a-91c9-423d950d210b",
                "url--560ba101-0d1c-406a-91c9-423d950d210b",
                "indicator--560ba101-86ec-4d53-ac41-4500950d210b",
                "indicator--560ba101-992c-45bd-83d9-498d950d210b",
                "indicator--560ba101-73cc-4d45-959c-4c2d950d210b",
                "indicator--560ba102-e354-416b-a5df-4655950d210b",
                "indicator--560ba102-e0c8-4967-b473-4de6950d210b",
                "indicator--560ba102-40f0-45df-a928-417d950d210b",
                "indicator--560ba102-90e0-4610-92d9-4ef1950d210b",
                "indicator--560ba102-2410-4b25-94c2-470d950d210b",
                "observed-data--560ba102-96c0-431e-82fd-417d950d210b",
                "url--560ba102-96c0-431e-82fd-417d950d210b",
                "indicator--560ba102-f9d0-40d2-9c8a-4259950d210b",
                "indicator--560ba102-f830-41a7-baa4-46c5950d210b",
                "indicator--560ba102-edfc-45c9-802f-4105950d210b",
                "indicator--560ba103-0b24-44d9-a0c3-483f950d210b",
                "indicator--560ba103-8dbc-4a88-b7d8-49f0950d210b",
                "indicator--560ba103-b62c-4b1a-ba75-4b8f950d210b",
                "indicator--560ba103-b020-4d8d-9ad6-449f950d210b",
                "indicator--560ba103-fcac-45e8-8649-4bd2950d210b",
                "observed-data--560ba103-cbc8-48f0-ae07-4fdf950d210b",
                "url--560ba103-cbc8-48f0-ae07-4fdf950d210b",
                "indicator--560ba103-2104-472d-ba7c-4612950d210b",
                "indicator--560ba103-ad70-4468-bd44-456e950d210b",
                "indicator--560ba104-5dd0-4d40-9e95-4469950d210b",
                "indicator--560ba104-6f48-49a1-904c-4068950d210b",
                "indicator--560ba104-653c-468c-b96a-40b8950d210b",
                "indicator--560ba104-7b0c-46e7-86ae-4609950d210b",
                "indicator--560ba104-fc70-4710-bf80-4522950d210b",
                "indicator--560ba104-5038-43af-9e22-4aae950d210b",
                "observed-data--560ba104-c308-42fb-af6c-4fab950d210b",
                "url--560ba104-c308-42fb-af6c-4fab950d210b",
                "indicator--560ba104-b1c8-4ead-b8a8-442d950d210b",
                "indicator--560ba105-b694-4d7b-b8a0-46cb950d210b",
                "indicator--560ba105-b744-4563-92ce-47f9950d210b",
                "indicator--560ba105-a1f0-4333-893f-4426950d210b",
                "indicator--560ba105-fa54-4f85-ab26-44aa950d210b",
                "indicator--560ba105-1b80-4a6c-a717-4002950d210b",
                "indicator--560ba105-448c-4e86-8e69-4dbe950d210b",
                "indicator--560ba105-292c-4603-98dc-4742950d210b",
                "observed-data--560ba105-7dc8-47a2-8e8f-4f78950d210b",
                "url--560ba105-7dc8-47a2-8e8f-4f78950d210b",
                "indicator--560ba105-edf4-4d92-b5d4-41aa950d210b",
                "indicator--560ba106-62dc-49d2-8957-482b950d210b",
                "indicator--560ba106-4c40-4ba3-973d-4e09950d210b",
                "indicator--560ba106-3530-406d-ab69-4b88950d210b",
                "indicator--560ba106-a1c0-46cf-a5c7-48be950d210b",
                "indicator--560ba106-ea94-4fd9-9dcd-4e28950d210b",
                "indicator--560ba106-61d4-44b6-a4b8-49aa950d210b",
                "indicator--560ba106-23ec-446e-91d9-444f950d210b",
                "observed-data--560ba106-ee90-4aac-92a1-4d6a950d210b",
                "url--560ba106-ee90-4aac-92a1-4d6a950d210b",
                "indicator--560ba107-9400-4363-adf3-422b950d210b",
                "indicator--560ba107-2acc-4250-8a52-4874950d210b",
                "indicator--560ba107-3188-4fed-a85b-4481950d210b",
                "indicator--560ba107-65c4-4625-8f1e-4ca4950d210b",
                "indicator--560ba107-ed24-4970-a1f3-419d950d210b",
                "indicator--560ba107-db0c-4f3e-9387-4ead950d210b",
                "indicator--560ba107-b388-4816-a533-44d6950d210b",
                "indicator--560ba107-04d4-4e52-8555-4c5b950d210b",
                "observed-data--560ba108-3cd0-40e3-9696-429f950d210b",
                "url--560ba108-3cd0-40e3-9696-429f950d210b",
                "indicator--560ba108-7500-485c-9651-42d5950d210b",
                "indicator--560ba108-463c-470d-ab2c-4f9c950d210b",
                "indicator--560ba108-b92c-4bb6-be13-43df950d210b",
                "indicator--560ba108-8c78-4b93-832a-4fa2950d210b",
                "indicator--560ba108-d63c-4f8b-96a5-4b41950d210b",
                "indicator--560ba108-5c18-4df0-beab-4cf4950d210b",
                "indicator--560ba108-41c0-4f94-8490-4f3f950d210b",
                "indicator--560ba108-941c-4522-82f2-4662950d210b",
                "observed-data--560ba109-5cb0-4a12-89d6-4d24950d210b",
                "url--560ba109-5cb0-4a12-89d6-4d24950d210b",
                "indicator--560ba109-3ee0-4b23-971c-4338950d210b",
                "indicator--560ba109-29c8-4d89-85cc-44d5950d210b",
                "indicator--560ba109-b8d8-4098-9a06-49ef950d210b",
                "indicator--560ba109-e29c-4c07-b41f-4720950d210b",
                "indicator--560ba109-605c-4e9d-82a3-4f6a950d210b",
                "indicator--560ba109-44d8-4d78-954c-4966950d210b",
                "indicator--560ba109-c930-4737-80af-48f6950d210b",
                "indicator--560ba10a-20b0-44c6-8179-4ab7950d210b",
                "observed-data--560ba10a-8b6c-4365-bf33-4bae950d210b",
                "url--560ba10a-8b6c-4365-bf33-4bae950d210b",
                "indicator--560ba10a-335c-426d-a08a-47f8950d210b",
                "indicator--560ba10a-91b8-4495-8d63-48a4950d210b",
                "indicator--560ba10a-91d8-4dfd-b42a-4f19950d210b",
                "indicator--560ba10a-8c40-4d2d-a063-4e72950d210b",
                "indicator--560ba10a-e914-43cb-b31e-497e950d210b",
                "indicator--560ba10a-69fc-4d50-8d45-4f21950d210b",
                "indicator--560ba10b-7b00-4c31-b47c-487c950d210b",
                "indicator--560ba10b-6730-47d3-bbe0-4c33950d210b",
                "observed-data--560ba10b-dff8-44eb-844d-49a6950d210b",
                "url--560ba10b-dff8-44eb-844d-49a6950d210b",
                "indicator--560ba10b-9258-4bd1-9168-46e8950d210b",
                "indicator--560ba10b-dc00-4b9c-abaa-498f950d210b",
                "indicator--560ba10b-e2bc-4a30-9be4-41d8950d210b",
                "indicator--560ba10b-b9d4-4926-9863-4e62950d210b",
                "indicator--560ba10b-33a4-415c-84a8-4045950d210b",
                "indicator--560ba10b-546c-4012-a531-435a950d210b",
                "indicator--560ba10c-b62c-4eb8-ab56-49d3950d210b",
                "indicator--560ba10c-78a4-4f54-9dc6-4279950d210b",
                "observed-data--560ba10c-83c4-416b-8f1c-40d7950d210b",
                "url--560ba10c-83c4-416b-8f1c-40d7950d210b",
                "indicator--560ba10c-89a0-48fd-a19e-49bc950d210b",
                "indicator--560ba10c-b280-444f-b5ef-4db0950d210b",
                "indicator--560ba10c-9ff8-46a7-98d4-41c2950d210b",
                "indicator--560ba10c-21b0-4f03-b0fb-4e85950d210b",
                "indicator--560ba10c-2f94-452a-b9bc-4da6950d210b",
                "indicator--560ba10d-46d4-4c01-9869-48a6950d210b",
                "indicator--560ba10d-9f24-4c79-a2f3-4859950d210b",
                "indicator--560ba10d-6ae0-491b-84b9-4ddb950d210b",
                "observed-data--560ba10d-d8f0-4a60-8d73-45d0950d210b",
                "url--560ba10d-d8f0-4a60-8d73-45d0950d210b",
                "indicator--560ba10d-1680-4840-9215-46a7950d210b",
                "indicator--560ba10d-7634-41ba-9350-4e4e950d210b",
                "indicator--560ba10d-27bc-4def-b2c1-400f950d210b",
                "indicator--560ba10d-e3f4-4d69-b75b-4124950d210b",
                "indicator--560ba10e-7a10-4aa7-afe7-421c950d210b",
                "indicator--560ba10e-bf50-4bd4-a03c-455a950d210b",
                "indicator--560ba10e-35fc-48de-b725-472f950d210b",
                "observed-data--560ba10e-cad4-4e15-89ad-4cf9950d210b",
                "url--560ba10e-cad4-4e15-89ad-4cf9950d210b",
                "indicator--560ba10e-638c-48cc-88f9-4ab6950d210b",
                "indicator--560ba10e-f334-4adc-af97-4142950d210b",
                "indicator--560ba10e-206c-403a-a3d4-4cac950d210b",
                "indicator--560ba10e-3798-4490-8315-4d8f950d210b",
                "indicator--560ba10f-c61c-4229-9ac5-4959950d210b",
                "indicator--560ba10f-0a68-4270-ba6d-4de9950d210b",
                "indicator--560ba10f-9684-48ce-8506-4bf9950d210b",
                "indicator--560ba10f-ead0-4acb-9aa6-41f1950d210b",
                "observed-data--560ba10f-8e50-4a28-abf5-401c950d210b",
                "url--560ba10f-8e50-4a28-abf5-401c950d210b",
                "indicator--560ba10f-fe14-4f79-ab96-478d950d210b",
                "indicator--560ba10f-fc98-4bb5-8e79-47bc950d210b",
                "indicator--560ba10f-6ab0-4904-b5a6-4e97950d210b",
                "indicator--560ba110-df60-4e8d-a8c3-4a26950d210b",
                "indicator--560ba110-1354-4697-aa0c-450a950d210b",
                "indicator--560ba110-0388-4476-9ccc-4636950d210b",
                "indicator--560ba110-48d0-43c1-9f7c-4e96950d210b",
                "indicator--560ba110-ea40-4199-ac96-46c9950d210b",
                "observed-data--560ba110-fb60-4d98-8743-47d3950d210b",
                "url--560ba110-fb60-4d98-8743-47d3950d210b",
                "indicator--560ba110-c514-4539-87f6-4226950d210b",
                "indicator--560ba110-53a0-4d15-83b3-44b6950d210b",
                "indicator--560ba111-a048-4104-9fa0-4af4950d210b",
                "indicator--560ba111-95ac-4c9f-bd3a-4b5b950d210b",
                "indicator--560ba111-2708-4da3-a329-4c20950d210b",
                "indicator--560ba111-ed4c-4dc9-8613-4618950d210b",
                "indicator--560ba111-3140-472a-ab3e-496f950d210b",
                "indicator--560ba111-e754-4b7e-9189-4f7c950d210b",
                "observed-data--560ba111-d680-440d-9130-43ea950d210b",
                "url--560ba111-d680-440d-9130-43ea950d210b",
                "indicator--560ba111-8098-4ff6-8b5d-45c0950d210b",
                "indicator--560ba112-a368-4ba8-8686-4722950d210b",
                "indicator--560ba112-93cc-4635-8f73-45cc950d210b",
                "indicator--560ba112-7c20-4875-8aaa-413b950d210b",
                "indicator--560ba112-5884-4a8e-91a0-41e0950d210b",
                "indicator--560ba112-2998-42f7-bc02-45ac950d210b",
                "indicator--560ba112-51f0-491a-9456-49df950d210b",
                "indicator--560ba112-b85c-42ea-a7f3-4c68950d210b",
                "observed-data--560ba113-a118-49ab-9b09-4bda950d210b",
                "url--560ba113-a118-49ab-9b09-4bda950d210b",
                "indicator--560ba113-3280-4d16-801e-44ad950d210b",
                "indicator--560ba113-d858-4133-997f-4688950d210b",
                "indicator--560ba113-9134-431f-b859-40bd950d210b",
                "indicator--560ba113-bfa4-4641-9921-4e43950d210b",
                "indicator--560ba113-aed0-4cec-9753-442c950d210b",
                "indicator--560ba113-a194-4b5b-a3cf-4375950d210b",
                "indicator--560ba113-9fb0-4f98-ae4c-44bd950d210b",
                "indicator--560ba113-2028-4782-b8dc-415f950d210b",
                "indicator--560ba114-0e20-4013-a55f-4ae4950d210b",
                "indicator--560ba113-246c-473f-a458-4497950d210b",
                "observed-data--560ba114-af34-4638-85cb-4725950d210b",
                "url--560ba114-af34-4638-85cb-4725950d210b",
                "indicator--560ba114-2edc-4fc1-af40-4b52950d210b",
                "indicator--560ba114-88d0-4847-a32d-432c950d210b",
                "indicator--560ba114-be34-49a8-b6e8-4f89950d210b",
                "indicator--560ba114-442c-495b-9267-4602950d210b",
                "indicator--560ba114-18a4-4860-a17e-4ce5950d210b",
                "indicator--560ba114-6244-48fe-81c6-4ccd950d210b",
                "indicator--560ba115-37d0-4819-8fe1-44cb950d210b",
                "observed-data--560ba114-c084-48f1-a4d4-42d3950d210b",
                "url--560ba114-c084-48f1-a4d4-42d3950d210b",
                "indicator--560ba115-3690-4017-96f2-4988950d210b",
                "indicator--560ba115-9984-4c0f-99eb-4b29950d210b",
                "indicator--560ba115-3e90-46c0-992c-4840950d210b",
                "indicator--560ba115-00b0-4bd0-90f1-459f950d210b",
                "indicator--560ba115-ad24-4a87-bb90-4f1e950d210b",
                "indicator--560ba115-c90c-4e91-b660-4409950d210b",
                "indicator--560ba115-45d4-4248-8f45-413b950d210b",
                "observed-data--560ba115-9c80-45ae-b18c-4bae950d210b",
                "url--560ba115-9c80-45ae-b18c-4bae950d210b",
                "indicator--560ba115-72f0-49e2-b65f-40e9950d210b",
                "indicator--560ba116-8f84-4dba-b74a-46a1950d210b",
                "indicator--560ba116-efe0-4cfe-9439-45c0950d210b",
                "indicator--560ba116-6964-46cc-9cad-4065950d210b",
                "indicator--560ba116-72a4-42f2-9334-4b5d950d210b",
                "indicator--560ba116-d450-4a67-b066-4caa950d210b",
                "indicator--560ba116-80b4-4d10-b06d-4bfa950d210b",
                "indicator--560ba116-bcb4-4ee7-9ee6-4cc1950d210b",
                "indicator--560ba116-2a8c-4fa1-803f-499f950d210b",
                "indicator--560ba116-9b34-4f82-8dde-44b2950d210b",
                "indicator--560ba117-81c8-435b-90e4-4dd2950d210b",
                "observed-data--560ba116-cfb8-49aa-8cd8-48a8950d210b",
                "url--560ba116-cfb8-49aa-8cd8-48a8950d210b",
                "indicator--560ba117-c1bc-4504-bde1-4dc5950d210b",
                "indicator--560ba117-5d1c-4fcd-9f2e-4686950d210b",
                "indicator--560ba117-3064-4221-821f-42b6950d210b",
                "indicator--560ba117-d464-4c99-acbc-473c950d210b",
                "indicator--560ba117-9c04-41b1-aaac-4d47950d210b",
                "indicator--560ba117-0a64-47e3-827a-4776950d210b",
                "indicator--560ba117-76c4-4454-acf2-4320950d210b",
                "indicator--560ba117-2a9c-49cd-8d24-47ec950d210b",
                "indicator--560ba117-ae30-4eba-9872-499d950d210b",
                "observed-data--560ba118-d48c-4575-b1df-4fe2950d210b",
                "url--560ba118-d48c-4575-b1df-4fe2950d210b",
                "indicator--560ba117-4d88-447f-9a86-4ed6950d210b",
                "indicator--560ba118-33b8-4549-85c9-4243950d210b",
                "indicator--560ba118-4f40-4a69-b4c4-4f46950d210b",
                "indicator--560ba118-6220-48d9-a4dc-4dea950d210b",
                "indicator--560ba118-0404-4236-8ea9-4481950d210b",
                "observed-data--560ba118-02b4-44c9-8d66-4601950d210b",
                "url--560ba118-02b4-44c9-8d66-4601950d210b",
                "indicator--560ba118-4c08-44b3-9ba0-44cf950d210b",
                "indicator--560ba118-16d0-43be-868f-48ea950d210b",
                "indicator--560ba119-c898-494e-ad44-4603950d210b",
                "indicator--560ba118-5e50-4d1b-a318-4048950d210b",
                "indicator--560ba119-24e4-43da-8c60-4e04950d210b",
                "indicator--560ba119-2378-481a-89f7-4375950d210b",
                "indicator--560ba119-3a48-4075-a997-4023950d210b",
                "indicator--560ba119-edac-4595-be61-4782950d210b",
                "indicator--560ba119-f068-484e-84f8-4b34950d210b",
                "indicator--560ba119-e65c-4c27-bc30-477c950d210b",
                "observed-data--560ba119-c080-42bb-8500-4c69950d210b",
                "url--560ba119-c080-42bb-8500-4c69950d210b",
                "indicator--560ba119-50f4-49e1-a0e6-4fc8950d210b",
                "indicator--560ba11a-c324-476a-a058-44ae950d210b",
                "indicator--560ba119-ac5c-4070-99c7-4ddb950d210b",
                "indicator--560ba11a-143c-42b9-8c59-4ec0950d210b",
                "indicator--560ba11a-a230-456c-97d0-4303950d210b",
                "indicator--560ba11a-2550-45d9-af0e-43b2950d210b",
                "indicator--560ba11a-cf44-452b-9720-4a6e950d210b",
                "observed-data--560ba11a-7704-41fc-af08-404e950d210b",
                "url--560ba11a-7704-41fc-af08-404e950d210b",
                "indicator--560ba11a-a458-442f-86d2-4698950d210b",
                "indicator--560ba11a-36a0-40d7-9766-4469950d210b",
                "indicator--560ba11a-ba14-4de5-b3fa-4cc4950d210b",
                "indicator--560ba11b-5da8-4d94-bc35-4050950d210b",
                "indicator--560ba11b-3464-4e1e-867e-46a4950d210b",
                "indicator--560ba11b-0af0-455a-b333-4baf950d210b",
                "observed-data--560ba11b-84f0-40dc-9bf4-45e4950d210b",
                "url--560ba11b-84f0-40dc-9bf4-45e4950d210b",
                "indicator--560ba11b-9ae8-4b0e-af78-453d950d210b",
                "indicator--560ba11b-17bc-42c4-8084-4569950d210b",
                "indicator--560ba11b-26bc-493f-a172-4076950d210b",
                "indicator--560ba11b-c7a8-4fc3-86da-47fb950d210b",
                "indicator--560ba11b-4ee4-45d8-8e1d-4746950d210b",
                "indicator--560ba11b-64f4-4487-a700-45db950d210b",
                "indicator--560ba11b-01fc-48a3-9208-4685950d210b",
                "indicator--560ba11c-386c-4802-90b1-49e7950d210b",
                "observed-data--560ba11c-7874-446e-af67-4da0950d210b",
                "url--560ba11c-7874-446e-af67-4da0950d210b",
                "indicator--560ba11c-69d0-4c0b-852e-4e51950d210b",
                "indicator--560ba11c-f6f0-450b-8603-47ea950d210b",
                "indicator--560ba11c-206c-4f6b-8b29-4089950d210b",
                "indicator--560ba11c-fa9c-4ec0-a305-48cf950d210b",
                "indicator--560ba11c-d5b0-4901-8c7e-40d9950d210b",
                "indicator--560ba11c-d18c-4acb-97b0-4f00950d210b",
                "indicator--560ba11c-b2b8-4c43-a7f8-436d950d210b",
                "observed-data--560ba11d-e56c-4c85-8a67-4cbb950d210b",
                "url--560ba11d-e56c-4c85-8a67-4cbb950d210b",
                "indicator--560ba11d-7428-427e-9609-4f67950d210b",
                "indicator--560ba11d-5074-49e6-8767-4d37950d210b",
                "indicator--560ba11d-ddfc-4774-84ed-4f17950d210b",
                "indicator--560ba11d-6120-41e3-948a-48b4950d210b",
                "indicator--560ba11d-82ec-406c-b817-4268950d210b",
                "indicator--560ba11d-66d0-4b78-b071-4042950d210b",
                "indicator--560ba11d-414c-481d-8f8e-4d9d950d210b",
                "observed-data--560ba11d-02c0-4b66-854c-4f42950d210b",
                "url--560ba11d-02c0-4b66-854c-4f42950d210b",
                "indicator--560ba11e-419c-48a5-9703-4f4c950d210b",
                "indicator--560ba11d-ceb4-41d4-b047-4c31950d210b",
                "indicator--560ba11e-ada0-443c-98bc-4936950d210b",
                "indicator--560ba11e-4f14-443f-8f07-40c8950d210b",
                "indicator--560ba11e-dea0-4c27-9a7e-4a1b950d210b",
                "indicator--560ba11e-b148-4c17-8db7-4ebc950d210b",
                "indicator--560ba11e-de18-4fea-a9b6-4bf6950d210b",
                "indicator--560ba11e-1b58-4d24-ac01-4fe6950d210b",
                "indicator--560ba11e-23cc-423e-8acc-4dd0950d210b",
                "indicator--560ba11e-7204-4ce2-af22-456f950d210b",
                "observed-data--560ba11e-d3f0-482b-946d-4454950d210b",
                "url--560ba11e-d3f0-482b-946d-4454950d210b",
                "indicator--560ba11f-7ac0-41fa-8118-4c81950d210b",
                "indicator--560ba11f-d080-4b8c-8f78-4d1f950d210b",
                "indicator--560ba11f-a41c-48b3-af3d-41ae950d210b",
                "indicator--560ba11f-ad88-4216-b686-4b4d950d210b",
                "indicator--560ba11f-e7e4-4267-99fb-4e56950d210b",
                "indicator--560ba11f-0594-4e5b-a7d0-4f61950d210b",
                "indicator--560ba11f-7c24-4ba7-8412-4965950d210b",
                "indicator--560ba11f-9320-4a9e-91d1-49a3950d210b",
                "indicator--560ba11f-2968-4ddf-bbd7-47b3950d210b",
                "observed-data--560ba11f-282c-4ebb-a476-4b06950d210b",
                "url--560ba11f-282c-4ebb-a476-4b06950d210b",
                "indicator--560ba11f-6bf8-4829-a89d-47d8950d210b",
                "indicator--560ba120-ae44-457b-95de-4622950d210b",
                "indicator--560ba120-866c-4ec5-8360-4a51950d210b",
                "indicator--560ba120-19ec-4cf9-9ebc-4c81950d210b",
                "indicator--560ba120-4484-4436-9c7b-4a2d950d210b",
                "indicator--560ba120-22e0-4942-8b6d-4831950d210b",
                "indicator--560ba120-a760-4bdc-b38f-4769950d210b",
                "indicator--560ba120-b2e4-47e0-8069-4181950d210b",
                "indicator--560ba120-6144-41a8-af25-4a9e950d210b",
                "observed-data--560ba120-47c8-47b5-bd68-4eb3950d210b",
                "url--560ba120-47c8-47b5-bd68-4eb3950d210b",
                "indicator--560ba120-7a78-437b-ab3c-4806950d210b",
                "indicator--560ba121-1390-49a5-9444-4f4d950d210b",
                "indicator--560ba121-0e0c-4a66-8fd6-426c950d210b",
                "indicator--560ba121-b5fc-4494-9cd8-4568950d210b",
                "indicator--560ba121-81f4-452e-b6b1-44ef950d210b",
                "indicator--560ba121-e264-4be1-9db8-4074950d210b",
                "observed-data--560ba121-2f3c-4bcf-b1d9-4237950d210b",
                "url--560ba121-2f3c-4bcf-b1d9-4237950d210b",
                "indicator--560ba121-96fc-4aa5-9b8e-4af9950d210b",
                "indicator--560ba121-df78-42f3-acc4-4a62950d210b",
                "indicator--560ba122-cca0-4c55-af51-42f6950d210b",
                "indicator--560ba122-acb4-406d-b035-41bf950d210b",
                "indicator--560ba122-148c-4aeb-9708-4e28950d210b",
                "indicator--560ba122-e974-41e5-b3cb-46c2950d210b",
                "observed-data--560ba122-6954-4b57-80d7-4f65950d210b",
                "url--560ba122-6954-4b57-80d7-4f65950d210b",
                "indicator--560ba122-9f04-4a43-a6f7-4479950d210b",
                "indicator--560ba122-ddd0-4ea5-9043-4dfd950d210b",
                "indicator--560ba122-c294-4e22-a686-49bf950d210b",
                "indicator--560ba122-e570-4383-bbbc-4db2950d210b",
                "observed-data--560ba123-4250-4c77-bcc8-4c4b950d210b",
                "url--560ba123-4250-4c77-bcc8-4c4b950d210b",
                "indicator--560ba122-cdf8-4658-949c-48cd950d210b",
                "indicator--560ba122-3a08-4d19-85d1-43c3950d210b",
                "indicator--560ba123-6d9c-47aa-9f6b-4179950d210b",
                "indicator--560ba123-ce78-4f77-b5b8-4bea950d210b",
                "indicator--560ba123-42a4-46e7-be95-43c1950d210b",
                "indicator--560ba123-7860-4c95-9e38-4a23950d210b",
                "indicator--560ba123-8e78-48a7-99e5-473d950d210b",
                "indicator--560ba123-578c-492d-9ff0-4683950d210b",
                "observed-data--560ba123-4d7c-4418-a330-44e7950d210b",
                "url--560ba123-4d7c-4418-a330-44e7950d210b",
                "indicator--560ba123-8f4c-4804-8eaf-423d950d210b",
                "indicator--560ba124-a718-4b6a-9ac0-4122950d210b",
                "indicator--560ba123-41a8-4aeb-833e-411e950d210b",
                "indicator--560ba124-ca30-46a9-b287-4631950d210b",
                "indicator--560ba124-3c2c-458b-9e45-460a950d210b",
                "indicator--560ba124-0e24-485c-ad70-416b950d210b",
                "indicator--560ba124-42e8-4b37-ad36-4d95950d210b",
                "indicator--560ba124-9f08-40d8-8cde-47a5950d210b",
                "indicator--560ba124-ee6c-48a0-844d-4cbd950d210b",
                "observed-data--560ba124-2ee0-4c3c-8987-429e950d210b",
                "url--560ba124-2ee0-4c3c-8987-429e950d210b",
                "indicator--560ba124-59f4-44e0-bcb9-423d950d210b",
                "indicator--560ba125-3494-4657-9f3c-4558950d210b",
                "indicator--560ba124-e73c-4b4d-9bf4-458d950d210b",
                "indicator--560ba125-1a7c-42b5-865d-4cf7950d210b",
                "indicator--560ba125-4840-40e8-8750-4413950d210b",
                "indicator--560ba125-2f60-42c5-82ab-46c0950d210b",
                "indicator--560ba125-e3a0-4dc1-827e-4bd6950d210b",
                "indicator--560ba125-c4fc-4386-b1f7-4fd4950d210b",
                "observed-data--560ba125-4758-4a30-bb56-4e08950d210b",
                "url--560ba125-4758-4a30-bb56-4e08950d210b",
                "indicator--560ba125-84b4-403c-9840-4ab5950d210b",
                "indicator--560ba125-ce6c-4bad-9706-4aa8950d210b",
                "indicator--560ba126-5d2c-4298-bdb7-44ec950d210b",
                "indicator--560ba125-176c-41d4-984a-474f950d210b",
                "indicator--560ba126-9e6c-460e-9226-4744950d210b",
                "indicator--560ba126-3d94-4f16-b82d-458f950d210b",
                "indicator--560ba126-ae48-4cd1-9753-42d6950d210b",
                "indicator--560ba126-6e74-4d51-91a1-45de950d210b",
                "indicator--560ba126-be9c-469a-9e71-4e63950d210b",
                "observed-data--560ba126-1470-46e6-aee5-439b950d210b",
                "url--560ba126-1470-46e6-aee5-439b950d210b",
                "indicator--560ba126-0244-4cef-a8fa-4f83950d210b",
                "indicator--560ba126-c710-4794-af4e-403f950d210b",
                "indicator--560ba126-a8e4-47dc-bc26-4841950d210b",
                "indicator--560ba127-7e14-48e3-9e78-47a1950d210b",
                "indicator--560ba127-4624-4acb-bb95-41f8950d210b",
                "indicator--560ba127-9bbc-48bb-a866-45cb950d210b",
                "indicator--560ba127-bbd0-4b79-8864-4b3a950d210b",
                "indicator--560ba127-9bbc-4282-bc80-4231950d210b",
                "observed-data--560ba127-ffb4-4550-9420-41a0950d210b",
                "url--560ba127-ffb4-4550-9420-41a0950d210b",
                "indicator--560ba127-32f0-4250-a175-431b950d210b",
                "indicator--560ba127-540c-473a-a1fb-4130950d210b",
                "indicator--560ba128-6fb0-4050-90e0-43e7950d210b",
                "indicator--560ba127-745c-4b69-9d7c-41f4950d210b",
                "indicator--560ba128-e900-4b19-8b80-4ca4950d210b",
                "indicator--560ba128-5e1c-4b58-9032-4fe9950d210b",
                "indicator--560ba128-a100-475e-a88c-4876950d210b",
                "indicator--560ba128-df2c-4ad8-8cc0-4be9950d210b",
                "indicator--560ba128-c1d0-4d1c-81ef-48ec950d210b",
                "indicator--560ba128-5fa0-4033-b67c-48cc950d210b",
                "indicator--560ba128-1a14-4ddf-a8ff-4f08950d210b",
                "observed-data--560ba128-f1b0-48c7-9b90-45fc950d210b",
                "url--560ba128-f1b0-48c7-9b90-45fc950d210b",
                "indicator--560ba129-58c8-4e20-840d-4c6a950d210b",
                "indicator--560ba128-a41c-4b3a-8e11-4926950d210b",
                "indicator--560ba129-62ec-4bb9-b8c0-484e950d210b",
                "indicator--560ba129-fbf0-4a17-97fb-439a950d210b",
                "indicator--560ba129-07ec-4c2a-bf47-4ab5950d210b",
                "indicator--560ba129-0788-45de-b4eb-4bb1950d210b",
                "indicator--560ba129-447c-4bc7-ab6b-43aa950d210b",
                "observed-data--560ba129-a54c-4299-b6a5-4260950d210b",
                "url--560ba129-a54c-4299-b6a5-4260950d210b",
                "indicator--560ba129-0ca0-49c1-848e-474a950d210b",
                "indicator--560ba129-036c-4237-957a-48af950d210b",
                "indicator--560ba129-ebf4-4db1-9cdf-4bf2950d210b",
                "indicator--560ba12a-15d4-4867-a6ba-4b7a950d210b",
                "indicator--560ba12a-9908-4278-a93a-43c3950d210b",
                "indicator--560ba12a-61d4-4e88-9f7e-406a950d210b",
                "indicator--560ba12a-b544-46dd-9c50-4623950d210b",
                "observed-data--560ba12a-5f88-414e-a480-4d2d950d210b",
                "url--560ba12a-5f88-414e-a480-4d2d950d210b",
                "indicator--560ba12a-c598-4ba1-aade-45b3950d210b",
                "indicator--560ba12a-a928-4207-9b13-43d9950d210b",
                "indicator--560ba12a-8a10-40b4-9ff0-4006950d210b",
                "indicator--560ba12a-886c-4d23-ab3a-4e4a950d210b",
                "indicator--560ba12b-7e58-4be6-a2eb-4f2e950d210b",
                "indicator--560ba12a-6df0-4133-86a8-45c4950d210b",
                "indicator--560ba12b-4e10-4201-bcf5-4d90950d210b",
                "indicator--560ba12b-7b70-4faf-9bc0-4420950d210b",
                "indicator--560ba12b-7b60-494e-bd9c-48ac950d210b",
                "indicator--560ba12b-34ac-47d0-aec3-4af4950d210b",
                "observed-data--560ba12b-c2f0-44b8-87fd-4283950d210b",
                "url--560ba12b-c2f0-44b8-87fd-4283950d210b",
                "indicator--560ba12b-2f5c-4fdf-8a12-42d7950d210b",
                "indicator--560ba12b-9cf4-43af-8078-467b950d210b",
                "indicator--560ba12b-ed2c-4e4a-abcf-4231950d210b",
                "indicator--560ba12c-955c-4e71-8030-4bb4950d210b",
                "indicator--560ba12b-3968-4d35-a530-45b6950d210b",
                "indicator--560ba12c-9440-4062-b0fe-452a950d210b",
                "indicator--560ba12c-16b4-4d3f-82a2-47b4950d210b",
                "indicator--560ba12c-f9f4-4b50-a4dd-495d950d210b",
                "observed-data--560ba12c-f69c-428a-8d15-42e7950d210b",
                "url--560ba12c-f69c-428a-8d15-42e7950d210b",
                "indicator--560ba12c-cfe8-4e42-99ae-473f950d210b",
                "indicator--560ba12c-0e50-4358-9c56-49cf950d210b",
                "indicator--560ba12c-3fd0-4b39-8cfa-4b16950d210b",
                "indicator--560ba12c-e9a4-4143-830c-4365950d210b",
                "indicator--560ba12c-2c3c-42f1-985b-407c950d210b",
                "indicator--560ba12d-ee04-480d-b093-407c950d210b",
                "indicator--560ba12d-1850-4c74-ad8a-4f96950d210b",
                "observed-data--560ba12d-08f4-48b5-94d0-41de950d210b",
                "url--560ba12d-08f4-48b5-94d0-41de950d210b",
                "indicator--560ba12d-a8d8-4f9c-b476-4519950d210b",
                "indicator--560ba12d-351c-44c3-94e9-4538950d210b",
                "indicator--560ba12d-4084-4fde-9ee6-4db7950d210b",
                "indicator--560ba12d-fab8-44ce-ab23-4270950d210b",
                "indicator--560ba12d-40b4-49e1-83ab-4823950d210b",
                "indicator--560ba12d-022c-4441-879b-4972950d210b",
                "indicator--560ba12e-53ac-47df-8b71-4e26950d210b",
                "indicator--560ba12d-01bc-41fc-bbf7-47d5950d210b",
                "indicator--560ba12e-b9b4-4c30-b391-476d950d210b",
                "indicator--560ba12e-53e4-4117-946f-4c27950d210b",
                "indicator--560ba12e-690c-484e-aa72-4eff950d210b",
                "observed-data--560ba12e-e368-4ae5-aaac-45f6950d210b",
                "url--560ba12e-e368-4ae5-aaac-45f6950d210b",
                "indicator--560ba12e-afa4-4741-a138-4b8e950d210b",
                "indicator--560ba12e-b480-4128-8650-486a950d210b",
                "indicator--560ba12e-1b9c-4bf6-95e2-4660950d210b",
                "indicator--560ba12e-6378-476d-b057-48b6950d210b",
                "indicator--560ba12f-3a80-4d3d-8087-4042950d210b",
                "indicator--560ba12e-7318-4d47-bc68-4890950d210b",
                "indicator--560ba12f-4f7c-4850-b0d6-474e950d210b",
                "indicator--560ba12f-2e54-4fa2-b9fd-4f42950d210b",
                "observed-data--560ba12f-4bec-4618-9d6d-49d0950d210b",
                "url--560ba12f-4bec-4618-9d6d-49d0950d210b",
                "indicator--560ba12f-41bc-4866-a063-4566950d210b",
                "indicator--560ba12f-a3f4-4386-b395-44e1950d210b",
                "indicator--560ba12f-be14-4658-964b-4ab4950d210b",
                "indicator--560ba12f-c5f8-45da-81d3-479a950d210b",
                "indicator--560ba12f-c868-4c0c-818c-456a950d210b",
                "indicator--560ba130-1234-4a99-9f3c-45da950d210b",
                "indicator--560ba130-0d24-4b80-9422-43cd950d210b",
                "indicator--560ba130-e148-4842-8dbb-43ac950d210b",
                "observed-data--560ba130-5104-456e-8bad-45ac950d210b",
                "url--560ba130-5104-456e-8bad-45ac950d210b",
                "indicator--560ba130-8d7c-4400-bff9-4d3c950d210b",
                "indicator--560ba130-0628-4cba-b60e-4dc2950d210b",
                "indicator--560ba130-bd78-4729-800c-4898950d210b",
                "indicator--560ba130-48ac-4806-bad2-4051950d210b",
                "indicator--560ba131-0958-4336-aa05-4a9f950d210b",
                "indicator--560ba130-d1b0-43ce-83b8-4106950d210b",
                "indicator--560ba131-4bc0-4c85-b963-4abd950d210b",
                "indicator--560ba131-f168-4ee2-a179-49cc950d210b",
                "indicator--560ba131-f4cc-44be-9bc7-437e950d210b",
                "indicator--560ba131-6e84-427c-af86-4ddc950d210b",
                "indicator--560ba131-7e18-4722-9798-49c5950d210b",
                "observed-data--560ba131-1298-47ff-bbdc-4da2950d210b",
                "url--560ba131-1298-47ff-bbdc-4da2950d210b",
                "indicator--560ba131-da38-4578-a058-4054950d210b",
                "indicator--560ba131-2048-49ff-baf7-4675950d210b",
                "indicator--560ba132-eb20-4bf0-8272-45e4950d210b",
                "indicator--560ba131-8b58-4c60-bd0a-4fed950d210b",
                "indicator--560ba132-0908-4f6c-9013-4c16950d210b",
                "indicator--560ba132-84ec-4593-9d89-4033950d210b",
                "indicator--560ba132-2fe4-4a1b-b925-4c87950d210b",
                "indicator--560ba132-a4a4-4273-a0ba-4089950d210b",
                "indicator--560ba132-d584-4f00-968b-414b950d210b",
                "indicator--560ba132-8080-41d7-b2ac-4e5c950d210b",
                "indicator--560ba132-fe08-4537-8ab3-42e9950d210b",
                "observed-data--560ba132-b3e4-48db-ae97-4b0d950d210b",
                "url--560ba132-b3e4-48db-ae97-4b0d950d210b",
                "indicator--560ba132-3bd8-4656-9e11-4606950d210b",
                "indicator--560ba133-fa78-4772-98bd-4133950d210b",
                "indicator--560ba133-479c-4886-ba4d-40bd950d210b",
                "indicator--560ba133-6fe4-4110-add7-4863950d210b",
                "indicator--560ba133-c230-406a-bb6b-46f3950d210b",
                "indicator--560ba133-56b8-4b46-b3b8-4ca1950d210b",
                "indicator--560ba133-73f0-4770-a754-4157950d210b",
                "observed-data--560ba133-869c-428d-8cbd-424b950d210b",
                "url--560ba133-869c-428d-8cbd-424b950d210b",
                "indicator--560ba133-6158-4a3c-bd35-4755950d210b",
                "indicator--560ba133-76d4-480d-a0d2-4592950d210b",
                "indicator--560ba134-8a78-43e5-9d72-4200950d210b",
                "indicator--560ba133-b004-49f2-8a6a-47a4950d210b",
                "indicator--560ba134-59bc-43d8-8a45-4303950d210b",
                "indicator--560ba134-24e4-4944-8877-4535950d210b",
                "indicator--560ba134-c158-4114-b913-4f45950d210b",
                "observed-data--560ba134-aa88-4836-b4c4-4437950d210b",
                "url--560ba134-aa88-4836-b4c4-4437950d210b",
                "indicator--560ba134-d02c-49a2-95de-4874950d210b",
                "indicator--560ba134-08a8-461a-89c5-4a52950d210b",
                "indicator--560ba134-ff30-4493-a4d8-4df2950d210b",
                "indicator--560ba134-2708-4347-8a70-4b49950d210b",
                "indicator--560ba134-469c-418b-a693-4461950d210b",
                "indicator--560ba135-df0c-44da-ac83-4756950d210b",
                "indicator--560ba135-9524-4286-8e3c-49dc950d210b",
                "indicator--560ba135-a304-4499-a650-42ba950d210b",
                "indicator--560ba135-5100-4a7e-8c5c-4053950d210b",
                "indicator--560ba135-452c-41aa-a89c-4892950d210b",
                "indicator--560ba135-6fa0-4820-8941-4c94950d210b",
                "observed-data--560ba135-4158-41b4-8e0b-4db4950d210b",
                "url--560ba135-4158-41b4-8e0b-4db4950d210b",
                "indicator--560ba135-e024-41eb-ba56-4378950d210b",
                "indicator--560ba135-2ddc-4002-8c3b-4329950d210b",
                "indicator--560ba136-6404-448c-a002-4be1950d210b",
                "indicator--560ba136-6df0-4690-9d44-4177950d210b",
                "indicator--560ba136-d02c-476f-8958-4861950d210b",
                "indicator--560ba136-640c-410c-b8dc-4ca0950d210b",
                "indicator--560ba136-bebc-4dc1-bce5-417b950d210b",
                "observed-data--560ba136-c418-41b4-88d5-4e34950d210b",
                "url--560ba136-c418-41b4-88d5-4e34950d210b",
                "indicator--560ba136-7a38-4c96-9756-43a2950d210b",
                "indicator--560ba136-ff50-4e92-9f28-48fe950d210b",
                "indicator--560ba136-82d8-4863-ac49-491a950d210b",
                "indicator--560ba136-9eec-4ad2-8a97-453c950d210b",
                "indicator--560ba136-2b64-4185-89b1-4cc9950d210b",
                "indicator--560ba137-3110-498f-81b0-45d3950d210b",
                "indicator--560ba137-b9f0-41a1-b9b4-4c95950d210b",
                "indicator--560ba137-8a98-46fc-a7b6-449f950d210b",
                "indicator--560ba137-7d4c-4177-ac1e-4d28950d210b",
                "indicator--560ba137-3450-4a3d-86b3-4526950d210b",
                "indicator--560ba137-e968-4d12-a434-46be950d210b",
                "observed-data--560ba137-45a8-4508-a24f-43f3950d210b",
                "url--560ba137-45a8-4508-a24f-43f3950d210b",
                "indicator--560ba137-f5c4-4ec4-ac3d-4c45950d210b",
                "indicator--560ba137-ea14-4413-9757-4fca950d210b",
                "indicator--560ba138-21b0-4ad0-a6ea-4c4e950d210b",
                "indicator--560ba138-f3f0-4277-b211-4065950d210b",
                "indicator--560ba138-5840-48d1-8818-48b2950d210b",
                "indicator--560ba138-bf24-455c-b33f-4737950d210b",
                "indicator--560ba138-2530-46d4-af77-46ca950d210b",
                "indicator--560ba138-3b4c-42f4-9497-4d54950d210b",
                "indicator--560ba138-709c-414b-85c5-4076950d210b",
                "indicator--560ba138-70d8-446f-9b2c-4019950d210b",
                "indicator--560ba138-90dc-4008-8f27-40cf950d210b",
                "observed-data--560ba138-bc48-4d43-a2a6-484a950d210b",
                "url--560ba138-bc48-4d43-a2a6-484a950d210b",
                "indicator--560ba139-98f4-4f95-bf2f-435f950d210b",
                "indicator--560ba138-9fb0-4f28-ae6d-4e1e950d210b",
                "indicator--560ba139-4c70-44ce-b0eb-439b950d210b",
                "indicator--560ba139-6994-4c77-8fea-4b1e950d210b",
                "indicator--560ba139-4484-487d-8d74-4200950d210b",
                "indicator--560ba139-6a00-4767-8432-41dc950d210b",
                "indicator--560ba139-c87c-4bcf-93a0-4f7e950d210b",
                "indicator--560ba139-9be8-4cc9-bd0c-49e9950d210b",
                "indicator--560ba139-dc90-4d95-b7d2-4943950d210b",
                "observed-data--560ba139-bcc4-4575-b6c3-4346950d210b",
                "url--560ba139-bcc4-4575-b6c3-4346950d210b",
                "indicator--560ba13a-5cc4-4250-805a-4a7b950d210b",
                "indicator--560ba13a-dccc-4505-a282-4ed4950d210b",
                "indicator--560ba13a-fe80-4959-b786-4dd7950d210b",
                "indicator--560ba13a-34bc-4a1a-a230-423f950d210b",
                "indicator--560ba13a-9d44-4fd0-99f2-4380950d210b",
                "indicator--560ba13a-34ac-4f45-a1a7-46f8950d210b",
                "indicator--560ba13a-00d0-46e0-b0d9-4ab4950d210b",
                "indicator--560ba13a-5834-4c5c-9c34-4f5c950d210b",
                "indicator--560ba13a-9198-415c-90b6-4a1d950d210b",
                "observed-data--560ba13a-db60-4f62-9be2-4641950d210b",
                "url--560ba13a-db60-4f62-9be2-4641950d210b",
                "indicator--560ba13b-a5b8-4e87-94a0-4371950d210b",
                "indicator--560ba13b-90a4-4af4-b0d3-4de1950d210b",
                "indicator--560ba13b-b424-49b2-bf2a-4095950d210b",
                "indicator--560ba13b-f504-4680-bf62-4cbd950d210b",
                "indicator--560ba13b-1cbc-40ab-ba36-4498950d210b",
                "indicator--560ba13b-d578-4506-8e63-48a0950d210b",
                "indicator--560ba13b-7344-444f-8b5d-4540950d210b",
                "indicator--560ba13b-0310-4097-9be2-4f91950d210b",
                "observed-data--560ba13b-b188-4e7a-8a5a-4b0f950d210b",
                "url--560ba13b-b188-4e7a-8a5a-4b0f950d210b",
                "indicator--560ba13c-dacc-4851-8d93-45ca950d210b",
                "indicator--560ba13c-3e08-4988-9b6b-4ff0950d210b",
                "indicator--560ba13c-69b0-4b85-9129-4a38950d210b",
                "indicator--560ba13c-d3a0-41c7-ab2a-49d8950d210b",
                "indicator--560ba13c-6820-496b-8a28-4877950d210b",
                "indicator--560ba13c-6db4-4b8f-aa71-4e97950d210b",
                "indicator--560ba13c-6118-469e-a0f6-4ee8950d210b",
                "indicator--560ba13c-53d0-4b3c-a359-4708950d210b",
                "observed-data--560ba13c-6760-4bea-89a1-45a3950d210b",
                "url--560ba13c-6760-4bea-89a1-45a3950d210b",
                "indicator--560ba13d-0808-4211-8c71-4b53950d210b",
                "indicator--560ba13d-f91c-43f7-8659-4164950d210b",
                "indicator--560ba13d-f990-4104-8176-4b9e950d210b",
                "indicator--560ba13d-cb60-4125-94c2-40d2950d210b",
                "indicator--560ba13d-9478-4da7-a2e5-43e6950d210b",
                "indicator--560ba13d-59c0-45d8-9f6a-4654950d210b",
                "indicator--560ba13d-7d0c-4bac-9223-4636950d210b",
                "indicator--560ba13d-ac38-4e9e-a2be-49ca950d210b",
                "observed-data--560ba13e-7ee4-4ca8-9288-4e26950d210b",
                "url--560ba13e-7ee4-4ca8-9288-4e26950d210b",
                "indicator--560ba13e-089c-499b-b59b-4368950d210b",
                "indicator--560ba13e-16cc-4b7d-8c4c-4e66950d210b",
                "indicator--560ba13e-e6e8-4cb3-aea9-4bea950d210b",
                "indicator--560ba13e-f494-4c98-8355-4723950d210b",
                "indicator--560ba13e-9868-4c93-b1d7-48db950d210b",
                "indicator--560ba13e-6d84-47d4-8eb1-47ae950d210b",
                "indicator--560ba13e-30b4-46f0-9dd5-447a950d210b",
                "indicator--560ba13f-c6c0-447f-b959-44d5950d210b",
                "observed-data--560ba13f-46d8-4d25-b59f-40ae950d210b",
                "url--560ba13f-46d8-4d25-b59f-40ae950d210b",
                "indicator--560ba13f-9bf0-4d01-9010-4e8c950d210b",
                "indicator--560ba13f-76d8-48bc-ae03-464c950d210b",
                "indicator--560ba13f-a768-4d81-852d-4a35950d210b",
                "indicator--560ba13f-16a0-4421-be9e-4930950d210b",
                "indicator--560ba13f-1998-499b-8362-4808950d210b",
                "indicator--560ba13f-5a8c-429a-a051-4821950d210b",
                "indicator--560ba140-0fc4-4203-8917-4295950d210b",
                "indicator--560ba140-e584-4d54-bfc9-4993950d210b",
                "observed-data--560ba140-9438-4a6f-bbe1-468f950d210b",
                "url--560ba140-9438-4a6f-bbe1-468f950d210b",
                "indicator--560ba140-d4bc-463a-8c38-460e950d210b",
                "indicator--560ba140-2220-4d1a-841a-4274950d210b",
                "indicator--560ba140-6d08-4d57-9255-485b950d210b",
                "indicator--560ba140-8250-4aba-a67c-4773950d210b",
                "indicator--560ba140-fc60-4d7b-b53b-4e59950d210b",
                "indicator--560ba140-cb04-461d-bda8-4fc3950d210b",
                "indicator--560ba141-d108-427e-af00-43d2950d210b",
                "indicator--560ba141-c948-4574-a795-406a950d210b",
                "observed-data--560ba141-f430-4fec-9356-472b950d210b",
                "url--560ba141-f430-4fec-9356-472b950d210b",
                "indicator--560ba141-3f04-4bba-8c23-4789950d210b",
                "indicator--560ba141-5248-46cb-a59f-4866950d210b",
                "indicator--560ba141-d788-4da7-8f06-4d13950d210b",
                "indicator--560ba141-7550-4774-b50f-41e5950d210b",
                "indicator--560ba141-8b08-40bd-8666-4b47950d210b",
                "indicator--560ba142-20c0-4643-8695-4a8e950d210b",
                "indicator--560ba142-a2e8-4093-bf43-45b8950d210b",
                "indicator--560ba142-dd3c-4495-bf95-433c950d210b",
                "observed-data--560ba142-54bc-4260-ad2c-4fb0950d210b",
                "url--560ba142-54bc-4260-ad2c-4fb0950d210b",
                "indicator--560ba142-5270-4bdb-8ac3-4bdb950d210b",
                "indicator--560ba142-3028-40d6-bbc6-4bf6950d210b",
                "indicator--560ba142-cd18-4c7c-93e4-4e1b950d210b",
                "indicator--560ba142-9180-4d4f-a068-4327950d210b",
                "indicator--560ba143-70ec-475d-a9e7-4b68950d210b",
                "indicator--560ba143-4478-4a9e-9264-4765950d210b",
                "indicator--560ba143-1db0-42bc-9c28-4a78950d210b",
                "indicator--560ba143-0f2c-4561-9023-4e08950d210b",
                "observed-data--560ba143-1a70-4ff1-8f75-45a6950d210b",
                "url--560ba143-1a70-4ff1-8f75-45a6950d210b",
                "indicator--560ba143-3dcc-44f9-803a-4e91950d210b",
                "indicator--560ba143-6348-4487-a6e7-4ae5950d210b",
                "indicator--560ba143-9680-48ff-8426-4453950d210b",
                "indicator--560ba144-a5fc-40e1-bc53-4895950d210b",
                "indicator--560ba144-2c18-4370-9824-4436950d210b",
                "indicator--560ba144-c8f8-46b2-a2fd-4132950d210b",
                "indicator--560ba144-a324-4fb1-8860-4df5950d210b",
                "indicator--560ba144-c134-439e-ba56-4a95950d210b",
                "observed-data--560ba144-f388-4e93-b73b-40fa950d210b",
                "url--560ba144-f388-4e93-b73b-40fa950d210b",
                "indicator--560ba144-2a38-4b15-bdcc-4bf3950d210b",
                "indicator--560ba144-a83c-4bf0-bbdb-481f950d210b",
                "indicator--560ba144-ff80-4408-b63e-4569950d210b",
                "indicator--560ba145-8ea4-49f8-9e7f-4190950d210b",
                "indicator--560ba145-3c88-463a-9d81-4563950d210b",
                "indicator--560ba145-84ec-464b-a0d5-49b2950d210b",
                "indicator--560ba145-aad4-4ced-832d-47ab950d210b",
                "indicator--560ba145-933c-4e3c-9164-4bd6950d210b",
                "observed-data--560ba145-9fe4-492c-a213-48b7950d210b",
                "url--560ba145-9fe4-492c-a213-48b7950d210b",
                "indicator--560ba145-7768-4fa1-97bb-454c950d210b",
                "indicator--560ba145-df78-4057-82f6-4b66950d210b",
                "indicator--560ba146-ad04-43d0-abed-475d950d210b",
                "indicator--560ba146-e7e4-491c-8d31-4a21950d210b",
                "indicator--560ba146-6b7c-4e67-93ff-42be950d210b",
                "indicator--560ba146-93e8-4145-956e-4630950d210b",
                "indicator--560ba146-3704-445a-8bce-4396950d210b",
                "indicator--560ba146-8ea4-40f6-b47b-4860950d210b",
                "observed-data--560ba146-56e8-4a9e-b202-47ac950d210b",
                "url--560ba146-56e8-4a9e-b202-47ac950d210b",
                "indicator--560ba146-c15c-4b37-8710-49d4950d210b",
                "indicator--560ba147-ff68-4bbc-9d61-4bb7950d210b",
                "indicator--560ba147-03d8-427f-8937-46a7950d210b",
                "indicator--560ba147-5430-4f28-9fd4-487c950d210b",
                "indicator--560ba147-a000-470b-93dd-4637950d210b",
                "indicator--560ba147-4c98-4ed7-81f1-4574950d210b",
                "indicator--560ba147-8ca4-4183-b642-4f4b950d210b",
                "indicator--560ba147-7c64-4995-bbeb-4fef950d210b",
                "observed-data--560ba147-43c8-49b4-8856-4620950d210b",
                "url--560ba147-43c8-49b4-8856-4620950d210b",
                "indicator--560ba148-ff6c-44a4-8332-478e950d210b",
                "indicator--560ba148-a078-4b4f-b6cb-4781950d210b",
                "indicator--560ba148-cc4c-48e3-a9ef-4b91950d210b",
                "indicator--560ba148-5398-4026-832e-4ab9950d210b",
                "indicator--560ba148-971c-4e55-820c-4647950d210b",
                "indicator--560ba148-0b50-4a3b-8b68-49b6950d210b",
                "indicator--560ba148-6298-443a-833f-4f94950d210b",
                "indicator--560ba148-64f0-4605-b13b-4516950d210b",
                "observed-data--560ba148-7364-472c-af56-4afd950d210b",
                "url--560ba148-7364-472c-af56-4afd950d210b",
                "indicator--560ba149-ad6c-4332-b5f2-4962950d210b",
                "indicator--560ba149-6424-4666-86fa-48c0950d210b",
                "indicator--560ba149-ea18-47ce-88f1-4b87950d210b",
                "indicator--560ba149-c53c-4059-b75f-4eb8950d210b",
                "indicator--560ba149-09b4-4c27-99d1-4ecd950d210b",
                "indicator--560ba149-26a0-48f1-b3f5-4643950d210b",
                "indicator--560ba149-1040-4a2b-a468-40bd950d210b",
                "indicator--560ba149-65e0-4d92-84bc-4d83950d210b",
                "observed-data--560ba14a-9a04-45a6-90f8-4230950d210b",
                "url--560ba14a-9a04-45a6-90f8-4230950d210b",
                "indicator--560ba14a-c754-44b7-ac1e-4f0a950d210b",
                "indicator--560ba14a-01a4-4b65-8c59-4e07950d210b",
                "indicator--560ba14a-d6dc-4ef6-8a6c-49e2950d210b",
                "indicator--560ba14a-6bb0-4405-b869-4cdc950d210b",
                "indicator--560ba14a-3fe8-4388-a096-4f2b950d210b",
                "indicator--560ba14a-8778-44ca-a5c1-4ce7950d210b",
                "indicator--560ba14a-2cd8-4233-ba86-4115950d210b",
                "indicator--560ba14a-af6c-411d-a3bf-4c7c950d210b",
                "observed-data--560ba14b-b790-4d71-9977-444c950d210b",
                "url--560ba14b-b790-4d71-9977-444c950d210b",
                "indicator--560ba14b-68a8-4883-87a8-43ab950d210b",
                "indicator--560ba14b-7700-4182-91ce-43bb950d210b",
                "indicator--560ba14b-a058-4f1f-a01e-4d90950d210b",
                "indicator--560ba14b-44b8-462f-94fc-44a2950d210b",
                "indicator--560ba14b-a9b8-48c8-b32c-4d63950d210b",
                "indicator--560ba14b-5408-4748-a419-4dad950d210b",
                "indicator--560ba14b-8ba0-4944-ac0d-4205950d210b",
                "indicator--560ba14b-1704-46e3-aff5-49f7950d210b",
                "indicator--560ba14b-8ba0-47d4-9246-4d19950d210b",
                "observed-data--560ba14c-a7f4-431d-8e37-4d5c950d210b",
                "url--560ba14c-a7f4-431d-8e37-4d5c950d210b",
                "indicator--560ba14c-e858-4bdb-9085-47c6950d210b",
                "indicator--560ba14c-efd4-4ac1-a17a-470b950d210b",
                "indicator--560ba14c-b2d0-4cc9-a4e4-4efa950d210b",
                "indicator--560ba14c-6488-4059-9872-4f7d950d210b",
                "indicator--560ba14c-6e60-48af-b823-4b1b950d210b",
                "indicator--560ba14c-a8a8-472a-8d25-428d950d210b",
                "indicator--560ba14c-f74c-4deb-a7a4-4652950d210b",
                "indicator--560ba14c-ff98-465f-b6b8-4025950d210b",
                "indicator--560ba14d-8738-484d-971f-4ac4950d210b",
                "indicator--560ba14c-d744-4322-b457-4774950d210b",
                "indicator--560ba14d-67d8-4d40-84b8-43d7950d210b",
                "observed-data--560ba14d-ddbc-4bea-ba8a-4f30950d210b",
                "url--560ba14d-ddbc-4bea-ba8a-4f30950d210b",
                "indicator--560ba14d-8718-4abf-b9b5-4188950d210b",
                "indicator--560ba14d-21d0-4bad-a909-44de950d210b",
                "indicator--560ba14d-df00-47bc-abd9-4fad950d210b",
                "indicator--560ba14d-ecb4-4bd4-9ec9-4b23950d210b",
                "indicator--560ba14d-0610-4f06-b1df-4150950d210b",
                "indicator--560ba14d-c07c-49a6-b20d-4f4f950d210b",
                "indicator--560ba14e-ac88-440a-ae1f-431b950d210b",
                "indicator--560ba14d-562c-4207-b916-4f95950d210b",
                "indicator--560ba14e-9b70-4385-992f-4290950d210b",
                "indicator--560ba14e-5518-4b79-bcc2-4556950d210b",
                "indicator--560ba14e-b34c-452e-a299-4c0d950d210b",
                "observed-data--560ba14e-35dc-47b4-a358-489f950d210b",
                "url--560ba14e-35dc-47b4-a358-489f950d210b",
                "indicator--560ba14e-dae4-4d9c-ad40-463a950d210b",
                "indicator--560ba14e-0ebc-4151-934e-4a0d950d210b",
                "indicator--560ba14e-8a0c-4d67-b0bd-46ef950d210b",
                "indicator--560ba14f-bef0-4c2d-9fba-4487950d210b",
                "indicator--560ba14e-e4d0-4e73-b222-4b9e950d210b",
                "indicator--560ba14f-baf0-46ab-ac89-4b4a950d210b",
                "indicator--560ba14f-5088-41e1-94a0-408c950d210b",
                "observed-data--560ba14f-de08-4cc3-99da-4654950d210b",
                "url--560ba14f-de08-4cc3-99da-4654950d210b",
                "indicator--560ba14f-4f14-49af-9b53-4f5b950d210b",
                "indicator--560ba14f-2e8c-415d-873a-4c4f950d210b",
                "indicator--560ba14f-f670-418a-aa08-40f5950d210b",
                "indicator--560ba14f-015c-46a4-8c83-4173950d210b",
                "indicator--560ba14f-1e98-4cff-bd44-4a0e950d210b",
                "indicator--560ba150-ea50-4683-b9ef-48cf950d210b",
                "indicator--560ba14f-c64c-41b5-a1c4-4eef950d210b",
                "indicator--560ba150-d594-427a-80e9-4fee950d210b",
                "indicator--560ba150-6418-412f-96e6-4b5b950d210b",
                "observed-data--560ba150-20f4-48eb-a9c4-46dc950d210b",
                "url--560ba150-20f4-48eb-a9c4-46dc950d210b",
                "indicator--560ba150-3588-4139-8f80-4e92950d210b",
                "indicator--560ba150-32d4-40f4-ae69-4fda950d210b",
                "indicator--560ba150-5038-4761-a9b2-4eaf950d210b",
                "indicator--560ba150-13e8-4238-b818-4e0e950d210b",
                "observed-data--560ba151-91f0-4188-b25e-4554950d210b",
                "url--560ba151-91f0-4188-b25e-4554950d210b",
                "indicator--560ba150-f9a8-4d56-a34b-44ac950d210b",
                "indicator--560ba151-3188-40f2-bc0d-49a8950d210b",
                "indicator--560ba151-0710-4ad5-905b-43d2950d210b",
                "indicator--560ba151-7b2c-44bf-8ae0-4b38950d210b",
                "indicator--560ba151-d344-4c8a-b760-40e8950d210b",
                "observed-data--560ba151-72b0-4546-bbec-4e72950d210b",
                "url--560ba151-72b0-4546-bbec-4e72950d210b",
                "indicator--560ba151-b0bc-4699-b11a-43db950d210b",
                "indicator--560ba151-2074-4dbb-8475-4c92950d210b",
                "indicator--560ba151-c210-424f-aec8-43c0950d210b",
                "indicator--560ba151-483c-41f6-aeff-468a950d210b",
                "indicator--560ba151-b548-42a1-933b-4314950d210b",
                "indicator--560ba152-8208-477a-a178-4601950d210b",
                "indicator--560ba152-9d78-4475-a532-4f51950d210b",
                "observed-data--560ba152-7914-4613-8368-450a950d210b",
                "url--560ba152-7914-4613-8368-450a950d210b",
                "indicator--560ba152-480c-402c-b3b2-4929950d210b",
                "indicator--560ba152-2094-4b9c-a279-471d950d210b",
                "indicator--560ba152-0274-48ea-977c-40ba950d210b",
                "indicator--560ba152-38c8-4046-be76-4001950d210b",
                "indicator--560ba152-cbd4-4c00-81bc-418b950d210b",
                "indicator--560ba152-5b50-44dc-8244-4bba950d210b",
                "indicator--560ba153-225c-4b04-a3bb-462a950d210b",
                "indicator--560ba153-ed54-453d-acbd-4e85950d210b",
                "indicator--560ba153-1ee4-41fd-ba9e-42c1950d210b",
                "observed-data--560ba153-ef78-4fc9-be41-47f4950d210b",
                "url--560ba153-ef78-4fc9-be41-47f4950d210b",
                "indicator--560ba153-decc-4b74-8137-41b9950d210b",
                "indicator--560ba153-d158-4819-8498-4e45950d210b",
                "indicator--560ba153-fb34-4185-9d4e-45f4950d210b",
                "indicator--560ba153-f2d4-4c16-ac92-4bb8950d210b",
                "indicator--560ba153-0c40-4f33-88e4-4861950d210b",
                "indicator--560ba153-ad1c-45af-9239-4e2b950d210b",
                "indicator--560ba153-6ca4-427c-8888-4587950d210b",
                "observed-data--560ba154-08ac-41b4-bb9e-4915950d210b",
                "url--560ba154-08ac-41b4-bb9e-4915950d210b",
                "indicator--560ba154-b1f0-477e-b3ab-41c6950d210b",
                "indicator--560ba154-956c-4147-82e5-4fac950d210b",
                "indicator--560ba154-ed20-43cc-b491-4be8950d210b",
                "indicator--560ba154-f0a4-4696-833a-4e11950d210b",
                "indicator--560ba154-90cc-4484-98d2-4e24950d210b",
                "indicator--560ba154-8048-4823-bf8f-433c950d210b",
                "indicator--560ba154-3234-4987-b3b9-42c2950d210b",
                "indicator--560ba154-0634-4627-916b-4413950d210b",
                "indicator--560ba155-e8d8-46ad-a6d6-4939950d210b",
                "indicator--560ba155-c65c-4528-b6ac-4591950d210b",
                "observed-data--560ba155-89d0-4d5f-9853-45b2950d210b",
                "url--560ba155-89d0-4d5f-9853-45b2950d210b",
                "indicator--560ba155-88bc-4816-92f9-4ad4950d210b",
                "indicator--560ba155-10b0-427c-b6c4-4d1a950d210b",
                "indicator--560ba155-0600-42bc-8df0-4643950d210b",
                "indicator--560ba155-a2a0-4159-a379-41fd950d210b",
                "indicator--560ba155-57a0-4004-9999-43d6950d210b",
                "indicator--560ba155-9020-438a-b5d4-4485950d210b",
                "indicator--560ba155-78d4-484f-b264-40d6950d210b",
                "observed-data--560ba156-4558-41df-a119-4cff950d210b",
                "url--560ba156-4558-41df-a119-4cff950d210b",
                "indicator--560ba156-9a7c-4281-b17a-40f1950d210b",
                "indicator--560ba156-c2fc-4807-9f6d-4f11950d210b",
                "indicator--560ba156-1730-4dc1-acb9-455a950d210b",
                "indicator--560ba156-f3f4-46e7-bbce-469a950d210b",
                "indicator--560ba156-8a58-43ee-8b84-4c3a950d210b",
                "indicator--560ba156-1bd0-407d-9317-4793950d210b",
                "observed-data--560ba156-9958-4e1f-bed9-472d950d210b",
                "url--560ba156-9958-4e1f-bed9-472d950d210b",
                "indicator--560ba156-7c7c-4bd0-a117-41cf950d210b",
                "indicator--560ba157-9d34-4a7c-bee9-44d8950d210b",
                "indicator--560ba156-2018-405b-ab3c-4149950d210b",
                "indicator--560ba157-ee64-46fa-8bbf-4e4d950d210b",
                "indicator--560ba157-2b7c-4f4a-9d38-414c950d210b",
                "indicator--560ba157-5a50-41aa-804f-4d13950d210b",
                "indicator--560ba157-f274-4697-a80e-4297950d210b",
                "indicator--560ba157-ef94-41ce-9b7e-4a8c950d210b",
                "observed-data--560ba157-fccc-4a89-8abb-4639950d210b",
                "url--560ba157-fccc-4a89-8abb-4639950d210b",
                "indicator--560ba157-61a0-40a0-b5e2-4510950d210b",
                "indicator--560ba157-b9f8-4978-bdbc-4c4a950d210b",
                "indicator--560ba158-6d0c-4ae8-9de2-4ee8950d210b",
                "indicator--560ba157-5df4-41dc-ba69-4150950d210b",
                "indicator--560ba158-57ec-4c7d-8081-4684950d210b",
                "indicator--560ba158-d80c-4fac-9290-44a8950d210b",
                "indicator--560ba158-c780-4475-b342-4ed4950d210b",
                "indicator--560ba158-b990-42f6-a7c1-407c950d210b",
                "observed-data--560ba158-f7ac-44ef-9a55-49ba950d210b",
                "url--560ba158-f7ac-44ef-9a55-49ba950d210b",
                "indicator--560ba158-15a0-455a-baed-4d7f950d210b",
                "indicator--560ba158-f5e0-4b5c-9f0a-445a950d210b",
                "indicator--560ba158-c27c-4a39-9c88-4fdd950d210b",
                "indicator--560ba159-4148-42af-9b70-431b950d210b",
                "indicator--560ba158-8b04-40f0-ba30-4506950d210b",
                "indicator--560ba159-d314-4b54-a288-44ae950d210b",
                "indicator--560ba159-0764-4f10-8f92-430a950d210b",
                "observed-data--560ba159-1d7c-4957-a890-4761950d210b",
                "url--560ba159-1d7c-4957-a890-4761950d210b",
                "indicator--560ba159-c950-4039-a4de-419f950d210b",
                "indicator--560ba159-10a0-4d1c-9d8f-4f47950d210b",
                "indicator--560ba159-1e98-426b-89e9-410c950d210b",
                "indicator--560ba159-40c8-4e51-b6fa-4c98950d210b",
                "indicator--560ba159-1f3c-41e8-b500-468c950d210b",
                "indicator--560ba15a-bbb0-4dea-9214-4954950d210b",
                "indicator--560ba159-d7dc-4b5f-8413-4c18950d210b",
                "indicator--560ba15a-2878-40c6-a441-46a3950d210b",
                "indicator--560ba15a-81b8-4479-9cd8-4a6e950d210b",
                "observed-data--560ba15a-b28c-4f89-bf30-4744950d210b",
                "url--560ba15a-b28c-4f89-bf30-4744950d210b",
                "indicator--560ba15a-e118-4805-8334-4c26950d210b",
                "indicator--560ba15a-6b50-4faf-abf3-4b07950d210b",
                "indicator--560ba15a-80a8-4fbf-b485-451e950d210b",
                "indicator--560ba15a-d20c-42c8-abdb-49c1950d210b",
                "indicator--560ba15b-c798-4107-b447-4671950d210b",
                "indicator--560ba15b-e6d8-495f-987c-4953950d210b",
                "indicator--560ba15b-4e7c-487b-8b4e-400d950d210b",
                "observed-data--560ba15b-492c-4326-a9a7-4145950d210b",
                "url--560ba15b-492c-4326-a9a7-4145950d210b",
                "indicator--560ba15b-d188-42cc-9a3e-4d18950d210b",
                "indicator--560ba15b-6634-4f58-a574-4007950d210b",
                "indicator--560ba15b-e63c-43b6-a778-43f7950d210b",
                "indicator--560ba15b-e3e0-4a45-865e-461a950d210b",
                "indicator--560ba15b-d840-4819-8194-480b950d210b",
                "indicator--560ba15b-3094-4ffe-af75-45dd950d210b",
                "indicator--560ba15c-891c-4066-90f0-44fc950d210b",
                "indicator--560ba15c-24d8-49a4-9ffe-4e9a950d210b",
                "indicator--560ba15c-10bc-4dae-b1d5-4b3f950d210b",
                "observed-data--560ba15c-8640-4ff4-9e27-41f4950d210b",
                "url--560ba15c-8640-4ff4-9e27-41f4950d210b",
                "indicator--560ba15c-911c-4a82-a05c-4559950d210b",
                "indicator--560ba15c-a0bc-471e-9a74-444d950d210b",
                "indicator--560ba15c-dbd8-4cf0-9400-428f950d210b",
                "indicator--560ba15c-c548-413f-a816-4a44950d210b",
                "indicator--560ba15c-ef98-4b04-b93f-437f950d210b",
                "indicator--560ba15d-7a68-4b5b-ae7a-4186950d210b",
                "indicator--560ba15c-1224-4f85-b339-46f3950d210b",
                "indicator--560ba15d-0e10-48f5-b470-489a950d210b",
                "observed-data--560ba15d-c988-4564-adf4-4051950d210b",
                "url--560ba15d-c988-4564-adf4-4051950d210b",
                "indicator--560ba15d-381c-4413-bc86-4047950d210b",
                "indicator--560ba15d-2978-4e16-9ace-4085950d210b",
                "indicator--560ba15d-f564-4eb0-a92c-4e82950d210b",
                "indicator--560ba15d-3278-404f-9fd1-4d9b950d210b",
                "indicator--560ba15d-c838-4ca1-b26c-40d0950d210b",
                "indicator--560ba15d-7690-4659-973b-45ec950d210b",
                "indicator--560ba15d-7670-494c-b0d8-474b950d210b",
                "observed-data--560ba15e-015c-4d90-b5aa-40c6950d210b",
                "url--560ba15e-015c-4d90-b5aa-40c6950d210b",
                "indicator--560ba15e-8188-4bdb-a2b6-4500950d210b",
                "indicator--560ba15e-c058-4e97-9faf-49ae950d210b",
                "indicator--560ba15e-7c88-4d73-b1ff-4b31950d210b",
                "indicator--560ba15e-d404-431a-b184-4318950d210b",
                "indicator--560ba15e-d118-4673-b7e1-49ee950d210b",
                "indicator--560ba15e-7074-424a-8d45-4a35950d210b",
                "indicator--560ba15e-ca58-415e-9be9-43b2950d210b",
                "observed-data--560ba15e-c764-480f-981b-4213950d210b",
                "url--560ba15e-c764-480f-981b-4213950d210b",
                "indicator--560ba15e-24fc-4de1-81ee-47d2950d210b",
                "indicator--560ba15e-cfd0-41a0-a2de-460b950d210b",
                "indicator--560ba15e-5798-4167-a582-4179950d210b",
                "indicator--560ba15f-438c-4764-adba-44d3950d210b",
                "indicator--560ba15f-4da8-4c29-b003-443f950d210b",
                "indicator--560ba15f-83d4-46e1-bb23-4ffa950d210b",
                "indicator--560ba15f-86f8-41e8-a524-474a950d210b",
                "observed-data--560ba15f-f114-4b78-bd8f-43aa950d210b",
                "url--560ba15f-f114-4b78-bd8f-43aa950d210b",
                "indicator--560ba15f-f894-483b-9db0-41df950d210b",
                "indicator--560ba15f-fd88-44d3-93b7-47ac950d210b",
                "indicator--560ba15f-3490-46aa-a618-4807950d210b",
                "indicator--560ba15f-6e80-4e86-b95a-4852950d210b",
                "indicator--560ba160-79dc-4223-b3ef-4c04950d210b",
                "indicator--560ba160-2600-46b4-8835-4747950d210b",
                "indicator--560ba160-fe3c-4be9-a92d-4405950d210b",
                "indicator--560ba160-ada8-43c6-afc9-49ea950d210b",
                "indicator--560ba160-72f0-49a1-b21a-45e8950d210b",
                "indicator--560ba160-106c-4d20-95a3-4efc950d210b",
                "observed-data--560ba160-5630-43cf-a0be-4003950d210b",
                "url--560ba160-5630-43cf-a0be-4003950d210b",
                "indicator--560ba160-7de8-414c-a972-434c950d210b",
                "indicator--560ba160-42f4-4ec6-bd18-4125950d210b",
                "indicator--560ba161-7ddc-4585-9938-4ae9950d210b",
                "indicator--560ba160-f6e0-4394-90c7-4359950d210b",
                "indicator--560ba161-d63c-45f0-a0be-4242950d210b",
                "indicator--560ba161-c574-41ff-9034-418c950d210b",
                "indicator--560ba161-5740-4d62-a5c6-4af2950d210b",
                "indicator--560ba161-799c-4c1e-8817-46b2950d210b",
                "observed-data--560ba161-aea8-4df8-9afb-4adf950d210b",
                "url--560ba161-aea8-4df8-9afb-4adf950d210b",
                "indicator--560ba161-db14-47c7-a59d-462f950d210b",
                "indicator--560ba161-07a8-46bb-a015-4e41950d210b",
                "indicator--560ba161-60a0-4fb7-bbbd-4c22950d210b",
                "indicator--560ba161-5a9c-4102-b9e1-4eda950d210b",
                "observed-data--560ba162-fcac-41a3-8150-4dae950d210b",
                "url--560ba162-fcac-41a3-8150-4dae950d210b",
                "indicator--560ba162-e188-47f3-bccb-485a950d210b",
                "indicator--560ba162-bbb0-499e-8e54-4b14950d210b",
                "indicator--560ba162-0fa4-4693-bf00-4d59950d210b",
                "indicator--560ba162-5fac-4c97-96bf-45e2950d210b",
                "indicator--560ba162-b7bc-4c2c-bb7f-43da950d210b",
                "indicator--560ba162-13e8-44a7-a3d8-401e950d210b",
                "indicator--560ba162-7460-4442-86db-4980950d210b",
                "indicator--560ba162-1e3c-46f0-9ee5-4a64950d210b",
                "indicator--560ba163-de98-42bd-a583-4f1f950d210b",
                "indicator--560ba162-0210-4bb6-808b-42ea950d210b",
                "indicator--560ba163-0910-4841-a9d3-437b950d210b",
                "observed-data--560ba163-04fc-4c91-8862-4377950d210b",
                "url--560ba163-04fc-4c91-8862-4377950d210b",
                "indicator--560ba163-be30-4005-96f6-4dd8950d210b",
                "indicator--560ba163-8744-4bc3-ab69-42db950d210b",
                "indicator--560ba163-66a8-4d67-af04-4655950d210b",
                "indicator--560ba163-c644-41f5-9ad9-4355950d210b",
                "indicator--560ba163-81a0-4fa1-a9c7-4a60950d210b",
                "indicator--560ba163-5054-4ae3-863f-4471950d210b",
                "indicator--560ba163-a540-47fa-bb04-472c950d210b",
                "observed-data--560ba163-5700-4a8f-95b0-4657950d210b",
                "url--560ba163-5700-4a8f-95b0-4657950d210b",
                "indicator--560ba164-1418-436e-ad67-4dc8950d210b",
                "indicator--560ba164-d738-44b9-85bf-4fce950d210b",
                "indicator--560ba164-dee4-4f41-83ee-4621950d210b",
                "indicator--560ba164-d12c-48ec-b78f-43a3950d210b",
                "indicator--560ba164-2918-4912-9d05-4fbc950d210b",
                "indicator--560ba164-a100-4e65-949f-4c7f950d210b",
                "indicator--560ba164-d898-45e0-888f-4bf4950d210b",
                "indicator--560ba164-1538-4930-a833-4c80950d210b",
                "indicator--560ba164-5ac0-425a-9285-4d5a950d210b",
                "indicator--560ba165-51e4-42a1-823e-4254950d210b",
                "indicator--560ba165-3514-4c81-a443-4682950d210b",
                "observed-data--560ba165-1cf0-4b75-917c-430c950d210b",
                "url--560ba165-1cf0-4b75-917c-430c950d210b",
                "indicator--560ba165-0b84-48ce-9238-4640950d210b",
                "indicator--560ba165-095c-44e0-84b0-433c950d210b",
                "indicator--560ba165-16a8-4d9a-937c-4ada950d210b",
                "indicator--560ba165-1bcc-4276-bcab-45aa950d210b",
                "indicator--560ba165-c174-4f19-890c-4624950d210b",
                "indicator--560ba166-c5a8-4a2c-96ec-44a8950d210b",
                "indicator--560ba165-ebe4-4413-a87d-4a06950d210b",
                "indicator--560ba166-8cf4-411c-9bc1-46a5950d210b",
                "observed-data--560ba166-3550-45cc-b2f9-4006950d210b",
                "url--560ba166-3550-45cc-b2f9-4006950d210b",
                "indicator--560ba166-d6a0-45f5-a7c2-4d4e950d210b",
                "indicator--560ba166-a118-4d75-90ec-4a2c950d210b",
                "indicator--560ba166-5dd0-4145-aa19-4cdf950d210b",
                "indicator--560ba166-00c0-4f1d-aa58-42bb950d210b",
                "observed-data--560ba166-8dc4-4397-ac4f-4028950d210b",
                "url--560ba166-8dc4-4397-ac4f-4028950d210b",
                "indicator--560ba166-cb4c-4b2d-b6bc-4b80950d210b",
                "indicator--560ba166-0ef8-4f6d-b328-4c2f950d210b",
                "indicator--560ba167-cae4-4df5-804d-4f0f950d210b",
                "indicator--560ba167-0abc-457a-b86c-435d950d210b",
                "indicator--560ba167-1428-488e-ab8d-453a950d210b",
                "indicator--560ba167-39ac-4de5-b75c-4db0950d210b",
                "observed-data--560ba167-1e98-4ce6-91b8-422d950d210b",
                "url--560ba167-1e98-4ce6-91b8-422d950d210b",
                "indicator--560ba167-d810-4585-b49e-4edc950d210b",
                "indicator--560ba167-2bb4-4ede-b4f4-445a950d210b",
                "indicator--560ba167-ca2c-49e6-80f3-4c9f950d210b",
                "indicator--560ba167-e6d8-4266-b105-4893950d210b",
                "indicator--560ba168-93d8-4d25-b365-4f16950d210b",
                "indicator--560ba167-cb54-4d17-9a50-47b1950d210b",
                "observed-data--560ba168-3770-4165-a31a-4535950d210b",
                "url--560ba168-3770-4165-a31a-4535950d210b",
                "indicator--560ba168-ff54-44a4-b4f4-49cf950d210b",
                "indicator--560ba168-cd38-4966-b2f5-4839950d210b",
                "indicator--560ba168-abe0-4b4e-b519-407d950d210b",
                "indicator--560ba168-a0d0-4935-8c97-45f4950d210b",
                "indicator--560ba168-07bc-4b2c-9a67-461e950d210b",
                "indicator--560ba168-ad90-401e-977f-4655950d210b",
                "indicator--560ba168-5458-4bd0-9541-4165950d210b",
                "indicator--560ba168-ac70-405e-88c3-49e9950d210b",
                "indicator--560ba169-96f4-4b30-adab-4ea1950d210b",
                "indicator--560ba169-2be0-47e0-b72f-48cd950d210b",
                "indicator--560ba169-f684-4a6f-bb74-4eec950d210b",
                "observed-data--560ba169-94fc-41f3-9600-4976950d210b",
                "url--560ba169-94fc-41f3-9600-4976950d210b",
                "indicator--560ba169-4720-4611-a2b7-44f5950d210b",
                "indicator--560ba169-13d8-4c31-942e-483a950d210b",
                "indicator--560ba169-9cf8-48d7-8bfb-4e0a950d210b",
                "indicator--560ba169-b3f8-46bb-8b99-45b1950d210b",
                "indicator--560ba169-96d4-4918-a3a7-47b1950d210b",
                "indicator--560ba169-1020-4b04-a70e-4a8c950d210b",
                "indicator--560ba16a-3e24-443b-afd5-4cbd950d210b",
                "indicator--560ba16a-df34-4ec6-b7f7-4863950d210b",
                "indicator--560ba16a-ea14-46c7-aae0-41ca950d210b",
                "observed-data--560ba16a-dfd0-44b3-8715-492d950d210b",
                "url--560ba16a-dfd0-44b3-8715-492d950d210b",
                "indicator--560ba16a-73f0-497a-b311-4f72950d210b",
                "indicator--560ba16a-0d78-4a3e-b7c3-47c8950d210b",
                "indicator--560ba16a-7054-4587-ab17-4fb0950d210b",
                "indicator--560ba16a-ac40-4b35-a7de-4244950d210b",
                "indicator--560ba16a-5604-4c78-ad24-4746950d210b",
                "indicator--560ba16a-06c4-42f9-a20a-4d3b950d210b",
                "indicator--560ba16b-e324-401d-9224-4433950d210b",
                "indicator--560ba16b-9dd8-4bda-b8b4-4d0d950d210b",
                "indicator--560ba16b-3898-4728-8ce1-44e0950d210b",
                "observed-data--560ba16b-ee48-4474-b90e-4f5d950d210b",
                "url--560ba16b-ee48-4474-b90e-4f5d950d210b",
                "indicator--560ba16b-39bc-4b91-9970-4378950d210b",
                "indicator--560ba16b-10a4-4c13-8995-49af950d210b",
                "indicator--560ba16b-d910-4091-b13d-441b950d210b",
                "indicator--560ba16b-14ec-47b1-954b-4212950d210b",
                "indicator--560ba16b-c0c8-4106-b8c4-4ea3950d210b",
                "indicator--560ba16c-84c8-4f3d-99a8-40e7950d210b",
                "indicator--560ba16b-3a18-45ee-b379-4d7f950d210b",
                "indicator--560ba16c-ad98-401c-af93-4dbe950d210b",
                "indicator--560ba16c-7a74-441b-9952-4c3e950d210b",
                "indicator--560ba16c-c72c-4e51-8558-4315950d210b",
                "indicator--560ba16c-8354-46a8-8cd5-49c1950d210b",
                "observed-data--560ba16c-5f34-4080-b15d-4a03950d210b",
                "url--560ba16c-5f34-4080-b15d-4a03950d210b",
                "indicator--560ba16c-3e8c-4a33-bcc8-45a1950d210b",
                "indicator--560ba16c-6338-46f7-b721-4272950d210b",
                "indicator--560ba16c-9214-4967-ae61-46f5950d210b",
                "indicator--560ba16c-e3d0-498f-8768-42df950d210b",
                "indicator--560ba16d-1a7c-43f0-9ac2-42cd950d210b",
                "indicator--560ba16d-0174-43c0-99bf-4548950d210b",
                "indicator--560ba16d-ffb4-49cf-ab4b-42fe950d210b",
                "indicator--560ba16d-7240-467d-a5d6-4acb950d210b",
                "observed-data--560ba16d-7778-414f-a327-4e84950d210b",
                "url--560ba16d-7778-414f-a327-4e84950d210b",
                "indicator--560ba16d-11b0-44c0-ae67-47fd950d210b",
                "indicator--560ba16d-52c0-4171-be96-4d39950d210b",
                "indicator--560ba16d-dc84-45b0-87b7-40c1950d210b",
                "indicator--560ba16e-fd08-46ae-b358-4012950d210b",
                "indicator--560ba16d-2ae0-41bf-a030-4a37950d210b",
                "indicator--560ba16e-2824-4079-89ce-46ef950d210b",
                "observed-data--560ba16e-c088-4e78-93f4-4c70950d210b",
                "url--560ba16e-c088-4e78-93f4-4c70950d210b",
                "indicator--560ba16e-d658-48c0-bce9-4d85950d210b",
                "indicator--560ba16e-336c-4352-a82d-4d08950d210b",
                "indicator--560ba16e-d77c-47ba-a49e-44d0950d210b",
                "indicator--560ba16e-ad54-4aa5-92f2-4926950d210b",
                "indicator--560ba16e-d150-43ff-b9a1-413c950d210b",
                "indicator--560ba16e-3fe8-4458-9e99-40d5950d210b",
                "indicator--560ba16e-a0e0-4005-895e-4dd9950d210b",
                "indicator--560ba16e-a7dc-4ce1-84da-46a7950d210b",
                "indicator--560ba16f-a610-441e-b94b-4c7e950d210b",
                "indicator--560ba16f-7dc0-4fe1-b13d-4c78950d210b",
                "indicator--560ba16f-0c54-4316-980f-4327950d210b",
                "observed-data--560ba16f-9830-4a82-b1df-4e00950d210b",
                "url--560ba16f-9830-4a82-b1df-4e00950d210b",
                "indicator--560ba16f-27b8-43e4-846b-497a950d210b",
                "indicator--560ba16f-1e9c-49ec-8c6a-42a5950d210b",
                "indicator--560ba16f-594c-4456-b25d-4861950d210b",
                "indicator--560ba16f-13e4-41c3-99f3-414a950d210b",
                "indicator--560ba16f-8160-4155-8837-4f72950d210b",
                "indicator--560ba170-027c-4d8c-8461-4a43950d210b",
                "indicator--560ba16f-d93c-42ef-a586-4c98950d210b",
                "indicator--560ba170-5004-4c4c-8671-4a9f950d210b",
                "indicator--560ba170-d9d4-4e02-abae-4214950d210b",
                "observed-data--560ba170-bbd4-4892-802b-419f950d210b",
                "url--560ba170-bbd4-4892-802b-419f950d210b",
                "indicator--560ba170-9040-4788-b9bb-49b4950d210b",
                "indicator--560ba170-539c-45bc-b4cf-4bb4950d210b",
                "indicator--560ba170-6a1c-4690-8abf-4f84950d210b",
                "indicator--560ba170-c09c-4b78-a98c-48db950d210b",
                "indicator--560ba170-56b4-489e-9f5e-4d0a950d210b",
                "indicator--560ba171-2c88-497e-a296-4e9e950d210b",
                "indicator--560ba171-5690-4f1c-ad44-4cc7950d210b",
                "indicator--560ba171-9c54-46c0-91ee-4f19950d210b",
                "indicator--560ba171-fd98-4939-af6b-4ab5950d210b",
                "indicator--560ba171-4e8c-4da5-8902-442c950d210b",
                "indicator--560ba171-ef7c-485c-93a9-48e9950d210b",
                "observed-data--560ba171-6548-4867-90bc-4f1c950d210b",
                "url--560ba171-6548-4867-90bc-4f1c950d210b",
                "indicator--560ba171-0468-4225-a777-4be4950d210b",
                "indicator--560ba171-b5cc-4bbd-bb41-4fa0950d210b",
                "indicator--560ba171-3bf8-4cbc-8b98-4169950d210b",
                "indicator--560ba171-a714-46ad-90c4-417b950d210b",
                "indicator--560ba172-8638-495b-bafe-49bf950d210b",
                "indicator--560ba172-b3e0-4ca3-a2ee-48fb950d210b",
                "indicator--560ba172-c598-4b37-8717-4794950d210b",
                "indicator--560ba172-0844-4aa2-939a-463b950d210b",
                "indicator--560ba172-c598-452c-9bb0-41b6950d210b",
                "indicator--560ba172-4b20-4c1e-9309-42cc950d210b",
                "indicator--560ba172-82d4-49a2-b188-489f950d210b",
                "observed-data--560ba172-fa74-49e6-9b34-4822950d210b",
                "url--560ba172-fa74-49e6-9b34-4822950d210b",
                "indicator--560ba172-82d4-4b59-996f-433d950d210b",
                "indicator--560ba172-d9c4-4747-95a1-42f5950d210b",
                "indicator--560ba173-8c34-4f95-a45b-48b8950d210b",
                "indicator--560ba173-20bc-40cb-8cb7-4708950d210b",
                "indicator--560ba173-c058-4a4e-b3e3-43f5950d210b",
                "indicator--560ba173-8c34-471f-a87c-4bc8950d210b",
                "indicator--560ba173-ae14-4e13-a737-4b86950d210b",
                "indicator--560ba173-05ac-4ba4-b800-45fa950d210b",
                "indicator--560ba173-adb0-4561-b241-46b1950d210b",
                "indicator--560ba173-4ce4-4ef8-bd12-4acc950d210b",
                "indicator--560ba173-b73c-42b5-9dab-489f950d210b",
                "observed-data--560ba173-2e38-4058-b4b8-42d1950d210b",
                "url--560ba173-2e38-4058-b4b8-42d1950d210b",
                "indicator--560ba173-ef18-4246-8cdd-4523950d210b",
                "indicator--560ba174-6ea8-495e-acd9-4390950d210b",
                "indicator--560ba174-0708-4446-9b47-4e36950d210b",
                "indicator--560ba174-924c-4a47-a6f1-450a950d210b",
                "indicator--560ba174-0708-4d88-a0f9-4e2d950d210b",
                "indicator--560ba174-9ac4-4d92-bc98-4b91950d210b",
                "indicator--560ba174-4088-4bca-be9e-4a99950d210b",
                "indicator--560ba174-1bc4-4e42-b12a-4623950d210b",
                "indicator--560ba174-49e8-4919-9fef-471d950d210b",
                "indicator--560ba174-7cc4-458e-a25c-4aa0950d210b",
                "indicator--560ba175-a098-4490-9ef4-4d18950d210b",
                "observed-data--560ba175-a7e4-44e8-9e7a-4c73950d210b",
                "url--560ba175-a7e4-44e8-9e7a-4c73950d210b",
                "indicator--560ba175-95a8-4060-9c92-4f52950d210b",
                "indicator--560ba175-bea4-4781-ac46-42b6950d210b",
                "indicator--560ba175-6050-4cbd-b258-40e1950d210b",
                "indicator--560ba175-2d18-401d-b1ad-4e83950d210b",
                "indicator--560ba175-6564-4918-8218-4c10950d210b",
                "indicator--560ba175-9d14-491e-a251-4980950d210b",
                "indicator--560ba176-6658-41ff-9fe3-4d71950d210b",
                "indicator--560ba175-3538-4097-936d-4d61950d210b",
                "indicator--560ba176-6658-4d32-8b0d-42b9950d210b",
                "indicator--560ba176-4d40-49f5-af34-478e950d210b",
                "indicator--560ba176-11b8-43d1-a8a4-4a0d950d210b",
                "observed-data--560ba176-ae10-470c-94b2-48ed950d210b",
                "url--560ba176-ae10-470c-94b2-48ed950d210b",
                "indicator--560ba176-7428-4a36-968c-4052950d210b",
                "indicator--560ba176-1784-4104-98bf-420e950d210b",
                "indicator--560ba176-d328-4d5e-93ee-4abd950d210b",
                "indicator--560ba176-2e84-4902-9bbb-4f8c950d210b",
                "indicator--560ba176-aa88-4b59-897d-4372950d210b",
                "indicator--560ba176-1e3c-4234-8f51-4a0a950d210b",
                "indicator--560ba177-2cdc-4559-9830-4b05950d210b",
                "indicator--560ba177-b6c4-499f-9f15-4e70950d210b",
                "indicator--560ba177-8274-4759-9f65-44cb950d210b",
                "indicator--560ba177-68d0-4a05-bb17-46a6950d210b",
                "indicator--560ba177-c714-4f74-9a38-45c1950d210b",
                "observed-data--560ba177-18d0-4bf5-ab11-4ece950d210b",
                "url--560ba177-18d0-4bf5-ab11-4ece950d210b",
                "indicator--560ba177-c714-4214-a1cb-46cc950d210b",
                "indicator--560ba177-76c4-4839-b0cd-4027950d210b",
                "indicator--560ba177-3c58-4583-9e9f-47dd950d210b",
                "indicator--560ba178-8510-4b0d-b987-4858950d210b",
                "indicator--560ba177-0c34-4ba6-ac61-41d9950d210b",
                "observed-data--560ba178-ea9c-45f1-96d5-4d03950d210b",
                "url--560ba178-ea9c-45f1-96d5-4d03950d210b",
                "indicator--560ba178-3f78-4e88-b5c0-43e1950d210b",
                "indicator--560ba178-07e8-4593-b2f6-4749950d210b",
                "indicator--560ba178-4060-4ace-a91d-4a14950d210b",
                "indicator--560ba178-dab0-400e-95dd-431f950d210b",
                "indicator--560ba178-d7cc-4ece-aad6-4dd7950d210b",
                "observed-data--560ba178-7a0c-4d4b-97fb-4f25950d210b",
                "url--560ba178-7a0c-4d4b-97fb-4f25950d210b",
                "indicator--560ba178-9324-4e72-9ecb-46a6950d210b",
                "indicator--560ba179-adac-4133-8691-43a7950d210b",
                "indicator--560ba179-315c-451a-87a5-4861950d210b",
                "indicator--560ba179-581c-42a6-aed0-49a2950d210b",
                "indicator--560ba179-2760-49b7-a0eb-4218950d210b",
                "observed-data--560ba179-b4f4-47fb-8774-4543950d210b",
                "url--560ba179-b4f4-47fb-8774-4543950d210b",
                "indicator--560ba179-9628-425b-8694-4da6950d210b",
                "indicator--560ba179-4410-418b-824d-40d9950d210b",
                "indicator--560ba179-c290-4eda-abe3-4fa2950d210b",
                "indicator--560ba179-1270-4c9e-9b80-4422950d210b",
                "indicator--560ba179-c148-418e-90c2-4f4f950d210b",
                "observed-data--560ba17a-cbf8-4ccb-b739-43fe950d210b",
                "url--560ba17a-cbf8-4ccb-b739-43fe950d210b",
                "indicator--560ba17a-d2f4-4bab-a395-4284950d210b",
                "indicator--560ba17a-dd4c-4eb0-9840-4887950d210b",
                "indicator--560ba17a-0578-4107-bec3-42bb950d210b",
                "indicator--560ba17a-ac10-4114-8d95-43db950d210b",
                "indicator--560ba17a-ba9c-4143-a06a-4808950d210b",
                "observed-data--560ba17a-76c8-444e-9a5a-440c950d210b",
                "url--560ba17a-76c8-444e-9a5a-440c950d210b",
                "indicator--560ba17a-f50c-4eb4-b22d-408d950d210b",
                "indicator--560ba17b-fec4-4eb7-b841-48f4950d210b",
                "indicator--560ba17a-9df0-4a3b-bca8-48f1950d210b",
                "indicator--560ba17b-5d00-46e7-9b3b-4b19950d210b",
                "indicator--560ba17b-5b48-4b3a-a6eb-4126950d210b",
                "observed-data--560ba17b-ab40-4edc-9302-4875950d210b",
                "url--560ba17b-ab40-4edc-9302-4875950d210b",
                "indicator--560ba17b-faa4-43d0-8077-4a04950d210b",
                "indicator--560ba17b-e020-4388-a0d0-490b950d210b",
                "indicator--560ba17b-40f0-4610-8b8e-4772950d210b",
                "indicator--560ba17b-0b6c-4291-89eb-4c0d950d210b",
                "indicator--560ba17b-9eec-40bb-8a1c-4ca0950d210b",
                "observed-data--560ba17c-6494-4a2f-a5a3-448a950d210b",
                "url--560ba17c-6494-4a2f-a5a3-448a950d210b",
                "indicator--560ba17b-97d8-4508-b4fb-4895950d210b",
                "indicator--560ba17c-644c-4859-876f-4e02950d210b",
                "indicator--560ba17c-9644-4a1f-b853-415b950d210b",
                "indicator--560ba17c-2924-4dc6-8c90-4f7c950d210b",
                "indicator--560ba17c-f71c-409c-95d5-4d84950d210b",
                "observed-data--560ba17c-4b80-4ae5-ab20-4bcd950d210b",
                "url--560ba17c-4b80-4ae5-ab20-4bcd950d210b",
                "indicator--560ba17c-5150-4282-be71-4c84950d210b",
                "indicator--560ba17c-6e20-4c12-9b7b-461e950d210b",
                "indicator--560ba17c-5424-47b6-b993-46b5950d210b",
                "indicator--560ba17d-2d20-48f5-be59-472e950d210b",
                "indicator--560ba17d-e25c-4e49-9ccf-4c54950d210b",
                "observed-data--560ba17d-d61c-47a8-9dfa-4908950d210b",
                "url--560ba17d-d61c-47a8-9dfa-4908950d210b",
                "indicator--560ba17d-f300-4538-99a8-451f950d210b",
                "indicator--560ba17d-6608-4ff6-b1f7-4d4f950d210b",
                "indicator--560ba17d-f8d8-4977-b8cb-4460950d210b",
                "indicator--560ba17d-72a0-4e9f-9585-4a98950d210b",
                "indicator--560ba17d-0238-4784-80a0-49d0950d210b",
                "observed-data--560ba17e-5e94-4335-8901-4cf4950d210b",
                "url--560ba17e-5e94-4335-8901-4cf4950d210b",
                "indicator--560ba17d-1aac-4cdd-929a-497d950d210b",
                "indicator--560ba17e-81a0-4446-a941-4ed9950d210b",
                "indicator--560ba17e-a7d0-412e-bb92-4535950d210b",
                "indicator--560ba17e-b1f0-4911-ac04-4500950d210b",
                "indicator--560ba17e-74b4-484a-abd9-47a2950d210b",
                "observed-data--560ba17e-fd64-48b7-a774-45bc950d210b",
                "url--560ba17e-fd64-48b7-a774-45bc950d210b",
                "indicator--560ba17e-1eb0-4f21-b259-445e950d210b",
                "indicator--560ba17e-cc9c-4dc3-a589-4cbc950d210b",
                "indicator--560ba17e-0104-4bc8-80e8-476c950d210b",
                "indicator--560ba17e-2740-4ba4-8be6-4487950d210b",
                "indicator--560ba17f-5818-4800-8104-41cc950d210b",
                "indicator--560ba17e-0104-4c4f-ae67-4075950d210b",
                "indicator--560ba17f-3fec-41f6-b1f0-464e950d210b",
                "indicator--560ba17f-9a14-4218-a886-425b950d210b",
                "indicator--560ba17f-7da0-441a-a23c-4ee8950d210b",
                "indicator--560ba17f-e490-475f-ba42-4326950d210b",
                "indicator--560ba17f-e4a0-4aee-a529-4310950d210b",
                "observed-data--560ba17f-90b4-4d22-8776-4889950d210b",
                "url--560ba17f-90b4-4d22-8776-4889950d210b",
                "indicator--560ba17f-91b0-4fa4-aebe-4fbd950d210b",
                "indicator--560ba17f-ffa8-45d7-b1e4-48ec950d210b",
                "indicator--560ba180-eac8-4901-b281-4507950d210b",
                "indicator--560ba180-7078-45bf-972e-4ccf950d210b",
                "indicator--560ba180-e094-4480-a427-40ac950d210b",
                "indicator--560ba180-56e4-47bc-8649-47dd950d210b",
                "indicator--560ba180-3658-4139-8fee-4bf4950d210b",
                "indicator--560ba180-b2e8-49e0-8ee6-49ce950d210b",
                "indicator--560ba180-27d8-4037-b171-4fc2950d210b",
                "indicator--560ba180-9c3c-48e8-b028-458f950d210b",
                "indicator--560ba180-d32c-41f0-b501-4ed3950d210b",
                "observed-data--560ba180-e560-4692-ba06-4d17950d210b",
                "url--560ba180-e560-4692-ba06-4d17950d210b",
                "indicator--560ba181-7cf8-4d6e-8613-4fc5950d210b",
                "indicator--560ba181-c8b4-43ec-a48a-4535950d210b",
                "indicator--560ba181-6ab4-4521-bb8e-4858950d210b",
                "indicator--560ba181-540c-4bd6-8e76-4e1f950d210b",
                "indicator--560ba181-e178-45ac-9334-49bc950d210b",
                "indicator--560ba181-1948-4081-b10b-40f2950d210b",
                "indicator--560ba181-65a0-4f13-90ce-417f950d210b",
                "indicator--560ba181-1bc0-40dd-93be-4990950d210b",
                "indicator--560ba182-cf14-457d-b0f3-47cd950d210b",
                "indicator--560ba181-d9b8-4db7-b383-4d1b950d210b",
                "indicator--560ba182-7700-4fa8-a3fe-44f3950d210b",
                "observed-data--560ba182-0f54-43ae-a8ee-49d1950d210b",
                "url--560ba182-0f54-43ae-a8ee-49d1950d210b",
                "indicator--560ba182-b240-4a2f-be6b-4ccc950d210b",
                "indicator--560ba182-e308-4903-869a-4051950d210b",
                "indicator--560ba182-ca38-4bc4-b73a-4c29950d210b",
                "indicator--560ba182-8228-4468-8cc3-487e950d210b",
                "indicator--560ba182-ceac-4632-a577-4384950d210b",
                "indicator--560ba182-a4cc-40f6-b2b0-4c20950d210b",
                "indicator--560ba183-f890-436a-b455-42df950d210b",
                "indicator--560ba183-e930-4b5a-87a9-4cc1950d210b",
                "indicator--560ba183-01dc-4521-8493-4453950d210b",
                "indicator--560ba183-bf30-49f9-8e23-4b0e950d210b",
                "indicator--560ba183-6d3c-44e8-acc8-4416950d210b",
                "observed-data--560ba183-5ff0-4a23-b45b-495b950d210b",
                "url--560ba183-5ff0-4a23-b45b-495b950d210b",
                "indicator--560ba183-4820-49db-9e52-4d19950d210b",
                "indicator--560ba183-f2e0-4704-8f4a-4812950d210b",
                "indicator--560ba184-f414-4852-b92d-42cb950d210b",
                "indicator--560ba183-234c-4561-9464-4b9f950d210b",
                "indicator--560ba184-fab8-4991-a4d8-4565950d210b",
                "indicator--560ba184-6a84-4a5c-8654-4eb3950d210b",
                "indicator--560ba184-0e2c-4aed-b99a-4750950d210b",
                "indicator--560ba184-3bf8-4172-8918-42d2950d210b",
                "indicator--560ba184-0e2c-46f7-aff8-40cf950d210b",
                "indicator--560ba184-3508-46cc-b7fe-4b42950d210b",
                "indicator--560ba184-af04-4cb2-8da0-45ee950d210b",
                "observed-data--560ba184-2b0c-4b98-951b-4347950d210b",
                "url--560ba184-2b0c-4b98-951b-4347950d210b",
                "indicator--560ba184-9b18-42e7-8981-4055950d210b",
                "indicator--560ba184-ac1c-4483-9e71-4d9a950d210b",
                "indicator--560ba185-96dc-4ca6-986a-4bff950d210b",
                "indicator--560ba185-4a40-4b42-a0ba-4869950d210b",
                "indicator--560ba185-e0b0-42e9-b035-4b98950d210b",
                "indicator--560ba185-e184-4ada-8b7b-487d950d210b",
                "indicator--560ba185-f880-4d33-a3f7-454f950d210b",
                "indicator--560ba185-5130-46bb-8ee8-40ed950d210b",
                "indicator--560ba185-fdf8-4692-8489-4dd1950d210b",
                "indicator--560ba185-8014-4d61-8363-434e950d210b",
                "indicator--560ba186-4218-402d-8375-42a1950d210b",
                "observed-data--560ba185-77f4-4419-a058-4c92950d210b",
                "url--560ba185-77f4-4419-a058-4c92950d210b",
                "indicator--560ba186-5668-46c8-b483-4676950d210b",
                "indicator--560ba186-2c60-4a08-9b61-42c6950d210b",
                "indicator--560ba186-3b1c-4b66-8d4b-4822950d210b",
                "indicator--560ba186-0358-4222-aff1-4186950d210b",
                "indicator--560ba186-36d0-4607-bbbf-4b08950d210b",
                "indicator--560ba186-6dd4-40bd-aaf8-4c64950d210b",
                "indicator--560ba186-d0c8-4c51-a604-4328950d210b",
                "indicator--560ba186-a714-441f-a020-4a1d950d210b",
                "indicator--560ba186-e644-400e-afb4-4b04950d210b",
                "indicator--560ba187-6aa0-4727-804a-45d1950d210b",
                "indicator--560ba187-6a38-42cb-a487-4341950d210b",
                "observed-data--560ba187-a22c-4dfe-aa18-4949950d210b",
                "url--560ba187-a22c-4dfe-aa18-4949950d210b",
                "indicator--560ba187-6f4c-4325-8ac1-480d950d210b",
                "indicator--560ba187-fc88-4231-9602-4534950d210b",
                "indicator--560ba187-d688-48b2-bf44-4709950d210b",
                "indicator--560ba187-3a60-46c5-82c1-48d6950d210b",
                "indicator--560ba187-d688-42ba-8dc5-4843950d210b",
                "indicator--560ba187-dd40-483d-9f02-4477950d210b",
                "indicator--560ba187-c224-4ce6-bdf5-4b6d950d210b",
                "indicator--560ba187-a01c-4bdf-9e23-47d1950d210b",
                "indicator--560ba187-c224-44dc-a2e6-40b2950d210b",
                "indicator--560ba188-1bec-49e3-b6c9-401e950d210b",
                "indicator--560ba188-a2a8-4067-aa68-4912950d210b",
                "observed-data--560ba188-6184-4064-81a7-4df4950d210b",
                "url--560ba188-6184-4064-81a7-4df4950d210b",
                "indicator--560ba188-7cc4-45ef-810b-4f38950d210b",
                "indicator--560ba188-b704-480c-b7b5-4048950d210b",
                "indicator--560ba188-ddb0-4f7a-beee-4338950d210b",
                "indicator--560ba188-bf18-4196-915e-4f40950d210b",
                "indicator--560ba188-ac44-42bc-a56a-4718950d210b",
                "indicator--560ba188-8694-4764-86ba-4b46950d210b",
                "indicator--560ba189-f84c-4e50-b46c-482a950d210b",
                "indicator--560ba189-6af0-4e41-adb4-4eec950d210b",
                "indicator--560ba189-87bc-45a7-891e-495a950d210b",
                "indicator--560ba189-5bb8-4648-b3a7-49a2950d210b",
                "indicator--560ba189-8fdc-4b8f-9af0-4dd3950d210b",
                "observed-data--560ba189-8c70-4467-ae78-46a5950d210b",
                "url--560ba189-8c70-4467-ae78-46a5950d210b",
                "indicator--560ba189-a814-46a0-bf28-406c950d210b",
                "indicator--560ba189-d538-47b4-8880-4cb6950d210b",
                "indicator--560ba189-103c-4c72-887b-4447950d210b",
                "indicator--560ba189-fe1c-4ade-9e18-4a09950d210b",
                "indicator--560ba189-e7a4-49f2-9ac3-4200950d210b",
                "indicator--560ba18a-1894-48d4-98b7-441b950d210b",
                "indicator--560ba18a-7088-4b79-a8e1-45c3950d210b",
                "indicator--560ba18a-208c-4b10-a44a-41c9950d210b",
                "indicator--560ba18a-9040-452d-b661-46ab950d210b",
                "indicator--560ba18a-f274-4622-b537-49c8950d210b",
                "indicator--560ba18a-4894-43eb-a889-4b4d950d210b",
                "observed-data--560ba18a-45f0-4f80-b865-4d4a950d210b",
                "url--560ba18a-45f0-4f80-b865-4d4a950d210b",
                "indicator--560ba18a-4894-4d64-9cee-4ef0950d210b",
                "indicator--560ba18a-4690-446f-a25a-444b950d210b",
                "indicator--560ba18b-63a4-49f6-b411-4a2a950d210b",
                "indicator--560ba18b-c074-4fcf-88d3-48fa950d210b",
                "indicator--560ba18b-821c-4066-925c-4511950d210b",
                "indicator--560ba18b-61d8-4dc1-9b40-486c950d210b",
                "indicator--560ba18b-1e30-48d1-b59e-4933950d210b",
                "indicator--560ba18b-04ac-45f0-bb6b-465b950d210b",
                "indicator--560ba18b-2c4c-4791-80af-4576950d210b",
                "indicator--560ba18b-fa28-4afd-86a9-4e4a950d210b",
                "indicator--560ba18c-fbb4-466d-b9a8-451e950d210b",
                "observed-data--560ba18b-0e04-4217-870c-4544950d210b",
                "url--560ba18b-0e04-4217-870c-4544950d210b",
                "indicator--560ba18c-55b0-49d1-b196-472e950d210b",
                "indicator--560ba18c-7e00-4d7e-afbd-4ca7950d210b",
                "indicator--560ba18c-c92c-4c8b-be14-463c950d210b",
                "indicator--560ba18c-7524-40b1-a45c-4261950d210b",
                "indicator--560ba18c-c92c-4a42-8e98-4d05950d210b",
                "indicator--560ba18c-1914-4c1c-8a30-4d66950d210b",
                "indicator--560ba18c-ce08-4fe3-a672-4a87950d210b",
                "indicator--560ba18c-aab8-44b3-8a97-46bb950d210b",
                "indicator--560ba18c-4e30-4f6d-ac27-4736950d210b",
                "indicator--560ba18d-6ca4-4170-97c6-4abc950d210b",
                "indicator--560ba18d-e54c-4357-9dd9-4420950d210b",
                "observed-data--560ba18d-b170-4a9e-a469-47ec950d210b",
                "url--560ba18d-b170-4a9e-a469-47ec950d210b",
                "indicator--560ba18d-eb28-4867-a356-46cc950d210b",
                "indicator--560ba18d-f580-4dbd-8115-48ff950d210b",
                "indicator--560ba18d-faac-4e4e-a7b0-45a0950d210b",
                "indicator--560ba18d-8214-4321-88e9-4511950d210b",
                "indicator--560ba18d-b958-40a9-97ba-474f950d210b",
                "indicator--560ba18d-4a44-45ac-8153-427c950d210b",
                "indicator--560ba18e-4384-41dc-a2c4-4bf0950d210b",
                "indicator--560ba18d-cb8c-45f7-9998-4cdb950d210b",
                "indicator--560ba18e-5450-482e-a6bd-40d9950d210b",
                "indicator--560ba18e-3b78-4f2b-8b74-414a950d210b",
                "indicator--560ba18e-6270-4d00-a07b-48f6950d210b",
                "observed-data--560ba18e-67b0-4da2-a1f6-4928950d210b",
                "url--560ba18e-67b0-4da2-a1f6-4928950d210b",
                "indicator--560ba18e-19b8-4eac-b219-4c51950d210b",
                "indicator--560ba18e-bf6c-4bc7-83cf-4df7950d210b",
                "indicator--560ba18e-30a0-405e-91e5-4f48950d210b",
                "indicator--560ba18e-f894-4f97-aff9-45e9950d210b",
                "indicator--560ba18e-4360-496c-bad6-44a4950d210b",
                "indicator--560ba18f-d034-484a-b96d-46fd950d210b",
                "indicator--560ba18f-dc98-4a25-b2fd-4071950d210b",
                "indicator--560ba18f-e960-4037-b234-4646950d210b",
                "indicator--560ba18f-82b4-41c2-8482-4c4b950d210b",
                "indicator--560ba18f-0a18-45a8-9af5-4dd2950d210b",
                "indicator--560ba18f-5034-4ea2-ac29-4e2b950d210b",
                "observed-data--560ba18f-9fa0-4a83-a4df-4ca0950d210b",
                "url--560ba18f-9fa0-4a83-a4df-4ca0950d210b",
                "indicator--560ba18f-0e9c-44b6-8a5c-4ffc950d210b",
                "indicator--560ba18f-c92c-4468-a7d1-4948950d210b",
                "indicator--560ba190-cf1c-4d06-bbb5-4502950d210b",
                "indicator--560ba18f-5318-4b6c-a0e3-4f30950d210b",
                "indicator--560ba190-ffb8-4dcd-a8ac-43e1950d210b",
                "indicator--560ba190-b250-4b1f-9a07-4e89950d210b",
                "indicator--560ba190-1aa0-4e01-b851-4233950d210b",
                "indicator--560ba190-67d0-4f13-b43d-4e2d950d210b",
                "indicator--560ba190-ba68-46ef-baef-4fc3950d210b",
                "indicator--560ba190-8c44-4f60-b53a-4b09950d210b",
                "indicator--560ba190-b88c-4e5b-9bd2-47e9950d210b",
                "observed-data--560ba190-7870-46da-a54a-45cc950d210b",
                "url--560ba190-7870-46da-a54a-45cc950d210b",
                "indicator--560ba191-4dc0-4491-9d12-4d49950d210b",
                "indicator--560ba191-2f18-46e3-a901-41d2950d210b",
                "indicator--560ba191-da50-42e1-85da-47f0950d210b",
                "indicator--560ba191-33b8-4c6d-9972-42d8950d210b",
                "indicator--560ba191-dc48-492a-8baf-463c950d210b",
                "indicator--560ba191-dd8c-426a-a8c2-4a86950d210b",
                "indicator--560ba191-d940-40bb-b0e4-4842950d210b",
                "indicator--560ba191-6a44-477d-ad28-4511950d210b",
                "indicator--560ba191-c6cc-431f-bb58-4f2e950d210b",
                "indicator--560ba191-e790-45ab-b313-410f950d210b",
                "indicator--560ba192-81a4-40bb-976f-4bb9950d210b",
                "observed-data--560ba192-b358-426b-8e35-439b950d210b",
                "url--560ba192-b358-426b-8e35-439b950d210b",
                "indicator--560ba192-b108-4c10-90d8-4e85950d210b",
                "indicator--560ba192-5bb0-4c10-bd07-4222950d210b",
                "indicator--560ba192-f4d0-42dc-9fb5-418d950d210b",
                "indicator--560ba192-dca8-4013-9c4f-413b950d210b",
                "indicator--560ba192-5784-4584-8c66-4096950d210b",
                "indicator--560ba192-2ed8-4c01-99da-4719950d210b",
                "indicator--560ba193-02fc-4f94-afaa-4c6b950d210b",
                "indicator--560ba192-b8f8-45cf-b7ca-4f2b950d210b",
                "indicator--560ba193-91b8-43fc-94d7-436b950d210b",
                "indicator--560ba193-ed78-4736-b94d-4b27950d210b",
                "indicator--560ba193-09a0-4b05-a8f5-4b88950d210b",
                "observed-data--560ba193-8bf0-41cf-8ff6-4a45950d210b",
                "url--560ba193-8bf0-41cf-8ff6-4a45950d210b",
                "indicator--560ba193-b840-4d0e-aaaf-4fd6950d210b",
                "indicator--560ba193-6284-4671-89fa-4b46950d210b",
                "indicator--560ba193-3914-45cd-a8ca-4ae9950d210b",
                "indicator--560ba193-e8d0-457f-be0f-4d3c950d210b",
                "indicator--560ba194-c1b4-4adf-8c33-4b9d950d210b",
                "indicator--560ba193-827c-4233-bd9d-472b950d210b",
                "indicator--560ba194-9458-453d-8fb2-4877950d210b",
                "indicator--560ba194-cc28-41c7-a923-4795950d210b",
                "indicator--560ba194-61dc-4cc2-a917-4173950d210b",
                "indicator--560ba194-65ac-4c87-95b3-43a4950d210b",
                "indicator--560ba194-1d74-458b-b6be-40d4950d210b",
                "observed-data--560ba194-21bc-49c0-b3fb-4e65950d210b",
                "url--560ba194-21bc-49c0-b3fb-4e65950d210b",
                "indicator--560ba194-31ec-42cd-9906-47f1950d210b",
                "indicator--560ba194-b19c-4198-8ac9-44f8950d210b",
                "indicator--560ba195-e59c-4b09-8ef2-4c98950d210b",
                "indicator--560ba195-0a24-43c4-8be7-48c8950d210b",
                "indicator--560ba195-b54c-4902-b809-44aa950d210b",
                "indicator--560ba195-ae1c-4bbd-b037-48a5950d210b",
                "indicator--560ba195-f9e8-4be9-9ce9-48c5950d210b",
                "indicator--560ba195-7998-407f-9afc-4f0c950d210b",
                "indicator--560ba195-3b0c-4da9-be9b-4635950d210b",
                "indicator--560ba195-42ec-4b97-9280-414f950d210b",
                "indicator--560ba195-0bc4-478d-ada1-40bc950d210b",
                "observed-data--560ba195-878c-45b9-a389-4cfa950d210b",
                "url--560ba195-878c-45b9-a389-4cfa950d210b",
                "indicator--560ba196-1808-41b6-82af-458c950d210b",
                "indicator--560ba196-95e0-47f6-9fc9-4a98950d210b",
                "indicator--560ba196-ba98-43b8-9860-41d9950d210b",
                "indicator--560ba196-4b78-4f7b-864c-4a5c950d210b",
                "indicator--560ba196-3d14-4223-ad2e-49c6950d210b",
                "indicator--560ba196-2044-46aa-9b3e-4a35950d210b",
                "indicator--560ba196-c478-4caa-8f8d-41a6950d210b",
                "indicator--560ba196-7434-46d9-bc3f-4303950d210b",
                "indicator--560ba196-1bd4-4a91-a0ae-4a7d950d210b",
                "indicator--560ba197-befc-4fe0-8754-4e24950d210b",
                "indicator--560ba197-99c8-42d1-8a08-4c42950d210b",
                "indicator--560ba197-76d8-434a-bc57-4d00950d210b",
                "observed-data--560ba197-5b20-4259-a23e-4426950d210b",
                "url--560ba197-5b20-4259-a23e-4426950d210b",
                "indicator--560ba197-4918-4afe-b59e-45a0950d210b",
                "indicator--560ba197-6280-475c-a61c-4b76950d210b",
                "indicator--560ba197-fe8c-460b-8372-4ea6950d210b",
                "indicator--560ba197-e2a8-4a38-8a99-4d26950d210b",
                "indicator--560ba197-5b34-43f8-b969-4893950d210b",
                "indicator--560ba197-9204-45d9-a080-43a3950d210b",
                "observed-data--560ba197-10fc-425f-8160-4ee7950d210b",
                "url--560ba197-10fc-425f-8160-4ee7950d210b",
                "indicator--560ba198-9940-4092-8280-4638950d210b",
                "indicator--560ba198-ba54-4bef-8ccc-4d6c950d210b",
                "indicator--560ba198-dc04-4bb0-9de9-4884950d210b",
                "indicator--560ba198-8928-46b2-a39e-4f69950d210b",
                "indicator--560ba198-3d04-46ca-998c-4b5b950d210b",
                "indicator--560ba198-c460-4457-9441-4ea8950d210b",
                "indicator--560ba198-dd78-43e0-90e3-42bc950d210b",
                "indicator--560ba198-d3f0-4906-9613-458e950d210b",
                "indicator--560ba198-8518-49a1-8310-4d60950d210b",
                "observed-data--560ba199-2ce0-4e1f-b8d0-450c950d210b",
                "url--560ba199-2ce0-4e1f-b8d0-450c950d210b",
                "indicator--560ba199-ff20-4c5d-9b21-4cc9950d210b",
                "indicator--560ba199-40e4-4911-bbca-4f7d950d210b",
                "indicator--560ba199-c134-4cde-88f5-499e950d210b",
                "indicator--560ba199-5d84-472a-afb5-459c950d210b",
                "indicator--560ba199-3880-49e7-b3af-43b7950d210b",
                "indicator--560ba199-14dc-4e2e-805c-4f35950d210b",
                "observed-data--560ba199-b80c-4ca2-bea2-4f85950d210b",
                "url--560ba199-b80c-4ca2-bea2-4f85950d210b",
                "indicator--560ba199-7324-4d06-b166-453a950d210b",
                "indicator--560ba199-061c-4a24-bcbb-499c950d210b",
                "indicator--560ba199-1e98-498a-982f-4f23950d210b",
                "indicator--560ba19a-5328-4e8a-8bbd-4cc4950d210b",
                "indicator--560ba19a-0670-45f8-a9a8-4452950d210b",
                "indicator--560ba19a-d1d4-46b0-a988-441e950d210b",
                "observed-data--560ba19a-c438-4961-bfde-4d31950d210b",
                "url--560ba19a-c438-4961-bfde-4d31950d210b",
                "indicator--560ba19a-fd2c-404c-b0bf-4dbb950d210b",
                "indicator--560ba19a-e8a4-43db-9e1e-4ee6950d210b",
                "indicator--560ba19a-6a10-42b4-a35e-4633950d210b",
                "indicator--560ba19a-0410-4f19-819a-4285950d210b",
                "indicator--560ba19a-258c-4c77-8082-44a7950d210b",
                "indicator--560ba19b-ee98-4920-8edf-4b2d950d210b",
                "indicator--560ba19b-59b8-4b79-b468-4853950d210b",
                "indicator--560ba19b-5310-4d86-b338-4830950d210b",
                "indicator--560ba19b-a5f0-41ea-85e8-4e26950d210b",
                "indicator--560ba19b-8e34-4b36-a29a-4710950d210b",
                "indicator--560ba19b-81c4-49e7-add1-4b21950d210b",
                "indicator--560ba19b-5eec-4193-9e4f-4510950d210b",
                "observed-data--560ba19b-8ff4-4034-a548-4a22950d210b",
                "url--560ba19b-8ff4-4034-a548-4a22950d210b",
                "indicator--560ba19b-78b8-4e1a-af0e-4edb950d210b",
                "indicator--560ba19b-cc3c-4dd1-9578-4c76950d210b",
                "indicator--560ba19c-b1e4-4e3b-8ecd-43f1950d210b",
                "indicator--560ba19c-3c20-484f-bd27-4202950d210b",
                "indicator--560ba19c-95c4-4397-ad3a-4709950d210b",
                "indicator--560ba19c-3a84-426f-881c-4a3a950d210b",
                "indicator--560ba19c-f2e0-424d-898e-4614950d210b",
                "indicator--560ba19c-b66c-442f-8dda-4e69950d210b",
                "indicator--560ba19c-c270-468d-b438-423a950d210b",
                "indicator--560ba19c-6418-4a1a-a697-41db950d210b",
                "indicator--560ba19c-78ec-492c-ae5c-48fa950d210b",
                "observed-data--560ba19c-be04-49d2-bf3c-49eb950d210b",
                "url--560ba19c-be04-49d2-bf3c-49eb950d210b",
                "indicator--560ba19c-92b4-472b-8453-49a0950d210b",
                "indicator--560ba19d-b26c-4c27-9db3-4de4950d210b",
                "indicator--560ba19d-14e4-4fa4-a31c-43d7950d210b",
                "indicator--560ba19d-a8c0-493e-9efa-40ca950d210b",
                "indicator--560ba19d-0bd8-434a-a42b-4f8a950d210b",
                "indicator--560ba19d-0670-4126-ad91-4919950d210b",
                "indicator--560ba19d-eb8c-45fd-89cd-4776950d210b",
                "indicator--560ba19d-c1d0-4b8d-9252-4b17950d210b",
                "indicator--560ba19d-eb8c-4677-a944-400b950d210b",
                "indicator--560ba19d-3438-4bc2-a632-48df950d210b",
                "indicator--560ba19e-e974-44ea-90a4-4f61950d210b",
                "observed-data--560ba19e-07e0-4eb4-8960-420d950d210b",
                "url--560ba19e-07e0-4eb4-8960-420d950d210b",
                "indicator--560ba19e-f0e0-4cc0-bab2-4b47950d210b",
                "indicator--560ba19e-ae44-405f-9713-4955950d210b",
                "indicator--560ba19e-7974-49dc-b06a-4706950d210b",
                "indicator--560ba19e-2fa0-4994-8760-456b950d210b",
                "indicator--560ba19e-94bc-4560-990f-4f5e950d210b",
                "indicator--560ba19e-6428-44fa-93dc-4db8950d210b",
                "indicator--560ba19e-b594-45ad-919d-4c8c950d210b",
                "indicator--560ba19e-89bc-4d15-a407-4612950d210b",
                "indicator--560ba19e-6b90-4b30-a104-482c950d210b",
                "indicator--560ba19f-c66c-4b8e-8025-4e08950d210b",
                "indicator--560ba19f-6790-4a2a-bdcb-4572950d210b",
                "observed-data--560ba19f-db24-4f2f-9011-4aa7950d210b",
                "url--560ba19f-db24-4f2f-9011-4aa7950d210b",
                "indicator--560ba19f-0fb8-4e8c-8ee4-4d44950d210b",
                "indicator--560ba19f-6790-4acc-88bb-4711950d210b",
                "indicator--560ba19f-2388-44a3-ade9-4286950d210b",
                "indicator--560ba19f-1e4c-4209-b585-412e950d210b",
                "indicator--560ba19f-d7f8-4374-90a1-4cdb950d210b",
                "indicator--560ba19f-2388-4321-bee4-4015950d210b",
                "indicator--560ba1a0-d284-49e8-b6ed-4078950d210b",
                "indicator--560ba1a0-e218-4eac-bf66-49f5950d210b",
                "indicator--560ba1a0-d26c-4c23-8f58-422f950d210b",
                "indicator--560ba1a0-b208-4b2b-b01a-460e950d210b",
                "indicator--560ba1a0-2b1c-48b4-a674-4e57950d210b",
                "observed-data--560ba1a0-bf5c-4d50-b4c4-4d11950d210b",
                "url--560ba1a0-bf5c-4d50-b4c4-4d11950d210b",
                "indicator--560ba1a0-ec8c-4a61-80a0-4636950d210b",
                "indicator--560ba1a0-6d34-4842-b305-48d1950d210b",
                "indicator--560ba1a0-ea40-4c46-ad4e-49b2950d210b",
                "indicator--560ba1a1-c370-4aa2-a801-4890950d210b",
                "indicator--560ba1a1-1660-4329-9b44-4fc9950d210b",
                "observed-data--560ba1a1-e3a0-4367-adab-4b48950d210b",
                "url--560ba1a1-e3a0-4367-adab-4b48950d210b",
                "indicator--560ba1a1-0698-44ee-95c6-41be950d210b",
                "indicator--560ba1a1-28a8-413c-9ae9-495c950d210b",
                "indicator--560ba1a1-cb34-424e-afdf-4d61950d210b",
                "indicator--560ba1a1-89bc-458a-a375-4eba950d210b",
                "indicator--560ba1a1-8760-4d3e-8cd5-4c03950d210b",
                "observed-data--560ba1a1-9bf0-46a7-bf5f-4a86950d210b",
                "url--560ba1a1-9bf0-46a7-bf5f-4a86950d210b",
                "indicator--560ba1a1-cf34-4cb6-b3f7-4243950d210b",
                "indicator--560ba1a2-b9e0-4df1-88ba-401b950d210b",
                "indicator--560ba1a2-b974-45bb-8183-4654950d210b",
                "indicator--560ba1a2-1280-4f84-ae4a-4417950d210b",
                "indicator--560ba1a2-8954-4438-8473-44fb950d210b",
                "observed-data--560ba1a2-3330-47fa-b30b-4926950d210b",
                "url--560ba1a2-3330-47fa-b30b-4926950d210b",
                "indicator--560ba1a2-d6f4-466f-96f6-4e57950d210b",
                "indicator--560ba1a2-7300-4fc1-b849-43e4950d210b",
                "indicator--560ba1a2-c088-4fe5-aaf8-4174950d210b",
                "indicator--560ba1a3-f130-44ea-bcf5-4753950d210b",
                "indicator--560ba1a2-e0bc-40a4-b09f-42c8950d210b",
                "observed-data--560ba1a3-6f6c-468b-bd14-4257950d210b",
                "url--560ba1a3-6f6c-468b-bd14-4257950d210b",
                "indicator--560ba1a3-9c0c-44cb-98d0-448c950d210b",
                "indicator--560ba1a3-ac9c-47c0-b20b-4c6a950d210b",
                "indicator--560ba1a3-6d04-4295-afb9-45ec950d210b",
                "indicator--560ba1a3-f9cc-485b-932e-4db3950d210b",
                "indicator--560ba1a3-57ec-4ab6-85c1-4a0a950d210b",
                "observed-data--560ba1a3-b978-445a-b95b-499e950d210b",
                "url--560ba1a3-b978-445a-b95b-499e950d210b",
                "indicator--560ba1a3-af04-49bf-b2d8-4365950d210b",
                "indicator--560ba1a4-07d8-4ec9-81c7-435a950d210b",
                "indicator--560ba1a3-79b4-4b8a-87e0-41b0950d210b",
                "indicator--560ba1a4-a284-4d84-8ec9-4fac950d210b",
                "indicator--560ba1a4-b454-4ff1-b683-4f94950d210b",
                "observed-data--560ba1a4-3d70-4a58-a111-4a80950d210b",
                "url--560ba1a4-3d70-4a58-a111-4a80950d210b",
                "indicator--560ba1a4-5944-4192-935f-4f90950d210b",
                "indicator--560ba1a4-7b54-41eb-afe9-48a9950d210b",
                "indicator--560ba1a4-fbe4-40ab-b20b-44be950d210b",
                "indicator--560ba1a4-6d9c-43dd-bd48-4b57950d210b",
                "indicator--560ba1a4-15d0-490a-9042-4ecc950d210b",
                "indicator--560ba1a5-8e1c-4582-b6e0-46d1950d210b",
                "indicator--560ba1a5-3704-4fdf-b462-43e9950d210b",
                "observed-data--560ba1a5-91bc-4281-93f0-4188950d210b",
                "url--560ba1a5-91bc-4281-93f0-4188950d210b",
                "indicator--560ba1a5-3704-4812-8f3f-4e64950d210b",
                "indicator--560ba1a5-11d0-4f83-a957-4df9950d210b",
                "indicator--560ba1a5-f648-48da-804a-47a6950d210b",
                "indicator--560ba1a5-6b6c-498a-b5d5-4d3d950d210b",
                "indicator--560ba1a5-cb24-497f-b470-4141950d210b",
                "indicator--560ba1a5-918c-46a0-ae92-4344950d210b",
                "indicator--560ba1a6-e498-4f90-b613-483b950d210b",
                "indicator--560ba1a5-ce08-4102-959a-4e2e950d210b",
                "indicator--560ba1a6-7c3c-4dde-b45b-4054950d210b",
                "indicator--560ba1a6-3e10-4fa2-99b7-483a950d210b",
                "indicator--560ba1a6-f228-41b6-9158-4623950d210b",
                "observed-data--560ba1a6-6154-43b1-861b-4378950d210b",
                "url--560ba1a6-6154-43b1-861b-4378950d210b",
                "indicator--560ba1a6-2bf8-4e0f-9ac0-4934950d210b",
                "indicator--560ba1a6-45f0-4a19-ab1b-4eca950d210b",
                "indicator--560ba1a6-2bf0-4e2a-9ea0-46dd950d210b",
                "indicator--560ba1a6-9db4-483e-8d30-41e4950d210b",
                "indicator--560ba1a6-1354-483f-9ead-4a76950d210b",
                "indicator--560ba1a6-080c-4efb-9fd8-4927950d210b",
                "indicator--560ba1a7-32cc-415c-8aa5-44f6950d210b",
                "indicator--560ba1a7-4574-4699-8985-4943950d210b",
                "indicator--560ba1a7-fa5c-4af8-9958-4c8d950d210b",
                "indicator--560ba1a7-ed34-4d88-8fff-4713950d210b",
                "indicator--560ba1a7-6754-4013-9b70-4a37950d210b",
                "observed-data--560ba1a7-8800-4f9b-9a49-4468950d210b",
                "url--560ba1a7-8800-4f9b-9a49-4468950d210b",
                "indicator--560ba1a7-113c-4e12-a2f0-4b6f950d210b",
                "indicator--560ba1a7-76f4-428a-9686-4cf6950d210b",
                "indicator--560ba1a7-12cc-4b9d-8f26-4261950d210b",
                "indicator--560ba1a7-c794-4bb6-9fbe-4b21950d210b",
                "indicator--560ba1a8-daa8-48f7-8bbc-4cf9950d210b",
                "indicator--560ba1a7-46c0-4d7a-9ece-4526950d210b",
                "indicator--560ba1a8-1b50-4c50-bc81-484b950d210b",
                "indicator--560ba1a8-01e8-4df6-beeb-454a950d210b",
                "indicator--560ba1a8-18f8-4ec7-910b-46a0950d210b",
                "indicator--560ba1a8-8700-4a30-8ed1-405d950d210b",
                "indicator--560ba1a8-0a18-4d42-aad2-4a77950d210b",
                "observed-data--560ba1a8-6940-416c-b233-401e950d210b",
                "url--560ba1a8-6940-416c-b233-401e950d210b",
                "indicator--560ba1a8-1e68-443a-af9e-4849950d210b",
                "indicator--560ba1a8-25cc-4e28-9a85-4306950d210b",
                "indicator--560ba1a9-12bc-4602-bae4-4ff6950d210b",
                "indicator--560ba1a9-1eb0-432e-a55f-4aa7950d210b",
                "indicator--560ba1a9-54c0-4b2e-82ae-4b2a950d210b",
                "indicator--560ba1a9-f43c-4862-987f-4e3c950d210b",
                "indicator--560ba1a9-1d18-4823-b67a-4d77950d210b",
                "indicator--560ba1a9-d380-4a4e-ae1e-45b4950d210b",
                "indicator--560ba1a9-3648-407a-90a6-4e7b950d210b",
                "indicator--560ba1a9-3bf4-44b7-97ad-4fcc950d210b",
                "indicator--560ba1a9-4220-49e4-a358-4187950d210b",
                "observed-data--560ba1a9-dbfc-47b2-b518-4b64950d210b",
                "url--560ba1a9-dbfc-47b2-b518-4b64950d210b",
                "indicator--560ba1a9-4220-4144-8f42-4362950d210b",
                "indicator--560ba1aa-d68c-4530-91a1-4057950d210b",
                "indicator--560ba1aa-0960-4664-8b3c-4f93950d210b",
                "indicator--560ba1aa-a658-45ec-a532-4fd8950d210b",
                "indicator--560ba1aa-1e50-4fba-aadf-416e950d210b",
                "indicator--560ba1aa-97ac-494a-9084-488f950d210b",
                "indicator--560ba1aa-ff34-448c-be7d-4c5b950d210b",
                "indicator--560ba1aa-d72c-465b-90e7-4ea9950d210b",
                "indicator--560ba1aa-efcc-4b13-9707-4d60950d210b",
                "indicator--560ba1aa-e8f0-4367-a04f-4347950d210b",
                "indicator--560ba1ab-b5c0-4e99-a2f3-45da950d210b",
                "observed-data--560ba1ab-cc9c-4f2d-b881-4550950d210b",
                "url--560ba1ab-cc9c-4f2d-b881-4550950d210b",
                "indicator--560ba1ab-01ec-45ca-8276-4b9d950d210b",
                "indicator--560ba1ab-98dc-44cc-80be-49d1950d210b",
                "indicator--560ba1ab-dad4-4e58-bffc-41b0950d210b",
                "indicator--560ba1ab-bd74-4b64-9a8a-4826950d210b",
                "indicator--560ba1ab-7e18-4633-bc20-4026950d210b",
                "indicator--560ba1ab-e0a0-4099-8ada-45a6950d210b",
                "indicator--560ba1ab-24cc-4b59-a18e-4c6d950d210b",
                "observed-data--560ba1ab-63f8-435f-9516-4d12950d210b",
                "url--560ba1ab-63f8-435f-9516-4d12950d210b",
                "indicator--560ba1ac-4ebc-4526-9ec8-474b950d210b",
                "indicator--560ba1ab-a708-464c-bbb3-4ba1950d210b",
                "indicator--560ba1ac-4a7c-46e6-bec2-4ae0950d210b",
                "indicator--560ba1ac-2660-4e2e-8565-4b0e950d210b",
                "indicator--560ba1ac-e818-497d-a627-4455950d210b",
                "indicator--560ba1ac-7b34-4298-86f8-4aec950d210b",
                "indicator--560ba1ac-b468-46dc-ba60-4f59950d210b",
                "observed-data--560ba1ac-277c-4224-8df6-4723950d210b",
                "url--560ba1ac-277c-4224-8df6-4723950d210b",
                "indicator--560ba1ac-fddc-4180-a6d6-4e71950d210b",
                "indicator--560ba1ad-7c58-4b0f-8ec7-49f1950d210b",
                "indicator--560ba1ac-a294-46a3-baf3-45b1950d210b",
                "indicator--560ba1ad-61dc-4c6d-adc4-4a73950d210b",
                "indicator--560ba1ad-d4b0-453a-8e0d-4987950d210b",
                "indicator--560ba1ad-6ee0-4ffd-9d62-46f8950d210b",
                "indicator--560ba1ad-ad74-4948-99bd-4e55950d210b",
                "indicator--560ba1ad-f610-4d2c-8a8f-47e2950d210b",
                "indicator--560ba1ad-22f4-4fa9-95e5-454b950d210b",
                "observed-data--560ba1ad-cb38-4990-bb54-4410950d210b",
                "url--560ba1ad-cb38-4990-bb54-4410950d210b",
                "indicator--560ba1ad-9cf4-4d72-8ac5-4c7f950d210b",
                "indicator--560ba1ad-8e3c-46cc-8c62-4c61950d210b",
                "indicator--560ba1ae-a778-4074-b4f9-47ee950d210b",
                "indicator--560ba1ae-21cc-4909-989a-4c51950d210b",
                "indicator--560ba1ae-c8e0-4283-a494-4834950d210b",
                "indicator--560ba1ae-1030-4100-81e3-40a1950d210b",
                "indicator--560ba1ae-4a90-4ad4-a383-439f950d210b",
                "indicator--560ba1ae-9a04-4869-92e8-4cfe950d210b",
                "indicator--560ba1ae-079c-4e3f-a572-4e54950d210b",
                "indicator--560ba1ae-29c4-491f-8a10-4486950d210b",
                "indicator--560ba1ae-1944-47bb-9dbb-499b950d210b",
                "observed-data--560ba1ae-3e4c-4f16-a7ac-454a950d210b",
                "url--560ba1ae-3e4c-4f16-a7ac-454a950d210b",
                "indicator--560ba1ae-ce18-4ba7-9a01-43c4950d210b",
                "indicator--560ba1af-8ccc-46f5-ac00-4c7a950d210b",
                "indicator--560ba1af-9c3c-4d8e-8985-4e55950d210b",
                "indicator--560ba1af-2c64-47d7-a832-4635950d210b",
                "indicator--560ba1af-78bc-4172-b4ad-4894950d210b",
                "observed-data--560ba1af-1f94-46b9-bb26-4aed950d210b",
                "url--560ba1af-1f94-46b9-bb26-4aed950d210b",
                "indicator--560ba1af-b48c-4f28-9d6c-4bc8950d210b",
                "indicator--560ba1af-6670-4fc0-880e-4294950d210b",
                "indicator--560ba1af-f090-48a7-b944-48d1950d210b",
                "indicator--560ba1b0-c570-4214-a35e-4781950d210b",
                "indicator--560ba1af-fb18-4c76-91d0-4704950d210b",
                "observed-data--560ba1b0-b2ec-4102-ae84-40e1950d210b",
                "url--560ba1b0-b2ec-4102-ae84-40e1950d210b",
                "indicator--560ba1b0-2d88-440d-acbf-4c95950d210b",
                "indicator--560ba1b0-8d90-4bb3-aa56-43ec950d210b",
                "indicator--560ba1b0-54a8-4be0-90b7-421f950d210b",
                "indicator--560ba1b0-9078-4141-ba74-4247950d210b",
                "indicator--560ba1b0-48ac-4776-8dfc-419a950d210b",
                "indicator--560ba1b0-908c-4708-b318-479a950d210b",
                "indicator--560ba1b0-1bdc-4ece-ba26-4508950d210b",
                "observed-data--560ba1b0-c8a8-4abf-b35e-4800950d210b",
                "url--560ba1b0-c8a8-4abf-b35e-4800950d210b",
                "indicator--560ba1b0-1f34-405c-98cf-4039950d210b",
                "indicator--560ba1b1-25f8-4ab2-b78f-4e7a950d210b",
                "indicator--560ba1b1-ce64-4d8a-bf2c-4ca1950d210b",
                "indicator--560ba1b1-c484-46c3-a302-4a09950d210b",
                "indicator--560ba1b1-1bf4-40f2-a669-48de950d210b",
                "indicator--560ba1b1-fcf0-41d6-8efb-4e99950d210b",
                "indicator--560ba1b1-cba4-41e2-af02-41d3950d210b",
                "observed-data--560ba1b1-941c-4e03-b2db-419a950d210b",
                "url--560ba1b1-941c-4e03-b2db-419a950d210b",
                "indicator--560ba1b1-e17c-4cba-87c9-4624950d210b",
                "indicator--560ba1b1-76fc-4408-9544-43ba950d210b",
                "indicator--560ba1b2-1388-4f04-827e-4aba950d210b",
                "indicator--560ba1b2-5e08-439f-80cc-4e0c950d210b",
                "indicator--560ba1b2-c534-4e78-93e5-4a7e950d210b",
                "indicator--560ba1b2-2a24-45af-949e-40df950d210b",
                "indicator--560ba1b2-3508-45d1-bf74-4d27950d210b",
                "indicator--560ba1b2-3484-48ed-ab3c-41f0950d210b",
                "indicator--560ba1b2-d948-4b8c-be38-42dc950d210b",
                "indicator--560ba1b2-289c-43ee-a452-4b1e950d210b",
                "indicator--560ba1b3-3b28-48e4-8327-4e2a950d210b",
                "indicator--560ba1b3-13e0-41b3-9eaa-4c0f950d210b",
                "indicator--560ba1b3-e448-4aec-ab13-4e8b950d210b",
                "indicator--560ba1b3-2a20-4365-ae9e-4bb1950d210b",
                "indicator--560ba1b3-0a00-45a1-ae48-493e950d210b",
                "indicator--560ba1b3-3864-4f4c-9092-458b950d210b",
                "indicator--560ba1b3-f910-47d5-a9fb-431d950d210b",
                "indicator--560ba1b4-2700-4ea5-b85f-4293950d210b",
                "indicator--560ba1b4-4868-4246-844c-4283950d210b",
                "indicator--560ba1b4-b178-43d9-baa3-4cfb950d210b",
                "indicator--560ba1b4-021c-4529-94f7-47ac950d210b",
                "indicator--560ba1b4-ef34-4910-bebf-40df950d210b",
                "indicator--560ba1b4-d434-491c-9c15-4c3b950d210b",
                "indicator--560ba1b4-5b80-46a6-b05c-474b950d210b",
                "indicator--560ba1b5-d338-44e8-9b62-4b03950d210b",
                "indicator--560ba1b4-5708-460f-acbd-4bcf950d210b",
                "indicator--560ba1b5-7dc0-40c2-bc64-4554950d210b",
                "indicator--560ba1b5-aa48-4815-98ea-4893950d210b",
                "indicator--560ba1b5-3e40-44c3-aee4-420e950d210b",
                "indicator--560ba1b5-c410-4420-a5a2-49ce950d210b",
                "indicator--560ba1b5-927c-4898-9971-4f12950d210b",
                "indicator--560ba1b5-cf34-4dfd-af56-4c09950d210b",
                "indicator--560ba1b6-a9e4-4b2a-abe7-4001950d210b",
                "indicator--560ba1b6-a570-4065-8257-4257950d210b",
                "indicator--560ba1b6-8bf8-4588-9492-4bcb950d210b",
                "indicator--560ba1b6-95d8-4637-b469-4f6c950d210b",
                "indicator--560ba1b6-714c-40b7-a7df-49aa950d210b",
                "indicator--560ba1b6-c0b0-4a91-acde-4b6f950d210b",
                "indicator--560ba1b6-6cac-4b92-b299-4103950d210b",
                "indicator--560ba1b6-b06c-4264-9ed8-4bd4950d210b",
                "indicator--560ba1b7-d7e4-40a5-8d79-47b2950d210b",
                "indicator--560ba1b7-dc44-4560-9c13-4408950d210b",
                "indicator--560ba1b7-9e70-4a3d-b15d-4267950d210b",
                "indicator--560ba1b7-b198-4ba7-8ab1-47b1950d210b",
                "indicator--560ba1b7-c460-4fae-a768-4d34950d210b",
                "indicator--560ba1b7-1e3c-4093-830f-4ce8950d210b",
                "indicator--560ba1b7-09d8-438b-8c8e-408d950d210b",
                "indicator--560ba1b8-58bc-4851-af0e-4639950d210b",
                "indicator--560ba1b8-d784-49c7-baff-43c6950d210b",
                "indicator--560ba1b8-fc40-4635-8979-4974950d210b",
                "indicator--560ba1b8-5aa8-4cfa-a70f-4f8a950d210b",
                "indicator--560ba1b8-cee8-43bd-86a4-4923950d210b",
                "indicator--560ba1b8-f4e8-49cf-88cd-4839950d210b",
                "indicator--560ba1b8-25c8-4380-a895-42f2950d210b",
                "indicator--560ba1b9-5018-4c85-afad-41df950d210b",
                "indicator--560ba1b8-6b90-483a-9a84-4504950d210b",
                "indicator--560ba1b9-92bc-45b8-9d75-4af8950d210b",
                "indicator--560ba1b9-43d4-4745-8786-4078950d210b",
                "indicator--560ba1b9-f270-4593-a2f9-4752950d210b",
                "indicator--560ba1b9-1ab4-44dc-bdf9-4576950d210b",
                "indicator--560ba1b9-fdc8-4c8e-82d1-4196950d210b",
                "indicator--560ba1b9-3fc0-4fd7-b321-40ba950d210b",
                "indicator--560ba1ba-7568-497c-9c29-4ae9950d210b",
                "indicator--560ba1ba-551c-49e0-b16d-4732950d210b",
                "indicator--560ba1ba-a014-4984-9dcf-4b47950d210b",
                "indicator--560ba1ba-952c-4eec-bb38-4a66950d210b",
                "indicator--560ba1ba-2afc-448e-a946-4907950d210b",
                "indicator--560ba1ba-c9e4-4a19-8bf9-4d5d950d210b",
                "indicator--560ba1ba-1c54-43d2-8dc0-4816950d210b",
                "indicator--560ba1bb-27d0-42b2-b8f8-42cf950d210b",
                "indicator--560ba1ba-caf0-49e6-b0b0-4db8950d210b",
                "indicator--560ba1bb-e8d8-49db-9639-45a9950d210b",
                "indicator--560ba1bb-3cb0-4607-a4b1-4763950d210b",
                "indicator--560ba1bb-c974-4447-9b2b-4730950d210b",
                "indicator--560ba1bb-e26c-4df7-b1bf-40b6950d210b",
                "indicator--560ba1bb-b98c-480b-b187-4a7c950d210b",
                "indicator--560ba1bb-6fd4-4e7d-b2f9-4354950d210b",
                "indicator--560ba1bc-340c-4dc9-8643-40e4950d210b",
                "indicator--560ba1bb-55ac-4364-8be7-49dc950d210b",
                "indicator--560ba1bc-85e0-4676-9af7-462c950d210b",
                "indicator--560ba1bc-0e44-47c1-b877-4bcd950d210b",
                "indicator--560ba1bc-0a34-4c72-bbbd-4029950d210b",
                "indicator--560ba1bc-74d8-4292-9ee6-4655950d210b",
                "indicator--560ba1bc-80f4-42f1-a426-4485950d210b",
                "indicator--560ba1bc-8b98-47e0-9316-4218950d210b",
                "indicator--560ba1bd-9c10-4260-8981-417e950d210b",
                "indicator--560ba1bd-b93c-428a-b153-4147950d210b",
                "indicator--560ba1bd-ca90-4d5e-8568-4cc0950d210b",
                "indicator--560ba1bd-07c0-496f-a6d2-4dc3950d210b",
                "indicator--560ba1bd-d374-4fdc-8fb0-4424950d210b",
                "indicator--560ba1bd-8230-4d87-a50c-42a0950d210b",
                "indicator--560ba1bd-a318-4f90-9372-4963950d210b",
                "indicator--560ba1bd-66e8-4bc6-8c64-433f950d210b",
                "indicator--560ba1be-1568-41d1-bb78-40bf950d210b",
                "indicator--560ba1be-1fcc-4df4-8b1f-4aee950d210b",
                "indicator--560ba1be-7694-4c74-8eaf-4066950d210b",
                "indicator--560ba1be-6144-4eeb-ba9d-4021950d210b",
                "indicator--560ba1be-84c4-417e-8a5a-458b950d210b",
                "indicator--560ba1be-79cc-47e0-82c4-4a92950d210b",
                "indicator--560ba1be-0268-47fc-81d2-442f950d210b",
                "indicator--560ba1bf-2c60-400b-9bed-4d29950d210b",
                "indicator--560ba1bf-57ec-43d8-b8dd-45fd950d210b",
                "indicator--560ba1bf-6680-4c10-853c-4507950d210b",
                "indicator--560ba1bf-4050-4022-9e0b-4663950d210b",
                "indicator--560ba1bf-da1c-4a1d-aff4-4bc8950d210b",
                "indicator--560ba1bf-a7cc-4258-975c-47cb950d210b",
                "indicator--560ba1bf-0e68-4a09-aa0f-401a950d210b",
                "indicator--560ba1bf-bbd4-4e58-9e0a-4cc7950d210b",
                "indicator--560ba1c0-7838-46ff-ac87-4c4a950d210b",
                "indicator--560ba1c0-9798-4ab9-b417-44db950d210b",
                "indicator--560ba1c0-4cb4-4ed0-b9ec-4750950d210b",
                "indicator--560ba1c0-ce3c-41da-b52f-43b8950d210b",
                "indicator--560ba1c0-1d58-42db-b17d-45ab950d210b",
                "indicator--560ba1c0-2f20-4303-83c9-4832950d210b",
                "indicator--560ba1c0-2d04-4b20-8e1c-480c950d210b",
                "indicator--560ba1c0-af80-4dba-898d-4622950d210b",
                "indicator--560ba1c1-18ec-43fa-859d-4872950d210b",
                "indicator--560ba1c1-df38-4e9c-8bce-48df950d210b",
                "indicator--560ba1c1-cf0c-40a6-9cc2-4fc5950d210b",
                "indicator--560ba1c1-a624-4005-b778-4fbf950d210b",
                "indicator--560ba1c1-35dc-4db2-8cd5-4edc950d210b",
                "indicator--560ba1c1-a704-4016-8b98-489a950d210b",
                "indicator--560ba1c1-ee70-4245-b036-4cc6950d210b",
                "indicator--560ba1c2-7b6c-487e-bbdf-4b83950d210b",
                "indicator--560ba1c2-84ec-4a50-a2ab-4893950d210b",
                "indicator--560ba1c2-2ae8-4d0f-b3fe-4267950d210b",
                "indicator--560ba1c2-7ebc-4034-a666-4009950d210b",
                "indicator--560ba1c2-6ba8-431f-b4c4-4ade950d210b",
                "indicator--560ba1c2-8cbc-44ab-8252-4dfe950d210b",
                "indicator--560ba1c2-4da0-4e58-9598-4097950d210b",
                "indicator--560ba1c2-8600-43c3-8a2b-43c8950d210b",
                "indicator--560ba1c3-04b0-45f5-9639-4071950d210b",
                "indicator--560ba1c3-a490-4b42-85ba-4975950d210b",
                "indicator--560ba1c3-8da4-4b1a-8d4f-46bf950d210b",
                "indicator--560ba1c3-53c0-4c8d-bc75-44c2950d210b",
                "indicator--560ba1c3-60ac-4f2a-bbe0-4caf950d210b",
                "indicator--560ba1c3-c0e4-430a-9098-468b950d210b",
                "indicator--560ba1c3-0624-428c-96b3-489b950d210b",
                "indicator--560ba1c4-a708-4589-9990-4acd950d210b",
                "indicator--560ba1c4-52e4-4c0a-b6d4-40d4950d210b",
                "indicator--560ba1c4-0ef0-4a42-9f6e-462f950d210b",
                "indicator--560ba1c4-a2cc-42ba-8fc2-458d950d210b",
                "indicator--560ba1c4-90d8-4757-b676-4255950d210b",
                "indicator--560ba1c4-a468-4177-b8d7-4867950d210b",
                "indicator--560ba1c4-d9c0-4401-853a-4375950d210b",
                "indicator--560ba1c4-3c50-4691-b6ee-446d950d210b",
                "indicator--560ba1c5-e704-4f7d-a9b0-4ea2950d210b",
                "indicator--560ba1c5-5778-4f4c-9835-4ab4950d210b",
                "indicator--560ba1c5-a2d0-4e6f-94e8-4589950d210b",
                "indicator--560ba1c5-2ad8-47e9-b69c-4905950d210b",
                "indicator--560ba1c5-22b8-4167-a4ff-417b950d210b",
                "indicator--560ba1c5-ace0-4391-a0c6-4ae2950d210b",
                "indicator--560ba1c6-5cd0-4aed-8467-4bc5950d210b",
                "indicator--560ba1c6-1aa4-4fd4-9dfd-4870950d210b",
                "indicator--560ba1c6-432c-4708-ae69-499f950d210b",
                "indicator--560ba1c6-c6e8-4cca-afd4-4649950d210b",
                "indicator--560ba1c6-f5a0-4904-8ebc-4a7b950d210b",
                "indicator--560ba1c6-7fb8-4a15-a08e-475c950d210b",
                "indicator--560ba1c7-6430-421b-b908-4052950d210b",
                "indicator--560ba1c7-a740-482f-8dae-43b1950d210b",
                "indicator--560ba1c7-1e74-4d5b-8a95-4108950d210b",
                "indicator--560ba1c7-576c-45be-a739-4624950d210b",
                "indicator--560ba1c7-3e10-451c-8891-4f82950d210b",
                "indicator--560ba1c7-ad5c-430e-acdb-451d950d210b",
                "indicator--560ba1c8-fe60-4d5f-a5e5-4bfb950d210b",
                "indicator--560ba1c8-32dc-46ed-99a3-49d9950d210b",
                "indicator--560ba1c8-d03c-4719-a3dc-426b950d210b",
                "indicator--560ba1c8-43fc-41e7-b69d-414a950d210b",
                "indicator--560ba1c8-b630-4f94-ab41-4808950d210b",
                "indicator--560ba1c9-821c-45fb-9f39-4a79950d210b",
                "indicator--560ba1c9-396c-48df-85d5-4c71950d210b",
                "indicator--560ba1c9-2810-4cef-88c8-4a0e950d210b",
                "indicator--560ba1c9-c04c-40d5-86c0-467d950d210b",
                "indicator--560ba1c9-dd10-43fa-94dc-4c3b950d210b",
                "indicator--560ba1c9-bdc8-4b01-8512-416d950d210b",
                "indicator--560ba1ca-de54-4bed-b168-450b950d210b",
                "indicator--560ba1ca-ba40-4132-8fa7-4f7b950d210b",
                "indicator--560ba1ca-dc9c-4702-a403-4ce5950d210b",
                "indicator--560ba1ca-3bd8-4453-a8ff-4b32950d210b",
                "indicator--560ba1ca-e2dc-4f81-89f6-407d950d210b",
                "indicator--560ba1cb-acd0-436d-8ff6-4959950d210b",
                "indicator--560ba1cb-75f8-4fcb-bf4f-42dd950d210b",
                "indicator--560ba1cb-c924-492d-bd99-49ff950d210b",
                "indicator--560ba1cb-152c-4769-b56c-4144950d210b",
                "indicator--560ba1cb-0ac4-4be4-b551-49fd950d210b",
                "indicator--560ba1cb-faf0-48fb-92f4-4846950d210b",
                "indicator--560ba1cc-8bf4-4f3d-b7fc-494b950d210b",
                "indicator--560ba1cc-bc0c-49df-b46e-4f6d950d210b",
                "indicator--560ba1cc-3358-4483-b762-4b47950d210b",
                "indicator--560ba1cc-4d0c-48b1-adfd-4d33950d210b",
                "indicator--560ba1cc-7bec-438c-8f0b-4e87950d210b",
                "indicator--560ba1cd-0984-4ce9-bbfb-4f1c950d210b",
                "indicator--560ba1cd-7c80-45e7-bc3f-4ca2950d210b",
                "indicator--560ba1cd-4e7c-44d4-a8f1-4dd3950d210b",
                "indicator--560ba1cd-34dc-4596-9593-4d03950d210b",
                "indicator--560ba1cd-78dc-4015-8544-4b44950d210b",
                "indicator--560ba1cd-fbc8-4c6f-a892-4ef0950d210b",
                "indicator--560ba1ce-2ee8-4b66-b46b-4676950d210b",
                "indicator--560ba1ce-7f24-45ab-9f4e-46ce950d210b",
                "indicator--560ba1ce-1e9c-43b3-acd6-40f5950d210b",
                "indicator--560ba1ce-a0f0-4442-8455-4239950d210b",
                "indicator--560ba1ce-2144-4ab2-a096-44cb950d210b",
                "indicator--560ba1ce-6484-4162-93ab-49eb950d210b",
                "indicator--560ba1cf-bd9c-4b58-8d32-4931950d210b",
                "indicator--560ba1cf-4604-489a-8395-4910950d210b",
                "indicator--560ba1cf-1bb8-4310-9af3-4ef6950d210b",
                "indicator--560ba1cf-9050-4360-960c-48bb950d210b",
                "indicator--560ba1cf-7688-467b-bb53-48c0950d210b",
                "indicator--560ba1d0-1238-4955-b61e-46e6950d210b",
                "indicator--560ba1d0-a374-47ef-8012-4b5f950d210b",
                "indicator--560ba1d0-a928-4842-be3d-4a51950d210b",
                "indicator--560ba1d0-0010-4a61-9343-4ad5950d210b",
                "indicator--560ba1d0-b974-4408-b72c-4c6d950d210b",
                "indicator--560ba1d1-25f0-4e98-8877-40d3950d210b",
                "indicator--560ba1d1-956c-4816-a2b9-49bf950d210b",
                "indicator--560ba1d1-16b8-4a05-8d38-45d7950d210b",
                "indicator--560ba1d1-e708-49e5-809c-494c950d210b",
                "indicator--560ba1d1-06f8-44c0-91e5-49b7950d210b",
                "indicator--560ba1d1-1224-4baf-afc4-4b23950d210b",
                "indicator--560ba1d2-638c-4051-a882-4275950d210b",
                "indicator--560ba1d2-1fd0-43a4-b632-4dc0950d210b",
                "indicator--560ba1d2-fbe0-4c8e-a915-4aa8950d210b",
                "indicator--560ba1d2-7f38-4810-86d9-4cb8950d210b",
                "indicator--560ba1d2-8f60-41b4-aa0c-43ab950d210b",
                "indicator--560ba1d3-3f10-434e-aa51-4315950d210b",
                "indicator--560ba1d3-af8c-440f-b33a-4d4a950d210b",
                "indicator--560ba1d3-7804-4455-bcfd-4233950d210b",
                "indicator--560ba1d3-1e0c-44a7-93fc-436a950d210b",
                "indicator--560ba1d3-db30-41d9-b9ee-40b6950d210b",
                "indicator--560ba1d3-2a30-4140-8099-4f7b950d210b",
                "indicator--560ba1d4-2390-4f40-8b6f-4e88950d210b",
                "indicator--560ba1d4-a728-4276-a86d-4458950d210b",
                "indicator--560ba1d4-4bd4-4455-a728-4c88950d210b",
                "indicator--560ba1d4-2c98-4371-98d6-4b5e950d210b",
                "indicator--560ba1d4-ddf8-41fa-a0f5-4136950d210b",
                "indicator--560ba1d5-b2d4-4423-a2b8-4cc7950d210b",
                "indicator--560ba1d5-1900-4913-87b4-493a950d210b",
                "indicator--560ba1d5-dc14-4e35-889c-4425950d210b",
                "indicator--560ba1d5-0490-4256-9f2d-4924950d210b",
                "indicator--560ba1d5-b8a4-4b9c-9b5f-4272950d210b",
                "indicator--560ba1d5-bc70-4718-9d86-48ee950d210b",
                "indicator--560ba1d6-6ae8-405f-ac57-4d97950d210b",
                "indicator--560ba1d6-5334-449c-898a-4482950d210b",
                "indicator--560ba1d6-a314-46f3-bd4e-47bd950d210b",
                "indicator--560ba1d6-da9c-4d6e-8ae6-4e01950d210b",
                "indicator--560ba1d6-c120-4b6c-a905-428e950d210b",
                "indicator--560ba1d7-a178-4f91-8f5c-4f52950d210b",
                "indicator--560ba1d7-5300-4ff5-8ec4-40f8950d210b",
                "indicator--560ba1d7-837c-4f4c-9d63-44ed950d210b",
                "indicator--560ba1d7-5f58-451c-9fe2-40f5950d210b",
                "indicator--560ba1d7-3494-4c98-bcf3-4c31950d210b",
                "indicator--560ba1d8-08d8-4b04-a1f8-4295950d210b",
                "indicator--560ba1d8-0a10-427c-a7f0-4c43950d210b",
                "indicator--560ba1d8-cb78-42fd-a9b5-457b950d210b",
                "indicator--560ba1d8-0b04-4a87-a454-4e3d950d210b",
                "indicator--560ba1d8-13f0-4b9a-bf6a-4af2950d210b",
                "indicator--560ba1d8-bb88-4103-a840-49d2950d210b",
                "indicator--560ba1d9-67bc-4450-b695-4156950d210b",
                "indicator--560ba1d9-4b3c-4b34-9d37-4cf2950d210b",
                "indicator--560ba1d9-1be4-4a61-b16c-4bf4950d210b",
                "indicator--560ba1d9-5bc0-4083-bce4-423a950d210b",
                "indicator--560ba1d9-1868-4990-86c9-47e2950d210b",
                "indicator--560ba1d9-beec-46d7-b82d-4419950d210b",
                "indicator--560ba1da-5adc-44d2-b8ee-4013950d210b",
                "indicator--560ba1da-6704-48f3-b690-4266950d210b",
                "indicator--560ba1da-9920-47b3-b8d2-4b6d950d210b",
                "indicator--560ba1da-f640-4cfd-ab20-4d63950d210b",
                "indicator--560ba1da-4250-46ad-a981-40f6950d210b",
                "indicator--560ba1db-c2e0-4385-bf67-49d1950d210b",
                "indicator--560ba1db-c1cc-40ef-8d14-4bb0950d210b",
                "indicator--560ba1db-e8fc-4911-b3a9-4d0e950d210b",
                "indicator--560ba1db-ea24-4da8-92bc-422a950d210b",
                "indicator--560ba1db-9060-492d-9603-4936950d210b",
                "indicator--560ba1dc-2fc0-4ebb-b528-4f6c950d210b",
                "indicator--560ba1dc-29a4-4991-9431-448d950d210b",
                "indicator--560ba1dc-fcb4-4ee5-9c1d-47e9950d210b",
                "indicator--560ba1dc-99c8-45d9-924a-4415950d210b",
                "indicator--560ba1dc-e93c-4ffe-9e5c-4fef950d210b",
                "indicator--560ba1dc-6324-448e-9dd0-490e950d210b",
                "indicator--560ba1dd-efd8-46c5-b2b0-4cf1950d210b",
                "indicator--560ba1dd-6960-4246-acb4-42a9950d210b",
                "indicator--560ba1dd-d620-4ac9-80a6-437c950d210b",
                "indicator--560ba1dd-fb40-4dbd-b6ff-44fa950d210b",
                "indicator--560ba1dd-6dc4-4830-815c-4320950d210b",
                "indicator--560ba1de-e070-48e3-adfe-4627950d210b",
                "indicator--560ba1de-d528-4623-97a1-42c5950d210b",
                "indicator--560ba1de-009c-467c-906c-4a02950d210b",
                "indicator--560ba1de-6408-47d4-b737-493f950d210b",
                "indicator--560ba1de-8b9c-42db-8238-4a1c950d210b",
                "indicator--560ba1df-77c8-4883-9919-4982950d210b",
                "indicator--560ba1df-8b98-40ea-a220-4363950d210b",
                "indicator--560ba1df-3be0-4d6b-8c8d-4106950d210b",
                "indicator--560ba1df-a0d8-4b60-a9f1-4c2c950d210b",
                "indicator--560ba1df-4840-4864-8358-4e26950d210b",
                "indicator--560ba1df-e4b0-4550-a6e4-48be950d210b",
                "indicator--560ba1e0-8e0c-4d33-b6fe-4cd7950d210b",
                "indicator--560ba1e0-fc14-4520-a29a-45f1950d210b",
                "indicator--560ba1e0-1ca0-4bdd-b718-4cbe950d210b",
                "indicator--560ba1e0-55f4-412d-bf21-4472950d210b",
                "indicator--560ba1e0-35ec-4e10-853a-4729950d210b",
                "indicator--560ba1e0-b32c-47ec-a219-4766950d210b",
                "indicator--560ba1e1-b7a4-4d19-ba1f-4fed950d210b",
                "indicator--560ba1e1-7104-4208-a1d6-4e43950d210b",
                "indicator--560ba1e1-68e0-491f-be91-4f5c950d210b",
                "indicator--560ba1e1-64ac-497e-b50d-45c1950d210b",
                "indicator--560ba1e1-55d0-4bbe-88d5-49b8950d210b",
                "indicator--560ba1e2-0e88-4162-9442-4ef9950d210b",
                "indicator--560ba1e2-3584-480a-b74e-4350950d210b",
                "indicator--560ba1e2-bec8-4b7b-80bb-4850950d210b",
                "indicator--560ba1e2-0404-4238-8a02-4333950d210b",
                "indicator--560ba1e2-5560-4984-8e81-4ce4950d210b",
                "indicator--560ba1e3-5990-4237-a7ab-40c9950d210b",
                "indicator--560ba1e3-64d8-4ea4-aa9d-4e7c950d210b",
                "indicator--560ba1e3-1d10-4ed6-9d78-4d98950d210b",
                "indicator--560ba1e3-3dcc-4b84-b787-4170950d210b",
                "indicator--560ba1e3-8030-44cd-99c4-498b950d210b",
                "indicator--560ba1e3-94d8-4e1f-95cd-4ded950d210b",
                "indicator--560ba1e4-e930-440c-9e03-46bd950d210b",
                "indicator--560ba1e4-2590-4270-a2fc-45e0950d210b",
                "indicator--560ba1e4-f178-4606-9b4f-46ac950d210b",
                "indicator--560ba1e4-a914-45da-b148-4555950d210b",
                "indicator--560ba1e4-8f6c-4b3e-9df3-4f08950d210b",
                "indicator--560ba1e4-f508-4bd6-9ad7-4ae2950d210b",
                "indicator--560ba1e5-4534-40e0-b2a9-4bf2950d210b",
                "indicator--560ba1e5-2900-4825-a9a1-4ec8950d210b",
                "indicator--560ba1e5-e0dc-48e7-a7d5-4ee3950d210b",
                "indicator--560ba1e5-b714-40a1-87f4-4e4c950d210b",
                "indicator--560ba1e5-ff40-492d-b2b0-423f950d210b",
                "indicator--560ba1e6-f328-45d5-9e94-4f88950d210b",
                "indicator--560ba1e6-2178-45ea-ab68-4d99950d210b",
                "indicator--560ba1e6-c630-4de6-83dd-4cab950d210b",
                "indicator--560ba1e6-d000-4b0d-9bd0-4f8f950d210b",
                "indicator--560ba1e6-09f8-4d0d-b1de-4034950d210b",
                "indicator--560ba1e7-2560-4aea-9fc6-488f950d210b",
                "indicator--560ba1e7-b588-47e9-acce-4509950d210b",
                "indicator--560ba1e7-fa64-4c58-8eb2-48ec950d210b",
                "indicator--560ba1e7-d7f4-4ae0-96b0-4e68950d210b",
                "indicator--560ba1e7-bd60-45e1-b316-4b47950d210b",
                "indicator--560ba1e7-37cc-4aa8-9adb-4c87950d210b",
                "indicator--560ba1e8-e870-4abb-a278-4b2b950d210b",
                "indicator--560ba1e8-5de4-410c-8ba9-4bf0950d210b",
                "indicator--560ba1e8-2bac-4a8a-9b91-4270950d210b",
                "indicator--560ba1e8-ae28-4fd3-bec1-4c2d950d210b",
                "indicator--560ba1e8-1770-46d7-bc56-41d8950d210b",
                "indicator--560ba1e9-4e50-4b7b-8be8-4046950d210b",
                "indicator--560ba1e9-3d74-4b7c-8a56-4483950d210b",
                "indicator--560ba1e9-ef58-430c-830b-4c5b950d210b",
                "indicator--560ba1e9-e410-47bb-a4cf-457d950d210b",
                "indicator--560ba1e9-b980-445d-a4db-4ba5950d210b",
                "indicator--560ba1ea-8014-415f-a002-4988950d210b",
                "indicator--560ba1ea-e33c-49f8-b9bc-44e7950d210b",
                "indicator--560ba1ea-ef98-45de-9eb1-4793950d210b",
                "indicator--560ba1ea-aff0-4bf5-ac22-4df8950d210b",
                "indicator--560ba1ea-6220-41be-9c9b-4a50950d210b",
                "indicator--560ba1ea-c7ac-4a86-83c7-4e8d950d210b",
                "indicator--560ba1eb-64b0-4afe-8fbe-4e82950d210b",
                "indicator--560ba1eb-6004-40dd-8022-4a89950d210b",
                "indicator--560ba1eb-1a44-4185-98fc-42d0950d210b",
                "indicator--560ba1eb-f1a8-4ee6-9701-4230950d210b",
                "indicator--560ba1eb-2dc8-408d-865c-44f2950d210b",
                "indicator--560ba1ec-742c-4a40-a0ad-4f6a950d210b",
                "indicator--560ba1ec-8340-4107-9934-4d6f950d210b",
                "indicator--560ba1ec-0470-4af8-b869-4ba3950d210b",
                "indicator--560ba1ec-3198-4233-9dc7-4170950d210b",
                "indicator--560ba1ec-9d54-4ef7-b494-4e4b950d210b",
                "indicator--560ba1ec-0194-4b33-af09-421d950d210b",
                "indicator--560ba1ed-f058-4ddd-bfc0-4b73950d210b",
                "indicator--560ba1ed-4ac0-4380-bb76-431e950d210b",
                "indicator--560ba1ed-f40c-4e9d-8ee0-4db3950d210b",
                "indicator--560ba1ed-9f94-4af6-b1f4-4cd7950d210b",
                "indicator--560ba1ed-d710-40e5-9286-4ac5950d210b",
                "indicator--560ba1ee-5900-4a5c-a7c7-42e4950d210b",
                "indicator--560ba1ee-0cd0-4957-a4ba-4f58950d210b",
                "indicator--560ba1ee-c014-4401-aa88-4265950d210b",
                "indicator--560ba1ee-443c-42f5-91fc-4819950d210b",
                "indicator--560ba1ee-8600-4892-9703-4927950d210b",
                "indicator--560ba1ee-d92c-49d9-a7cc-4347950d210b",
                "indicator--560ba1ef-9540-4bcf-aba5-475d950d210b",
                "indicator--560ba1ef-1270-4139-9be7-4011950d210b",
                "indicator--560ba1ef-0338-4cac-ab98-42b7950d210b",
                "indicator--560ba1ef-9ed8-4790-b6a7-4d2e950d210b",
                "indicator--560ba1ef-f4e8-4417-9357-482a950d210b",
                "indicator--560ba1f0-7a0c-42fd-93b2-4eaa950d210b",
                "indicator--560ba1f0-b2dc-4b9a-9ce2-4a2e950d210b",
                "indicator--560ba1f0-cfa0-4ec7-bfb0-4f6a950d210b",
                "indicator--560ba1f0-3154-4008-8ad8-4dfe950d210b",
                "indicator--560ba1f0-7314-47bc-9b90-45dd950d210b",
                "indicator--560ba1f1-d07c-4a22-b8ee-42a7950d210b",
                "indicator--560ba1f1-0628-4166-9cf3-48ff950d210b",
                "indicator--560ba1f1-8588-4578-a66e-4fcf950d210b",
                "indicator--560ba1f1-c700-4238-9570-4095950d210b",
                "indicator--560ba1f1-91a4-48c3-afcd-470c950d210b",
                "indicator--560ba1f1-9564-40bb-81e8-406e950d210b",
                "indicator--560ba1f2-266c-4ae5-960b-4031950d210b",
                "indicator--560ba1f2-c5cc-4039-abf9-4f32950d210b",
                "indicator--560ba1f2-3e20-4aa3-b3d0-4f10950d210b",
                "indicator--560ba1f2-b964-4b13-9f1f-40f3950d210b",
                "indicator--560ba1f2-5db0-4052-8a19-4d5b950d210b",
                "indicator--560ba1f2-a244-4f11-aeb7-45b5950d210b",
                "indicator--560ba1f3-e3a4-4b28-be93-4987950d210b",
                "indicator--560ba1f3-b144-41b7-9ccc-4408950d210b",
                "indicator--560ba1f3-44b4-4e12-ae54-48a6950d210b",
                "indicator--560ba1f3-66ac-4119-a033-41fc950d210b",
                "indicator--560ba1f3-df78-4253-baf2-481b950d210b",
                "indicator--560ba1f4-dad8-415d-a8e1-4e62950d210b",
                "indicator--560ba1f4-b614-424a-9645-4a68950d210b",
                "indicator--560ba1f4-9938-4f07-84ae-403c950d210b",
                "indicator--560ba1f4-57e4-4620-95ff-4dba950d210b",
                "indicator--560ba1f4-72c8-4c22-b89c-4c1d950d210b",
                "indicator--560ba1f5-738c-435d-ae28-4828950d210b",
                "indicator--560ba1f5-f4b8-436d-9e1d-47eb950d210b",
                "indicator--560ba1f5-fb7c-40f3-bd38-4289950d210b",
                "indicator--560ba1f5-7cb0-42d9-8f70-4fab950d210b",
                "indicator--560ba1f5-5cbc-4b85-8437-4ac8950d210b",
                "indicator--560ba1f5-ebe4-420a-a84d-48fe950d210b",
                "indicator--560ba1f6-ff1c-4d33-9ae7-4cf7950d210b",
                "indicator--560ba1f6-ffc4-4ee9-a295-4179950d210b",
                "indicator--560ba1f6-160c-491a-8292-41f3950d210b",
                "indicator--560ba1f6-59d0-446e-8630-4d0e950d210b",
                "indicator--560ba1f6-79d4-4e11-a86a-446f950d210b",
                "indicator--560ba1f7-5c78-49d1-bc6b-49e1950d210b",
                "indicator--560ba1f7-4b9c-4133-afd3-4b51950d210b",
                "indicator--560ba1f7-02f0-4aac-8db5-4635950d210b",
                "indicator--560ba1f7-d9d0-4b56-920b-4091950d210b",
                "indicator--560ba1f7-4f7c-4574-98ff-4940950d210b",
                "indicator--560ba1f8-b204-470d-bc54-46c4950d210b",
                "indicator--560ba1f8-d7d8-4852-aecf-469e950d210b",
                "indicator--560ba1f8-b698-4171-9143-40a8950d210b",
                "indicator--560ba1f8-4a74-49b2-9437-4dba950d210b",
                "indicator--560ba1f8-a320-448e-a86d-4213950d210b",
                "indicator--560ba1f8-43bc-4d6c-8519-4fc7950d210b",
                "indicator--560ba1f9-2c00-4da5-b963-458f950d210b",
                "indicator--560ba1f9-88d8-42e5-9d67-47c2950d210b",
                "indicator--560ba1f9-53b0-4bfd-8a01-4d04950d210b",
                "indicator--560ba1f9-f480-4609-9024-40c3950d210b",
                "indicator--560ba1f9-b124-4a6c-9106-4c4f950d210b",
                "indicator--560ba1fa-3aa8-478c-a62c-4c92950d210b",
                "indicator--560ba1fa-3be4-4a7e-881c-4c25950d210b",
                "indicator--560ba1fa-f31c-4bdc-86bf-4e85950d210b",
                "indicator--560ba1fa-4634-4f97-b700-41ae950d210b",
                "indicator--560ba1fb-4278-496d-8d91-4494950d210b",
                "indicator--560ba1fb-abac-4f92-83cc-4fe3950d210b",
                "indicator--560ba1fb-a318-4dee-92d5-4b01950d210b",
                "indicator--560ba1fc-99f4-438f-930b-4051950d210b",
                "indicator--560ba1fc-c738-416c-bf39-467b950d210b",
                "indicator--560ba1fc-2600-48c2-8684-44bf950d210b",
                "indicator--560ba1fc-f720-4a6a-b451-4b59950d210b",
                "indicator--560ba1fc-821c-4369-b639-49f3950d210b",
                "indicator--560ba1fc-8b00-41c4-8a67-4d90950d210b",
                "indicator--560ba1fd-7644-4cf6-aa9d-4050950d210b",
                "indicator--560ba1fd-0cb4-4ace-9d47-4189950d210b",
                "indicator--560ba1fd-00a4-4101-a263-484f950d210b",
                "indicator--560ba1fd-f788-43f2-ab15-4184950d210b",
                "indicator--560ba1fd-14ec-414e-919d-49f0950d210b",
                "indicator--560ba1fe-4b20-4d1e-b56a-4cee950d210b",
                "indicator--560ba1fe-f5a8-4a8b-9116-4d18950d210b",
                "indicator--560ba1fe-ef48-4d9f-9b64-4a42950d210b",
                "indicator--560ba1fe-b9b4-4a50-9f7d-4956950d210b",
                "indicator--560ba1fe-3a58-4db4-aeec-4c07950d210b",
                "indicator--560ba1ff-e100-4079-be1b-42e3950d210b",
                "indicator--560ba1ff-c030-4e3c-9cb1-49f6950d210b",
                "indicator--560ba1ff-6b8c-431d-a6f1-4502950d210b",
                "indicator--560ba1ff-d194-4e46-9ab6-48ca950d210b",
                "indicator--560ba1ff-bc90-419b-8114-465b950d210b",
                "indicator--560ba1ff-7324-4c8d-a090-4d55950d210b",
                "indicator--560ba200-2b20-42a5-a428-4c00950d210b",
                "indicator--560ba200-2bec-400d-adee-414f950d210b",
                "indicator--560ba200-f650-4940-aac0-4967950d210b",
                "indicator--560ba200-c710-4c6e-bfc2-4f6a950d210b",
                "indicator--560ba200-b8c8-4f45-850d-41a0950d210b",
                "indicator--560ba201-5304-4c89-96c9-43ce950d210b",
                "indicator--560ba201-5968-4ef4-9cc0-49b3950d210b",
                "indicator--560ba201-ff1c-4b75-a660-4292950d210b",
                "indicator--560ba201-d60c-4b08-8476-48da950d210b",
                "indicator--560ba201-fe0c-4ed6-9b1c-4a08950d210b",
                "indicator--560ba202-974c-49e1-a93e-4e4a950d210b",
                "indicator--560ba202-be1c-45b1-acfe-41c1950d210b",
                "indicator--560ba202-6f88-4bfa-b1bb-4374950d210b",
                "indicator--560ba202-a80c-4b4e-a8c2-4a7f950d210b",
                "indicator--560ba202-c284-4621-9190-416e950d210b",
                "indicator--560ba202-f290-4470-89b0-43d4950d210b",
                "indicator--560ba203-ea5c-4869-9a01-4dc0950d210b",
                "indicator--560ba203-b484-4fbb-a858-4c35950d210b",
                "indicator--560ba203-a12c-4ebc-aa05-425c950d210b",
                "indicator--560ba203-de34-4238-8643-4686950d210b",
                "indicator--560ba203-8bcc-4b16-92d2-4719950d210b",
                "indicator--560ba203-5004-42d8-a451-4c05950d210b",
                "indicator--560ba204-4718-47ea-810f-4fa7950d210b",
                "indicator--560ba204-2ec0-4ac0-b65e-4e9c950d210b",
                "indicator--560ba204-4c08-476c-90dc-4090950d210b",
                "indicator--560ba204-04c4-49de-aac8-4bfe950d210b",
                "indicator--560ba204-d198-4121-bd96-4eb5950d210b",
                "indicator--560ba205-75c0-499b-b0ab-4edc950d210b",
                "indicator--560ba205-1184-474a-928e-4572950d210b",
                "indicator--560ba205-335c-459f-b69a-4786950d210b",
                "indicator--560ba205-e11c-4bb5-bc20-4ce9950d210b",
                "indicator--560ba205-4a58-44a2-8d1d-46b4950d210b",
                "indicator--560ba206-df24-4cd0-939f-4578950d210b",
                "indicator--560ba206-8a00-4017-b4ab-413d950d210b",
                "indicator--560ba206-cde8-4d5d-aa60-47e3950d210b",
                "indicator--560ba206-9434-46b6-bc7e-419c950d210b",
                "indicator--560ba206-2b1c-4b2a-9f87-4557950d210b",
                "indicator--560ba206-4b78-4a61-a355-460a950d210b",
                "indicator--560ba207-4ef0-4904-a1c4-4772950d210b",
                "indicator--560ba207-34dc-4ac5-9919-45bc950d210b",
                "indicator--560ba207-d538-4734-b351-4a2c950d210b",
                "indicator--560ba207-fd4c-4a7b-bdf4-441a950d210b",
                "indicator--560ba207-4e74-4e3c-90bf-44e2950d210b",
                "indicator--560ba207-40d4-427a-a59e-43eb950d210b",
                "indicator--560ba208-8140-4dcb-ba15-46fe950d210b",
                "indicator--560ba208-6d70-4ce9-a74c-4142950d210b",
                "indicator--560ba208-8b40-4931-9bcf-456e950d210b",
                "indicator--560ba208-d068-406c-b10c-4521950d210b",
                "indicator--560ba208-4788-4a7e-aebe-4795950d210b",
                "indicator--560ba209-e008-4504-a5d9-4fc1950d210b",
                "indicator--560ba209-77e8-47d1-b585-4741950d210b",
                "indicator--560ba209-a8d4-496f-8798-45c3950d210b",
                "indicator--560ba209-9d50-4901-adb9-42fa950d210b",
                "indicator--560ba209-ced4-4a93-9cb4-4e60950d210b",
                "indicator--560ba20a-4450-4171-967e-4080950d210b",
                "indicator--560ba20a-9d00-4365-8256-4f7f950d210b",
                "indicator--560ba20a-3a80-46fd-a287-43b7950d210b",
                "indicator--560ba20a-431c-4138-a56f-4b38950d210b",
                "indicator--560ba20a-2448-4f99-baf4-442b950d210b",
                "indicator--560ba20a-a7dc-46d2-85a6-4c58950d210b",
                "indicator--560ba20b-7e7c-44d6-b147-4314950d210b",
                "indicator--560ba20b-8a70-4a07-b23f-4c04950d210b",
                "indicator--560ba20b-4760-46f1-b333-41fd950d210b",
                "indicator--560ba20b-65c0-4aa9-bfbf-43c2950d210b",
                "indicator--560ba20b-85d4-477a-9bd0-4628950d210b",
                "indicator--560ba20c-7290-4a37-9de1-4911950d210b",
                "indicator--560ba20c-c298-4cb1-ac02-47f5950d210b",
                "indicator--560ba20c-fcd8-446a-a5dc-4d92950d210b",
                "indicator--560ba20c-b340-42ec-a67e-495a950d210b",
                "indicator--560ba20c-f10c-48ab-be1e-4258950d210b",
                "indicator--560ba20d-03cc-41e4-99ef-4499950d210b",
                "indicator--560ba20d-aadc-46a1-81b2-420a950d210b",
                "indicator--560ba20d-59d4-4ada-ba4a-4679950d210b",
                "indicator--560ba20d-7f30-4a9f-8b37-4fb0950d210b",
                "indicator--560ba20d-1480-459c-8b10-4e4b950d210b",
                "indicator--560ba20d-1abc-42c9-8ae1-450b950d210b",
                "indicator--560ba20e-b30c-4aaa-af14-4f5c950d210b",
                "indicator--560ba20e-415c-4d05-932e-40eb950d210b",
                "indicator--560ba20e-fe50-4b8a-bd2e-41f3950d210b",
                "indicator--560ba20e-7860-4c4f-aaf1-4b18950d210b",
                "indicator--560ba20e-5384-4a0f-be7a-428b950d210b",
                "indicator--560ba20e-f710-4d47-8206-407b950d210b",
                "indicator--560ba20f-0668-4f3f-b42f-41cb950d210b",
                "indicator--560ba20f-8714-4094-a3f2-4b4c950d210b",
                "indicator--560ba20f-d144-4bfb-8375-4b03950d210b",
                "indicator--560ba20f-ab98-4e0f-9f92-4694950d210b",
                "indicator--560ba20f-df28-4d8f-8e81-465a950d210b",
                "indicator--560ba210-81ac-481d-9236-4303950d210b",
                "indicator--560ba210-0c34-4627-ae3b-4371950d210b",
                "indicator--560ba210-7f98-4a0c-96b4-48ee950d210b",
                "indicator--560ba210-41ec-46f3-b481-41d9950d210b",
                "indicator--560ba210-4ec4-43ac-9b71-4001950d210b",
                "indicator--560ba211-fec8-4395-bea8-4dd9950d210b",
                "indicator--560ba211-85c4-47e8-908a-494e950d210b",
                "indicator--560ba211-1934-483f-b07f-4193950d210b",
                "indicator--560ba211-0b48-4400-89d0-45b7950d210b",
                "indicator--560ba211-a10c-49ab-bffa-42d3950d210b",
                "indicator--560ba211-7fd0-4574-9422-4068950d210b",
                "indicator--560ba212-e960-4ae3-ad29-44a7950d210b",
                "indicator--560ba212-a56c-4bfc-9e21-408a950d210b",
                "indicator--560ba212-74d0-486b-9d0e-44b3950d210b",
                "indicator--560ba212-7d78-42c8-a423-42e4950d210b",
                "indicator--560ba212-4c18-4808-bf5c-4444950d210b",
                "indicator--560ba213-0ba4-4c74-86c9-4349950d210b",
                "indicator--560ba213-447c-48db-9ca9-4f5a950d210b",
                "indicator--560ba213-407c-44b0-b66a-4286950d210b",
                "indicator--560ba213-68f4-4911-83c1-4918950d210b",
                "indicator--560ba213-8870-47b1-976e-40ac950d210b",
                "indicator--560ba214-d3d8-4e8b-b7eb-43f6950d210b",
                "indicator--560ba214-1fe8-4c99-9b2a-4aa4950d210b",
                "indicator--560ba214-6498-42ae-a01e-434e950d210b",
                "indicator--560ba214-0b24-4cc2-b5e2-4b67950d210b",
                "indicator--560ba214-5364-4191-99fd-4329950d210b",
                "indicator--560ba214-1ea4-48e7-aa5d-4d94950d210b",
                "indicator--560ba215-1a90-4642-8fc5-4881950d210b",
                "indicator--560ba215-9048-414c-b175-40e7950d210b",
                "indicator--560ba215-2748-4271-8c53-4683950d210b",
                "indicator--560ba215-dd5c-48ec-ae4c-483c950d210b",
                "indicator--560ba215-214c-43ba-8b55-4848950d210b",
                "indicator--560ba215-c570-4918-aaa4-4c47950d210b",
                "indicator--560ba216-c7f0-4488-b804-42a9950d210b",
                "indicator--560ba216-cadc-45cf-a482-41e0950d210b",
                "indicator--560ba216-cc48-4e9f-b8a0-4cb1950d210b",
                "indicator--560ba216-2220-4d22-8c87-494a950d210b",
                "indicator--560ba216-dfb0-4525-9da2-4b86950d210b",
                "indicator--560ba217-1e74-4039-805f-46e0950d210b",
                "indicator--560ba217-1560-43ad-aa6c-4f29950d210b",
                "indicator--560ba217-5370-43a4-9cda-4152950d210b",
                "indicator--560ba217-74a4-46f2-9e18-438a950d210b",
                "indicator--560ba217-4964-4804-8941-400b950d210b",
                "indicator--560ba218-4d20-4b9a-844b-44b5950d210b",
                "indicator--560ba218-f120-44c3-bf63-4eff950d210b",
                "indicator--560ba218-7ae0-4bd0-987e-4ab6950d210b",
                "indicator--560ba218-0de4-44af-afb4-4122950d210b",
                "indicator--560ba218-e00c-41b4-bad3-4a30950d210b",
                "indicator--560ba218-ac70-45c1-9f28-436f950d210b",
                "indicator--560ba219-d958-4f0a-85f4-4331950d210b",
                "indicator--560ba219-8d88-49c9-8bd3-435e950d210b",
                "indicator--560ba219-c258-4f20-a55b-40f3950d210b",
                "indicator--560ba219-5bbc-41e4-9f4d-455f950d210b",
                "indicator--560ba219-a8dc-4d23-ab86-4b31950d210b",
                "indicator--560ba219-5d24-4ab4-9250-4335950d210b",
                "indicator--560ba21a-66a4-4058-aa48-4ac7950d210b",
                "indicator--560ba21a-c55c-4400-95f4-48a8950d210b",
                "indicator--560ba21a-a208-435c-8ad1-44e8950d210b",
                "indicator--560ba21a-7f1c-4270-be6c-41a8950d210b",
                "indicator--560ba21a-b0d4-4814-a705-48f8950d210b",
                "indicator--560ba21b-3d2c-4870-8361-45c2950d210b",
                "indicator--560ba21b-27d0-4969-9b6e-4b50950d210b",
                "indicator--560ba21b-5ad0-45ad-897a-414d950d210b",
                "indicator--560ba21b-9cb0-4909-8459-461a950d210b",
                "indicator--560ba21b-ed34-425f-8e6b-4583950d210b",
                "indicator--560ba21c-0f1c-4fc0-a0a8-47a8950d210b",
                "indicator--560ba21c-184c-4b31-aa64-4ab4950d210b",
                "indicator--560ba21c-8498-47f7-8ee0-4ae1950d210b",
                "indicator--560ba21c-96a8-4924-936b-4f6c950d210b",
                "indicator--560ba21c-757c-45a8-9892-4588950d210b",
                "indicator--560ba21c-fa58-4e59-9f68-4b57950d210b",
                "indicator--560ba21d-0b2c-416b-a239-424c950d210b",
                "indicator--560ba21d-1e14-4348-8a8c-4d0b950d210b",
                "indicator--560ba21d-c19c-4bc1-9aba-424a950d210b",
                "indicator--560ba21d-0b20-4d1a-9c51-4447950d210b",
                "indicator--560ba21d-c10c-439d-9aca-4d5e950d210b",
                "indicator--560ba21d-9a64-4274-ad13-4551950d210b",
                "indicator--560ba21e-16ac-4503-a2b1-47c1950d210b",
                "indicator--560ba21e-5898-4187-8794-4cfc950d210b",
                "indicator--560ba21e-cd08-4f7c-8193-4fb5950d210b",
                "indicator--560ba21e-8b98-44fd-8974-4977950d210b",
                "indicator--560ba21e-3548-4992-afcb-4845950d210b",
                "indicator--560ba21f-0dac-4e13-8a4f-4df5950d210b",
                "indicator--560ba21f-e758-4f24-bf4e-4947950d210b",
                "indicator--560ba21f-4180-4c0a-a6da-4f63950d210b",
                "indicator--560ba21f-13c8-4da3-ad72-407a950d210b",
                "indicator--560ba21f-4130-4a1b-925e-4bbd950d210b",
                "indicator--560ba220-8c60-447c-be2b-472c950d210b",
                "indicator--560ba220-c90c-43df-a4f5-4bde950d210b",
                "indicator--560ba220-f354-4947-b572-4669950d210b",
                "indicator--560ba220-61e4-4a7b-80fd-45c5950d210b",
                "indicator--560ba220-f3c8-4611-a4ab-48f1950d210b",
                "indicator--560ba221-e4fc-4771-a063-4377950d210b",
                "indicator--560ba221-53d8-43a3-a687-4915950d210b",
                "indicator--560ba221-b990-4d29-aef2-4513950d210b",
                "indicator--560ba221-beec-4d16-9dff-4066950d210b",
                "indicator--560ba221-b710-46ee-a5a5-454d950d210b",
                "indicator--560ba222-605c-4daa-b2a6-4c6d950d210b",
                "indicator--560ba222-9fb8-4186-ac08-432b950d210b",
                "indicator--560ba222-5c48-4d58-8aba-4db5950d210b",
                "indicator--560ba222-f2a0-4609-956e-4185950d210b",
                "indicator--560ba222-ccd0-4d30-8a4d-4d91950d210b",
                "indicator--560ba222-e3e8-48f0-ad74-41b7950d210b",
                "indicator--560ba223-3194-4de1-b2c7-4336950d210b",
                "indicator--560ba223-16bc-4e7a-8a3d-4e7f950d210b",
                "indicator--560ba223-e0c0-4741-bbb8-4f80950d210b",
                "indicator--560ba223-d50c-4a25-8e3c-4e72950d210b",
                "indicator--560ba223-aea0-403f-8cba-473e950d210b",
                "indicator--560ba224-50dc-49b8-8e1f-409c950d210b",
                "indicator--560ba224-0e18-4b27-8073-4978950d210b",
                "indicator--560ba224-fae4-474d-a869-47ed950d210b",
                "indicator--560ba224-ad00-4e4b-b43b-499d950d210b",
                "indicator--560ba224-b278-4c14-b7ac-4e63950d210b",
                "indicator--560ba224-b34c-434b-b52d-4fa1950d210b",
                "indicator--560ba225-073c-4faf-a7ee-4649950d210b",
                "indicator--560ba225-4a9c-4b90-8076-40c8950d210b",
                "indicator--560ba225-b188-4635-83d1-471f950d210b",
                "indicator--560ba225-46c0-4f45-87c2-4fe3950d210b",
                "indicator--560ba225-8c00-465f-afd5-4f45950d210b",
                "indicator--560ba226-b0ac-4384-b539-49e2950d210b",
                "indicator--560ba226-4e40-438c-b602-485e950d210b",
                "indicator--560ba226-c68c-4aa4-9c90-4ae0950d210b",
                "indicator--560ba226-b940-45fb-bfd9-4322950d210b",
                "indicator--560ba226-7944-412b-8f22-4226950d210b",
                "indicator--560ba226-f9fc-4819-b2ac-4eee950d210b",
                "indicator--560ba227-77b0-4420-9c58-469f950d210b",
                "indicator--560ba227-2de4-41f7-a293-4c97950d210b",
                "indicator--560ba227-58f8-42ad-bb94-46ab950d210b",
                "indicator--560ba227-13a8-4076-9d91-4333950d210b",
                "indicator--560ba227-a410-4940-855f-4873950d210b",
                "indicator--560ba228-c6c0-4baf-97dc-4920950d210b",
                "indicator--560ba228-b63c-48ee-b671-46e0950d210b",
                "indicator--560ba228-451c-45ef-b084-41df950d210b",
                "indicator--560ba228-f1a4-47db-9792-4c59950d210b",
                "indicator--560ba228-a284-4286-9d95-410c950d210b",
                "indicator--560ba228-f060-4976-b6b0-44df950d210b",
                "indicator--560ba229-e8a8-4eb6-a977-4a27950d210b",
                "indicator--560ba229-d334-4ee8-88f5-4720950d210b",
                "indicator--560ba229-2800-49fb-a416-46ba950d210b",
                "indicator--560ba229-8200-48be-99b9-48d3950d210b",
                "indicator--560ba229-d930-4dbf-9b29-4012950d210b",
                "indicator--560ba22a-bd38-4d9b-bc77-4818950d210b",
                "indicator--560ba22a-4114-47f6-aa0c-4475950d210b",
                "indicator--560ba22a-f058-48fe-8825-4931950d210b",
                "indicator--560ba22a-12f8-4141-ac16-4a8a950d210b",
                "indicator--560ba22a-f8e0-4a93-83b7-4b5a950d210b",
                "indicator--560ba22b-0ef0-4f78-8c79-4e5c950d210b",
                "indicator--560ba22b-d610-4f35-91d5-4120950d210b",
                "indicator--560ba22b-3420-402f-9d84-46c1950d210b",
                "indicator--560ba22b-98f4-4a72-b697-4344950d210b",
                "indicator--560ba22b-5df0-4e8c-8bc1-43a6950d210b",
                "indicator--560ba22b-b1dc-48f3-bde9-4281950d210b",
                "indicator--560ba22c-e0c4-4bca-a0f6-4f95950d210b",
                "indicator--560ba22c-cd4c-4f3b-9d1b-4ed9950d210b",
                "indicator--560ba22c-ad5c-481c-b062-447e950d210b",
                "indicator--560ba22c-4efc-436b-9811-4f5a950d210b",
                "indicator--560ba22c-b59c-42c6-9f7e-47b2950d210b",
                "indicator--560ba22c-f7fc-4151-87a8-4656950d210b",
                "indicator--560ba22d-93a0-4dc4-adf7-4456950d210b",
                "indicator--560ba22d-01a0-425f-9b28-4a8d950d210b",
                "indicator--560ba22d-a1b0-45b0-b2a4-49f3950d210b",
                "indicator--560ba22d-61d8-4b04-bba5-4fd5950d210b",
                "indicator--560ba22d-3e60-4f27-a2d4-48b3950d210b",
                "indicator--560ba22e-83e0-407c-b765-452f950d210b",
                "indicator--560ba22e-154c-4065-9da0-4527950d210b",
                "indicator--560ba22e-b3a8-4240-8037-4a5d950d210b",
                "indicator--560ba22e-ca28-4b3e-a2bb-4223950d210b",
                "indicator--560ba22e-e27c-49f1-bb3c-4b81950d210b",
                "indicator--560ba22f-b4c8-413e-9a7e-40a7950d210b",
                "indicator--560ba22f-6dd0-4280-8797-469a950d210b",
                "indicator--560ba22f-bccc-4267-941f-41a2950d210b",
                "indicator--560ba22f-ca98-4280-9844-4631950d210b",
                "indicator--560ba22f-811c-4721-8ff4-42d0950d210b",
                "indicator--560ba22f-0f7c-45a0-8cd3-4e83950d210b",
                "indicator--560ba230-b72c-4488-9968-4e85950d210b",
                "indicator--560ba230-8094-4774-814f-4c59950d210b",
                "indicator--560ba230-bf40-4465-8ab2-4bba950d210b",
                "indicator--560ba230-869c-4f53-8d81-4e33950d210b",
                "indicator--560ba230-f3a4-46a9-9c34-4a63950d210b",
                "indicator--560ba230-e598-49e7-9f2a-47ba950d210b",
                "indicator--560ba231-3208-4368-8ef6-4d68950d210b",
                "indicator--560ba231-0910-4c85-94c2-4aab950d210b",
                "indicator--560ba231-8290-4748-9783-449f950d210b",
                "indicator--560ba231-d058-412b-898b-46a0950d210b",
                "indicator--560ba231-54c4-470d-93fc-400a950d210b",
                "indicator--560ba232-a758-481c-b8d8-4e67950d210b",
                "indicator--560ba232-d658-4270-9181-4f82950d210b",
                "indicator--560ba232-af88-4ddd-a7ce-41b8950d210b",
                "indicator--560ba232-86f0-4f25-b571-4d0f950d210b",
                "indicator--560ba232-db14-4b5d-85fd-4050950d210b",
                "indicator--560ba233-05a0-4c00-92ce-43c4950d210b",
                "indicator--560ba233-4694-47af-90ef-468a950d210b",
                "indicator--560ba233-97b4-4e9c-a077-4ba7950d210b",
                "indicator--560ba233-18e0-462d-bcbd-4494950d210b",
                "indicator--560ba233-5848-4135-b618-4759950d210b",
                "indicator--560ba233-4f6c-4678-a8d2-48d5950d210b",
                "indicator--560ba234-9650-4bf8-9e5c-484c950d210b",
                "indicator--560ba234-32f8-496a-87c6-43e9950d210b",
                "indicator--560ba234-9b58-4327-9d16-4079950d210b",
                "indicator--560ba234-7334-41f9-9c1a-4c6c950d210b",
                "indicator--560ba234-ce88-49d7-b0db-4d51950d210b",
                "indicator--560ba235-6cc4-4427-b62f-4160950d210b",
                "indicator--560ba235-6f44-4bed-9bf7-43c8950d210b",
                "indicator--560ba235-ee18-4de6-88a8-488d950d210b",
                "indicator--560ba235-c290-4f5c-945b-41b8950d210b",
                "indicator--560ba235-70a8-48d8-b295-4541950d210b",
                "indicator--560ba236-40d0-40b7-bcb3-4eba950d210b",
                "indicator--560ba236-fad4-4b9d-b202-4757950d210b",
                "indicator--560ba236-eb3c-46a1-8057-4e5e950d210b",
                "indicator--560ba236-55c0-4b07-b84a-4289950d210b",
                "indicator--560ba236-3e9c-420b-9081-45ed950d210b",
                "indicator--560ba236-e0b0-4e55-9b80-43ec950d210b",
                "indicator--560ba237-1bd4-4daa-b5d4-42c1950d210b",
                "indicator--560ba237-08b4-4827-861a-407a950d210b",
                "indicator--560ba237-7080-4396-85b0-4503950d210b",
                "indicator--560ba237-ac40-499a-948c-47b5950d210b",
                "indicator--560ba237-ade8-495c-964e-4efe950d210b",
                "indicator--560ba238-80a4-41e7-a0e7-4ba9950d210b",
                "indicator--560ba238-68c8-448b-83f5-4a4e950d210b",
                "indicator--560ba238-2788-4054-b8d7-4fed950d210b",
                "indicator--560ba238-5678-4f3d-811b-40bb950d210b",
                "indicator--560ba238-0560-4524-aef9-42a0950d210b",
                "indicator--560ba239-a838-4559-b82b-4976950d210b",
                "indicator--560ba239-d784-4189-ae35-4cfb950d210b",
                "indicator--560ba239-2180-425e-b51a-4d81950d210b",
                "indicator--560ba239-15a8-4941-90bd-49a3950d210b",
                "indicator--560ba239-66d4-45b9-93b5-49fb950d210b",
                "indicator--560ba239-846c-4e94-855b-4435950d210b",
                "indicator--560ba23a-dc28-4030-8b8c-4370950d210b",
                "indicator--560ba23a-9088-4805-a97e-4c0c950d210b",
                "indicator--560ba23a-45b4-435f-8676-4fb2950d210b",
                "indicator--560ba23a-0fbc-4b30-ad58-408f950d210b",
                "indicator--560ba23a-6d74-4a1d-a744-4650950d210b",
                "indicator--560ba23a-266c-4b52-a029-479e950d210b",
                "indicator--560ba23b-89fc-49eb-beb4-4ea9950d210b",
                "indicator--560ba23b-cacc-41c5-a5a2-46ca950d210b",
                "indicator--560ba23b-1d98-45de-aa30-447e950d210b",
                "indicator--560ba23b-42c0-45bb-b1e5-421b950d210b",
                "indicator--560ba23c-784c-4b97-a80e-4b16950d210b",
                "indicator--560ba23b-aa10-4d7e-b45e-41fa950d210b",
                "indicator--560ba23c-9190-4fbd-baf6-43cc950d210b",
                "indicator--560ba23c-0668-4475-b38b-4ed4950d210b",
                "indicator--560ba23c-832c-4be9-96a6-445c950d210b",
                "indicator--560ba23c-e354-4e74-856c-4aec950d210b",
                "indicator--560ba23c-6d98-4f0f-80e8-471a950d210b",
                "indicator--560ba23c-7340-40f9-9d17-4466950d210b",
                "indicator--560ba23c-bbe8-4038-bb17-484d950d210b",
                "indicator--560ba23d-0b30-4da9-b6ff-4cd3950d210b",
                "indicator--560ba23d-90a8-459d-b001-46f0950d210b",
                "indicator--560ba23d-2fd0-43f5-bea4-438c950d210b",
                "indicator--560ba23d-a508-4f30-ab52-4e9a950d210b",
                "indicator--560ba23d-ae48-42d8-981b-461b950d210b",
                "indicator--560ba23d-e7a8-40cc-bb66-4252950d210b",
                "indicator--560ba23d-cea8-4542-87f0-40fc950d210b",
                "indicator--560ba23e-9554-4fe8-94c0-4884950d210b",
                "indicator--560ba23e-0564-40b0-a765-4542950d210b",
                "indicator--560ba23e-c6dc-41f9-9f85-461a950d210b",
                "indicator--560ba23e-018c-4abf-a57c-448c950d210b",
                "indicator--560ba23e-b384-4150-b848-4721950d210b",
                "indicator--560ba23e-3558-4590-8cf1-4159950d210b",
                "indicator--560ba23e-eb50-4935-a594-491d950d210b",
                "indicator--560ba23e-258c-46d1-bcb3-4ec7950d210b",
                "indicator--560ba23f-7678-465e-baa5-492e950d210b",
                "indicator--560ba23f-ddf8-44c5-936f-47d4950d210b",
                "indicator--560ba23f-900c-4fb9-9412-4c6a950d210b",
                "indicator--560ba23f-9d38-413f-a649-4f25950d210b",
                "indicator--560ba23f-e784-459d-9502-4c09950d210b",
                "indicator--560ba23f-ab9c-4a0c-966f-4bc8950d210b",
                "indicator--560ba23f-d414-4f1b-92a3-4548950d210b",
                "indicator--560ba240-0938-4c82-9505-4838950d210b",
                "indicator--560ba23f-0390-4040-99a6-41e4950d210b",
                "indicator--560ba240-a5d8-4194-bda6-4091950d210b",
                "indicator--560ba240-8e18-4c25-94e8-4266950d210b",
                "indicator--560ba240-e324-494b-9279-4aa3950d210b",
                "indicator--560ba240-0470-45d4-93de-4bdb950d210b",
                "indicator--560ba240-79ac-42b3-827d-4022950d210b",
                "indicator--560ba240-2d2c-436e-8a9c-42e0950d210b",
                "indicator--560ba240-e640-4f30-9423-4095950d210b",
                "indicator--560ba241-a024-412c-aa39-4478950d210b",
                "indicator--560ba241-f9f0-42da-956d-45fd950d210b",
                "indicator--560ba241-59e4-46b6-a2f7-436b950d210b",
                "indicator--560ba241-7eb0-40e8-9673-4165950d210b",
                "indicator--560ba241-e35c-4d1a-84de-4437950d210b",
                "indicator--560ba241-7374-4b8c-89c9-4400950d210b",
                "indicator--560ba241-ad34-4a38-ad12-4d9a950d210b",
                "indicator--560ba241-ba20-4bca-8db5-4c5d950d210b",
                "indicator--560ba242-948c-402c-b143-45ec950d210b",
                "indicator--560ba242-6884-4449-9e7a-4267950d210b",
                "indicator--560ba242-6fa8-4e49-b334-4b8a950d210b",
                "indicator--560ba242-2a1c-4c58-9631-4d18950d210b",
                "indicator--560ba242-d384-47a4-ac7a-42a3950d210b",
                "indicator--560ba242-4cd8-4027-a8d4-42a9950d210b",
                "indicator--560ba242-6454-4f17-8325-4aab950d210b",
                "indicator--560ba243-8a20-4dc2-b348-40a3950d210b",
                "indicator--560ba242-08b8-417e-910e-4015950d210b",
                "indicator--560ba243-09f4-4164-b667-458b950d210b",
                "indicator--560ba243-7fb0-4875-a8be-45ed950d210b",
                "indicator--560ba243-ace4-4a9c-8b30-4326950d210b",
                "indicator--560ba243-4554-4f43-896f-4aa6950d210b",
                "indicator--560ba243-c7d0-4b15-be3e-4b8c950d210b",
                "indicator--560ba243-a86c-4ca0-96f5-4d8a950d210b",
                "indicator--560ba244-66c8-4dcd-a731-4217950d210b",
                "indicator--560ba244-3670-4791-a76d-480b950d210b",
                "indicator--560ba244-b280-454d-be8f-40b0950d210b",
                "indicator--560ba244-003c-43ff-b67a-4b88950d210b",
                "indicator--560ba244-3cb4-44d4-acba-45b9950d210b",
                "indicator--560ba244-a028-40e4-a23e-42c8950d210b",
                "indicator--560ba244-1170-461d-a4b8-47bd950d210b",
                "indicator--560ba244-b790-4dde-9623-4f96950d210b",
                "indicator--560ba244-e670-48d7-ba36-4502950d210b",
                "indicator--560ba245-0b88-43c7-a13d-4b4f950d210b",
                "indicator--560ba245-aaf4-4667-9858-4cd8950d210b",
                "indicator--560ba245-1390-45c7-8b5d-4176950d210b",
                "indicator--560ba245-e500-4838-a8e5-4a88950d210b",
                "indicator--560ba245-c57c-4168-a26d-4830950d210b",
                "indicator--560ba245-6838-4f06-bbd5-4aeb950d210b",
                "indicator--560ba245-6c44-4fd0-b6bc-4dc9950d210b",
                "indicator--560ba246-ef00-4303-81d5-469a950d210b",
                "indicator--560ba246-f2cc-4824-a411-46a0950d210b",
                "indicator--560ba246-31a4-4ea5-b20b-418d950d210b",
                "indicator--560ba246-5b50-43c6-a2fd-4f2a950d210b",
                "indicator--560ba246-bb38-409e-b5fc-446f950d210b",
                "indicator--560ba246-fb48-4386-8b7e-4c43950d210b",
                "indicator--560ba246-2d8c-4ec5-b4dd-476f950d210b",
                "indicator--560ba246-57c4-4d19-b31b-46f1950d210b",
                "indicator--560ba247-f6d8-476e-8a6e-490c950d210b",
                "indicator--560ba247-e66c-40e1-ab18-4038950d210b",
                "indicator--560ba247-1064-4c41-ac8e-40a5950d210b",
                "indicator--560ba247-a034-4c47-b311-438e950d210b",
                "indicator--560ba247-e340-4488-8a9f-4e6c950d210b",
                "indicator--560ba247-d9fc-4048-b6ee-4dbe950d210b",
                "indicator--560ba247-543c-4c4c-a7ff-4093950d210b",
                "indicator--560ba247-8298-4152-8291-418a950d210b",
                "indicator--560ba247-a448-47a6-83e9-462f950d210b",
                "indicator--560ba248-1ef0-4792-bc37-4179950d210b",
                "indicator--560ba248-4560-411c-97f8-415f950d210b",
                "indicator--560ba248-2fec-44ab-bce9-4c17950d210b",
                "indicator--560ba248-1bf8-4e22-b3a6-48ab950d210b",
                "indicator--560ba248-6138-4278-bf3b-4177950d210b",
                "indicator--560ba248-0354-4a55-bf9a-4517950d210b",
                "indicator--560ba248-18a8-4b44-a444-4b49950d210b",
                "indicator--560ba249-6cc0-4ea7-9f6a-45c8950d210b",
                "indicator--560ba249-fdac-4e4a-9258-4a43950d210b",
                "indicator--560ba249-9384-459e-8854-4743950d210b",
                "indicator--560ba249-500c-4ea7-882f-478b950d210b",
                "indicator--560ba249-2850-47ca-81d8-446b950d210b",
                "indicator--560ba249-ade4-4702-ae19-4189950d210b",
                "indicator--560ba249-6298-4068-8a43-45b1950d210b",
                "indicator--560ba249-e2ac-45ce-995f-4d9e950d210b",
                "indicator--560ba24a-b5c8-46aa-8120-458e950d210b",
                "indicator--560ba24a-e388-42d7-a476-4881950d210b",
                "indicator--560ba24a-8198-418e-b61d-4873950d210b",
                "indicator--560ba24a-dc98-46f4-b55f-4927950d210b",
                "indicator--560ba24a-3aa8-4f1e-becb-43c0950d210b",
                "indicator--560ba24a-2bf0-4526-b3f5-42b3950d210b",
                "indicator--560ba24a-ab24-4896-9d3f-4b7b950d210b",
                "indicator--560ba24b-47c4-4e71-bc86-4751950d210b",
                "indicator--560ba24a-246c-4499-b090-4f62950d210b",
                "indicator--560ba24b-aa94-4eb8-a912-4d43950d210b",
                "indicator--560ba24b-6e6c-4cdb-bd78-4240950d210b",
                "indicator--560ba24b-0b90-4026-8a0a-4bb7950d210b",
                "indicator--560ba24b-76dc-45ce-9f92-4f6f950d210b",
                "indicator--560ba24b-9784-49bb-b7ab-4ebc950d210b",
                "indicator--560ba24b-f638-459c-ade9-4bcc950d210b",
                "indicator--560ba24b-86d0-48d1-b0bd-42ff950d210b",
                "indicator--560ba24c-8a7c-4b50-ac2e-43bf950d210b",
                "indicator--560ba24c-9a08-48d2-966c-4e1f950d210b",
                "indicator--560ba24c-d680-441a-81e5-4b56950d210b",
                "indicator--560ba24c-85d0-46cb-8c72-44a4950d210b",
                "indicator--560ba24c-5404-453a-ad42-446b950d210b",
                "indicator--560ba24c-1a18-4942-a6d2-4bd1950d210b",
                "indicator--560ba24c-f118-43fc-92e3-43f8950d210b",
                "indicator--560ba24c-5f2c-4f03-beee-42c7950d210b",
                "indicator--560ba24d-54b0-4a7f-b598-405c950d210b",
                "indicator--560ba24d-7be0-43f5-b2bf-4a06950d210b",
                "indicator--560ba24d-6f94-4404-917a-461f950d210b",
                "indicator--560ba24d-1f40-46f4-9edf-41a1950d210b",
                "indicator--560ba24d-da04-4b45-8dde-4f1a950d210b",
                "indicator--560ba24d-bef4-497c-b722-4fa7950d210b",
                "indicator--560ba24d-f048-4e57-9f13-47a6950d210b",
                "indicator--560ba24e-4768-48e6-835d-4b45950d210b",
                "indicator--560ba24d-73dc-49f5-8960-426e950d210b",
                "indicator--560ba24e-9b10-4059-8863-4911950d210b",
                "indicator--560ba24e-7ee0-40ee-adb8-434d950d210b",
                "indicator--560ba24e-559c-4e01-9b4e-4a63950d210b",
                "indicator--560ba24e-d4fc-45f3-bf04-46dc950d210b",
                "indicator--560ba24e-92f4-4922-ade1-486e950d210b",
                "indicator--560ba24e-bde8-4e3f-b9af-426d950d210b",
                "indicator--560ba24f-43b0-4885-bada-4c31950d210b",
                "indicator--560ba24f-16b4-401d-9c84-4fde950d210b",
                "indicator--560ba24f-1314-4f3e-99f2-4f11950d210b",
                "indicator--560ba24f-f244-4799-8b61-4286950d210b",
                "indicator--560ba24f-08e8-4447-80b3-4df4950d210b",
                "indicator--560ba24f-58f8-4a08-af71-461c950d210b",
                "indicator--560ba24f-c430-4cea-9a5d-452e950d210b",
                "indicator--560ba250-2420-45d4-86aa-4218950d210b",
                "indicator--560ba24f-cabc-4ef8-afa3-48a1950d210b",
                "indicator--560ba250-0654-4482-a290-4421950d210b",
                "indicator--560ba250-cc6c-4a30-a4c9-4d6c950d210b",
                "indicator--560ba250-be48-44e4-a3ef-4753950d210b",
                "indicator--560ba250-deec-4dbb-8a8e-4c5c950d210b",
                "indicator--560ba250-8678-4aa1-a71a-464e950d210b",
                "indicator--560ba250-98f8-4d57-8d12-428d950d210b",
                "indicator--560ba250-41c0-4622-abd1-40e8950d210b",
                "indicator--560ba251-be84-4f8a-83f9-4c20950d210b",
                "indicator--560ba251-c3cc-4115-9729-44a8950d210b",
                "indicator--560ba251-b184-4701-82a5-4fba950d210b",
                "indicator--560ba251-7e80-488c-997a-40c2950d210b",
                "indicator--560ba251-2ee0-4e47-bd02-4798950d210b",
                "indicator--560ba251-4648-497f-9681-4015950d210b",
                "indicator--560ba251-a6ac-4f3f-badb-4d72950d210b",
                "indicator--560ba251-4600-4cf0-8c89-4fc7950d210b",
                "indicator--560ba252-5830-4210-b15b-4c6f950d210b",
                "indicator--560ba252-debc-4e75-91fa-4f19950d210b",
                "indicator--560ba252-3c38-44bc-9d7c-486a950d210b",
                "indicator--560ba252-ce5c-4a67-9717-4289950d210b",
                "indicator--560ba252-4f90-44f3-bfb8-418a950d210b",
                "indicator--560ba252-a5ec-4d7c-a221-4114950d210b",
                "indicator--560ba252-1c48-4037-bedb-4f14950d210b",
                "indicator--560ba253-df24-4d3a-a5a8-4c5b950d210b",
                "indicator--560ba252-8b0c-4e92-b535-4576950d210b",
                "indicator--560ba253-6d44-46ab-9a0e-4e82950d210b",
                "indicator--560ba253-ccb4-4203-9401-404a950d210b",
                "indicator--560ba253-20e4-40eb-a73a-431c950d210b",
                "indicator--560ba253-52f0-4bb5-ad95-4c3b950d210b",
                "indicator--560ba253-0f8c-453b-b738-4cab950d210b",
                "indicator--560ba253-5d18-4aa9-8bd3-4347950d210b",
                "indicator--560ba253-6e04-4a59-a608-450b950d210b",
                "indicator--560ba254-b11c-4176-82fb-415f950d210b",
                "indicator--560ba254-ff5c-455c-ad0d-40c7950d210b",
                "indicator--560ba254-281c-4226-8a4d-4877950d210b",
                "indicator--560ba254-85c4-4b9f-8dea-4222950d210b",
                "indicator--560ba254-a5b4-4cf4-8bf1-46ab950d210b",
                "indicator--560ba254-a19c-4046-901c-4e89950d210b",
                "indicator--560ba254-25dc-443e-886a-42f8950d210b",
                "indicator--560ba255-0760-4adb-a844-4853950d210b",
                "indicator--560ba255-8378-45de-8c92-4c79950d210b",
                "indicator--560ba255-30ac-4f3e-a65c-4503950d210b",
                "indicator--560ba255-f6b4-439a-be14-4793950d210b",
                "indicator--560ba255-23e4-4576-9551-46e6950d210b",
                "indicator--560ba255-1ad0-4c23-a2a5-4213950d210b",
                "indicator--560ba255-9230-466e-a596-4750950d210b",
                "indicator--560ba255-a4c8-42e7-aa69-4eab950d210b",
                "indicator--560ba256-5204-4cf5-8b10-4203950d210b",
                "indicator--560ba256-3e5c-4cc8-849e-4405950d210b",
                "indicator--560ba256-a5c4-480e-b69d-46e5950d210b",
                "indicator--560ba256-ef18-4ce1-b7e5-4fbc950d210b",
                "indicator--560ba256-c8e8-40f8-81d2-4d18950d210b",
                "indicator--560ba256-bf84-47c8-b29d-4e8b950d210b",
                "indicator--560ba256-e8d4-4606-9e44-4f33950d210b",
                "indicator--560ba257-7bb8-46b6-8cec-4677950d210b",
                "indicator--560ba256-479c-4134-b228-4ed7950d210b",
                "indicator--560ba257-28cc-4de5-b4d3-4485950d210b",
                "indicator--560ba257-ed20-4478-9ba1-4701950d210b",
                "indicator--560ba257-b7ac-46ca-8ee0-498a950d210b",
                "indicator--560ba257-a480-4b46-af2b-44d9950d210b",
                "indicator--560ba257-539c-489a-bc17-42e7950d210b",
                "indicator--560ba257-f0ec-4f0d-beda-40c4950d210b",
                "indicator--560ba257-80d0-4016-8621-419e950d210b",
                "indicator--560ba258-3f98-4d2b-b470-4a95950d210b",
                "indicator--560ba258-b854-4a04-b15e-4f2c950d210b",
                "indicator--560ba258-a69c-407f-8d86-4f3d950d210b",
                "indicator--560ba258-aaf0-4951-ad9b-4160950d210b",
                "indicator--560ba258-345c-498b-a1f5-4bc2950d210b",
                "indicator--560ba258-fa08-46fc-ad39-409e950d210b",
                "indicator--560ba258-2990-4bec-bad9-437a950d210b",
                "indicator--560ba258-f9b8-49c0-8626-4074950d210b",
                "indicator--560ba259-4bf0-470f-aa6c-46c9950d210b",
                "indicator--560ba259-d92c-431f-ac9d-4b5e950d210b",
                "indicator--560ba259-b9d0-4ba2-8831-4f47950d210b",
                "indicator--560ba259-2db8-4834-9f0c-4e89950d210b",
                "indicator--560ba259-7594-449a-b43f-4ed2950d210b",
                "indicator--560ba259-37b4-486a-a006-473e950d210b",
                "indicator--560ba259-c974-44d7-9537-475f950d210b",
                "indicator--560ba25a-9e9c-4a9f-ab59-4620950d210b",
                "indicator--560ba25a-cf54-4c98-915d-46ce950d210b",
                "indicator--560ba25a-68bc-4cbc-ae01-4f88950d210b",
                "indicator--560ba25a-c7ec-4855-aa05-419e950d210b",
                "indicator--560ba25a-43fc-4e53-be80-4099950d210b",
                "indicator--560ba25a-affc-49f2-bf00-42f2950d210b",
                "indicator--560ba25a-caac-4fc3-bc48-4f4d950d210b",
                "indicator--560ba25a-0ec8-42ce-863e-44e5950d210b",
                "indicator--560ba25b-3170-4e74-875f-4843950d210b",
                "indicator--560ba25b-75d8-4b61-89d8-4a24950d210b",
                "indicator--560ba25b-8328-4663-9fa3-482a950d210b",
                "indicator--560ba25b-e6e8-423b-ae0b-49f3950d210b",
                "indicator--560ba25b-477c-4b33-9eb3-443b950d210b",
                "indicator--560ba25b-7a64-4b2e-90e9-4b0c950d210b",
                "indicator--560ba25b-119c-4472-a671-4d57950d210b",
                "indicator--560ba25c-d304-4301-ac29-42c7950d210b",
                "indicator--560ba25b-0d2c-4665-a538-4e31950d210b",
                "indicator--560ba25c-3450-4ad8-988b-48b3950d210b",
                "indicator--560ba25c-292c-4a03-a0f9-4cb4950d210b",
                "indicator--560ba25c-6e7c-4d18-8baf-42cc950d210b",
                "indicator--560ba25c-894c-4bdf-85ae-472e950d210b",
                "indicator--560ba25c-5548-460a-8871-4989950d210b",
                "indicator--560ba25c-e638-433f-8ac8-456d950d210b",
                "indicator--560ba25d-9504-4216-8bff-48cc950d210b",
                "indicator--560ba25d-7364-4664-b1bb-48e2950d210b",
                "indicator--560ba25d-ae54-4636-a01b-48d0950d210b",
                "indicator--560ba25d-8c84-4789-8cb2-4b98950d210b",
                "indicator--560ba25d-8068-4119-b4e7-45ca950d210b",
                "indicator--560ba25d-6478-4532-9151-41a2950d210b",
                "indicator--560ba25e-2c24-4411-8c0f-4e84950d210b",
                "indicator--560ba25e-7e00-40dd-88ed-4189950d210b",
                "indicator--560ba25e-2da8-4465-af51-4515950d210b",
                "indicator--560ba25e-a8f4-437b-af2f-4aef950d210b",
                "indicator--560ba25e-8298-476a-8b80-4132950d210b",
                "indicator--560ba25f-88c4-4e9b-9d17-4b1d950d210b",
                "indicator--560ba25f-81e0-4827-ac3a-477e950d210b",
                "indicator--560ba25f-b424-4eaf-8a3f-4496950d210b",
                "indicator--560ba25f-5fec-4d6d-a21f-465c950d210b",
                "indicator--560ba25f-e714-4562-958b-42cb950d210b",
                "indicator--560ba25f-5974-402d-9aab-4a28950d210b",
                "indicator--560ba260-73d4-4881-82b0-483c950d210b",
                "indicator--560ba260-ffa4-4e54-abd0-463c950d210b",
                "indicator--560ba260-0d78-42e3-bfc8-47a3950d210b",
                "indicator--560ba260-48dc-4474-ad47-44e3950d210b",
                "indicator--560ba260-892c-4d95-ad88-4b3a950d210b",
                "indicator--560ba260-e6d8-4656-95c7-464c950d210b",
                "indicator--560ba261-0764-442a-8a6e-4a98950d210b",
                "indicator--560ba261-3914-42f6-9701-46c2950d210b",
                "indicator--560ba261-e510-447f-a801-4d61950d210b",
                "indicator--560ba261-ad04-4d2a-b297-4639950d210b",
                "indicator--560ba261-5360-489a-86c0-4058950d210b",
                "indicator--560ba262-38a4-4e95-931b-456f950d210b",
                "indicator--560ba262-4530-4190-95ba-4328950d210b",
                "indicator--560ba262-678c-4ed5-bd15-453f950d210b",
                "indicator--560ba262-e258-454e-86af-429a950d210b",
                "indicator--560ba262-12d0-499a-beb1-4f21950d210b",
                "indicator--560ba262-1e68-422f-97a9-4291950d210b",
                "indicator--560ba263-1fe0-4e59-8b17-4ed6950d210b",
                "indicator--560ba263-db60-4435-a666-4afa950d210b",
                "indicator--560ba263-400c-485d-a177-4143950d210b",
                "indicator--560ba263-64cc-4d50-800e-4bdb950d210b",
                "indicator--560ba263-af14-49a1-b688-41cc950d210b",
                "indicator--560ba263-f3fc-4dd3-b44f-49aa950d210b",
                "indicator--560ba264-d8e0-4433-984e-4b58950d210b",
                "indicator--560ba264-29c4-43f6-bb96-4e44950d210b",
                "indicator--560ba264-1830-4804-8369-45ec950d210b",
                "indicator--560ba264-be5c-443d-8b57-4645950d210b",
                "indicator--560ba264-4a30-4726-9382-47e6950d210b",
                "indicator--560ba265-2594-4f46-b188-4d23950d210b",
                "indicator--560ba265-cea4-4987-9d93-4431950d210b",
                "indicator--560ba265-6204-458e-9864-4e69950d210b",
                "indicator--560ba265-7514-4cae-9366-49c0950d210b",
                "indicator--560ba265-a6cc-42e9-92a0-4cf5950d210b",
                "indicator--560ba266-8bc4-4813-9861-493c950d210b",
                "indicator--560ba266-34f4-4b90-9d9e-430c950d210b",
                "indicator--560ba266-9454-4e8c-8fba-490c950d210b",
                "indicator--560ba266-aa54-43a8-9c67-4882950d210b",
                "indicator--560ba266-5668-46d9-9bce-47ff950d210b",
                "indicator--560ba266-7ec0-451f-9a4e-49d7950d210b",
                "indicator--560ba267-b4b8-4902-a478-4e0c950d210b",
                "indicator--560ba267-a9b0-4d1e-8fc3-42ee950d210b",
                "indicator--560ba267-ac98-4183-9c15-4280950d210b",
                "indicator--560ba267-3b1c-4e38-9742-4275950d210b",
                "indicator--560ba267-3634-41f4-a5fd-478d950d210b",
                "indicator--560ba267-0a48-483c-912b-4ade950d210b",
                "indicator--560ba268-d9c4-4941-9bc5-4ddd950d210b",
                "indicator--560ba268-65f8-4cd5-b024-4b11950d210b",
                "indicator--560ba268-85a4-4977-bd2d-41c6950d210b",
                "indicator--560ba268-5548-4355-97aa-4a1d950d210b",
                "indicator--560ba268-1048-4ac7-bcd5-4517950d210b",
                "indicator--560ba269-91e0-4959-a638-465a950d210b",
                "indicator--560ba269-5a90-4560-acb9-45a6950d210b",
                "indicator--560ba269-b5c4-4a05-8ae8-4ea9950d210b",
                "indicator--560ba269-7b34-497a-b074-402e950d210b",
                "indicator--560ba269-7244-437a-acb0-4e78950d210b",
                "indicator--560ba26a-fb4c-448e-839b-4b4e950d210b",
                "indicator--560ba26a-7a5c-4b68-bd7b-458f950d210b",
                "indicator--560ba26a-63e0-42b7-a36e-4090950d210b",
                "indicator--560ba26a-c820-4e77-925f-4a10950d210b",
                "indicator--560ba26a-324c-4979-8bb4-4dcf950d210b",
                "indicator--560ba26a-f298-40d8-abf3-4d2d950d210b",
                "indicator--560ba26b-f9f0-4234-ac53-4ae3950d210b",
                "indicator--560ba26b-4ba0-4ec9-9a6e-47bd950d210b",
                "indicator--560ba26b-afcc-4324-b04e-4e24950d210b",
                "indicator--560ba26b-5034-4c53-a394-490f950d210b",
                "indicator--560ba26b-806c-4b3e-940d-413b950d210b",
                "indicator--560ba26b-1b30-4718-b03c-4e9e950d210b",
                "indicator--560ba26c-a270-4e68-869d-4be7950d210b",
                "indicator--560ba26c-53b8-48b5-b3df-4f17950d210b",
                "indicator--560ba26c-1f04-44ac-b650-4c1b950d210b",
                "indicator--560ba26c-2084-4c54-8106-4ce4950d210b",
                "indicator--560ba26c-f748-46d5-b96a-4708950d210b",
                "indicator--560ba26d-366c-4ee5-a68a-4594950d210b",
                "indicator--560ba26d-531c-4201-98d2-4714950d210b",
                "indicator--560ba26d-8088-4767-bf39-4b64950d210b",
                "indicator--560ba26d-a24c-4a0f-829c-4d8f950d210b",
                "indicator--560ba26d-24e0-4e0a-adc2-40b3950d210b",
                "indicator--560ba26d-8dd8-45a6-bc66-4d7a950d210b",
                "indicator--560ba26e-4444-463b-840f-4252950d210b",
                "indicator--560ba26e-8fd4-4524-bcff-473e950d210b",
                "indicator--560ba26e-56a0-4c62-b0c0-428c950d210b",
                "indicator--560ba26e-b31c-4a62-b581-47a0950d210b",
                "indicator--560ba26e-b860-4521-b73f-4cc4950d210b",
                "indicator--560ba26f-0d24-4673-b0bf-4141950d210b",
                "indicator--560ba26f-60a4-4c48-9389-4bf4950d210b",
                "indicator--560ba26f-a658-438a-bb11-4e47950d210b",
                "indicator--560ba26f-2670-4c93-a1ba-4270950d210b",
                "indicator--560ba26f-b48c-4cf6-aa4b-4a3f950d210b",
                "indicator--560ba26f-81bc-4bec-bf9f-49cb950d210b",
                "indicator--560ba270-5db8-4da4-b932-4066950d210b",
                "indicator--560ba270-9d80-4213-9c96-4441950d210b",
                "indicator--560ba270-aa90-4e78-85d0-4d50950d210b",
                "indicator--560ba270-d624-4e58-9120-4eec950d210b",
                "indicator--560ba270-2858-4307-9d82-4edc950d210b",
                "indicator--560ba270-17e8-47a7-99bb-49a2950d210b",
                "indicator--560ba271-9f84-4120-8c42-4d7e950d210b",
                "indicator--560ba271-3dd4-448b-a72b-40d9950d210b",
                "indicator--560ba271-e298-4aa2-bba7-49dc950d210b",
                "indicator--560ba271-7f18-43ae-a2ce-4dc7950d210b",
                "indicator--560ba271-875c-45eb-ad8e-4b9b950d210b",
                "indicator--560ba272-2be4-477e-89a4-495a950d210b",
                "indicator--560ba272-fdd4-4998-b00f-4c31950d210b",
                "indicator--560ba272-72ec-4015-bf96-498a950d210b",
                "indicator--560ba272-3948-4d3f-aefc-433b950d210b",
                "indicator--560ba272-d164-4641-be89-4e3b950d210b",
                "indicator--560ba273-eab4-4856-9528-4510950d210b",
                "indicator--560ba273-02e4-4f12-9487-4052950d210b",
                "indicator--560ba273-4acc-4c8b-bad8-44ca950d210b",
                "indicator--560ba273-f96c-4f0e-8026-4a4f950d210b",
                "indicator--560ba273-d8c8-4621-be1d-46d5950d210b",
                "indicator--560ba273-b8dc-4a44-8391-468a950d210b",
                "indicator--560ba274-64c8-4a1d-9612-40b0950d210b",
                "indicator--560ba274-ddd0-4bba-b3e7-4886950d210b",
                "indicator--560ba274-03c8-44b5-b31a-43ce950d210b",
                "indicator--560ba274-9464-49c8-a15d-451a950d210b",
                "indicator--560ba274-577c-47e1-ab01-4c86950d210b",
                "indicator--560ba274-6418-43c0-8725-4ce4950d210b",
                "indicator--560ba275-0004-4658-9f27-4fd9950d210b",
                "indicator--560ba275-5580-4e3c-bff1-487b950d210b",
                "indicator--560ba275-6f74-4528-b95e-407f950d210b",
                "indicator--560ba275-9270-4887-9c69-43ee950d210b",
                "indicator--560ba275-3f44-4b84-ad8d-4510950d210b",
                "indicator--560ba276-481c-45cc-a014-4fed950d210b",
                "indicator--560ba276-8eb4-4e0e-829f-4d5c950d210b",
                "indicator--560ba276-ceb4-40ce-ac95-40c8950d210b",
                "indicator--560ba276-34d4-4b4c-97c8-41d5950d210b",
                "indicator--560ba276-76ec-4a28-b480-4cb1950d210b",
                "indicator--560ba277-8da4-4d36-866d-4e93950d210b",
                "indicator--560ba277-aa04-489e-a540-4697950d210b",
                "indicator--560ba277-ff18-4af6-a380-4734950d210b",
                "indicator--560ba277-7710-432b-bd4d-4d74950d210b",
                "indicator--560ba277-09dc-4db4-ad74-45b4950d210b",
                "indicator--560ba277-3cb8-46b6-b89a-42f0950d210b",
                "indicator--560ba278-88ac-4ed4-a49f-4902950d210b",
                "indicator--560ba278-d3c0-4180-9de5-4e47950d210b",
                "indicator--560ba278-0414-4f30-bdf7-4ffb950d210b",
                "indicator--560ba278-e57c-4f34-a56d-49cb950d210b",
                "indicator--560ba278-23a0-48d8-821c-421f950d210b",
                "indicator--560ba278-aa80-4f22-8108-415e950d210b",
                "indicator--560ba279-2e50-4ba0-b757-4dd7950d210b",
                "indicator--560ba279-6454-4d89-9326-4a58950d210b",
                "indicator--560ba279-dcd4-4f6f-b4ea-49eb950d210b",
                "indicator--560ba279-ceb4-4b2d-bc1a-4716950d210b",
                "indicator--560ba279-cdb8-46db-9227-4777950d210b",
                "indicator--560ba27a-d088-451a-a6d4-4c7e950d210b",
                "indicator--560ba27a-05d4-487e-9232-4557950d210b",
                "indicator--560ba27a-a734-462a-898e-4ada950d210b",
                "indicator--560ba27a-6984-42c6-9de2-44e6950d210b",
                "indicator--560ba27a-fca4-4ccb-8dba-4d6f950d210b",
                "indicator--560ba27b-c044-49a4-9fc6-4182950d210b",
                "indicator--560ba27b-8df4-40fa-81c1-4725950d210b",
                "indicator--560ba27b-e03c-4820-9235-4568950d210b",
                "indicator--560ba27b-44e0-4dbe-878f-419f950d210b",
                "indicator--560ba27b-07f0-4660-bb8d-4b30950d210b",
                "indicator--560ba27b-3a5c-4297-b0ba-439b950d210b",
                "indicator--560ba27c-8c88-4782-b0b1-47a5950d210b",
                "indicator--560ba27c-4ea4-407f-8b22-4f34950d210b",
                "indicator--560ba27c-c3d4-46c0-b092-4ef8950d210b",
                "indicator--560ba27c-605c-4904-82e1-45f6950d210b",
                "indicator--560ba27c-5168-4068-b0db-42c1950d210b",
                "indicator--560ba27c-ffa8-4051-a51e-4bba950d210b",
                "indicator--560ba27d-9654-4c24-b902-46b2950d210b",
                "indicator--560ba27d-9998-45d2-9454-49ae950d210b",
                "indicator--560ba27d-fa9c-49d6-b8a2-442d950d210b",
                "indicator--560ba27d-38f8-4019-9b66-4242950d210b",
                "indicator--560ba27d-2bb0-45c3-8e99-43ce950d210b",
                "indicator--560ba27e-3684-495a-a9bd-4ab1950d210b",
                "indicator--560ba27e-f5ac-4883-aa20-4211950d210b",
                "indicator--560ba27e-f1a0-4985-91b4-40dd950d210b",
                "indicator--560ba27e-41b4-40ca-bb13-4d49950d210b",
                "indicator--560ba27e-3d68-4df6-b6b5-4cd1950d210b",
                "indicator--560ba27f-8344-44fb-a5f6-4f1b950d210b",
                "indicator--560ba27f-f6dc-4768-8609-4dbb950d210b",
                "indicator--560ba27f-9b54-4d25-b934-4048950d210b",
                "indicator--560ba27f-eb70-413e-aa85-4a7d950d210b",
                "indicator--560ba27f-04d4-40fc-a167-47dd950d210b",
                "indicator--560ba27f-9e18-4075-bcdf-4fd3950d210b",
                "indicator--560ba280-4aa4-4216-86df-4a5c950d210b",
                "indicator--560ba280-80d8-41ba-9686-4126950d210b",
                "indicator--560ba280-339c-4b56-a0aa-42af950d210b",
                "indicator--560ba280-1994-4f3a-8fca-41be950d210b",
                "indicator--560ba280-43e8-42a9-be39-4b77950d210b",
                "indicator--560ba280-2910-4c3b-9b25-4903950d210b",
                "indicator--560ba281-802c-4633-9d4c-442b950d210b",
                "indicator--560ba281-ab08-479c-bf65-4c2b950d210b",
                "indicator--560ba281-271c-4350-aa5d-4674950d210b",
                "indicator--560ba281-8d58-48be-b57a-4db1950d210b",
                "indicator--560ba281-0824-4755-a1f6-4f8f950d210b",
                "indicator--560ba282-d370-444d-a344-4b3f950d210b",
                "indicator--560ba282-1fe4-4585-80e5-4d3b950d210b",
                "indicator--560ba282-6f54-4a21-a498-4bce950d210b",
                "indicator--560ba282-f660-46be-ae76-47c5950d210b",
                "indicator--560ba282-3078-4c02-b40d-4b56950d210b",
                "indicator--560ba282-0e58-41b4-86f7-4791950d210b",
                "indicator--560ba283-b930-4f77-bc9b-4c98950d210b",
                "indicator--560ba283-9be4-4d22-959f-4c1b950d210b",
                "indicator--560ba283-0bd4-4511-bda0-4f0b950d210b",
                "indicator--560ba283-1744-4d35-ba9c-41df950d210b",
                "indicator--560ba283-4264-41be-bea4-4e84950d210b",
                "indicator--560ba284-b5c4-4c01-8a6e-49d3950d210b",
                "indicator--560ba284-46e8-4980-840b-48ea950d210b",
                "indicator--560ba284-fa48-405b-aee4-44b2950d210b",
                "indicator--560ba284-6160-4b65-95ef-4848950d210b",
                "indicator--560ba284-0ff8-4427-9c1f-40b1950d210b",
                "indicator--560ba284-e7fc-4b7c-80ac-48ad950d210b",
                "indicator--560ba285-9508-48bc-b2df-4dce950d210b",
                "indicator--560ba285-664c-4b07-93fb-4760950d210b",
                "indicator--560ba285-7ea0-4b91-a321-4083950d210b",
                "indicator--560ba285-1b58-4db2-b9b8-4613950d210b",
                "indicator--560ba285-509c-4f6e-874b-4832950d210b",
                "indicator--560ba285-7f7c-498c-9604-457b950d210b",
                "indicator--560ba286-f598-4064-b3cf-4cce950d210b",
                "indicator--560ba286-e9a0-4fb5-bab3-4e36950d210b",
                "indicator--560ba286-550c-4439-80b2-4e90950d210b",
                "indicator--560ba286-3584-4b89-89a2-4cf6950d210b",
                "indicator--560ba286-faa4-4681-b6dc-4751950d210b",
                "indicator--560ba287-58b8-4880-aff8-4a5f950d210b",
                "indicator--560ba287-a010-4c4f-b7a8-440e950d210b",
                "indicator--560ba287-05e8-43c3-9807-430c950d210b",
                "indicator--560ba287-9f50-47bc-b3a4-409e950d210b",
                "indicator--560ba287-60f4-4b1c-b765-4b17950d210b",
                "indicator--560ba288-b554-48d0-81c4-4363950d210b",
                "indicator--560ba288-9a84-4841-a805-4b85950d210b",
                "indicator--560ba288-10e0-4581-af00-45c4950d210b",
                "indicator--560ba288-7d9c-441c-bda4-4c01950d210b",
                "indicator--560ba288-9ffc-485d-a86e-4f1b950d210b",
                "indicator--560ba288-346c-4cee-a088-455c950d210b",
                "indicator--560ba289-e75c-4917-a36e-44f1950d210b",
                "indicator--560ba289-5bbc-4454-a11f-4c52950d210b",
                "indicator--560ba289-d960-4f3d-b132-4f46950d210b",
                "indicator--560ba289-11e8-4fa6-be99-4369950d210b",
                "indicator--560ba289-03ec-492d-bbc3-417e950d210b",
                "indicator--560ba289-3944-45de-b9be-4260950d210b",
                "indicator--560ba28a-f228-4ca8-ad07-4cd2950d210b",
                "indicator--560ba28a-6970-44d8-98dc-48f7950d210b",
                "indicator--560ba28a-6d58-41b5-bd51-4588950d210b",
                "indicator--560ba28a-b1e4-4d69-aac3-42fe950d210b",
                "indicator--560ba28a-2004-4c28-8930-49bc950d210b",
                "indicator--560ba28b-3ad4-4f99-aebb-4593950d210b",
                "indicator--560ba28b-03dc-4748-9962-46c4950d210b",
                "indicator--560ba28b-d1dc-4794-82ab-4d44950d210b",
                "indicator--560ba28b-cf68-4109-978d-4418950d210b",
                "indicator--560ba28b-c204-4ad0-9fbf-4723950d210b",
                "indicator--560ba28c-b70c-4302-b03c-4c5d950d210b",
                "indicator--560ba28c-5690-4f8d-b020-44a3950d210b",
                "indicator--560ba28c-d200-4d42-ae4c-44de950d210b",
                "indicator--560ba28c-703c-4449-98d6-42b0950d210b",
                "indicator--560ba28c-7a00-4c52-bda8-43bf950d210b",
                "indicator--560ba28c-5a4c-463e-a19b-445d950d210b",
                "indicator--560ba28d-3f3c-4f8a-9d7f-4b1f950d210b",
                "indicator--560ba28d-1b04-43b9-ba86-427d950d210b",
                "indicator--560ba28d-369c-4b6c-a2f7-440e950d210b",
                "indicator--560ba28d-cc04-4043-b70c-4205950d210b",
                "indicator--560ba28d-bb1c-43bb-9a43-4d9c950d210b",
                "indicator--560ba28d-1028-43e5-b92f-4edc950d210b",
                "indicator--560ba28e-f6c4-4490-87d0-423e950d210b",
                "indicator--560ba28e-f378-48d0-b4f5-4d3c950d210b",
                "indicator--560ba28e-0f6c-43f5-9521-4d52950d210b",
                "indicator--560ba28e-4ae8-43b9-8f0f-4186950d210b",
                "indicator--560ba28e-c204-41c8-93f1-4a80950d210b",
                "indicator--560ba28f-4f00-4a0b-9e41-48dd950d210b",
                "indicator--560ba28f-a1ac-4bcf-9286-41d6950d210b",
                "indicator--560ba28f-0f68-4e7e-9553-47bd950d210b",
                "indicator--560ba28f-5870-421f-a4bf-4286950d210b",
                "indicator--560ba28f-6080-4c68-bdb9-46fa950d210b",
                "indicator--560ba290-2b3c-4ca9-8878-4564950d210b",
                "indicator--560ba290-6850-4b30-aa72-4d07950d210b",
                "indicator--560ba290-411c-4e2b-906e-4e00950d210b",
                "indicator--560ba290-5690-4344-93fe-4d13950d210b",
                "indicator--560ba290-8f90-4550-8eac-4c5e950d210b",
                "indicator--560ba290-bd58-446c-a48c-4cb3950d210b",
                "indicator--560ba291-0404-4857-92d2-4327950d210b",
                "indicator--560ba291-52ec-4150-99af-4c0e950d210b",
                "indicator--560ba291-c628-4dbb-88e4-4507950d210b",
                "indicator--560ba291-9748-4a19-a773-430d950d210b",
                "indicator--560ba291-9148-4bf5-ad41-44b1950d210b",
                "indicator--560ba291-8a38-4c5f-b481-4613950d210b",
                "indicator--560ba292-7d94-474b-9406-4e62950d210b",
                "indicator--560ba292-abac-4594-9bc2-47e2950d210b",
                "indicator--560ba292-4ebc-4678-891c-4cca950d210b",
                "indicator--560ba292-0c04-4d61-ae54-408a950d210b",
                "indicator--560ba293-3ecc-450a-9aef-450f950d210b",
                "indicator--560ba293-1a00-4285-b7fd-44de950d210b",
                "indicator--560ba293-89a0-449b-8c44-4c7c950d210b",
                "indicator--560ba293-aca8-4321-ab7e-4f70950d210b",
                "indicator--560ba293-8248-4ebc-ab30-4fa7950d210b",
                "indicator--560ba293-7d08-4a59-a71e-4b46950d210b",
                "indicator--560ba294-6e4c-43f9-a24f-4dd2950d210b",
                "indicator--560ba294-4c20-445d-a589-4e91950d210b",
                "indicator--560ba294-2aa0-43a9-9193-45d8950d210b",
                "indicator--560ba294-5414-4fc6-8321-47ac950d210b",
                "indicator--560ba294-9144-4153-ba3d-40d5950d210b",
                "indicator--560ba295-276c-47ba-9d0e-4d86950d210b",
                "indicator--560ba295-ab4c-4eb6-b776-4847950d210b",
                "indicator--560ba295-c8c4-458c-a533-440e950d210b",
                "indicator--560ba295-ae94-42ab-a46e-46af950d210b",
                "indicator--560ba295-a218-48f4-a66a-48b3950d210b",
                "indicator--560ba295-4d40-4228-bb3a-406a950d210b",
                "indicator--560ba296-6e88-4d07-92f8-459e950d210b",
                "indicator--560ba296-046c-4e27-b8bc-478c950d210b",
                "indicator--560ba296-f850-4ed6-8e53-4f5d950d210b",
                "indicator--560ba296-63a0-4f4a-8e46-419b950d210b",
                "indicator--560ba296-c228-49df-9898-4563950d210b",
                "indicator--560ba296-7558-4516-9deb-4034950d210b",
                "indicator--560ba297-6298-4a7b-b49f-4750950d210b",
                "indicator--560ba297-d290-4305-b8ab-4b8e950d210b",
                "indicator--560ba297-00a8-4c0c-8117-4c27950d210b",
                "indicator--560ba297-3d48-4806-b113-4db6950d210b",
                "indicator--560ba297-7690-41bf-aed2-4afd950d210b",
                "indicator--560ba298-5f60-4647-b2a9-4ec6950d210b",
                "indicator--560ba298-c384-4f76-a5ec-47e8950d210b",
                "indicator--560ba298-2f78-443d-9701-4b75950d210b",
                "indicator--560ba298-0954-4c55-a54e-4ade950d210b",
                "indicator--560ba298-dafc-4a02-bef0-4665950d210b",
                "indicator--560ba298-d75c-4eed-a72c-4727950d210b",
                "indicator--560ba299-b908-4dde-8d13-4b52950d210b",
                "indicator--560ba299-ce44-4c6e-b484-4c95950d210b",
                "indicator--560ba299-d3fc-4dd9-9ee7-45d1950d210b",
                "indicator--560ba299-37d0-4f1e-b3fa-4041950d210b",
                "indicator--560ba299-86e0-4d5d-8620-46b0950d210b",
                "indicator--560ba29a-5800-402f-9d18-4b03950d210b",
                "indicator--560ba29a-cca8-4166-8d76-4921950d210b",
                "indicator--560ba29a-25f4-4f9d-954e-4fd4950d210b",
                "indicator--560ba29a-b7c4-46e5-935c-4a9d950d210b",
                "indicator--560ba29a-9c30-43d1-961a-4ace950d210b",
                "indicator--560ba29a-70f8-4627-9892-4ea6950d210b",
                "indicator--560ba29b-69f0-4126-8620-41cf950d210b",
                "indicator--560ba29b-da30-4f2e-8e93-4793950d210b",
                "indicator--560ba29b-606c-4c53-8c6d-47f3950d210b",
                "indicator--560ba29b-18e0-4594-81b2-479d950d210b",
                "indicator--560ba29b-94ec-44a1-af04-4304950d210b",
                "indicator--560ba29c-2d28-45ae-a14d-4625950d210b",
                "indicator--560ba29c-fba8-4ed3-b24c-473a950d210b",
                "indicator--560ba29c-a85c-44f2-970f-407d950d210b",
                "indicator--560ba29c-b190-4a18-acc8-4cb4950d210b",
                "indicator--560ba29c-8530-4f47-ac71-40f9950d210b",
                "indicator--560ba29d-4604-4cc6-8485-4d49950d210b",
                "indicator--560ba29d-d558-4511-af46-45ec950d210b",
                "indicator--560ba29d-39d8-4ab5-a732-49ab950d210b",
                "indicator--560ba29d-a7e4-4597-84b2-43cd950d210b",
                "indicator--560ba29d-bcfc-47bc-b6ae-437a950d210b",
                "indicator--560ba29d-a654-45d8-b8ff-4ebf950d210b",
                "indicator--560ba29e-c974-48f3-bb57-4500950d210b",
                "indicator--560ba29e-5bfc-43fe-a06c-499c950d210b",
                "indicator--560ba29e-0560-49e1-9331-4a8b950d210b",
                "indicator--560ba29e-0eb0-445d-b592-4d99950d210b",
                "indicator--560ba29e-f3e0-47ae-80ed-4364950d210b",
                "indicator--560ba29e-7fa0-4e8f-bceb-41e2950d210b",
                "indicator--560ba29f-6058-4317-806f-48e8950d210b",
                "indicator--560ba29f-a880-4612-b039-4933950d210b",
                "indicator--560ba29f-3c28-454a-b1ef-4835950d210b",
                "indicator--560ba29f-85b4-4a49-8e60-4e9d950d210b",
                "indicator--560ba29f-ba2c-4f8f-b2e1-4016950d210b",
                "indicator--560ba2a0-c7f4-4234-b99b-4da7950d210b",
                "indicator--560ba2a0-a5fc-42c1-a4ca-4389950d210b",
                "indicator--560ba2a0-66ac-4bb2-bcc5-42fc950d210b",
                "indicator--560ba2a0-dc38-4041-8cd8-426f950d210b",
                "indicator--560ba2a0-64b0-4e82-b55e-4896950d210b",
                "indicator--560ba2a1-6648-447b-9e93-4ae7950d210b",
                "indicator--560ba2a1-6734-49db-a572-489d950d210b",
                "indicator--560ba2a1-1c34-4a49-a5d7-4f42950d210b",
                "indicator--560ba2a1-f760-4a35-b088-4f0f950d210b",
                "indicator--560ba2a1-ef24-4a31-8711-4000950d210b",
                "indicator--560ba2a1-6b40-45a8-947a-4d13950d210b",
                "indicator--560ba2a2-98d0-49bf-98c7-4cfa950d210b",
                "indicator--560ba2a2-2d24-422e-8df2-43cb950d210b",
                "indicator--560ba2a2-e4bc-45f0-8cc0-4292950d210b",
                "indicator--560ba2a2-ec70-4a12-8f28-4f6f950d210b",
                "indicator--560ba2a2-2898-4e68-a606-4b0c950d210b",
                "indicator--560ba2a2-c864-4fa1-a219-4857950d210b",
                "indicator--560ba2a3-1f88-4a1d-aa14-4f86950d210b",
                "indicator--560ba2a3-f7b0-4100-aa5d-4d2d950d210b",
                "indicator--560ba2a3-84b4-4a16-b4db-4027950d210b",
                "indicator--560ba2a3-9be4-4eb0-bbdf-4ea0950d210b",
                "indicator--560ba2a3-92a8-40de-a431-4a77950d210b",
                "indicator--560ba2a3-9cd0-4bfc-8d9e-435c950d210b",
                "indicator--560ba2a4-467c-430f-8bc9-4014950d210b",
                "indicator--560ba2a4-dcd8-489c-9276-4186950d210b",
                "indicator--560ba2a4-2cc8-4233-bda8-488f950d210b",
                "indicator--560ba2a4-9a44-4d9c-a4d9-415b950d210b",
                "indicator--560ba2a4-2dc8-4d70-abcb-45b8950d210b",
                "indicator--560ba2a5-10b4-4592-a12d-4810950d210b",
                "indicator--560ba2a5-f228-46f6-a03b-47fb950d210b",
                "indicator--560ba2a5-83d4-4917-969e-4a5c950d210b",
                "indicator--560ba2a5-1cf8-413f-80e4-4f46950d210b",
                "indicator--560ba2a5-dac0-4545-9434-435f950d210b",
                "indicator--560ba2a6-a870-4f5a-bc14-4dd9950d210b",
                "indicator--560ba2a6-73e4-4ff1-a8b8-40d5950d210b",
                "indicator--560ba2a6-0dcc-4596-80a2-480d950d210b",
                "indicator--560ba2a6-ed74-483e-8986-4764950d210b",
                "indicator--560ba2a6-ccb8-4d09-a9f7-4c15950d210b",
                "indicator--560ba2a6-cb8c-4c36-aaba-4c01950d210b",
                "indicator--560ba2a7-0090-4bc5-8083-43d9950d210b",
                "indicator--560ba2a7-e01c-4e20-aa52-476d950d210b",
                "indicator--560ba2a7-5c30-4a76-8a8c-4185950d210b",
                "indicator--560ba2a7-ea7c-4bff-95e9-48bb950d210b",
                "indicator--560ba2a7-5544-45ed-8da0-4dbb950d210b",
                "indicator--560ba2a8-ac10-47d5-9fa6-47ff950d210b",
                "indicator--560ba2a8-ee54-4e63-9c69-4fb3950d210b",
                "indicator--560ba2a8-3424-452b-945d-4c86950d210b",
                "indicator--560ba2a8-6f84-4778-b8bc-4f8c950d210b",
                "indicator--560ba2a8-e340-4253-b468-4b84950d210b",
                "indicator--560ba2a9-4418-43c4-a76a-4203950d210b",
                "indicator--560ba2a9-6410-4dfe-a466-45b4950d210b",
                "indicator--560ba2a9-1cb8-4c3a-902c-4a63950d210b",
                "indicator--560ba2a9-c208-4205-aaf3-48da950d210b",
                "indicator--560ba2a9-33f4-40ac-b7e3-4390950d210b",
                "indicator--560ba2a9-2968-40c8-a8cc-4073950d210b",
                "indicator--560ba2aa-f91c-4e26-b1c0-4f38950d210b",
                "indicator--560ba2aa-09a8-4d2a-b849-4e93950d210b",
                "indicator--560ba2aa-4d18-40b7-b41c-415f950d210b",
                "indicator--560ba2aa-bbec-4e3e-ba57-49d7950d210b",
                "indicator--560ba2aa-eaf4-4186-aaac-4832950d210b",
                "indicator--560ba2aa-5338-41b5-8f13-4cf6950d210b",
                "indicator--560ba2ab-7234-4710-a88d-4de8950d210b",
                "indicator--560ba2ab-6b2c-4860-bc09-4f99950d210b",
                "indicator--560ba2ab-7124-49a2-b8b2-47c0950d210b",
                "indicator--560ba2ab-b514-4594-8a4e-47b1950d210b",
                "indicator--560ba2ab-b140-4f57-a365-4a2e950d210b",
                "indicator--560ba2ac-dcb8-42bf-9b88-433b950d210b",
                "indicator--560ba2ac-6800-48d6-9faa-4dc7950d210b",
                "indicator--560ba2ac-bf1c-4392-bb8a-43b5950d210b",
                "indicator--560ba2ac-8e88-4872-97fd-42ac950d210b",
                "indicator--560ba2ac-0c74-49b0-bbf7-4931950d210b",
                "indicator--560ba2ad-811c-444d-b1ba-4cdf950d210b",
                "indicator--560ba2ad-fbe8-4eeb-bf38-4101950d210b",
                "indicator--560ba2ad-09d4-4872-afe8-4a9f950d210b",
                "indicator--560ba2ad-7074-4b8d-ab00-40a1950d210b",
                "indicator--560ba2ad-a2fc-40b9-a86f-448c950d210b",
                "indicator--560ba2ad-ec88-4c74-a727-488c950d210b",
                "indicator--560ba2ae-b6e8-4f73-a11e-40ea950d210b",
                "indicator--560ba2ae-dabc-4a0c-ad47-476d950d210b",
                "indicator--560ba2ae-8a98-4d13-bb9b-4b6c950d210b",
                "indicator--560ba2ae-bd08-4798-9a72-464f950d210b",
                "indicator--560ba2ae-5ba0-477f-867d-4f22950d210b",
                "indicator--560ba2ae-2de4-4848-93dc-4220950d210b",
                "indicator--560ba2af-687c-4e65-ad6e-4f45950d210b",
                "indicator--560ba2af-83f8-41d2-a034-4557950d210b",
                "indicator--560ba2af-ae04-4620-8879-4751950d210b",
                "indicator--560ba2af-29c8-4e66-b01f-4950950d210b",
                "indicator--560ba2af-cf68-4b5c-9509-4ae6950d210b",
                "indicator--560ba2b0-2144-46d9-924c-4f28950d210b",
                "indicator--560ba2b0-a6ac-4a4c-973d-486e950d210b",
                "indicator--560ba2b0-2534-4f92-9c60-47b1950d210b",
                "indicator--560ba2b0-a230-4a99-95db-4b9e950d210b",
                "indicator--560ba2b0-6a4c-4a59-bd9d-4aa8950d210b",
                "indicator--560ba2b1-5728-4019-9a49-419f950d210b",
                "indicator--560ba2b1-b2f4-42c7-b6bb-4c0f950d210b",
                "indicator--560ba2b1-d824-445b-baf8-43f1950d210b",
                "indicator--560ba2b1-030c-4d5b-a6be-4361950d210b",
                "indicator--560ba2b1-a8d0-4c67-98f3-4f92950d210b",
                "indicator--560ba2b1-54f0-46c8-97f6-4517950d210b",
                "indicator--560ba2b2-3f98-4e5a-81a6-484c950d210b",
                "indicator--560ba2b2-d29c-4484-a340-44dc950d210b",
                "indicator--560ba2b2-2aa4-4955-b32b-4acf950d210b",
                "indicator--560ba2b2-5430-4fc9-8eb2-425f950d210b",
                "indicator--560ba2b2-5958-4ca6-99c4-453f950d210b",
                "indicator--560ba2b3-6650-4459-8224-40e1950d210b",
                "indicator--560ba2b3-bbc8-48cc-9fd8-44aa950d210b",
                "indicator--560ba2b3-72b4-4d31-bfad-43f5950d210b",
                "indicator--560ba2b3-b198-460b-8222-40b7950d210b",
                "indicator--560ba2b3-ca74-433e-91d0-426d950d210b",
                "indicator--560ba2b4-20dc-4453-bd90-4aa9950d210b",
                "indicator--560ba2b4-7d40-43ad-a7e6-451c950d210b",
                "indicator--560ba2b4-98b8-44f5-be29-410a950d210b",
                "indicator--560ba2b4-1084-43b4-8bc3-4066950d210b",
                "indicator--560ba2b4-f988-4e52-a725-4962950d210b",
                "indicator--560ba2b4-3b7c-45ac-b2a6-41aa950d210b",
                "indicator--560ba2b5-b7f4-4534-aca3-4453950d210b",
                "indicator--560ba2b5-5910-439e-93a8-41f8950d210b",
                "indicator--560ba2b5-a4b8-43b1-a841-4ef2950d210b",
                "indicator--560ba2b5-9904-49c1-b17b-4074950d210b",
                "indicator--560ba2b5-e47c-4b3e-a90f-425d950d210b",
                "indicator--560ba2b6-4a10-44a9-8b18-41b9950d210b",
                "indicator--560ba2b6-7c94-419e-bfcd-42da950d210b",
                "indicator--560ba2b6-b440-4c5b-be04-41c6950d210b",
                "indicator--560ba2b6-3350-487f-8e34-4ede950d210b",
                "indicator--560ba2b6-aa10-4dd9-a4d9-4d13950d210b",
                "indicator--560ba2b6-eba0-47c9-956a-4e8d950d210b",
                "indicator--560ba2b7-95dc-4a2a-994f-41f3950d210b",
                "indicator--560ba2b7-db94-479f-bf26-4638950d210b",
                "indicator--560ba2b7-fd38-4388-8fc8-4b74950d210b",
                "indicator--560ba2b7-07a4-47e9-84a1-4160950d210b",
                "indicator--560ba2b7-7704-4da2-9de7-466f950d210b",
                "indicator--560ba2b8-1140-46bd-900a-4c2c950d210b",
                "indicator--560ba2b8-f99c-4945-adb0-4c11950d210b",
                "indicator--560ba2b8-2de0-452f-8c3d-4ffc950d210b",
                "indicator--560ba2b8-7dd0-4567-b44e-4b0f950d210b",
                "indicator--560ba2b8-a808-4365-8bc9-4682950d210b",
                "indicator--560ba2b8-2e30-470e-9343-479b950d210b",
                "indicator--560ba2b9-1ffc-42ea-9523-4e25950d210b",
                "indicator--560ba2b9-dd74-4459-b46e-49f6950d210b",
                "indicator--560ba2b9-b2a4-45fd-aa83-4058950d210b",
                "indicator--560ba2b9-f99c-4eb4-a400-4c0e950d210b",
                "indicator--560ba2b9-279c-4aaf-917a-4f9a950d210b",
                "indicator--560ba2ba-81e0-4662-9d5d-45bc950d210b",
                "indicator--560ba2ba-6950-46d0-815f-48d7950d210b",
                "indicator--560ba2ba-4d84-4358-a0e0-4aae950d210b",
                "indicator--560ba2ba-b324-45a0-955a-42be950d210b",
                "indicator--560ba2ba-bf54-44ea-b159-455a950d210b",
                "indicator--560ba2ba-64c0-4caa-9483-4691950d210b",
                "indicator--560ba2bb-69fc-4705-8449-49ee950d210b",
                "indicator--560ba2bb-ca8c-46b1-a5c2-4185950d210b",
                "indicator--560ba2bb-bf00-4d77-9e98-447d950d210b",
                "indicator--560ba2bb-6410-4e6b-9b72-42d5950d210b",
                "indicator--560ba2bb-9a10-49b7-bfc9-459c950d210b",
                "indicator--560ba2bc-6e24-4e84-ba59-404c950d210b",
                "indicator--560ba2bc-84d0-4c94-af33-4383950d210b",
                "indicator--560ba2bc-10e4-4e62-a823-48fa950d210b",
                "indicator--560ba2bc-9718-45e0-9584-4464950d210b",
                "indicator--560ba2bc-d508-4a70-b4aa-4afd950d210b",
                "indicator--560ba2bd-450c-459d-80b3-4162950d210b",
                "indicator--560ba2bd-1fa4-4961-ad6a-4b1a950d210b",
                "indicator--560ba2bd-d358-4cc8-a8d2-4b15950d210b",
                "indicator--560ba2bd-bde8-4d13-879a-4283950d210b",
                "indicator--560ba2bd-35d8-472b-992a-448a950d210b",
                "indicator--560ba2bd-f700-4beb-83f9-41aa950d210b",
                "indicator--560ba2be-a414-4f77-b61a-4e6d950d210b",
                "indicator--560ba2be-dcf8-46cf-a7cd-4c87950d210b",
                "indicator--560ba2be-4c9c-4c1d-904c-43c1950d210b",
                "indicator--560ba2be-a8f4-4344-8471-4eee950d210b",
                "indicator--560ba2be-41bc-444b-9718-44ae950d210b",
                "indicator--560ba2bf-14b8-4790-b94b-4f03950d210b",
                "indicator--560ba2bf-05c8-45f3-947e-48bf950d210b",
                "indicator--560ba2bf-d798-44bc-ab0b-490b950d210b",
                "indicator--560ba2bf-c050-4008-a9fe-417b950d210b",
                "indicator--560ba2bf-7150-45eb-8984-4959950d210b",
                "indicator--560ba2c0-d9a8-4cd7-925c-4b3e950d210b",
                "indicator--560ba2c0-dcd4-4b93-b763-4df9950d210b",
                "indicator--560ba2c0-4c20-498b-8812-4a8a950d210b",
                "indicator--560ba2c0-c190-46e2-abe3-45c2950d210b",
                "indicator--560ba2c0-b760-4e1b-9803-4b68950d210b",
                "indicator--560ba2c0-2fbc-42ce-ab2f-46c9950d210b",
                "indicator--560ba2c1-a620-405b-b547-4993950d210b",
                "indicator--560ba2c1-b274-4896-8296-4756950d210b",
                "indicator--560ba2c1-d9e8-4382-9d1a-427a950d210b",
                "indicator--560ba2c1-5118-4abe-8ed2-40a9950d210b",
                "indicator--560ba2c1-b2a0-41db-b34d-4f9b950d210b",
                "indicator--560ba2c2-c4d0-4cba-89ed-476d950d210b",
                "indicator--560ba2c2-4fac-4c2a-aec5-4310950d210b",
                "indicator--560ba2c2-4784-46a9-b480-48ca950d210b",
                "indicator--560ba2c2-785c-4f1e-90bd-4089950d210b",
                "indicator--560ba2c2-14a8-4448-8b6c-4965950d210b",
                "indicator--560ba2c3-a940-49ef-89ec-42ff950d210b",
                "indicator--560ba2c3-4c54-46d6-a5ad-4a61950d210b",
                "indicator--560ba2c3-a9d8-40fb-b2af-431f950d210b",
                "indicator--560ba2c3-2844-431d-b361-43d8950d210b",
                "indicator--560ba2c3-14ec-450f-84d1-43ad950d210b",
                "indicator--560ba2c3-7818-4936-99bb-4058950d210b",
                "indicator--560ba2c4-8ad4-42c6-9f25-4232950d210b",
                "indicator--560ba2c4-7504-4591-a0bb-4b8b950d210b",
                "indicator--560ba2c4-83d8-4b12-86dc-4bc2950d210b",
                "indicator--560ba2c4-c5f8-4e52-9789-4048950d210b",
                "indicator--560ba2c4-1a50-48c9-ab91-4247950d210b",
                "indicator--560ba2c4-d448-42d9-8fdc-4e00950d210b",
                "indicator--560ba2c5-a288-4051-a693-4419950d210b",
                "indicator--560ba2c5-884c-41c3-a1bf-41fb950d210b",
                "indicator--560ba2c5-1fcc-4239-8731-4474950d210b",
                "indicator--560ba2c5-08e8-488d-b2f4-48f2950d210b",
                "indicator--560ba2c5-7ce4-4d34-b708-49b9950d210b",
                "indicator--560ba2c6-73e0-4990-b6e6-4678950d210b",
                "indicator--560ba2c6-5f18-481d-a284-4697950d210b",
                "indicator--560ba2c6-1c84-4730-a948-40c4950d210b",
                "indicator--560ba2c6-26e4-4ff5-a502-4526950d210b",
                "indicator--560ba2c6-cb78-4ae7-8cbf-4174950d210b",
                "indicator--560ba2c7-847c-4746-aa8e-4e6c950d210b",
                "indicator--560ba2c7-15f0-40c2-8cab-4cf2950d210b",
                "indicator--560ba2c7-acdc-4325-b50a-4aaa950d210b",
                "indicator--560ba2c7-58bc-48a8-9603-4517950d210b",
                "indicator--560ba2c7-85f0-4385-804c-4fb1950d210b",
                "indicator--560ba2c7-c05c-458f-ae3a-4a74950d210b",
                "indicator--560ba2c8-2758-4247-8dd8-4af6950d210b",
                "indicator--560ba2c8-e2d8-438c-a1f2-4753950d210b",
                "indicator--560ba2c8-bb40-4685-9896-4878950d210b",
                "indicator--560ba2c8-f2a0-49f1-b190-4a3a950d210b",
                "indicator--560ba2c8-e270-4e5f-9f8d-4aea950d210b",
                "indicator--560ba2c9-18e0-44b8-a07c-4791950d210b",
                "indicator--560ba2c9-908c-47ef-9b75-4644950d210b",
                "indicator--560ba2c9-f19c-408a-b2d4-4f56950d210b",
                "indicator--560ba2c9-07bc-4c10-aa6c-4e5d950d210b",
                "indicator--560ba2c9-ff70-4312-82f3-40c5950d210b",
                "indicator--560ba2ca-da04-4a75-ac15-4e5c950d210b",
                "indicator--560ba2ca-db68-47c5-95b2-40c5950d210b",
                "indicator--560ba2ca-3ad4-4a92-81fb-4d15950d210b",
                "indicator--560ba2ca-5834-4e37-a1bf-49c3950d210b",
                "indicator--560ba2ca-23cc-4074-8beb-4bc6950d210b",
                "indicator--560ba2ca-8e4c-42e2-869f-43b5950d210b",
                "indicator--560ba2cb-2898-4d57-bb0d-4cf4950d210b",
                "indicator--560ba2cb-b6b0-461c-a0f3-465e950d210b",
                "indicator--560ba2cb-101c-4adc-9221-4e29950d210b",
                "indicator--560ba2cb-8714-410a-8023-485c950d210b",
                "indicator--560ba2cb-9fec-40e3-aa4d-4bd2950d210b",
                "indicator--560ba2cb-df2c-4be4-ac8a-4006950d210b",
                "indicator--560ba2cc-38e0-4663-929f-47bb950d210b",
                "indicator--560ba2cc-2068-41f7-89a3-4332950d210b",
                "indicator--560ba2cc-88ec-4059-8c8b-4191950d210b",
                "indicator--560ba2cc-8b68-4db6-8487-4d8a950d210b",
                "indicator--560ba2cc-ade4-4d39-ae0d-440a950d210b",
                "indicator--560ba2cd-8584-4c3f-8a91-4a54950d210b",
                "indicator--560ba2cd-7d50-421a-a2ec-4c13950d210b",
                "indicator--560ba2cd-7f44-49b4-a365-46ae950d210b",
                "indicator--560ba2cd-2c10-4ac6-a57a-4dae950d210b",
                "indicator--560ba2cd-0be4-431f-bd7e-4082950d210b",
                "indicator--560ba2ce-6508-482e-966f-4442950d210b",
                "indicator--560ba2ce-e800-4418-b4f5-4c2e950d210b",
                "indicator--560ba2ce-52c0-40f8-acd2-4c7b950d210b",
                "indicator--560ba2ce-bdec-41da-81ca-4a53950d210b",
                "indicator--560ba2ce-80f4-4bc4-888b-4cc9950d210b",
                "indicator--560ba2ce-27b8-47d3-8d92-4cbb950d210b",
                "indicator--560ba2cf-62d0-4887-9e19-40a0950d210b",
                "indicator--560ba2cf-4c34-48e0-b874-48eb950d210b",
                "indicator--560ba2cf-54fc-40f8-a77e-4b32950d210b",
                "indicator--560ba2cf-30d8-4717-a2d6-4743950d210b",
                "indicator--560ba2cf-5ac0-470f-ba9f-46a8950d210b",
                "indicator--560ba2cf-3850-472b-9934-478a950d210b",
                "indicator--560ba2d0-7cec-472d-b6ce-4a7f950d210b",
                "indicator--560ba2d0-96e4-41a6-b9e6-4cd0950d210b",
                "indicator--560ba2d0-d9cc-4402-b089-4387950d210b",
                "indicator--560ba2d0-5e8c-4864-bb3f-4ce3950d210b",
                "indicator--560ba2d0-b9ec-45c2-a8e6-4342950d210b",
                "indicator--560ba2d1-5db4-4699-8ef5-42fe950d210b",
                "indicator--560ba2d1-22d0-44bb-897f-4de7950d210b",
                "indicator--560ba2d1-06a8-4c1e-ba5d-442c950d210b",
                "indicator--560ba2d1-942c-44aa-bdd0-4de0950d210b",
                "indicator--560ba2d1-af74-4178-abd8-415a950d210b",
                "indicator--560ba2d2-de9c-4f92-8fbc-40fb950d210b",
                "indicator--560ba2d2-c174-408c-8f31-4065950d210b",
                "indicator--560ba2d2-5cec-4483-af5b-4a19950d210b",
                "indicator--560ba2d2-3124-4d4d-93b7-4801950d210b",
                "indicator--560ba2d2-cde4-490d-8c62-4140950d210b",
                "indicator--560ba2d2-a07c-40bd-a324-4f30950d210b",
                "indicator--560ba2d3-60ec-4200-b088-4765950d210b",
                "indicator--560ba2d3-bcd4-4cc5-a716-4ce0950d210b",
                "indicator--560ba2d3-52f0-4f3a-bc68-429a950d210b",
                "indicator--560ba2d3-168c-4552-a397-46b3950d210b",
                "indicator--560ba2d3-4f4c-4ff9-9b30-489b950d210b",
                "indicator--560ba2d4-abbc-48a8-bbfd-4efd950d210b",
                "indicator--560ba2d4-c674-40ee-bdad-4756950d210b",
                "indicator--560ba2d4-b8f8-4626-acfc-4fcc950d210b",
                "indicator--560ba2d4-12c8-427a-a88f-4e51950d210b",
                "indicator--560ba2d4-8630-43c7-948a-4bb7950d210b",
                "indicator--560ba2d5-7b60-42ef-8757-4c84950d210b",
                "indicator--560ba2d5-ec48-4c1c-953d-4cd9950d210b",
                "indicator--560ba2d5-210c-4c27-9650-4bfc950d210b",
                "indicator--560ba2d5-bda8-4a4e-b02a-4e78950d210b",
                "indicator--560ba2d5-13ec-4ed0-b12f-4f17950d210b",
                "indicator--560ba2d5-0a38-42e7-a102-4f2b950d210b",
                "indicator--560ba2d6-2630-433d-bc54-4a6e950d210b",
                "indicator--560ba2d6-85cc-4465-8712-4836950d210b",
                "indicator--560ba2d6-2c58-4da5-95b5-4b34950d210b",
                "indicator--560ba2d6-ef1c-42e8-ad8d-4956950d210b",
                "indicator--560ba2d6-0430-4414-9fb2-4444950d210b",
                "indicator--560ba2d7-049c-4864-a8e3-4ceb950d210b",
                "indicator--560ba2d7-50e0-4b0a-92b6-4f36950d210b",
                "indicator--560ba2d7-06f4-406a-89be-41c2950d210b",
                "indicator--560ba2d7-aba8-499d-9a10-4f12950d210b",
                "indicator--560ba2d7-288c-4995-bee0-4744950d210b",
                "indicator--560ba2d7-9990-4800-9388-46ea950d210b",
                "indicator--560ba2d8-0ec4-48ac-8eb8-4c9a950d210b",
                "indicator--560ba2d8-a934-49b8-8a3e-4456950d210b",
                "indicator--560ba2d8-c4e8-42d4-a31c-44cf950d210b",
                "indicator--560ba2d8-3d38-4def-8a95-43ce950d210b",
                "indicator--560ba2d8-81b0-4fbc-8968-4604950d210b",
                "indicator--560ba2d8-635c-4204-9e37-4873950d210b",
                "indicator--560ba2d9-aa50-42e6-be18-45f8950d210b",
                "indicator--560ba2d9-4f3c-492b-bd03-4147950d210b",
                "indicator--560ba2d9-4eb4-4aec-94ce-49ee950d210b",
                "indicator--560ba2d9-9e70-4106-925c-48cf950d210b",
                "indicator--560ba2d9-b794-4807-972f-4df6950d210b",
                "indicator--560ba2da-4c68-40e0-b1a0-4a8f950d210b",
                "indicator--560ba2da-8e80-4888-aefd-4707950d210b",
                "indicator--560ba2da-7f18-4bcc-9992-4909950d210b",
                "indicator--560ba2da-cf64-4719-aba3-49e4950d210b",
                "indicator--560ba2da-2014-412b-b48f-4678950d210b",
                "indicator--560ba2db-5768-4c00-9de8-412d950d210b",
                "indicator--560ba2db-b1b8-4765-bbcd-41b7950d210b",
                "indicator--560ba2db-cdec-43d2-a29e-4a9e950d210b",
                "indicator--560ba2db-f030-45d8-bf55-4a03950d210b",
                "indicator--560ba2db-d744-41f8-b12d-4b99950d210b",
                "indicator--560ba2db-0088-4da4-9836-44e0950d210b",
                "indicator--560ba2dc-3188-4213-8d56-480d950d210b",
                "indicator--560ba2dc-70b8-4f9e-a474-4b48950d210b",
                "indicator--560ba2dc-f794-49fb-a610-496f950d210b",
                "indicator--560ba2dc-d88c-48b7-8a4f-48b2950d210b",
                "indicator--560ba2dc-e1f4-4f7a-ad67-4848950d210b",
                "indicator--560ba2dd-a140-422b-bdcd-4c8d950d210b",
                "indicator--560ba2dd-4b48-444e-b4f4-48f1950d210b",
                "indicator--560ba2dd-9048-42a7-b62b-4ea3950d210b",
                "indicator--560ba2dd-54e0-4dc6-a16b-4778950d210b",
                "indicator--560ba2dd-d77c-4f48-9d40-4337950d210b",
                "indicator--560ba2de-e668-457b-be50-4f3f950d210b",
                "indicator--560ba2de-c104-4ef4-a24a-4fd6950d210b",
                "indicator--560ba2de-08dc-4e40-9ddb-4d08950d210b",
                "indicator--560ba2de-b058-4894-91a4-4774950d210b",
                "indicator--560ba2de-e258-4b74-a3cd-4c21950d210b",
                "indicator--560ba2de-f5a0-42a8-b19e-412a950d210b",
                "indicator--560ba2df-e218-4b3c-a52e-4ec9950d210b",
                "indicator--560ba2df-1154-454d-ae6f-45ff950d210b",
                "indicator--560ba2df-d9f8-4027-a1d0-42c5950d210b",
                "indicator--560ba2df-c1e8-4fb8-b332-4993950d210b",
                "indicator--560ba2df-d334-4665-8d76-4e80950d210b",
                "indicator--560ba2df-7ff8-477c-bd75-4ce1950d210b",
                "indicator--560ba2e0-2d7c-48b1-ae97-4461950d210b",
                "indicator--560ba2e0-3630-423e-bd29-40f1950d210b",
                "indicator--560ba2e0-c738-40c7-a5a3-4b7f950d210b",
                "indicator--560ba2e0-dff8-43f9-9df2-47cf950d210b",
                "indicator--560ba2e0-a0a8-4ad0-a585-4295950d210b",
                "indicator--560ba2e1-1db0-47b8-91fe-437d950d210b",
                "indicator--560ba2e1-f0fc-4263-88d4-4430950d210b",
                "indicator--560ba2e1-054c-46a0-94f4-4892950d210b",
                "indicator--560ba2e1-8030-4473-9a84-4ce5950d210b",
                "indicator--560ba2e1-f7b0-4e4a-a27e-4848950d210b",
                "indicator--560ba2e2-4e50-4b0d-b74a-4e81950d210b",
                "indicator--560ba2e2-8884-4f0e-8ca0-4b47950d210b",
                "indicator--560ba2e2-03b0-4372-a595-44d9950d210b",
                "indicator--560ba2e2-7200-481c-8673-4ad7950d210b",
                "indicator--560ba2e2-81bc-402f-a9bc-4b99950d210b",
                "indicator--560ba2e2-935c-46f8-9ebc-4e99950d210b",
                "indicator--560ba2e3-7868-435f-b329-4bef950d210b",
                "indicator--560ba2e3-e94c-419d-89b2-4612950d210b",
                "indicator--560ba2e3-3530-4bd7-bdb4-4150950d210b",
                "indicator--560ba2e3-1334-47f6-863b-4d07950d210b",
                "indicator--560ba2e3-2d58-497b-99f8-45bb950d210b",
                "indicator--560ba2e4-e110-4973-8692-4edb950d210b",
                "indicator--560ba2e4-311c-4559-8392-4932950d210b",
                "indicator--560ba2e4-a990-4d3b-aac1-44cc950d210b",
                "indicator--560ba2e4-4e68-4df8-bf71-48cc950d210b",
                "indicator--560ba2e4-abb4-40ee-bd57-4192950d210b",
                "indicator--560ba2e5-81a8-4bb6-a768-4293950d210b",
                "indicator--560ba2e5-4b14-4576-a5a2-4b2f950d210b",
                "indicator--560ba2e5-7abc-4083-8746-4155950d210b",
                "indicator--560ba2e5-42ac-4cd4-b069-45f0950d210b",
                "indicator--560ba2e5-6f98-48be-a1f1-4afa950d210b",
                "indicator--560ba2e5-052c-40b8-80ea-44eb950d210b",
                "indicator--560ba2e6-5a78-43fd-a4ed-416c950d210b",
                "indicator--560ba2e6-17d4-47b7-9ded-4930950d210b",
                "indicator--560ba2e6-1e70-451e-b01c-460a950d210b",
                "indicator--560ba2e6-d7f4-4d8a-8347-4653950d210b",
                "indicator--560ba2e6-510c-4532-b535-4080950d210b",
                "indicator--560ba2e6-5f78-4d1d-97bc-402a950d210b",
                "indicator--560ba2e7-14b8-4d17-b0bb-4f15950d210b",
                "indicator--560ba2e7-b4d8-417d-8386-41a3950d210b",
                "indicator--560ba2e7-614c-4d33-aa72-4ea8950d210b",
                "indicator--560ba2e7-08ac-4d8d-b5c3-45f6950d210b",
                "indicator--560ba2e7-c6c4-4dc6-8f9d-4707950d210b",
                "indicator--560ba2e8-8b40-453b-8710-4239950d210b",
                "indicator--560ba2e8-19f8-4483-8398-4040950d210b",
                "indicator--560ba2e8-ab88-40ad-80bf-44fc950d210b",
                "indicator--560ba2e8-a284-4144-82e5-44f1950d210b",
                "indicator--560ba2e8-aed8-4a2b-ad86-481c950d210b",
                "indicator--560ba2e9-383c-4799-a9d6-48e1950d210b",
                "indicator--560ba2e9-e690-4bf4-bb6b-41c7950d210b",
                "indicator--560ba2e9-686c-4c28-951c-40d5950d210b",
                "indicator--560ba2e9-a884-46b4-9e3e-4065950d210b",
                "indicator--560ba2e9-5020-485b-9f13-4cff950d210b",
                "indicator--560ba2e9-5380-4927-972a-4c50950d210b",
                "indicator--560ba2e9-0f98-47eb-a5d7-41c0950d210b",
                "indicator--560ba2e9-9450-4746-94af-4556950d210b",
                "indicator--560ba2e9-f13c-4da6-b310-4662950d210b",
                "indicator--560ba2ea-cf40-4785-aef3-4773950d210b",
                "indicator--560ba2ea-76dc-4121-93d7-459c950d210b",
                "indicator--560ba2ea-4b5c-4e63-85ab-4181950d210b",
                "indicator--560ba2ea-8be0-428f-995b-4736950d210b",
                "indicator--560ba2ea-1d20-470a-8f4f-4624950d210b",
                "indicator--560ba2ea-4ba4-4797-bae0-4728950d210b",
                "indicator--560ba2ea-550c-4d74-bfa6-4faf950d210b",
                "indicator--560ba2eb-d66c-43b1-a8bd-48fd950d210b",
                "indicator--560ba2eb-be68-4576-aaed-44a2950d210b",
                "indicator--560ba2eb-550c-4ff9-8c23-4ddf950d210b",
                "indicator--560ba2eb-af78-4793-a4dc-4c8f950d210b",
                "indicator--560ba2eb-f2b8-4075-9169-4dd6950d210b",
                "indicator--560ba2eb-c670-4092-86e0-42e7950d210b",
                "indicator--560ba2eb-b778-4c60-91b4-4600950d210b",
                "indicator--560ba2eb-8cfc-4dcd-8d16-4241950d210b",
                "indicator--560ba2ec-5324-419a-bd1e-44ea950d210b",
                "indicator--560ba2ec-c05c-41af-8416-4a17950d210b",
                "indicator--560ba2ec-9044-48af-a8ac-4df1950d210b",
                "indicator--560ba2ec-a274-4c7a-bc9f-4c73950d210b",
                "indicator--560ba2ec-aa98-4602-aa68-409f950d210b",
                "indicator--560ba2ec-e4f8-4e58-9dba-4e78950d210b",
                "indicator--560ba2ec-e0f8-476c-b923-484e950d210b",
                "indicator--560ba2ed-b37c-4394-9d21-47ce950d210b",
                "indicator--560ba2ec-b0c8-41f8-8e46-4b45950d210b",
                "indicator--560ba2ed-cdf8-4143-9d53-47cb950d210b",
                "indicator--560ba2ed-d328-4283-bd55-4065950d210b",
                "indicator--560ba2ed-62e8-4374-8258-4e66950d210b",
                "indicator--560ba2ed-3b18-40aa-8e72-4dee950d210b",
                "indicator--560ba2ed-5b3c-4f1d-8561-430f950d210b",
                "indicator--560ba2ed-5948-461e-b6f5-476e950d210b",
                "indicator--560ba2ed-f728-42e7-8c9c-4b83950d210b",
                "indicator--560ba2ee-be3c-4143-9b39-4eb3950d210b",
                "indicator--560ba2ee-6fc0-437c-a45d-4c27950d210b",
                "indicator--560ba2ee-6a90-43d7-8428-49d3950d210b",
                "indicator--560ba2ee-7b40-48f5-94d3-4b43950d210b",
                "indicator--560ba2ee-7158-4817-a884-4616950d210b",
                "indicator--560ba2ee-ca14-428a-bdd2-4c88950d210b",
                "indicator--560ba2ee-235c-44f1-9962-4800950d210b",
                "indicator--560ba2ee-1d6c-4ac2-aec9-4a86950d210b",
                "indicator--560ba2ef-3820-4c22-bfc5-4cee950d210b",
                "indicator--560ba2ef-3e6c-4a3d-9fa0-48b2950d210b",
                "indicator--560ba2ef-1d14-48d4-9245-4fd9950d210b",
                "indicator--560ba2ef-d3d0-42c5-92d5-4e76950d210b",
                "indicator--560ba2ef-84bc-4042-b90b-4fba950d210b",
                "indicator--560ba2ef-d224-4f5a-9e73-44e1950d210b",
                "indicator--560ba2ef-4138-42fc-9b4e-40f6950d210b",
                "indicator--560ba2f0-21a0-40aa-ab3d-44c6950d210b",
                "indicator--560ba2ef-7320-4e05-8710-454b950d210b",
                "indicator--560ba2f0-3218-4419-a977-4f40950d210b",
                "indicator--560ba2f0-4ce0-421b-9bf2-4842950d210b",
                "indicator--560ba2f0-1ed0-405b-a72e-4baf950d210b",
                "indicator--560ba2f0-d908-433a-a212-4452950d210b",
                "indicator--560ba2f0-0088-42a6-be4d-4d5f950d210b",
                "indicator--560ba2f0-4f40-4f40-9970-4bc4950d210b",
                "indicator--560ba2f0-875c-48e5-a27d-4a5e950d210b",
                "indicator--560ba2f1-28d4-4cee-9719-49f4950d210b",
                "indicator--560ba2f1-ad1c-4ba9-81e3-4725950d210b",
                "indicator--560ba2f1-1664-4f96-89ef-4870950d210b",
                "indicator--560ba2f1-30f4-40b2-a33c-4b07950d210b",
                "indicator--560ba2f1-ae34-42e6-8595-4382950d210b",
                "indicator--560ba2f1-79ac-41f2-be7e-4ee1950d210b",
                "indicator--560ba2f1-3b04-414a-a1de-4f64950d210b",
                "indicator--560ba2f1-5cbc-4a27-8df0-4a40950d210b",
                "indicator--560ba2f2-6aa4-43e4-900d-44dd950d210b",
                "indicator--560ba2f2-60d0-4fcf-908d-4527950d210b",
                "indicator--560ba2f2-402c-4756-b52a-43e9950d210b",
                "indicator--560ba2f2-b7ac-41eb-893e-4ed9950d210b",
                "indicator--560ba2f2-ef8c-4b2d-8ba3-4505950d210b",
                "indicator--560ba2f2-b504-490d-9a12-43b0950d210b",
                "indicator--560ba2f2-e464-4bd5-9537-4a31950d210b",
                "indicator--560ba2f3-b684-4bd1-b96e-48da950d210b",
                "indicator--560ba2f2-a27c-452e-b9ce-4b58950d210b",
                "indicator--560ba2f3-cd34-4590-9eb4-4608950d210b",
                "indicator--560ba2f3-1ddc-4e46-8fa3-4be0950d210b",
                "indicator--560ba2f3-6408-4d79-a3be-44e2950d210b",
                "indicator--560ba2f3-0618-42bd-8cb6-4c85950d210b",
                "indicator--560ba2f3-f228-49aa-9df7-400f950d210b",
                "indicator--560ba2f3-e960-4542-a738-4668950d210b",
                "indicator--560ba2f3-2c08-4244-b704-4216950d210b",
                "indicator--560ba2f4-bb3c-4248-8cd3-46db950d210b",
                "indicator--560ba2f4-7458-4346-a276-444e950d210b",
                "indicator--560ba2f4-f8e0-4f08-b42d-4cb1950d210b",
                "indicator--560ba2f4-a288-46e7-bec7-403c950d210b",
                "indicator--560ba2f4-654c-4df8-a3d5-458d950d210b",
                "indicator--560ba2f4-8f10-40c6-a4e9-4dc0950d210b",
                "indicator--560ba2f4-7af4-4d98-baad-47e7950d210b",
                "indicator--560ba2f4-5208-4764-b6ca-4f74950d210b",
                "indicator--560ba2f5-7998-4b7b-9cef-411a950d210b",
                "indicator--560ba2f5-57d4-4a21-ad61-4cd0950d210b",
                "indicator--560ba2f5-1f70-4bd7-8a22-4306950d210b",
                "indicator--560ba2f5-cc0c-4038-b571-4e8a950d210b",
                "indicator--560ba2f5-c5d8-4392-af39-4a4f950d210b",
                "indicator--560ba2f5-a4ec-439f-b50b-4c9e950d210b",
                "indicator--560ba2f5-42e8-43ed-a7aa-4f99950d210b",
                "indicator--560ba2f6-4efc-40e1-97fe-48dd950d210b",
                "indicator--560ba2f6-d944-4780-8eee-4702950d210b",
                "indicator--560ba2f6-40d8-4057-b2a5-4629950d210b",
                "indicator--560ba2f6-bb10-4906-bf7a-4417950d210b",
                "indicator--560ba2f6-2310-49cc-921a-4a97950d210b",
                "indicator--560ba2f6-c244-46b6-8706-4403950d210b",
                "indicator--560ba2f6-508c-4592-ad0b-4bb3950d210b",
                "indicator--560ba2f6-88c0-4eab-9c91-46e4950d210b",
                "indicator--560ba2f7-e404-46ce-ac62-4293950d210b",
                "indicator--560ba2f7-8008-40c4-afce-4821950d210b",
                "indicator--560ba2f7-2000-4307-82ed-4109950d210b",
                "indicator--560ba2f7-3938-4bc8-8bd8-48ac950d210b",
                "indicator--560ba2f7-4938-43a3-8fce-44d5950d210b",
                "indicator--560ba2f7-0938-44f8-8ca4-425d950d210b",
                "indicator--560ba2f7-feb0-4cf1-b5c2-490b950d210b",
                "indicator--560ba2f8-a8cc-42db-b076-456f950d210b",
                "indicator--560ba2f7-e020-4647-b965-4852950d210b",
                "indicator--560ba2f8-cca8-4d14-849d-4fcc950d210b",
                "indicator--560ba2f8-b9ec-4d3f-a8bb-4f44950d210b",
                "indicator--560ba2f8-3fb0-48fd-a76e-4265950d210b",
                "indicator--560ba2f8-aff0-4325-a1be-4767950d210b",
                "indicator--560ba2f8-b190-4688-8818-43ed950d210b",
                "indicator--560ba2f8-44f4-4131-8540-44ad950d210b",
                "indicator--560ba2f8-e570-48a2-a7b9-45ec950d210b",
                "indicator--560ba2f9-b70c-41da-9578-4aa3950d210b",
                "indicator--560ba2f9-6ce4-41bf-989c-42f0950d210b",
                "indicator--560ba2f9-96f0-49bb-b9a0-4170950d210b",
                "indicator--560ba2f9-d7c0-4ec1-a312-4a37950d210b",
                "indicator--560ba2f9-52cc-41e7-9251-4b85950d210b",
                "indicator--560ba2f9-f23c-49a1-8312-445f950d210b",
                "indicator--560ba2f9-ef3c-40a7-b9a8-4383950d210b",
                "indicator--560ba2f9-aa60-4633-ae00-471c950d210b",
                "indicator--560ba2fa-ba90-457f-b16b-41c1950d210b",
                "indicator--560ba2fa-ac44-482a-acd4-42f4950d210b",
                "indicator--560ba2fa-f510-478b-b68e-4fb2950d210b",
                "indicator--560ba2fa-b488-4945-9795-45d6950d210b",
                "indicator--560ba2fa-f220-4212-b19a-451d950d210b",
                "indicator--560ba2fa-8b08-495b-a357-4a5a950d210b",
                "indicator--560ba2fa-72d8-49bb-8c5f-4871950d210b",
                "indicator--560ba2fb-5464-4f90-99e3-4c26950d210b",
                "indicator--560ba2fa-38f8-41b8-815c-42c8950d210b",
                "indicator--560ba2fb-19b8-4397-b6b2-4443950d210b",
                "indicator--560ba2fb-abb0-4dbb-8fd5-4557950d210b",
                "indicator--560ba2fb-0e38-4797-bef0-4a60950d210b",
                "indicator--560ba2fb-9170-4d6d-92c4-444d950d210b",
                "indicator--560ba2fb-fad8-424f-a65f-4f11950d210b",
                "indicator--560ba2fb-3d1c-4f0b-8909-43be950d210b",
                "indicator--560ba2fc-c30c-4a19-950d-4963950d210b",
                "indicator--560ba2fc-6784-4eb8-92a4-4769950d210b",
                "indicator--560ba2fc-f584-4a5d-b3f9-4e55950d210b",
                "indicator--560ba2fc-06d0-4dd4-8594-4cea950d210b",
                "indicator--560ba2fc-06e4-4bb1-9a9e-48cc950d210b",
                "indicator--560ba2fc-cf6c-4654-9bcd-41ae950d210b",
                "indicator--560ba2fc-c8b4-4473-8d88-4480950d210b",
                "indicator--560ba2fc-0c84-4bf5-b97c-41b6950d210b",
                "indicator--560ba2fc-3230-4767-8808-4d7a950d210b",
                "indicator--560ba2fd-dba8-40d4-a944-437a950d210b",
                "indicator--560ba2fd-42d4-495d-8d20-4adb950d210b",
                "indicator--560ba2fd-ccdc-477b-b54f-480a950d210b",
                "indicator--560ba2fd-fea4-44dd-8cc2-4817950d210b",
                "indicator--560ba2fd-f238-4339-85e4-4492950d210b",
                "indicator--560ba2fd-6ed4-43f7-ac48-40a8950d210b",
                "indicator--560ba2fd-72c4-42dc-8360-49fc950d210b",
                "indicator--560ba2fe-37c0-43f6-a5c3-4f7c950d210b",
                "indicator--560ba2fe-8a2c-4ce2-85df-4115950d210b",
                "indicator--560ba2fe-9954-49ef-af00-46cf950d210b",
                "indicator--560ba2fe-15f8-4369-a50a-4b0f950d210b",
                "indicator--560ba2fe-0ae0-414e-a793-460a950d210b",
                "indicator--560ba2fe-dbb0-41b1-843d-4b68950d210b",
                "indicator--560ba2fe-477c-401d-b4ca-4ba2950d210b",
                "indicator--560ba2fe-2a80-40da-bd7d-43d3950d210b",
                "indicator--560ba2ff-de78-4145-a431-43d3950d210b",
                "indicator--560ba2ff-303c-405d-9186-4a23950d210b",
                "indicator--560ba2ff-15d8-423e-b667-4aa1950d210b",
                "indicator--560ba2ff-34b4-49cd-970c-425b950d210b",
                "indicator--560ba2ff-841c-46bf-80fb-4d1d950d210b",
                "indicator--560ba2ff-d868-4588-85ab-4cdd950d210b",
                "indicator--560ba2ff-57e4-4af4-98c0-4696950d210b",
                "indicator--560ba300-caa0-4e4e-b2c8-4731950d210b",
                "indicator--560ba2ff-f570-4d1f-8505-4bf4950d210b",
                "indicator--560ba300-c9c4-4a05-b36c-49f7950d210b",
                "indicator--560ba300-ce30-49b8-ad65-4ef9950d210b",
                "indicator--560ba300-f3b8-4cf8-833c-49dc950d210b",
                "indicator--560ba300-5224-44db-81c6-451c950d210b",
                "indicator--560ba300-d0c4-4f5b-8286-409f950d210b",
                "indicator--560ba300-8f7c-40d4-ad16-4a8b950d210b",
                "indicator--560ba300-207c-4b14-b96b-46dd950d210b",
                "indicator--560ba301-4f18-47a1-9651-4876950d210b",
                "indicator--560ba301-614c-4377-b9ac-4f10950d210b",
                "indicator--560ba301-b3cc-47fc-a52f-4b42950d210b",
                "indicator--560ba301-a1b0-49d8-8d7a-48be950d210b",
                "indicator--560ba301-e778-4827-82b6-48ce950d210b",
                "indicator--560ba301-4184-478d-8e79-409b950d210b",
                "indicator--560ba301-a464-4bfc-ad49-4a1e950d210b",
                "indicator--560ba301-5f00-4f4f-9259-40ec950d210b",
                "indicator--560ba302-d674-4cd2-a1c0-4c6b950d210b",
                "indicator--560ba302-5024-4132-a590-4469950d210b",
                "indicator--560ba302-0da8-4886-9587-4184950d210b",
                "indicator--560ba302-5764-4c35-9a7d-4ef1950d210b",
                "indicator--560ba302-4ffc-4742-b6fb-4eb7950d210b",
                "indicator--560ba302-7224-4f7c-81cc-495e950d210b",
                "indicator--560ba302-0520-4273-a4f7-42d9950d210b",
                "indicator--560ba303-6df8-4439-b245-46af950d210b",
                "indicator--560ba303-c118-4ad0-abeb-47af950d210b",
                "indicator--560ba303-cdfc-47cf-94d9-4075950d210b",
                "indicator--560ba303-4e18-4280-8138-4ce7950d210b",
                "indicator--560ba303-8fb8-4863-9d81-42f5950d210b",
                "indicator--560ba303-c998-4825-b901-4b85950d210b",
                "indicator--560ba303-a760-46b3-87f6-4673950d210b",
                "indicator--560ba303-c438-49c8-b683-43d3950d210b",
                "indicator--560ba303-b4e0-4aae-8ab8-4520950d210b",
                "indicator--560ba304-c9c0-47b6-a471-4bd2950d210b",
                "indicator--560ba304-5854-4ba0-96ae-4c85950d210b",
                "indicator--560ba304-a354-4db2-8655-4176950d210b",
                "indicator--560ba304-ed38-4d11-ae46-4611950d210b",
                "indicator--560ba304-ec60-4b10-8e0d-4d45950d210b",
                "indicator--560ba304-1a88-4031-91ca-468d950d210b",
                "indicator--560ba304-3684-425d-a861-428d950d210b",
                "indicator--560ba305-76f8-48f5-9925-4f69950d210b",
                "indicator--560ba305-0dc0-408d-ad62-44aa950d210b",
                "indicator--560ba305-9c00-467d-a445-43e5950d210b",
                "indicator--560ba305-1d98-409b-83a7-4f91950d210b",
                "indicator--560ba305-e3e0-496c-b490-412c950d210b",
                "indicator--560ba305-d30c-4541-9f31-478e950d210b",
                "indicator--560ba305-45ec-48e4-94f9-4502950d210b",
                "indicator--560ba305-1f1c-454c-a6b2-41ff950d210b",
                "indicator--560ba306-cd24-494a-a571-4a4d950d210b",
                "indicator--560ba306-a00c-45c6-a14d-4caf950d210b",
                "indicator--560ba306-19fc-4031-b81d-4b4b950d210b",
                "indicator--560ba306-3810-451c-a8d5-4cba950d210b",
                "indicator--560ba306-a164-4612-a0d8-43ba950d210b",
                "indicator--560ba306-5ab8-476c-a40d-4389950d210b",
                "indicator--560ba306-fa20-45f6-b1a5-41fd950d210b",
                "indicator--560ba306-3c4c-40ab-8ec7-481b950d210b",
                "indicator--560ba306-8b7c-45a5-8ae0-4a0d950d210b",
                "indicator--560ba307-a570-4d81-8bbf-4b79950d210b",
                "indicator--560ba307-4424-4e8a-9fec-4abc950d210b",
                "indicator--560ba307-ddb0-4836-854d-453f950d210b",
                "indicator--560ba307-46f0-46ea-9012-4b47950d210b",
                "indicator--560ba307-6784-4a48-bdff-4da4950d210b",
                "indicator--560ba307-58a0-447e-8e01-4835950d210b",
                "indicator--560ba307-10e8-4a3e-bbef-4441950d210b",
                "indicator--560ba308-aaa4-4711-8de4-4c5d950d210b",
                "indicator--560ba308-1f38-4ce1-8e6b-468b950d210b",
                "indicator--560ba308-9e40-40ec-b4bc-4751950d210b",
                "indicator--560ba308-a6d8-4825-b58a-4027950d210b",
                "indicator--560ba308-b4e8-4293-8514-47e7950d210b",
                "indicator--560ba308-9210-403a-87d7-4d60950d210b",
                "indicator--560ba308-cc88-4145-8cd7-419d950d210b",
                "indicator--560ba308-e364-4c8d-9eeb-409f950d210b",
                "indicator--560ba309-1e3c-4729-bed1-48b9950d210b",
                "indicator--560ba309-7020-4e4f-bb9f-49ac950d210b",
                "indicator--560ba309-dc80-477e-8bd8-4a68950d210b",
                "indicator--560ba309-a618-4c6f-be01-4068950d210b",
                "indicator--560ba309-8890-47e7-9005-41a5950d210b",
                "indicator--560ba309-5194-4bc8-9c5c-4d28950d210b",
                "indicator--560ba309-7170-475b-9f18-457f950d210b",
                "indicator--560ba30a-57b0-45ec-80a9-4d18950d210b",
                "indicator--560ba309-405c-450c-a535-4d76950d210b",
                "indicator--560ba30a-a10c-4de3-9c17-4b6b950d210b",
                "indicator--560ba30a-b60c-48b6-bf06-4c45950d210b",
                "indicator--560ba30a-7094-407e-a8c5-4ae0950d210b",
                "indicator--560ba30a-1f30-4348-9b7a-446d950d210b",
                "indicator--560ba30a-974c-43e2-948d-41eb950d210b",
                "indicator--560ba30a-ab14-4de4-a9ec-4a45950d210b",
                "indicator--560ba30a-7b3c-4069-a404-41d0950d210b",
                "indicator--560ba30b-5e18-4f71-942e-432f950d210b",
                "indicator--560ba30b-c784-4719-80bb-473b950d210b",
                "indicator--560ba30b-0940-427b-ba68-4d0e950d210b",
                "indicator--560ba30b-ae98-4c0a-b315-4874950d210b",
                "indicator--560ba30b-f1f4-4354-b749-4b5a950d210b",
                "indicator--560ba30b-33dc-490d-bcf6-4147950d210b",
                "indicator--560ba30b-0e80-4b6e-a8ec-43b7950d210b",
                "indicator--560ba30b-f87c-42e4-afc5-4095950d210b",
                "indicator--560ba30c-ebcc-405d-b89a-4c87950d210b",
                "indicator--560ba30c-6bec-4eb2-8547-47e2950d210b",
                "indicator--560ba30c-9e58-48b2-84d3-4eef950d210b",
                "indicator--560ba30c-9b80-4d6a-9cce-4be2950d210b",
                "indicator--560ba30c-65bc-4c80-91f7-48b7950d210b",
                "indicator--560ba30c-6170-4894-9d2d-479f950d210b",
                "indicator--560ba30c-1038-4636-bed2-4a5e950d210b",
                "indicator--560ba30d-c9f4-47d4-880b-457c950d210b",
                "indicator--560ba30c-9a40-4827-a0b1-4a71950d210b",
                "indicator--560ba30d-c318-44bc-9510-49c6950d210b",
                "indicator--560ba30d-03b4-4c3b-bc18-4b4b950d210b",
                "indicator--560ba30d-e054-4b56-b673-45d6950d210b",
                "indicator--560ba30d-11fc-4572-9cfe-4b30950d210b",
                "indicator--560ba30d-7a00-4a31-8120-42e6950d210b",
                "indicator--560ba30d-5160-4593-8ec3-46a6950d210b",
                "indicator--560ba30d-0c68-4164-89bb-48b0950d210b",
                "indicator--560ba30e-25bc-49f4-bdd4-4a94950d210b",
                "indicator--560ba30e-c878-4f3e-809e-4414950d210b",
                "indicator--560ba30e-eef8-4a71-8411-43e6950d210b",
                "indicator--560ba30e-d298-4c4a-a8fc-408d950d210b",
                "indicator--560ba30e-0e40-4370-8f49-43de950d210b",
                "indicator--560ba30e-e094-4ad6-a58c-4e51950d210b",
                "indicator--560ba30e-1454-4c8c-b377-4201950d210b",
                "indicator--560ba30e-9450-4a9b-816c-48d1950d210b",
                "indicator--560ba30f-ef88-4270-8ca1-4fb0950d210b",
                "indicator--560ba30f-ce28-42d3-b780-403a950d210b",
                "indicator--560ba30f-fea8-415d-97e1-402b950d210b",
                "indicator--560ba30f-9638-4336-97ab-449f950d210b",
                "indicator--560ba30f-6bb0-48d4-a7d6-4b3a950d210b",
                "indicator--560ba30f-2cc0-40fe-b97a-4e0b950d210b",
                "indicator--560ba30f-ba20-48f8-b7ae-4d4c950d210b",
                "indicator--560ba310-8148-47ec-aa0c-46b5950d210b",
                "indicator--560ba30f-18e0-407f-8a71-4448950d210b",
                "indicator--560ba310-d50c-4c98-9dd0-4694950d210b",
                "indicator--560ba310-fd9c-4738-9dfd-4d29950d210b",
                "indicator--560ba310-fbf8-4faa-ab49-4f67950d210b",
                "indicator--560ba310-bc70-43b3-a349-4235950d210b",
                "indicator--560ba310-7fa4-4019-8124-4bcc950d210b",
                "indicator--560ba310-03d0-4a0d-bea8-4733950d210b",
                "indicator--560ba311-3940-4464-9e53-4fa4950d210b",
                "indicator--560ba311-a95c-4146-a89e-4605950d210b",
                "indicator--560ba311-61c4-454b-8f4d-4944950d210b",
                "indicator--560ba311-8660-488d-a2ec-4cd7950d210b",
                "indicator--560ba311-6f58-4489-adf0-4b22950d210b",
                "indicator--560ba311-d49c-443c-a773-406b950d210b",
                "indicator--560ba311-c9a4-4ea0-85f7-4485950d210b",
                "indicator--560ba311-0f48-4645-bb28-4b9c950d210b",
                "indicator--560ba311-a768-410b-b451-4206950d210b",
                "indicator--560ba312-d884-4d14-8ace-48d9950d210b",
                "indicator--560ba312-fcfc-485c-b047-44ad950d210b",
                "indicator--560ba312-50dc-43db-8ec4-4c44950d210b",
                "indicator--560ba312-74d4-4a11-9d86-4af2950d210b",
                "indicator--560ba312-f690-42ff-acdd-4c3a950d210b",
                "indicator--560ba312-5af0-49ec-9f41-46f2950d210b",
                "indicator--560ba312-6790-4339-a25d-496a950d210b",
                "indicator--560ba313-285c-448b-b53b-45d0950d210b",
                "indicator--560ba312-4b8c-45e2-9dff-4473950d210b",
                "indicator--560ba313-0bd0-4e16-9470-4a2d950d210b",
                "indicator--560ba313-5ff0-4a00-8e31-4cff950d210b",
                "indicator--560ba313-f530-467b-9957-43ce950d210b",
                "indicator--560ba313-3930-43dc-b2e4-412c950d210b",
                "indicator--560ba313-22c8-4586-b678-4106950d210b",
                "indicator--560ba313-2398-4d07-8616-4797950d210b",
                "indicator--560ba314-f500-495d-a51b-42b4950d210b",
                "indicator--560ba314-24f0-4198-a1ce-44fc950d210b",
                "indicator--560ba314-0f74-4427-b04f-46ba950d210b",
                "indicator--560ba314-2cec-477a-ba0c-4a59950d210b",
                "indicator--560ba314-e0a8-4ab5-9750-4a18950d210b",
                "indicator--560ba314-efb4-4234-8315-43e8950d210b",
                "indicator--560ba314-98b4-4ec0-b0b8-47c5950d210b",
                "indicator--560ba314-e570-4127-a971-470d950d210b",
                "indicator--560ba314-f8d4-425e-96ba-4203950d210b",
                "indicator--560ba315-1b44-42cf-9198-408f950d210b",
                "indicator--560ba315-8d0c-4c91-8faa-425a950d210b",
                "indicator--560ba315-6278-4dcd-a2b5-400c950d210b",
                "indicator--560ba315-d604-4e49-a170-44c0950d210b",
                "indicator--560ba315-00b4-42d6-a578-4f2a950d210b",
                "indicator--560ba315-90c4-4f6d-a934-44ad950d210b",
                "indicator--560ba315-9020-4435-bfa0-4f69950d210b",
                "indicator--560ba316-9c08-40f2-8abf-4f83950d210b",
                "indicator--560ba315-12b4-48d1-8c7a-4fb9950d210b",
                "indicator--560ba316-1c9c-4062-b942-41b4950d210b",
                "indicator--560ba316-73b8-4b7b-aba6-4f09950d210b",
                "indicator--560ba316-6654-4405-9727-4732950d210b",
                "indicator--560ba316-fdec-45ac-bfbf-48b8950d210b",
                "indicator--560ba316-3f20-4d18-9a7a-433b950d210b",
                "indicator--560ba316-229c-4a12-be83-416b950d210b",
                "indicator--560ba317-b208-4c35-8bd9-495c950d210b",
                "indicator--560ba317-8528-4fb7-a34c-4a8a950d210b",
                "indicator--560ba317-2f24-40d8-97cb-4e50950d210b",
                "indicator--560ba317-e2d4-416e-bf71-4045950d210b",
                "indicator--560ba317-c538-4f86-82ea-42e8950d210b",
                "indicator--560ba317-8688-4650-a5a0-4f7d950d210b",
                "indicator--560ba317-c330-4e4d-931e-464f950d210b",
                "indicator--560ba317-bdf8-4862-959f-4b50950d210b",
                "indicator--560ba317-7cbc-4a24-94e2-4b7c950d210b",
                "indicator--560ba318-2f50-47c8-913a-4fd9950d210b",
                "indicator--560ba318-de78-4510-9408-48c5950d210b",
                "indicator--560ba318-f614-4c96-b7a5-44e5950d210b",
                "indicator--560ba318-6c7c-4a46-8ae4-41c4950d210b",
                "indicator--560ba318-01ac-4263-a843-4cd1950d210b",
                "indicator--560ba318-940c-4f5d-85a5-4c7c950d210b",
                "indicator--560ba318-ee10-4b33-846d-4322950d210b",
                "indicator--560ba319-7310-4b39-8071-4c6d950d210b",
                "indicator--560ba319-edf4-4cc8-afe0-4aaa950d210b",
                "indicator--560ba319-ef98-4d17-a598-4623950d210b",
                "indicator--560ba319-9d34-4a80-b30e-4769950d210b",
                "indicator--560ba319-ebb8-43ea-85d1-495a950d210b",
                "indicator--560ba319-fff4-41a4-9650-4eee950d210b",
                "indicator--560ba319-65c8-4765-9d95-4ab9950d210b",
                "indicator--560ba319-7798-47c3-8542-4480950d210b",
                "indicator--560ba31a-9048-4951-b0f7-4fc2950d210b",
                "indicator--560ba31a-62a4-4d55-a2b0-4219950d210b",
                "indicator--560ba31a-3374-47f1-b675-4e9d950d210b",
                "indicator--560ba31a-3c1c-4124-b906-4752950d210b",
                "indicator--560ba31a-d15c-4669-b536-427a950d210b",
                "indicator--560ba31a-6cd8-4e2a-bae9-4d38950d210b",
                "indicator--560ba31a-b53c-43fa-9349-426d950d210b",
                "indicator--560ba31b-0a9c-4761-9fe2-4506950d210b",
                "indicator--560ba31b-5e50-4cbf-8fab-44cb950d210b",
                "indicator--560ba31b-8eac-4423-bfb0-411b950d210b",
                "indicator--560ba31b-57ec-4818-91e0-4c91950d210b",
                "indicator--560ba31b-7aec-4175-b1d2-4dae950d210b",
                "indicator--560ba31b-11d4-4b53-a1a6-43b5950d210b",
                "indicator--560ba31b-dca8-4bdd-acdb-40d5950d210b",
                "indicator--560ba31b-b460-44b6-a2f6-4b0f950d210b",
                "indicator--560ba31c-9758-465a-a736-47e3950d210b",
                "indicator--560ba31c-a4dc-46dd-98dc-4e9f950d210b",
                "indicator--560ba31c-e5fc-4ccd-9ae6-4e83950d210b",
                "indicator--560ba31c-bf68-4d4e-a697-465b950d210b",
                "indicator--560ba31c-c968-4889-ba3a-42c3950d210b",
                "indicator--560ba31c-aebc-4f74-96a0-42a7950d210b",
                "indicator--560ba31c-7998-44f8-af0e-4544950d210b",
                "indicator--560ba31d-ede0-426f-8dd8-4c3d950d210b",
                "indicator--560ba31d-ab08-4eea-9f12-48aa950d210b",
                "indicator--560ba31d-a4e4-4efc-9a40-407b950d210b",
                "indicator--560ba31d-5ce4-4844-8594-40b5950d210b",
                "indicator--560ba31d-8248-4327-ae8b-4e6f950d210b",
                "indicator--560ba31d-dfb8-4451-b72c-4159950d210b",
                "indicator--560ba31d-994c-438c-b3c3-4116950d210b",
                "indicator--560ba31d-6894-46d3-8025-4d0f950d210b",
                "indicator--560ba31e-3e34-43b8-9ee6-4ab9950d210b",
                "indicator--560ba31e-0c04-41ec-a636-4667950d210b",
                "indicator--560ba31e-c7b8-4ced-9657-4e5c950d210b",
                "indicator--560ba31e-0878-48de-b7c4-4d1c950d210b",
                "indicator--560ba31e-56a8-48d2-8321-4324950d210b",
                "indicator--560ba31e-4ea8-400b-88cb-4bd2950d210b",
                "indicator--560ba31f-ce84-4d63-847f-4440950d210b",
                "indicator--560ba31e-71c0-4563-b855-42dd950d210b",
                "indicator--560ba31f-45fc-4426-a130-4fc7950d210b",
                "indicator--560ba31f-3bb4-4910-a2ae-4071950d210b",
                "indicator--560ba31f-2a04-456f-910b-4a7e950d210b",
                "indicator--560ba31f-2b08-4b85-b674-40ce950d210b",
                "indicator--560ba31f-f66c-4e09-9b13-44e1950d210b",
                "indicator--560ba31f-a5a8-4644-9452-4a0d950d210b",
                "indicator--560ba320-0df8-48dd-93ee-42ff950d210b",
                "indicator--560ba320-9268-41e9-9955-47f1950d210b",
                "indicator--560ba320-7370-4ddf-ab02-4650950d210b",
                "indicator--560ba320-8538-43d5-931b-4031950d210b",
                "indicator--560ba320-a654-4566-907c-49df950d210b",
                "indicator--560ba320-e314-41d6-8d7a-49bd950d210b",
                "indicator--560ba320-3744-4992-979c-4a89950d210b",
                "indicator--560ba321-7ee0-458f-a998-4841950d210b",
                "indicator--560ba320-36d0-46f7-9de8-4cf1950d210b",
                "indicator--560ba321-a020-4b72-86bf-402a950d210b",
                "indicator--560ba321-e734-4bbf-917a-433c950d210b",
                "indicator--560ba321-0c58-45f7-8174-4363950d210b",
                "indicator--560ba321-7dcc-4846-90d9-4a19950d210b",
                "indicator--560ba321-7284-4db8-973e-4ab8950d210b",
                "indicator--560ba321-8888-4328-b5e5-4067950d210b",
                "indicator--560ba322-9fb4-413c-83e8-48b6950d210b",
                "indicator--560ba322-5b8c-4d0b-a68c-4e98950d210b",
                "indicator--560ba322-2034-4e79-8f1c-468f950d210b",
                "indicator--560ba322-8320-44f5-9afa-4f2c950d210b",
                "indicator--560ba322-69fc-445b-a43e-48af950d210b",
                "indicator--560ba322-110c-41ad-952a-4a7c950d210b",
                "indicator--560ba322-8d04-4f50-b974-47b6950d210b",
                "indicator--560ba323-ed10-4139-8718-44e4950d210b",
                "indicator--560ba322-bc54-4a65-9c8b-4795950d210b",
                "indicator--560ba323-22fc-4457-8402-4e55950d210b",
                "indicator--560ba323-7f64-4ef9-a3ba-49eb950d210b",
                "indicator--560ba323-da84-4daf-a00a-4bee950d210b",
                "indicator--560ba323-15ac-45fd-b6c1-44ef950d210b",
                "indicator--560ba323-31a0-4fad-b125-4503950d210b",
                "indicator--560ba323-3e80-4c14-855f-4bf2950d210b",
                "indicator--560ba323-a794-43b6-a19e-4842950d210b",
                "indicator--560ba324-a284-47f6-bfbb-492a950d210b",
                "indicator--560ba324-050c-4b35-8b0d-4cd9950d210b",
                "indicator--560ba324-7184-4e28-8e89-4ab9950d210b",
                "indicator--560ba324-19f0-40bc-bbe1-4acb950d210b",
                "indicator--560ba324-a5c4-48c0-b388-46a6950d210b",
                "indicator--560ba324-93c4-489b-802c-4e75950d210b",
                "indicator--560ba325-e5bc-4449-b4ab-4ea3950d210b",
                "indicator--560ba324-a4ac-4198-ad2f-4734950d210b",
                "indicator--560ba325-74a4-4eef-b3c5-4e4d950d210b",
                "indicator--560ba325-7ddc-4c51-bf69-4182950d210b",
                "indicator--560ba325-0638-4c4d-8173-4bca950d210b",
                "indicator--560ba325-4df0-461a-ae6a-40ae950d210b",
                "indicator--560ba325-ef80-4bb8-ab5b-4c16950d210b",
                "indicator--560ba325-21c8-475f-b233-40de950d210b",
                "indicator--560ba325-2b64-4763-a1c7-484b950d210b",
                "indicator--560ba326-7ca4-4ee9-a75c-44dc950d210b",
                "indicator--560ba326-0d70-4fef-a2a1-4fa9950d210b",
                "indicator--560ba326-2fc8-4f88-8ed7-4b6e950d210b",
                "indicator--560ba326-dbc0-4685-96a9-455e950d210b",
                "indicator--560ba326-5c1c-4c81-98de-43b5950d210b",
                "indicator--560ba326-cafc-4474-9090-426b950d210b",
                "indicator--560ba327-55cc-40cf-bfc1-4f05950d210b",
                "indicator--560ba326-d3d0-44b3-a097-4286950d210b",
                "indicator--560ba327-55c0-478f-b104-41e9950d210b",
                "indicator--560ba327-e25c-40c6-bca9-48b1950d210b",
                "indicator--560ba327-f784-425e-b61b-4e4c950d210b",
                "indicator--560ba327-f5f4-4e50-8722-48c8950d210b",
                "indicator--560ba327-ee44-4384-85c9-4086950d210b",
                "indicator--560ba327-6958-4089-86d5-4c96950d210b",
                "indicator--560ba327-8d84-4441-943a-4b3c950d210b",
                "indicator--560ba328-1108-4c26-8360-4881950d210b",
                "indicator--560ba328-f820-4235-b79c-4c5b950d210b",
                "indicator--560ba328-7c68-46cb-bdeb-4c19950d210b",
                "indicator--560ba328-2a08-4ed5-aade-4a52950d210b",
                "indicator--560ba328-66e4-4f43-907d-485e950d210b",
                "indicator--560ba328-1bdc-4311-abb7-42eb950d210b",
                "indicator--560ba328-f54c-4900-a6bc-4eb1950d210b",
                "indicator--560ba328-7930-4846-935b-4f65950d210b",
                "indicator--560ba329-702c-479a-a418-4248950d210b",
                "indicator--560ba329-cb24-404f-aa79-4e92950d210b",
                "indicator--560ba329-8278-46c8-838a-45ff950d210b",
                "indicator--560ba329-2c48-40b8-ad32-4cf0950d210b",
                "indicator--560ba329-bfc0-44e4-9f8c-4102950d210b",
                "indicator--560ba329-a6fc-413e-a6ce-47ea950d210b",
                "indicator--560ba329-3034-42c5-936b-4325950d210b",
                "indicator--560ba32a-e90c-4e37-8e84-48fa950d210b",
                "indicator--560ba32a-7dcc-4536-9d7d-4ed3950d210b",
                "indicator--560ba32a-1728-48f3-9d7f-4be3950d210b",
                "indicator--560ba32a-0984-46ff-87f7-4624950d210b",
                "indicator--560ba32a-9e78-4301-aba5-4370950d210b",
                "indicator--560ba32a-6a44-4627-8e47-4328950d210b",
                "indicator--560ba32a-c7b8-4e5e-8faa-49f7950d210b",
                "indicator--560ba32a-2464-4e76-90bb-4b74950d210b",
                "indicator--560ba32b-4840-403d-aa46-4e74950d210b",
                "indicator--560ba32b-c67c-4fa5-b8a5-4d61950d210b",
                "indicator--560ba32b-2e04-4ccf-810f-43a8950d210b",
                "indicator--560ba32b-b8f8-4977-b5b7-412b950d210b",
                "indicator--560ba32b-a588-4b86-a83b-4277950d210b",
                "indicator--560ba32b-8510-4f7a-b33d-4c1a950d210b",
                "indicator--560ba32b-37dc-4718-9aeb-4e4c950d210b",
                "indicator--560ba32c-67d0-4df4-ade0-490c950d210b",
                "indicator--560ba32c-7180-447c-a212-49c2950d210b",
                "indicator--560ba32c-b834-448f-b911-450e950d210b",
                "indicator--560ba32c-1f48-4625-bb02-4954950d210b",
                "indicator--560ba32c-7750-4190-83c2-4535950d210b",
                "indicator--560ba32c-9ce4-4c3c-94ed-4219950d210b",
                "indicator--560ba32c-669c-414e-9dbb-4ca0950d210b",
                "indicator--560ba32c-4fd8-4003-be3d-4198950d210b",
                "indicator--560ba32d-2aac-4363-a906-45b5950d210b",
                "indicator--560ba32d-fb38-4e56-94c6-49ff950d210b",
                "indicator--560ba32d-7224-43fc-afbb-4184950d210b",
                "indicator--560ba32d-46d8-45c4-943a-457d950d210b",
                "indicator--560ba32d-97bc-4de7-b256-4c35950d210b",
                "indicator--560ba32d-a9f8-40bc-8a45-4ad4950d210b",
                "indicator--560ba32d-9a2c-4029-9f3f-4c73950d210b",
                "indicator--560ba32e-2d68-4495-969e-4efc950d210b",
                "indicator--560ba32e-cca4-47d7-be74-4f2c950d210b",
                "indicator--560ba32e-d7c0-4901-9dea-4edf950d210b",
                "indicator--560ba32e-a880-42f0-8c17-448d950d210b",
                "indicator--560ba32e-70c8-474f-970d-44d8950d210b",
                "indicator--560ba32e-6230-4fe1-8d41-4346950d210b",
                "indicator--560ba32e-97cc-462e-925d-457e950d210b",
                "indicator--560ba32e-54d8-4b9b-9d08-4abd950d210b",
                "indicator--560ba32f-b134-4db2-a896-4d01950d210b",
                "indicator--560ba32f-8a10-49eb-856c-4c4c950d210b",
                "indicator--560ba32f-1710-4850-b538-4fc5950d210b",
                "indicator--560ba32f-9d04-4273-a9bb-4d89950d210b",
                "indicator--560ba32f-52c0-4746-a902-4827950d210b",
                "indicator--560ba32f-937c-4fa8-a9fc-4835950d210b",
                "indicator--560ba32f-d758-462e-aaaa-4957950d210b",
                "indicator--560ba32f-1658-46b8-a74b-4fc8950d210b",
                "indicator--560ba330-70bc-44e2-8ded-4f70950d210b",
                "indicator--560ba330-d298-47ec-8a9f-49ea950d210b",
                "indicator--560ba330-92e0-4f3f-809b-40a4950d210b",
                "indicator--560ba330-00e8-4fcd-a6fc-48c5950d210b",
                "indicator--560ba330-44bc-4339-b2be-435f950d210b",
                "indicator--560ba330-97d0-463c-8baf-4222950d210b",
                "indicator--560ba330-9da4-4729-a6f8-43de950d210b",
                "indicator--560ba331-5898-4b9d-8b85-4af8950d210b",
                "indicator--560ba331-7684-4e27-8f0b-406d950d210b",
                "indicator--560ba331-06e8-4f14-a2bf-418b950d210b",
                "indicator--560ba331-ab84-4e57-9082-4d74950d210b",
                "indicator--560ba331-35dc-41bd-a7ff-410c950d210b",
                "indicator--560ba331-aaa8-4537-87dd-4501950d210b",
                "indicator--560ba331-36e8-41b8-b34a-43b0950d210b",
                "indicator--560ba331-fb7c-4da8-928b-47d9950d210b",
                "indicator--560ba332-de30-4ea1-b453-4bd2950d210b",
                "indicator--560ba332-7b18-4f34-a0f4-4099950d210b",
                "indicator--560ba332-6e0c-4b81-a103-44e6950d210b",
                "indicator--560ba332-bd34-46d9-8132-4070950d210b",
                "indicator--560ba332-3e34-452a-a4af-4544950d210b",
                "indicator--560ba332-a430-495d-999e-4d76950d210b",
                "indicator--560ba332-9208-4ba8-b51b-4933950d210b",
                "indicator--560ba333-2b2c-4b88-bf2f-4f53950d210b",
                "indicator--560ba333-246c-4e30-9737-4253950d210b",
                "indicator--560ba333-8ac0-4680-b2db-41c0950d210b",
                "indicator--560ba333-8c54-41b6-9837-4bac950d210b",
                "indicator--560ba333-7e38-414d-b3d9-456a950d210b",
                "indicator--560ba333-2ff8-4fa0-b846-4c2e950d210b",
                "indicator--560ba333-5e9c-4871-a81b-4cba950d210b",
                "indicator--560ba333-d598-46d0-bcfe-43c0950d210b",
                "indicator--560ba334-ec40-4dcf-b262-4906950d210b",
                "indicator--560ba334-5770-4866-9463-453b950d210b",
                "indicator--560ba334-f6e0-4511-804d-4748950d210b",
                "indicator--560ba334-8a94-4f3f-8174-47fa950d210b",
                "indicator--560ba334-8bfc-4ce5-b097-4749950d210b",
                "indicator--560ba334-9220-49c9-8aca-43fc950d210b",
                "indicator--560ba334-cb24-4793-b4c2-43df950d210b",
                "indicator--560ba335-7460-484a-96ca-476d950d210b",
                "indicator--560ba335-2774-43cc-a0bf-44d4950d210b",
                "indicator--560ba335-1320-46dd-b2d7-4db6950d210b",
                "indicator--560ba335-07ec-4934-828e-48a1950d210b",
                "indicator--560ba335-8c30-4831-9a96-49c5950d210b",
                "indicator--560ba335-742c-4fc1-a97b-4559950d210b",
                "indicator--560ba335-0b04-4903-bad2-457a950d210b",
                "indicator--560ba335-9994-426f-911b-4213950d210b",
                "indicator--560ba336-8c28-4a78-9e5b-4f3b950d210b",
                "indicator--560ba336-bd54-4918-865d-48c1950d210b",
                "indicator--560ba336-c184-48d0-b9e6-4d3d950d210b",
                "indicator--560ba336-e9bc-47e1-9e16-478c950d210b",
                "indicator--560ba336-e774-4512-a620-4e69950d210b",
                "indicator--560ba336-c1bc-4722-9126-49a3950d210b",
                "indicator--560ba336-0f50-4239-976c-4c49950d210b",
                "indicator--560ba337-376c-4d45-ac51-4db3950d210b",
                "indicator--560ba336-a4c0-4dd8-beb1-414b950d210b",
                "indicator--560ba337-725c-45b8-860b-44a1950d210b",
                "indicator--560ba337-67c4-4d33-85fa-4b0d950d210b",
                "indicator--560ba337-7a28-4eae-b9b9-48a4950d210b",
                "indicator--560ba337-3048-48d3-9ea3-4b36950d210b",
                "indicator--560ba337-d9d0-4f51-a9aa-4ada950d210b",
                "indicator--560ba337-2ed8-4433-a07f-4faf950d210b",
                "indicator--560ba338-fa4c-4404-b6e6-42f4950d210b",
                "indicator--560ba338-9134-4eb9-a4cf-4167950d210b",
                "indicator--560ba338-eb88-4282-808f-416c950d210b",
                "indicator--560ba338-5a30-45c6-b14e-45d9950d210b",
                "indicator--560ba338-a5d0-4faf-8cfa-45f0950d210b",
                "indicator--560ba338-7ea4-473e-8ced-4d5d950d210b",
                "indicator--560ba338-67d4-43d0-8ef7-40b0950d210b",
                "indicator--560ba339-487c-4017-b697-42e2950d210b",
                "indicator--560ba338-c040-4706-b39d-4a56950d210b",
                "indicator--560ba339-63a8-4e1e-bb98-49ae950d210b",
                "indicator--560ba339-093c-49da-a642-4672950d210b",
                "indicator--560ba339-e5f8-421f-8dc9-45ec950d210b",
                "indicator--560ba339-9a88-4338-af95-4731950d210b",
                "indicator--560ba339-a658-4c2f-8d01-4fb7950d210b",
                "indicator--560ba339-7d5c-43dd-bbc9-4961950d210b",
                "indicator--560ba33a-fd4c-4b24-9cb9-41a0950d210b",
                "indicator--560ba33a-fb78-4c29-8d88-4103950d210b",
                "indicator--560ba33a-9694-4112-8cb9-4768950d210b",
                "indicator--560ba33a-6dcc-409a-9184-40ba950d210b",
                "indicator--560ba33a-0730-48c5-beab-483b950d210b",
                "indicator--560ba33a-bda4-483c-95e4-4d3c950d210b",
                "indicator--560ba33a-cbc4-4b0c-81f6-4a6e950d210b",
                "indicator--560ba33b-4990-4e9a-b287-4399950d210b",
                "indicator--560ba33a-20b0-41fb-bb20-494d950d210b",
                "indicator--560ba33b-fa9c-4c1d-9519-4911950d210b",
                "indicator--560ba33b-3894-4fbb-9c4a-48eb950d210b",
                "indicator--560ba33b-ef44-4b7a-997c-4b40950d210b",
                "indicator--560ba33b-c088-4a93-9467-4bd2950d210b",
                "indicator--560ba33b-caa4-4ec0-b77c-4b3e950d210b",
                "indicator--560ba33b-47bc-4b9c-8746-498e950d210b",
                "indicator--560ba33c-2bd0-4c8c-b51c-4bb0950d210b",
                "indicator--560ba33c-b2c8-4654-8ada-4e8b950d210b",
                "indicator--560ba33c-662c-4c30-896b-42c6950d210b",
                "indicator--560ba33c-1af4-4a83-8272-46a8950d210b",
                "indicator--560ba33c-8824-4fbe-812d-4906950d210b",
                "indicator--560ba33c-b97c-45ee-a2fa-464c950d210b",
                "indicator--560ba33c-2388-49f8-8723-42a9950d210b",
                "indicator--560ba33d-3c60-4737-ba88-4899950d210b",
                "indicator--560ba33c-fbac-4c91-adbc-44a0950d210b",
                "indicator--560ba33d-3240-494a-b983-4360950d210b",
                "indicator--560ba33d-eb5c-420b-b602-4aea950d210b",
                "indicator--560ba33d-134c-40f2-91c1-46db950d210b",
                "indicator--560ba33d-fdc8-4cd3-85c2-4179950d210b",
                "indicator--560ba33d-ea3c-41cb-ab7d-412e950d210b",
                "indicator--560ba33d-361c-433c-a9f2-48c1950d210b",
                "indicator--560ba33e-0610-4628-9f66-4e25950d210b",
                "indicator--560ba33e-46c8-4a1c-b919-4c7c950d210b",
                "indicator--560ba33e-bbac-45be-a8ba-4e79950d210b",
                "indicator--560ba33e-c038-42df-a521-4429950d210b",
                "indicator--560ba33e-8c08-46fe-b10c-4b0d950d210b",
                "indicator--560ba33e-d95c-4d1d-8908-44d7950d210b",
                "indicator--560ba33e-3484-4240-86f5-40a1950d210b",
                "indicator--560ba33f-75fc-40c9-9796-4f5b950d210b",
                "indicator--560ba33e-0700-4915-b14a-48a1950d210b",
                "indicator--560ba33f-dd98-4c06-b190-4704950d210b",
                "indicator--560ba33f-f86c-4391-a725-4b07950d210b",
                "indicator--560ba33f-7390-405c-8cb9-4a7a950d210b",
                "indicator--560ba33f-959c-46e3-a99e-4f72950d210b",
                "indicator--560ba33f-ed10-4343-b92d-444d950d210b",
                "indicator--560ba33f-ad7c-4515-8554-49c5950d210b",
                "indicator--560ba340-0e94-434f-bb16-413f950d210b",
                "indicator--560ba340-d058-4109-b289-47ca950d210b",
                "indicator--560ba340-9c58-450d-be84-4108950d210b",
                "indicator--560ba340-3190-4ee5-9bcd-4bf9950d210b",
                "indicator--560ba340-7370-4d9a-a55e-473a950d210b",
                "indicator--560ba340-25d4-413d-b448-453c950d210b",
                "indicator--560ba340-f540-49b3-b872-432a950d210b",
                "indicator--560ba341-21b8-40e8-bf7b-4ca0950d210b",
                "indicator--560ba340-a494-4703-9e1e-41b6950d210b",
                "indicator--560ba341-7da4-40a1-a58b-4b6a950d210b",
                "indicator--560ba341-893c-4cbe-810f-4224950d210b",
                "indicator--560ba341-7980-42e5-b677-4e0f950d210b",
                "indicator--560ba341-3c04-4aff-b033-40bb950d210b",
                "indicator--560ba341-7ba8-4569-9183-4548950d210b",
                "indicator--560ba341-372c-481c-a7ef-41e2950d210b",
                "indicator--560ba342-f974-4c70-b353-40c8950d210b",
                "indicator--560ba342-3fb8-4aae-8db3-4f1a950d210b",
                "indicator--560ba342-0a28-422f-90a0-4a77950d210b",
                "indicator--560ba342-d4c8-4ce3-8b30-48e5950d210b",
                "indicator--560ba342-40d4-479a-9a60-4296950d210b",
                "indicator--560ba342-7224-4f3f-8260-48d9950d210b",
                "indicator--560ba342-97c0-4796-be0d-49e2950d210b",
                "indicator--560ba343-b104-4190-ac6d-48f4950d210b",
                "indicator--560ba342-1d2c-4bd8-9829-4fdb950d210b",
                "indicator--560ba343-d0c0-4092-8511-41e7950d210b",
                "indicator--560ba343-8940-4a31-9c13-4048950d210b",
                "indicator--560ba343-8da4-4b7a-abb9-434e950d210b",
                "indicator--560ba343-dc28-4cd1-852b-4102950d210b",
                "indicator--560ba343-8a54-418f-8039-4467950d210b",
                "indicator--560ba343-4e58-40d0-8455-4b29950d210b",
                "indicator--560ba344-a724-469b-93cf-447f950d210b",
                "indicator--560ba344-3170-47fd-8789-4a00950d210b",
                "indicator--560ba344-2b2c-404f-bbef-4b39950d210b",
                "indicator--560ba344-9b9c-4bcf-8302-4533950d210b",
                "indicator--560ba344-0790-437c-9c53-470b950d210b",
                "indicator--560ba344-f600-4b7f-a836-4df6950d210b",
                "indicator--560ba344-5b08-42bf-8500-47d3950d210b",
                "indicator--560ba345-e094-48d6-84d6-4a15950d210b",
                "indicator--560ba344-1b20-43d2-a460-429b950d210b",
                "indicator--560ba345-133c-4d91-94b3-44b0950d210b",
                "indicator--560ba345-93c8-41d8-a6bd-41b2950d210b",
                "indicator--560ba345-4700-43b8-8dde-459c950d210b",
                "indicator--560ba345-c68c-4fa7-b7eb-4334950d210b",
                "indicator--560ba345-e844-4775-8fd5-415a950d210b",
                "indicator--560ba345-c3a4-4607-97fa-44b1950d210b",
                "indicator--560ba346-2d80-48b1-b903-46ee950d210b",
                "indicator--560ba346-9a38-48b5-a519-49a6950d210b",
                "indicator--560ba346-b350-4bf0-b027-46a2950d210b",
                "indicator--560ba346-0278-4e3b-ae1b-414b950d210b",
                "indicator--560ba346-630c-4383-8ccb-4c95950d210b",
                "indicator--560ba346-4884-4a35-8681-4dcc950d210b",
                "indicator--560ba346-265c-470c-a2f7-429d950d210b",
                "indicator--560ba347-54dc-4b7a-bea4-4900950d210b",
                "indicator--560ba346-edf0-4889-ac14-4efc950d210b",
                "indicator--560ba347-899c-4c3a-bef5-484c950d210b",
                "indicator--560ba347-5c80-427a-a6b9-430f950d210b",
                "indicator--560ba347-0eb8-45df-ae32-49b3950d210b",
                "indicator--560ba347-3d9c-4983-bd97-4fd3950d210b",
                "indicator--560ba347-67ec-4404-9496-4343950d210b",
                "indicator--560ba347-05d4-4f15-8229-4091950d210b",
                "indicator--560ba348-fe68-4a62-ae65-4fff950d210b",
                "indicator--560ba348-36ec-4e14-ae8e-4ad3950d210b",
                "indicator--560ba348-0ca0-489f-a9aa-46a8950d210b",
                "indicator--560ba348-f6ec-4a08-8407-4557950d210b",
                "indicator--560ba348-aba8-4c45-94ab-4178950d210b",
                "indicator--560ba348-d640-4906-ae16-4bd8950d210b",
                "indicator--560ba348-fdcc-4eac-8f12-463b950d210b",
                "indicator--560ba348-8b50-4224-a882-400c950d210b",
                "indicator--560ba349-2b3c-4206-b7db-4ae1950d210b",
                "indicator--560ba349-ce5c-45d7-9447-4fe5950d210b",
                "indicator--560ba349-beb8-4c8f-87df-480b950d210b",
                "indicator--560ba349-e0c8-44f8-8f60-43a9950d210b",
                "indicator--560ba349-5c78-4cf7-b04a-4f07950d210b",
                "indicator--560ba349-64a4-432d-93f1-471f950d210b",
                "indicator--560ba349-31c0-4710-9970-4d98950d210b",
                "indicator--560ba349-a5e4-4e84-a6b1-4e8d950d210b",
                "indicator--560ba34a-09bc-4356-a60c-4698950d210b",
                "indicator--560ba34a-64e0-4261-b303-407a950d210b",
                "indicator--560ba34a-b0cc-43bb-9e4f-4be5950d210b",
                "indicator--560ba34a-dfe0-4288-8fba-45e6950d210b",
                "indicator--560ba34a-4e84-4828-b18e-4b23950d210b",
                "indicator--560ba34a-36dc-4b08-a22d-4c08950d210b",
                "indicator--560ba34a-702c-404a-b825-44a4950d210b",
                "indicator--560ba34a-6334-4114-8671-4d8f950d210b",
                "indicator--560ba34b-9cf8-49dd-a15a-410a950d210b",
                "indicator--560ba34b-2c20-4c7e-8785-4527950d210b",
                "indicator--560ba34b-5458-4829-b4a0-4012950d210b",
                "indicator--560ba34b-9e20-40e1-b5ef-4ef2950d210b",
                "indicator--560ba34b-ef28-4d89-a350-48b0950d210b",
                "indicator--560ba34b-7004-4cab-8d0f-43a2950d210b",
                "indicator--560ba34b-1684-462a-9e48-4d3f950d210b",
                "indicator--560ba34c-bf8c-4553-aa84-4c3e950d210b",
                "indicator--560ba34c-ddb0-439e-925a-4f64950d210b",
                "indicator--560ba34c-65c0-4349-9dd8-4b7b950d210b",
                "indicator--560ba34c-a314-459c-a8d7-427c950d210b",
                "indicator--560ba34c-f900-4a2f-b1d2-4831950d210b",
                "indicator--560ba34c-a750-4dfa-a4bb-4784950d210b",
                "indicator--560ba34c-b280-46a5-b193-440e950d210b",
                "indicator--560ba34d-5e38-423e-9dda-4a98950d210b",
                "indicator--560ba34c-a408-4f9f-8f15-4290950d210b",
                "indicator--560ba34d-848c-47d5-ba17-40bb950d210b",
                "indicator--560ba34d-be90-43c0-9d8e-4380950d210b",
                "indicator--560ba34d-2724-4a25-b8eb-44d8950d210b",
                "indicator--560ba34d-1cc8-4418-b236-4fe1950d210b",
                "indicator--560ba34d-5668-4b89-b7d0-43b0950d210b",
                "indicator--560ba34d-73fc-4e21-991c-40ad950d210b",
                "indicator--560ba34e-515c-4794-addc-4ad6950d210b",
                "indicator--560ba34e-e180-4ec4-a370-4c1e950d210b",
                "indicator--560ba34e-ffe0-4647-8a24-45c9950d210b",
                "indicator--560ba34e-ac84-4188-ba9d-4165950d210b",
                "indicator--560ba34e-4e04-421d-8baf-445e950d210b",
                "indicator--560ba34e-c2ec-41e5-819e-4e84950d210b",
                "indicator--560ba34e-fd2c-4ae4-a8f0-41e3950d210b",
                "indicator--560ba34f-2128-4dd8-b8c7-446e950d210b",
                "indicator--560ba34e-10b4-4d47-b2f7-4141950d210b",
                "indicator--560ba34f-27b8-4ba3-996d-4785950d210b",
                "indicator--560ba34f-2028-4ddd-89f2-4b62950d210b",
                "indicator--560ba34f-656c-4687-b120-4217950d210b",
                "indicator--560ba34f-c9a8-4d6c-afe8-4713950d210b",
                "indicator--560ba34f-f35c-4219-a87b-4a00950d210b",
                "indicator--560ba34f-c8b4-407a-900c-4e85950d210b",
                "indicator--560ba350-cbdc-4865-9153-4d32950d210b",
                "indicator--560ba350-fd10-46f1-82fc-43bf950d210b",
                "indicator--560ba350-40bc-49b9-90f1-4993950d210b",
                "indicator--560ba350-c248-46c1-9373-49c8950d210b",
                "indicator--560ba350-8704-469d-a299-4e0a950d210b",
                "indicator--560ba350-a72c-43c5-ad0b-4f8b950d210b",
                "indicator--560ba350-9ae4-4f73-a50b-40dc950d210b",
                "indicator--560ba351-3204-47f2-af7a-490c950d210b",
                "indicator--560ba350-d65c-4f5f-8f67-4ca8950d210b",
                "indicator--560ba351-4154-45a3-91bc-4047950d210b",
                "indicator--560ba351-d788-4ad3-9651-4b2e950d210b",
                "indicator--560ba351-65f4-4040-abbd-43a2950d210b",
                "indicator--560ba351-7b28-4b16-8524-403e950d210b",
                "indicator--560ba351-d334-4964-b840-4208950d210b",
                "indicator--560ba351-a058-4959-be92-441f950d210b",
                "indicator--560ba352-7cc0-4b59-9adf-45a4950d210b",
                "indicator--560ba352-bb70-4f23-8209-4acf950d210b",
                "indicator--560ba352-d21c-4881-96c8-46bc950d210b",
                "indicator--560ba352-4c4c-4b8a-b315-4d38950d210b",
                "indicator--560ba352-b240-4125-a183-455c950d210b",
                "indicator--560ba352-fc34-44af-9c10-4287950d210b",
                "indicator--560ba352-7ffc-4aad-937a-49bb950d210b",
                "indicator--560ba353-fc70-4f91-98f6-4890950d210b",
                "indicator--560ba352-f944-4ccd-be82-44d0950d210b",
                "indicator--560ba353-f4a4-4746-b9bd-47a3950d210b",
                "indicator--560ba353-71fc-4e86-8493-4f79950d210b",
                "indicator--560ba353-556c-4239-a5eb-4056950d210b",
                "indicator--560ba353-415c-4508-aa47-46b6950d210b",
                "indicator--560ba353-b230-4b4e-8960-458b950d210b",
                "indicator--560ba353-f17c-47a2-924a-4ec4950d210b",
                "indicator--560ba353-4134-4c2f-9ad7-4c03950d210b",
                "indicator--560ba354-fb8c-44f8-a56a-4d54950d210b",
                "indicator--560ba354-88d4-4c2f-b122-4e15950d210b",
                "indicator--560ba354-f394-414d-a8b8-4986950d210b",
                "indicator--560ba354-ebcc-46e2-a729-4931950d210b",
                "indicator--560ba354-b120-43cd-afed-4934950d210b",
                "indicator--560ba354-c5b8-4aec-b0f6-408c950d210b",
                "indicator--560ba354-e684-4549-b233-4c34950d210b",
                "indicator--560ba355-19b8-42ef-9f91-4a79950d210b",
                "indicator--560ba355-3abc-46eb-8b7f-4c1b950d210b",
                "indicator--560ba355-946c-4448-ad2c-44e6950d210b",
                "indicator--560ba355-21d4-4b99-90b6-4915950d210b",
                "indicator--560ba355-6b80-41c6-9083-49a6950d210b",
                "indicator--560ba355-d448-4a98-91be-4793950d210b",
                "indicator--560ba355-cd00-49d7-9a7d-4fd4950d210b",
                "indicator--560ba356-2668-4f8e-bc7b-4b24950d210b",
                "indicator--560ba355-c760-4190-bfad-4769950d210b",
                "indicator--560ba356-16e0-4922-8353-46f5950d210b",
                "indicator--560ba356-195c-49b6-8da5-44cb950d210b",
                "indicator--560ba356-89d0-4207-a81a-42a4950d210b",
                "indicator--560ba356-9cd8-481f-b8f9-4c92950d210b",
                "indicator--560ba356-d4d4-4f48-86d3-45cf950d210b",
                "indicator--560ba356-8344-42b0-b1b5-4e32950d210b",
                "indicator--560ba357-cbcc-485a-a4a0-452c950d210b",
                "indicator--560ba356-56f4-45a9-95bc-410f950d210b",
                "indicator--560ba357-f6f8-49a3-a296-4a22950d210b",
                "indicator--560ba357-5814-4a60-a264-4d3b950d210b",
                "indicator--560ba357-e0ec-4d5b-879f-414c950d210b",
                "indicator--560ba357-c89c-4ff0-9604-4cdc950d210b",
                "indicator--560ba357-7e98-4391-99b1-4997950d210b",
                "indicator--560ba357-aa70-4d15-b4a0-4050950d210b",
                "indicator--560ba358-6a28-4a68-9a45-4d15950d210b",
                "indicator--560ba358-295c-4d36-b575-4937950d210b",
                "indicator--560ba358-b23c-4d87-af99-4adb950d210b",
                "indicator--560ba358-5ad8-4443-a1e7-43f3950d210b",
                "indicator--560ba358-d0a0-458a-bde5-4ba5950d210b",
                "indicator--560ba358-496c-4ac4-9a20-479f950d210b",
                "indicator--560ba358-98e4-4016-beb4-44c6950d210b",
                "indicator--560ba359-e958-48ea-8b92-4052950d210b",
                "indicator--560ba358-182c-44d0-879e-4c14950d210b",
                "indicator--560ba359-7a98-4af8-856d-4e8c950d210b",
                "indicator--560ba359-499c-4aa2-b9a5-485f950d210b",
                "indicator--560ba359-478c-45f2-b7e8-4bad950d210b",
                "indicator--560ba359-c3dc-46b3-a9d8-4a43950d210b",
                "indicator--560ba359-da08-494b-bcf4-4699950d210b",
                "indicator--560ba359-ddc8-44de-b98a-4529950d210b",
                "indicator--560ba35a-de48-47e9-8abf-4fb3950d210b",
                "indicator--560ba35a-00c8-4267-b0da-4651950d210b",
                "indicator--560ba35a-48c0-482c-b338-4d07950d210b",
                "indicator--560ba35a-4d14-410b-b523-4962950d210b",
                "indicator--560ba35a-bb5c-45d5-ae01-4c73950d210b",
                "indicator--560ba35a-df88-42a3-a77e-4a7d950d210b",
                "indicator--560ba35a-9f40-4adc-ba5c-4e8c950d210b",
                "indicator--560ba35b-2218-4166-b41c-48bd950d210b",
                "indicator--560ba35a-c748-428f-ad1d-455b950d210b",
                "indicator--560ba35b-5040-42de-aabb-41e4950d210b",
                "indicator--560ba35b-c828-4364-a324-4dba950d210b",
                "indicator--560ba35b-f0e0-4286-9aa6-463f950d210b",
                "indicator--560ba35b-4f38-4031-92c5-418c950d210b",
                "indicator--560ba35b-adfc-44d2-9386-4eb0950d210b",
                "indicator--560ba35b-21b4-415d-bdd6-47fc950d210b",
                "indicator--560ba35c-b610-4101-a7ab-4545950d210b",
                "indicator--560ba35c-b57c-48fc-8e2a-4767950d210b",
                "indicator--560ba35c-8c10-4ebf-8947-4d67950d210b",
                "indicator--560ba35c-b5d8-4553-8e96-4a5a950d210b",
                "indicator--560ba35c-437c-44f6-82c7-4ea7950d210b",
                "indicator--560ba35c-c5fc-4a44-b6c6-4490950d210b",
                "indicator--560ba35c-cde4-41ed-9561-4bf2950d210b",
                "indicator--560ba35d-dfbc-4bd4-a830-47dd950d210b",
                "indicator--560ba35c-8608-4da3-93b2-42a5950d210b",
                "indicator--560ba35d-ab00-4e86-adc8-44bc950d210b",
                "indicator--560ba35d-f914-4e6a-b87d-4d81950d210b",
                "indicator--560ba35d-a250-4899-9817-4a62950d210b",
                "indicator--560ba35d-f2f4-432d-8b73-49b4950d210b",
                "indicator--560ba35d-ba04-45bb-af47-4a5e950d210b",
                "indicator--560ba35d-3654-4397-b32b-4f79950d210b",
                "indicator--560ba35e-6a34-43c5-b458-4912950d210b",
                "indicator--560ba35e-008c-4ee6-95e8-4829950d210b",
                "indicator--560ba35e-80c4-4798-99fa-4979950d210b",
                "indicator--560ba35e-57fc-4688-af37-4060950d210b",
                "indicator--560ba35e-5fa0-4657-ab34-4a8d950d210b",
                "indicator--560ba35e-5f40-47b4-9149-42e6950d210b",
                "indicator--560ba35e-1c68-42d3-839f-4a2c950d210b",
                "indicator--560ba35e-9d70-4e36-b8bb-4fcd950d210b",
                "indicator--560ba35f-be0c-4bb3-9231-421f950d210b",
                "indicator--560ba35f-cef4-4ea0-a29b-43b3950d210b",
                "indicator--560ba35f-63ac-4eb4-a341-4c25950d210b",
                "indicator--560ba35f-e57c-4377-bf78-4c67950d210b",
                "indicator--560ba35f-7c4c-4877-b282-4327950d210b",
                "indicator--560ba35f-95a4-4930-bf1c-45a2950d210b",
                "indicator--560ba35f-7eb0-4454-ba13-49ca950d210b",
                "indicator--560ba35f-4484-4f4a-8fd5-4fab950d210b",
                "indicator--560ba360-d858-4b3a-a32b-41fa950d210b",
                "indicator--560ba360-cec8-496b-906f-4771950d210b",
                "indicator--560ba360-1dc8-47d6-a3cc-46a1950d210b",
                "indicator--560ba360-68dc-48f5-83bc-44ef950d210b",
                "indicator--560ba360-6764-42af-a9e2-4415950d210b",
                "indicator--560ba360-af4c-44df-8108-4e08950d210b",
                "indicator--560ba360-9864-4e5f-a11a-404f950d210b",
                "indicator--560ba361-d034-42e2-8ae8-426a950d210b",
                "indicator--560ba361-e9b0-456c-91c3-410c950d210b",
                "indicator--560ba361-b028-4a57-ad2e-45ac950d210b",
                "indicator--560ba361-da38-472b-9ef7-4ce5950d210b",
                "indicator--560ba361-171c-4a44-82b3-424e950d210b",
                "indicator--560ba361-1298-49f0-b5a0-4def950d210b",
                "indicator--560ba362-af44-4dee-89f3-4d33950d210b",
                "indicator--560ba362-bbf8-4a83-8831-4743950d210b",
                "indicator--560ba362-8e04-4313-a5c5-499a950d210b",
                "indicator--560ba362-5cd0-4f29-abc2-4195950d210b",
                "indicator--560ba362-6558-4342-a0ec-4588950d210b",
                "indicator--560ba362-b5a0-4b27-827d-4808950d210b",
                "indicator--560ba363-0070-4267-abe5-4c9d950d210b",
                "indicator--560ba363-1b18-43c6-9e34-4db7950d210b",
                "indicator--560ba363-dc04-40a3-ac5f-4270950d210b",
                "indicator--560ba363-688c-4fd5-94a6-4be9950d210b",
                "indicator--560ba363-b48c-44cc-b094-46bf950d210b",
                "indicator--560ba363-6208-4e23-af9f-4794950d210b",
                "indicator--560ba364-1390-4929-b345-4415950d210b",
                "indicator--560ba364-2434-48f9-bbdb-498f950d210b",
                "indicator--560ba364-37ac-43f5-a0d1-4b48950d210b",
                "indicator--560ba364-3ffc-4697-8190-4238950d210b",
                "indicator--560ba365-5f88-4d01-8a87-47d5950d210b",
                "indicator--560ba365-debc-4ab2-a796-4863950d210b",
                "indicator--560ba365-ec70-4243-8ffb-48da950d210b",
                "indicator--560ba365-7270-4640-bd25-4ef3950d210b",
                "indicator--560ba365-b564-4562-8659-4cde950d210b",
                "indicator--560ba365-4404-4faf-9da7-4565950d210b",
                "indicator--560ba366-ea98-4eea-be2e-4557950d210b",
                "indicator--560ba366-5844-4a17-844f-45ad950d210b",
                "indicator--560ba366-6868-47bf-9e2d-4e7e950d210b",
                "indicator--560ba366-3a9c-4c3a-9c2d-4df7950d210b",
                "indicator--560ba366-a358-4e44-89bf-4242950d210b",
                "indicator--560ba367-fe00-4d9d-90c9-4b56950d210b",
                "indicator--560ba367-9fc0-42fe-b188-4635950d210b",
                "indicator--560ba367-c304-47b5-b78e-4c67950d210b",
                "indicator--560ba367-c5dc-4a15-976e-4fc9950d210b",
                "indicator--560ba367-930c-4b0e-86ca-4f14950d210b",
                "indicator--560ba368-6178-4950-8c2e-4775950d210b",
                "indicator--560ba368-3878-4a03-82c1-46dd950d210b",
                "indicator--560ba368-9838-46d0-a8bd-446a950d210b",
                "indicator--560ba368-7294-42c2-8ea3-44bd950d210b",
                "indicator--560ba368-f6d4-4d0d-abbc-4b63950d210b",
                "indicator--560ba368-83d8-4fca-8960-42cf950d210b",
                "indicator--560ba369-0790-4261-b3d7-4630950d210b",
                "indicator--560ba369-1340-4c1b-9098-4c29950d210b",
                "indicator--560ba369-fc64-4fe2-9fbb-469c950d210b",
                "indicator--560ba369-2ff4-469d-b610-4c47950d210b",
                "indicator--560ba369-925c-4c6c-b1b6-4317950d210b",
                "indicator--560ba369-90c4-4bfc-bbf6-4677950d210b",
                "indicator--560ba36a-a428-442f-aeb2-4400950d210b",
                "indicator--560ba36a-d988-4715-b628-48f8950d210b",
                "indicator--560ba36a-6e34-4744-8888-4578950d210b",
                "indicator--560ba36a-8e60-40b9-93ab-427b950d210b",
                "indicator--560ba36a-e20c-4b08-b719-434c950d210b",
                "indicator--560ba36b-432c-4706-b3e1-45c4950d210b",
                "indicator--560ba36b-3c78-4eb9-b6bf-4007950d210b",
                "indicator--560ba36b-c274-4eca-8c3a-4700950d210b",
                "indicator--560ba36b-2b1c-49bb-bef7-460e950d210b",
                "indicator--560ba36b-1db4-4867-94aa-4fde950d210b",
                "indicator--560ba36c-7a24-4852-8fb7-4496950d210b",
                "indicator--560ba36c-2e9c-44ce-9ecf-4616950d210b",
                "indicator--560ba36c-1948-4fbc-8639-4f62950d210b",
                "indicator--560ba36c-fcf4-4f2f-a5c7-49d9950d210b",
                "indicator--560ba36c-a784-4ca0-ba4f-4fa9950d210b",
                "indicator--560ba36c-5d28-43ff-b3d7-4fe1950d210b",
                "indicator--560ba36d-b014-4657-8fdc-4ef7950d210b",
                "indicator--560ba36d-e1fc-443e-a638-4d4d950d210b",
                "indicator--560ba36d-bc34-4873-a10e-42ed950d210b",
                "indicator--560ba36d-7c88-43a2-814e-495a950d210b",
                "indicator--560ba36d-4de8-4137-8db1-408d950d210b",
                "indicator--560ba36d-4b24-433b-9aab-4323950d210b",
                "indicator--560ba36e-0f58-49ca-a326-4504950d210b",
                "indicator--560ba36e-1d58-4f18-9384-453f950d210b",
                "indicator--560ba36e-d50c-4eba-96f2-4b1a950d210b",
                "indicator--560ba36e-0870-4bbb-977c-472d950d210b",
                "indicator--560ba36e-1ca8-4357-9966-41f2950d210b",
                "indicator--560ba36f-66a0-46f6-94aa-417a950d210b",
                "indicator--560ba36f-1474-4e12-bb5f-4050950d210b",
                "indicator--560ba36f-9344-4214-98f1-4cfb950d210b",
                "indicator--560ba36f-e92c-41b9-bc5d-4aac950d210b",
                "indicator--560ba36f-acc4-4994-b675-4150950d210b",
                "indicator--560ba370-d118-41a8-8cf0-48c4950d210b",
                "indicator--560ba370-9eb8-4a27-aae3-46f8950d210b",
                "indicator--560ba370-fe14-41a8-b4b8-49e8950d210b",
                "indicator--560ba370-52dc-46c8-bb12-4944950d210b",
                "indicator--560ba370-1af8-4a8b-b098-4ded950d210b",
                "indicator--560ba370-96f0-4134-ab51-44b4950d210b",
                "indicator--560ba371-d8f4-4b90-8fff-49dc950d210b",
                "indicator--560ba371-0da0-4ff2-b8c3-40c0950d210b",
                "indicator--560ba371-e8a0-4e49-b69a-47ea950d210b",
                "indicator--560ba371-e918-43ab-b6d4-41b9950d210b",
                "indicator--560ba371-13c8-4120-b455-4c2e950d210b",
                "indicator--560ba372-d120-49ab-aa52-4f6f950d210b",
                "indicator--560ba372-0e90-4a68-8ecc-4df7950d210b",
                "indicator--560ba372-d3fc-40ac-a19f-4a39950d210b",
                "indicator--560ba372-08a8-4b40-9a08-4f67950d210b",
                "indicator--560ba372-d17c-4bcd-87b3-4f13950d210b",
                "indicator--560ba373-77c0-4e07-818e-4af2950d210b",
                "indicator--560ba373-d61c-4271-9aec-436b950d210b",
                "indicator--560ba373-b438-4d3c-a017-4c75950d210b",
                "indicator--560ba373-247c-4662-b142-4531950d210b",
                "indicator--560ba373-6740-48f7-adcc-44e7950d210b",
                "indicator--560ba373-59c4-4776-9ad1-48a9950d210b",
                "indicator--560ba374-3740-4342-8b41-4241950d210b",
                "indicator--560ba374-3b28-4b92-bde8-4376950d210b",
                "indicator--560ba374-0664-4f92-b36c-4da6950d210b",
                "indicator--560ba374-65d8-4587-83bb-40aa950d210b",
                "indicator--560ba374-aad8-400d-bb29-419e950d210b",
                "indicator--560ba374-f8d4-48a8-978a-406d950d210b",
                "indicator--560ba375-7014-40d7-bc4e-4180950d210b",
                "indicator--560ba375-c178-4cb1-ba76-440d950d210b",
                "indicator--560ba375-5518-4280-88e8-4820950d210b",
                "indicator--560ba375-b358-4fab-9b5e-4356950d210b",
                "indicator--560ba375-3304-437d-b63a-4a12950d210b",
                "indicator--560ba376-4d3c-45ed-9d7c-42f6950d210b",
                "indicator--560ba376-5e30-41f4-879b-43da950d210b",
                "indicator--560ba376-3464-4e95-bf6b-4ce1950d210b",
                "indicator--560ba376-3718-40fe-99c8-406f950d210b",
                "indicator--560ba376-7f5c-45a0-babf-4a8b950d210b",
                "indicator--560ba377-780c-423a-8234-4760950d210b",
                "indicator--560ba377-59cc-4956-bd49-4093950d210b",
                "indicator--560ba377-ab04-4451-aa32-4038950d210b",
                "indicator--560ba377-6430-4204-91fe-4067950d210b",
                "indicator--560ba377-754c-4d77-9625-43ea950d210b",
                "indicator--560ba377-8304-4997-9a22-4c5e950d210b",
                "indicator--560ba378-f100-4883-b386-4f15950d210b",
                "indicator--560ba377-eeb0-4bb0-8f64-4f67950d210b",
                "indicator--560ba378-4528-4d68-afbb-4c91950d210b",
                "indicator--560ba378-85a8-4a0f-a6ee-4f2e950d210b",
                "indicator--560ba378-de00-4fb1-9c16-40a0950d210b",
                "indicator--560ba378-534c-4589-ae24-43f2950d210b",
                "indicator--560ba378-41a8-4629-a786-43bc950d210b",
                "indicator--560ba378-f900-4ff4-9168-44ea950d210b",
                "indicator--560ba378-e4b8-4c5b-afd0-469a950d210b",
                "indicator--560ba379-edf4-43b2-b0cc-4e78950d210b",
                "indicator--560ba379-d364-4581-b915-4e1d950d210b",
                "indicator--560ba379-3344-4b6e-a21d-4579950d210b",
                "indicator--560ba379-5d54-4714-9ae2-4fde950d210b",
                "indicator--560ba379-1484-4c61-aa44-4f3b950d210b",
                "indicator--560ba379-79c4-4520-af67-41e2950d210b",
                "indicator--560ba379-e04c-4dd2-9e25-416b950d210b",
                "indicator--560ba379-d440-4128-9f12-469a950d210b",
                "indicator--560ba37a-84ac-43ef-8059-4cfb950d210b",
                "indicator--560ba37a-7f20-4d7d-a133-4630950d210b",
                "indicator--560ba37a-6ae8-4200-a134-485d950d210b",
                "indicator--560ba37a-f780-4bdf-981d-452e950d210b",
                "indicator--560ba37a-2010-4953-9cb2-4008950d210b",
                "indicator--560ba37a-caf0-4d10-9bc6-4616950d210b",
                "indicator--560ba37a-f310-4420-90ae-4150950d210b",
                "indicator--560ba37b-eb40-4281-a182-4360950d210b",
                "indicator--560ba37a-25b4-4e1c-a6b1-47e8950d210b",
                "indicator--560ba37b-3f8c-4525-b953-42ee950d210b",
                "indicator--560ba37b-1a34-40c1-bb3b-4a07950d210b",
                "indicator--560ba37b-f520-40ff-bfd5-45dd950d210b",
                "indicator--560ba37b-0ef4-44e4-a167-4e81950d210b",
                "indicator--560ba37b-cb80-491d-a84b-4bc7950d210b",
                "indicator--560ba37c-af0c-419e-97e8-459d950d210b",
                "indicator--560ba37b-e138-40c6-bd80-46ff950d210b",
                "indicator--560ba37c-4ca4-41f1-9c2c-4d1e950d210b",
                "indicator--560ba37c-ad38-4b50-b5e8-4d58950d210b",
                "indicator--560ba37c-aa04-4aaa-833c-484f950d210b",
                "indicator--560ba37c-fba8-4a10-b5ba-4b8d950d210b",
                "indicator--560ba37c-d3d4-4445-866b-4120950d210b",
                "indicator--560ba37c-cab4-43f6-a408-4b88950d210b",
                "indicator--560ba37c-50c0-485f-9a36-4828950d210b",
                "indicator--560ba37d-fbd8-4c82-ad33-4115950d210b",
                "indicator--560ba37d-cd5c-4e05-bfaf-469d950d210b",
                "indicator--560ba37d-00ac-4e9b-b925-41be950d210b",
                "indicator--560ba37d-8118-4a1b-9e0b-421d950d210b",
                "indicator--560ba37d-4904-44bb-a0c4-454c950d210b",
                "indicator--560ba37d-a31c-4928-9f14-4875950d210b",
                "indicator--560ba37d-5f9c-4ab4-b447-479c950d210b",
                "indicator--560ba37d-4b70-4107-90b3-4950950d210b",
                "indicator--560ba37e-7544-42ec-86c8-4cc5950d210b",
                "indicator--560ba37e-acd8-4dc7-8c0b-4481950d210b",
                "indicator--560ba37e-25b0-44ab-9935-47ad950d210b",
                "indicator--560ba37e-d134-41c5-aca6-4435950d210b",
                "indicator--560ba37e-d44c-4f9f-b4fc-483e950d210b",
                "indicator--560ba37e-5cc4-4a30-88c3-47a9950d210b",
                "indicator--560ba37e-6c90-40b8-b0ad-4744950d210b",
                "indicator--560ba37f-9584-496e-8a5e-464b950d210b",
                "indicator--560ba37e-6a14-4c4b-935d-4055950d210b",
                "indicator--560ba37f-e4fc-4b87-bd46-4f5b950d210b",
                "indicator--560ba37f-feec-4d5e-8236-48b6950d210b",
                "indicator--560ba37f-bb98-4afb-9cc2-4b4a950d210b",
                "indicator--560ba37f-904c-4f87-91e2-4d7e950d210b",
                "indicator--560ba37f-c4e4-460b-8600-441f950d210b",
                "indicator--560ba37f-acec-406c-ad6d-4bc3950d210b",
                "indicator--560ba380-5924-4e9f-b65e-4002950d210b",
                "indicator--560ba380-0dd4-483e-a9f0-4674950d210b",
                "indicator--560ba380-d188-4f38-86cc-4cd4950d210b",
                "indicator--560ba380-f0fc-486b-868d-40b6950d210b",
                "indicator--560ba380-dd54-46c5-99c0-40a6950d210b",
                "indicator--560ba380-ae60-45ac-8e80-4b5a950d210b",
                "indicator--560ba380-bc4c-41fb-884f-4c82950d210b",
                "indicator--560ba380-97d0-4209-b11f-4ba6950d210b",
                "indicator--560ba380-f9b4-4aa2-8b17-4f70950d210b",
                "indicator--560ba381-5080-48f0-9f53-4a84950d210b",
                "indicator--560ba381-ff60-4ea2-84bf-49a3950d210b",
                "indicator--560ba381-85e0-41be-8448-4f18950d210b",
                "indicator--560ba381-0094-4700-a363-4c14950d210b",
                "indicator--560ba381-f678-4daf-964a-493b950d210b",
                "indicator--560ba381-e5d0-495c-8aa4-4720950d210b",
                "indicator--560ba381-9730-4011-9de7-4e39950d210b",
                "indicator--560ba382-7d08-4f18-ad10-4526950d210b",
                "indicator--560ba382-6bfc-4176-9fe6-4ae7950d210b",
                "indicator--560ba382-70f4-4260-a7b1-42d0950d210b",
                "indicator--560ba382-0020-4a4b-aaf3-431f950d210b",
                "indicator--560ba382-ba20-4f43-bc6a-4004950d210b",
                "indicator--560ba382-14dc-4555-bc1c-44b3950d210b",
                "indicator--560ba382-39c4-4a5c-9c6a-4966950d210b",
                "indicator--560ba382-c790-4e50-a67a-453d950d210b",
                "indicator--560ba383-b138-4628-b10f-4965950d210b",
                "indicator--560ba383-3b74-49b1-ab6c-40f1950d210b",
                "indicator--560ba383-c6e4-4f24-a8b1-42d5950d210b",
                "indicator--560ba383-4b40-4779-a82f-4f10950d210b",
                "indicator--560ba383-12d8-46bf-ae30-4cfe950d210b",
                "indicator--560ba383-4958-4119-b88d-4032950d210b",
                "indicator--560ba383-812c-4397-840a-44a9950d210b",
                "indicator--560ba384-3614-4bd7-8b27-4470950d210b",
                "indicator--560ba383-67d4-42ef-9bb4-4e70950d210b",
                "indicator--560ba384-6ee4-4fd0-89d4-4bd6950d210b",
                "indicator--560ba384-a0f8-49bd-a874-4b38950d210b",
                "indicator--560ba384-ceb4-468f-b81c-491c950d210b",
                "indicator--560ba384-ae48-46e5-b369-47aa950d210b",
                "indicator--560ba384-6be4-46e7-97f9-4bf5950d210b",
                "indicator--560ba384-8ce8-474c-b414-409c950d210b",
                "indicator--560ba384-0e90-4768-80a4-47c3950d210b",
                "indicator--560ba385-ba3c-47c8-a78f-433e950d210b",
                "indicator--560ba385-8f34-4e57-826b-42e0950d210b",
                "indicator--560ba385-ff98-43f8-afbb-4553950d210b",
                "indicator--560ba385-e6a4-4523-ab20-4d83950d210b",
                "indicator--560ba385-808c-47be-955e-413b950d210b",
                "indicator--560ba385-d6dc-4584-b006-466a950d210b",
                "indicator--560ba385-8340-4847-891d-4b06950d210b",
                "indicator--560ba386-d5f0-455b-a1ef-4b9b950d210b",
                "indicator--560ba385-eda8-42db-bb7b-4db7950d210b",
                "indicator--560ba386-0794-43ee-af40-4e1e950d210b",
                "indicator--560ba386-93f8-4936-9574-4a2c950d210b",
                "indicator--560ba386-6dd4-4cd6-a586-418b950d210b",
                "indicator--560ba386-5e7c-40a3-8cb3-4d88950d210b",
                "indicator--560ba386-a688-48bc-87b6-416b950d210b",
                "indicator--560ba386-f28c-4acd-80f0-4a01950d210b",
                "indicator--560ba387-46dc-4a0e-8893-4240950d210b",
                "indicator--560ba387-cc1c-4013-9dcc-4e2b950d210b",
                "indicator--560ba387-4f80-4e02-a7ce-4489950d210b",
                "indicator--560ba387-14cc-44f4-9faa-4f2d950d210b",
                "indicator--560ba387-6984-4d52-811e-48af950d210b",
                "indicator--560ba387-e5d4-4d6c-8abb-436e950d210b",
                "indicator--560ba387-a95c-4d1b-8937-4ed2950d210b",
                "indicator--560ba387-d27c-4a66-a4ea-4f4f950d210b",
                "indicator--560ba387-55bc-49af-951c-4a19950d210b",
                "indicator--560ba388-f184-4440-a219-4ecf950d210b",
                "indicator--560ba388-5f1c-4831-8a20-44c8950d210b",
                "indicator--560ba388-66ac-4a44-831f-413d950d210b",
                "indicator--560ba388-26c0-497a-81f5-43e9950d210b",
                "indicator--560ba388-af4c-4e4c-b097-472d950d210b",
                "indicator--560ba388-e084-422e-9e65-4080950d210b",
                "indicator--560ba388-7fac-48a5-9c87-4d3a950d210b",
                "indicator--560ba389-253c-4d3a-9186-44a5950d210b",
                "indicator--560ba389-7ab4-4137-a672-40e6950d210b",
                "indicator--560ba389-4038-4c52-873a-4af9950d210b",
                "indicator--560ba389-e790-40a7-abf5-4be6950d210b",
                "indicator--560ba389-c368-42e6-9324-42cd950d210b",
                "indicator--560ba389-3e48-440f-b731-49e8950d210b",
                "indicator--560ba389-7100-4b46-9f95-470f950d210b",
                "indicator--560ba389-2ab8-4ba6-95ab-4284950d210b",
                "indicator--560ba38a-4820-4052-84bb-497b950d210b",
                "indicator--560ba38a-e914-4b0f-99a3-4735950d210b",
                "indicator--560ba38a-d6ac-4fd9-a437-423b950d210b",
                "indicator--560ba38a-5774-4bde-9948-4e1b950d210b",
                "indicator--560ba38a-3a04-43fd-89df-45ba950d210b",
                "indicator--560ba38a-4ef8-4f31-a134-4e15950d210b",
                "indicator--560ba38a-d568-47c5-a620-4c34950d210b",
                "indicator--560ba38b-9330-479b-9899-4add950d210b",
                "indicator--560ba38a-5c5c-4b1e-9962-43e0950d210b",
                "indicator--560ba38b-7010-4357-ae65-425e950d210b",
                "indicator--560ba38b-0c1c-40ac-9e65-49ac950d210b",
                "indicator--560ba38b-a6f8-4681-aa6d-441d950d210b",
                "indicator--560ba38b-e1f4-4875-8741-448c950d210b",
                "indicator--560ba38b-cbec-4d9d-b948-41f8950d210b",
                "indicator--560ba38b-c930-41e5-8c47-4c1d950d210b",
                "indicator--560ba38b-a73c-4e79-8981-49f8950d210b",
                "indicator--560ba38c-a72c-4fbe-96ba-4ee6950d210b",
                "indicator--560ba38c-30ac-4c8e-9985-4c25950d210b",
                "indicator--560ba38c-11d8-4faf-9067-423b950d210b",
                "indicator--560ba38c-0c78-43d5-8b22-40b6950d210b",
                "indicator--560ba38c-37f4-4952-aafe-4571950d210b",
                "indicator--560ba38c-66bc-4e95-a8f3-4f73950d210b",
                "indicator--560ba38c-e364-475c-a658-4cac950d210b",
                "indicator--560ba38c-2958-4d97-b257-47da950d210b",
                "indicator--560ba38d-0670-4768-8630-44c3950d210b",
                "indicator--560ba38d-b45c-4b22-8602-463c950d210b",
                "indicator--560ba38d-14c4-41d3-8a75-40a3950d210b",
                "indicator--560ba38d-0ab8-4e85-8259-4f0d950d210b",
                "indicator--560ba38d-3c3c-43da-90a5-4c54950d210b",
                "indicator--560ba38d-0428-49fc-8392-42fe950d210b",
                "indicator--560ba38d-ef90-470a-8672-418e950d210b",
                "indicator--560ba38e-9d20-4d4e-ab75-4768950d210b",
                "indicator--560ba38e-697c-4581-b061-4463950d210b",
                "indicator--560ba38e-cff0-4881-949a-44d4950d210b",
                "indicator--560ba38e-02c4-4823-8b59-4e0e950d210b",
                "indicator--560ba38e-47a8-4b44-a991-428e950d210b",
                "indicator--560ba38e-8738-4eb0-9150-4adc950d210b",
                "indicator--560ba38e-0d68-4641-b8ff-4ecf950d210b",
                "indicator--560ba38e-50cc-410e-908b-4453950d210b",
                "indicator--560ba38f-03d0-4421-adbf-46cb950d210b",
                "indicator--560ba38f-7e0c-4105-a6d0-49bb950d210b",
                "indicator--560ba38f-7904-4330-ada2-4a46950d210b",
                "indicator--560ba38f-b1ac-4c80-9e1d-42d3950d210b",
                "indicator--560ba38f-5d50-4b7c-b1e0-4361950d210b",
                "indicator--560ba38f-d1c0-462f-af54-4ff0950d210b",
                "indicator--560ba38f-d5e4-4ad7-ac4d-46c0950d210b",
                "indicator--560ba38f-9e38-43d7-b20b-46c3950d210b",
                "indicator--560ba390-cf24-4a94-a31d-427e950d210b",
                "indicator--560ba390-9d7c-4765-bae7-4031950d210b",
                "indicator--560ba390-ad54-4995-bc26-41da950d210b",
                "indicator--560ba390-1674-4b6b-a3de-47dd950d210b",
                "indicator--560ba390-ea74-4074-a1c7-4fc4950d210b",
                "indicator--560ba390-1380-40f6-b9a9-48ea950d210b",
                "indicator--560ba390-7024-43a1-8a92-49ff950d210b",
                "indicator--560ba390-f5f8-4313-8f32-4465950d210b",
                "indicator--560ba391-bda8-443c-ac36-4fb0950d210b",
                "indicator--560ba391-71a4-4392-b5c1-4e39950d210b",
                "indicator--560ba391-96ac-4069-864d-4f78950d210b",
                "indicator--560ba391-7eb4-4e49-9448-4a18950d210b",
                "indicator--560ba391-7a34-47d9-82aa-4ea5950d210b",
                "indicator--560ba391-69dc-43a9-8486-46a6950d210b",
                "indicator--560ba391-8a00-434e-b1a2-4bfa950d210b",
                "indicator--560ba392-29a4-4daf-8820-4eb3950d210b",
                "indicator--560ba391-5d84-4e6a-9369-43d3950d210b",
                "indicator--560ba392-4694-4878-9392-4e99950d210b",
                "indicator--560ba392-7270-4864-b39d-4a2c950d210b",
                "indicator--560ba392-1834-4bd5-806b-4ffe950d210b",
                "indicator--560ba392-dd40-4445-974c-4124950d210b",
                "indicator--560ba392-5f58-41b3-ab81-4279950d210b",
                "indicator--560ba392-d19c-4ce4-92fc-4091950d210b",
                "indicator--560ba393-a444-4c0a-ad3b-46ee950d210b",
                "indicator--560ba393-d4b0-4a1b-a0c5-4789950d210b",
                "indicator--560ba393-8058-42c1-88fd-462e950d210b",
                "indicator--560ba393-f9f0-4815-8e9e-4d98950d210b",
                "indicator--560ba393-96a8-46bb-bd7a-4d4b950d210b",
                "indicator--560ba393-d1c8-49e4-9a38-4f44950d210b",
                "indicator--560ba393-c018-46a6-ba5d-4e3a950d210b",
                "indicator--560ba393-51d8-44c3-a680-4955950d210b",
                "indicator--560ba393-ac38-4d75-9dc5-419a950d210b",
                "indicator--560ba394-81ac-4105-9b3d-4f4a950d210b",
                "indicator--560ba394-369c-4c28-9c44-4fa9950d210b",
                "indicator--560ba394-8678-46c5-a45b-4ffc950d210b",
                "indicator--560ba394-c600-409b-bb5b-44c7950d210b",
                "indicator--560ba394-bfa0-4472-80d2-4f0f950d210b",
                "indicator--560ba394-5ca8-40d8-9832-49f3950d210b",
                "indicator--560ba394-2774-43ce-a742-4808950d210b",
                "indicator--560ba395-8370-441f-a290-41c9950d210b",
                "indicator--560ba395-9f90-4116-808c-4a12950d210b",
                "indicator--560ba395-677c-4165-97aa-45eb950d210b",
                "indicator--560ba395-7374-4413-9137-45e4950d210b",
                "indicator--560ba395-baf0-4ddb-af17-40a0950d210b",
                "indicator--560ba395-9ebc-4e91-b347-4e97950d210b",
                "indicator--560ba395-3b64-435e-9746-4ac5950d210b",
                "indicator--560ba395-34d8-45fb-8f94-4844950d210b",
                "indicator--560ba396-be90-4e6e-857f-4634950d210b",
                "indicator--560ba396-7bdc-4e78-b185-4a77950d210b",
                "indicator--560ba396-032c-4cd3-880f-4d74950d210b",
                "indicator--560ba396-a64c-4430-929c-4b9d950d210b",
                "indicator--560ba396-49d8-40f9-aad6-4681950d210b",
                "indicator--560ba396-d904-41b8-8cfa-4293950d210b",
                "indicator--560ba396-a0fc-4dc7-b0d9-4b7f950d210b",
                "indicator--560ba397-155c-4ed1-ac35-4283950d210b",
                "indicator--560ba396-b5c4-41e8-bd5f-4fe2950d210b",
                "indicator--560ba397-52b8-4738-867d-488f950d210b",
                "indicator--560ba397-2530-44bd-b0e6-4bc4950d210b",
                "indicator--560ba397-59c4-4e27-913b-4b1c950d210b",
                "indicator--560ba397-e5cc-4f2b-8282-4275950d210b",
                "indicator--560ba397-6b0c-42f1-944a-4813950d210b",
                "indicator--560ba397-8e18-49d5-b49a-4ab7950d210b",
                "indicator--560ba397-2c0c-4607-9fa6-4bbe950d210b",
                "indicator--560ba398-bb24-47dc-976b-49c0950d210b",
                "indicator--560ba398-0bec-4254-b0bc-4c88950d210b",
                "indicator--560ba398-39bc-4b08-b849-4393950d210b",
                "indicator--560ba398-6ef8-45a4-8e34-4295950d210b",
                "indicator--560ba398-db90-4a17-9d16-426f950d210b",
                "indicator--560ba398-8ddc-4cf2-91be-4c73950d210b",
                "indicator--560ba398-2e20-41f5-893e-430b950d210b",
                "indicator--560ba398-9adc-4193-a73d-4d51950d210b",
                "indicator--560ba399-2144-4b77-a81c-4952950d210b",
                "indicator--560ba399-4538-4b7a-ba08-4693950d210b",
                "indicator--560ba399-6e3c-4fec-964b-4071950d210b",
                "indicator--560ba399-b87c-4469-8446-488d950d210b",
                "indicator--560ba399-c558-4329-b0fe-479f950d210b",
                "indicator--560ba399-a5b4-4329-9f1b-46e0950d210b",
                "indicator--560ba399-5714-4315-8d3d-4796950d210b",
                "indicator--560ba39a-8050-4fbb-8e1c-4675950d210b",
                "indicator--560ba399-f718-4027-9af2-4676950d210b",
                "indicator--560ba39a-47b4-4e90-9f0c-4763950d210b",
                "indicator--560ba39a-0830-4856-ba7e-431b950d210b",
                "indicator--560ba39a-d790-46b9-ae6b-432f950d210b",
                "indicator--560ba39a-4528-4aee-a5ce-448f950d210b",
                "indicator--560ba39a-b2b0-49a7-98d8-4770950d210b",
                "indicator--560ba39a-1bf8-49e8-9dc8-4337950d210b",
                "indicator--560ba39b-0828-4b38-bbff-4b59950d210b",
                "indicator--560ba39b-1d8c-423b-8506-4dc8950d210b",
                "indicator--560ba39b-81b8-4deb-83f6-4504950d210b",
                "indicator--560ba39b-c614-4884-a9c6-4ec1950d210b",
                "indicator--560ba39b-c798-468c-820e-44bb950d210b",
                "indicator--560ba39b-a7e8-4c39-b616-47e7950d210b",
                "indicator--560ba39b-57e8-48bb-b40f-44a1950d210b",
                "indicator--560ba39b-0c74-4c9e-9fa9-44f5950d210b",
                "indicator--560ba39b-7128-4444-a3af-4593950d210b",
                "indicator--560ba39c-4b20-451d-850d-4258950d210b",
                "indicator--560ba39c-0820-4524-8968-4f8b950d210b",
                "indicator--560ba39c-3c9c-4e28-9690-4e64950d210b",
                "indicator--560ba39c-3d88-44ff-8d12-49df950d210b",
                "indicator--560ba39c-c7cc-4bb3-a414-4624950d210b",
                "indicator--560ba39c-061c-492d-be29-4f6a950d210b",
                "indicator--560ba39c-314c-4b3a-b9c0-4c92950d210b",
                "indicator--560ba39d-be54-43e2-a5b4-49ea950d210b",
                "indicator--560ba39d-bd24-43dd-8e7d-4f04950d210b",
                "indicator--560ba39d-816c-44b6-b27d-4999950d210b",
                "indicator--560ba39d-fc44-449c-8ee7-4a54950d210b",
                "indicator--560ba39d-cc64-4811-9ded-4009950d210b",
                "indicator--560ba39d-b4ec-4133-bfa3-4006950d210b",
                "indicator--560ba39d-1480-4907-b81f-4966950d210b",
                "indicator--560ba39d-b4d4-4c60-af69-4ca5950d210b",
                "indicator--560ba39e-fc50-4429-9f36-4553950d210b",
                "indicator--560ba39e-7448-445c-9c06-4a03950d210b",
                "indicator--560ba39e-1de0-49d0-88f8-4d4e950d210b",
                "indicator--560ba39e-51cc-4cd0-a786-4bb5950d210b",
                "indicator--560ba39e-c4f0-4217-b279-4704950d210b",
                "indicator--560ba39e-8fa0-4704-a606-4348950d210b",
                "indicator--560ba39e-1998-4751-a0bf-464d950d210b",
                "indicator--560ba39f-b8bc-40c3-aacf-4a0f950d210b",
                "indicator--560ba39e-68e8-4464-99b7-4fe6950d210b",
                "indicator--560ba39f-543c-4ac3-b80a-48a0950d210b",
                "indicator--560ba39f-dca4-4c2b-be89-4e6c950d210b",
                "indicator--560ba39f-9ef4-4278-b947-43c3950d210b",
                "indicator--560ba39f-91ec-43c2-9fbe-4d4c950d210b",
                "indicator--560ba39f-ee44-458a-9638-43ba950d210b",
                "indicator--560ba39f-2c84-4c0f-a86c-42c7950d210b",
                "indicator--560ba39f-39f0-4451-b96a-48ba950d210b",
                "indicator--560ba3a0-ece4-4463-8548-4d78950d210b",
                "indicator--560ba3a0-5b70-447e-b777-4a32950d210b",
                "indicator--560ba3a0-55c0-4ef2-9e53-4676950d210b",
                "indicator--560ba3a0-86f4-401d-a297-40e1950d210b",
                "indicator--560ba3a0-fa38-49c0-8669-4826950d210b",
                "indicator--560ba3a0-5948-4804-8de3-4869950d210b",
                "indicator--560ba3a0-7f88-4f0d-a1ee-404d950d210b",
                "indicator--560ba3a0-830c-477a-ab87-4cab950d210b",
                "indicator--560ba3a1-04a8-4a21-98f5-49b5950d210b",
                "indicator--560ba3a1-4218-4bb1-8c27-4eb6950d210b",
                "indicator--560ba3a1-6f04-48d2-8417-47b0950d210b",
                "indicator--560ba3a1-c5c4-4238-999a-4cb8950d210b",
                "indicator--560ba3a1-0c3c-4795-a06d-40fc950d210b",
                "indicator--560ba3a1-f2cc-4802-91aa-4c27950d210b",
                "indicator--560ba3a1-d6c0-4335-a252-48ba950d210b",
                "indicator--560ba3a2-b500-40cb-b49b-4fe5950d210b",
                "indicator--560ba3a1-0f38-4e97-8bf7-4a62950d210b",
                "indicator--560ba3a2-8d94-4e45-bee7-46e8950d210b",
                "indicator--560ba3a2-b3bc-4ef9-bef1-441d950d210b",
                "indicator--560ba3a2-fd04-4513-beaf-475c950d210b",
                "indicator--560ba3a2-9c94-49a9-ba85-4a82950d210b",
                "indicator--560ba3a2-d400-40d2-99d8-4953950d210b",
                "indicator--560ba3a2-84cc-46dd-b94f-4bcf950d210b",
                "indicator--560ba3a3-7648-4f0f-8de3-4106950d210b",
                "indicator--560ba3a3-f540-4fbb-91d5-494a950d210b",
                "indicator--560ba3a3-a15c-4d7c-a39f-4fbf950d210b",
                "indicator--560ba3a3-e15c-4871-a05b-4b02950d210b",
                "indicator--560ba3a3-4670-4264-a4de-4e23950d210b",
                "indicator--560ba3a3-330c-4620-b2dc-4d7c950d210b",
                "indicator--560ba3a3-38cc-4256-bb52-464b950d210b",
                "indicator--560ba3a4-1430-4daa-ade0-470a950d210b",
                "indicator--560ba3a4-f088-49fa-b497-4ee8950d210b",
                "indicator--560ba3a4-713c-469a-aaab-432b950d210b",
                "indicator--560ba3a4-bef4-4800-899c-4f98950d210b",
                "indicator--560ba3a4-3cf8-43c0-9b34-4d88950d210b",
                "indicator--560ba3a4-0a94-4316-b32f-4e5a950d210b",
                "indicator--560ba3a4-b424-4977-a23f-4953950d210b",
                "indicator--560ba3a5-0668-4440-b120-47c8950d210b",
                "indicator--560ba3a4-b148-4397-8e42-4053950d210b",
                "indicator--560ba3a5-d218-4ede-8ee9-4ec2950d210b",
                "indicator--560ba3a5-551c-4f7c-9c78-49dd950d210b",
                "indicator--560ba3a5-fc9c-4bbf-a39a-4c24950d210b",
                "indicator--560ba3a5-7590-4cd8-a8d9-4e42950d210b",
                "indicator--560ba3a5-d0f0-449d-aae7-42bf950d210b",
                "indicator--560ba3a5-7690-4b3a-95d0-4023950d210b",
                "indicator--560ba3a5-48ec-4975-8bae-485e950d210b",
                "indicator--560ba3a6-f4ec-4ced-8a86-4257950d210b",
                "indicator--560ba3a6-df00-4502-ab69-443c950d210b",
                "indicator--560ba3a6-a92c-402b-96c8-4c10950d210b",
                "indicator--560ba3a6-6b0c-4eb0-a769-4dd6950d210b",
                "indicator--560ba3a6-5200-4ffa-8986-473d950d210b",
                "indicator--560ba3a6-2654-4c70-8fd2-4eff950d210b",
                "indicator--560ba3a6-8af8-4251-9650-463d950d210b",
                "indicator--560ba3a6-0348-413b-ac07-4850950d210b",
                "indicator--560ba3a7-c2dc-46e9-8d94-4c11950d210b",
                "indicator--560ba3a7-a710-484f-98b4-4464950d210b",
                "indicator--560ba3a7-f298-44e1-9689-4d08950d210b",
                "indicator--560ba3a7-7dcc-463b-afb1-472a950d210b",
                "indicator--560ba3a7-5a10-47a2-bb45-41f5950d210b",
                "indicator--560ba3a7-89f4-4e73-9d13-4b30950d210b",
                "indicator--560ba3a7-5c70-44f9-9feb-46b2950d210b",
                "indicator--560ba3a8-93c4-4cb5-a06b-4be3950d210b",
                "indicator--560ba3a7-0ffc-4300-b3cd-4d2a950d210b",
                "indicator--560ba3a8-b4dc-4fb6-bd1e-49f7950d210b",
                "indicator--560ba3a8-3e20-4cc5-9a15-4f58950d210b",
                "indicator--560ba3a8-abf4-44da-b7f2-44aa950d210b",
                "indicator--560ba3a8-cb1c-4835-8b47-4c65950d210b",
                "indicator--560ba3a8-1d18-461c-aef9-4060950d210b",
                "indicator--560ba3a8-4de8-4b4f-bf29-4ab2950d210b",
                "indicator--560ba3a9-dbb8-4c99-b8b7-4ac0950d210b",
                "indicator--560ba3a9-4258-4078-b652-4dd8950d210b",
                "indicator--560ba3a9-88a4-4710-ad88-4e99950d210b",
                "indicator--560ba3a9-4b38-4ead-995d-4dbc950d210b",
                "indicator--560ba3a9-4054-410f-8bb8-42fc950d210b",
                "indicator--560ba3a9-b528-4a9a-a5f4-4e50950d210b",
                "indicator--560ba3a9-1158-4992-bb01-4746950d210b",
                "indicator--560ba3aa-2dc4-4fea-acd7-4332950d210b",
                "indicator--560ba3a9-860c-439a-9d84-40f7950d210b",
                "indicator--560ba3aa-d628-49e3-bfc2-4f9e950d210b",
                "indicator--560ba3aa-32cc-4da3-9e96-4c43950d210b",
                "indicator--560ba3aa-faa4-41e4-9df4-4f8c950d210b",
                "indicator--560ba3aa-e85c-4276-8484-4e1f950d210b",
                "indicator--560ba3aa-c034-41cc-9a58-4031950d210b",
                "indicator--560ba3aa-aa84-4a6d-bb23-4f6f950d210b",
                "indicator--560ba3aa-d794-49a2-bfef-4494950d210b",
                "indicator--560ba3ab-2230-4a72-89ac-4d48950d210b",
                "indicator--560ba3ab-d4cc-4096-a5f1-4f13950d210b",
                "indicator--560ba3ab-60e0-428d-b10a-45b1950d210b",
                "indicator--560ba3ab-f010-4600-aa81-43af950d210b",
                "indicator--560ba3ab-98c0-4b29-9b0f-43ed950d210b",
                "indicator--560ba3ab-6fe0-4059-b01d-41db950d210b",
                "indicator--560ba3ab-18cc-4c48-8952-42e7950d210b",
                "indicator--560ba3ac-9458-406f-9e14-4360950d210b",
                "indicator--560ba3ab-6638-4e0a-85a8-4f4c950d210b",
                "indicator--560ba3ac-c464-4f2a-8883-4b85950d210b",
                "indicator--560ba3ac-fe70-4ee8-9c7b-4ec8950d210b",
                "indicator--560ba3ac-d26c-4e41-93c7-43d2950d210b",
                "indicator--560ba3ac-9774-4ae4-9475-4cc9950d210b",
                "indicator--560ba3ac-f8a8-4eea-9925-4451950d210b",
                "indicator--560ba3ac-0594-45cb-aba9-425b950d210b",
                "indicator--560ba3ad-56d4-4810-9c14-46b2950d210b",
                "indicator--560ba3ad-6818-443b-ba65-4379950d210b",
                "indicator--560ba3ad-ceb8-4e9d-8646-448f950d210b",
                "indicator--560ba3ad-2a44-4bf3-aef9-48a6950d210b",
                "indicator--560ba3ad-bb6c-4f3c-9d45-43b1950d210b",
                "indicator--560ba3ad-bad0-4c54-bd79-4276950d210b",
                "indicator--560ba3ad-e198-4bf0-aaa2-4045950d210b",
                "indicator--560ba3ad-d51c-4d0b-a7f3-4914950d210b",
                "indicator--560ba3ad-1410-428d-a63a-4e08950d210b",
                "indicator--560ba3ae-ebcc-4c0c-895b-4882950d210b",
                "indicator--560ba3ae-3818-48fa-a067-417e950d210b",
                "indicator--560ba3ae-6a7c-45bc-ac4b-465c950d210b",
                "indicator--560ba3ae-6ed0-47cf-8ec5-489f950d210b",
                "indicator--560ba3ae-4220-43bb-8275-497f950d210b",
                "indicator--560ba3ae-185c-4745-b964-4cf8950d210b",
                "indicator--560ba3ae-2a30-4ffb-9851-4ee7950d210b",
                "indicator--560ba3af-85f4-4c71-b229-4644950d210b",
                "indicator--560ba3af-27d0-4236-93f6-4f8b950d210b",
                "indicator--560ba3af-e334-47ff-9d7c-40f2950d210b",
                "indicator--560ba3af-a3a0-4de6-84a2-4a1a950d210b",
                "indicator--560ba3af-ece0-4f78-8b8d-470a950d210b",
                "indicator--560ba3af-1a3c-4a39-885f-4149950d210b",
                "indicator--560ba3af-fc6c-4eff-b2d0-4f6b950d210b",
                "indicator--560ba3af-fd28-4b78-bd66-4ea8950d210b",
                "indicator--560ba3b0-7bcc-4229-87ad-446d950d210b",
                "indicator--560ba3b0-6244-441b-ba27-4cce950d210b",
                "indicator--560ba3b0-555c-44b6-a7fe-4941950d210b",
                "indicator--560ba3b0-52ec-4461-96e2-4e94950d210b",
                "indicator--560ba3b0-86f4-4bc4-9cba-47a5950d210b",
                "indicator--560ba3b0-d5e4-45c4-89a5-4f51950d210b",
                "indicator--560ba3b0-2af0-4008-815f-4a20950d210b",
                "indicator--560ba3b1-78f8-445f-9866-4549950d210b",
                "indicator--560ba3b0-7eb8-48a2-bae6-4550950d210b",
                "indicator--560ba3b1-9200-49b7-891d-4d2e950d210b",
                "indicator--560ba3b1-79cc-4354-8f88-4cb8950d210b",
                "indicator--560ba3b1-bf40-48a4-928d-4e08950d210b",
                "indicator--560ba3b1-50ec-487e-ab6a-4a10950d210b",
                "indicator--560ba3b1-5a64-4a30-aa30-40d8950d210b",
                "indicator--560ba3b1-cb7c-4202-ab5a-49b7950d210b",
                "indicator--560ba3b1-f110-4b3c-a1d0-4156950d210b",
                "indicator--560ba3b2-9a7c-4638-b154-40a1950d210b",
                "indicator--560ba3b2-1070-490c-99b0-4378950d210b",
                "indicator--560ba3b2-c388-4bdd-9363-4c0f950d210b",
                "indicator--560ba3b2-3f34-43a4-bdd2-4a82950d210b",
                "indicator--560ba3b2-c244-45ad-8e8c-46cb950d210b",
                "indicator--560ba3b2-e798-4bcf-b810-4932950d210b",
                "indicator--560ba3b2-76b0-4a87-8a6d-454b950d210b",
                "indicator--560ba3b2-e850-437d-a7b9-4438950d210b",
                "indicator--560ba3b3-5a74-44a8-a218-4a51950d210b",
                "indicator--560ba3b3-6ee4-4f18-a872-4df5950d210b",
                "indicator--560ba3b3-da8c-4227-9856-49d9950d210b",
                "indicator--560ba3b3-e5ec-4394-aa20-4ef3950d210b",
                "indicator--560ba3b3-be74-45bb-8062-42cb950d210b",
                "indicator--560ba3b3-c0a4-46f8-af91-47e1950d210b",
                "indicator--560ba3b3-4088-409e-b962-4b86950d210b",
                "indicator--560ba3b4-071c-425e-8659-41f3950d210b",
                "indicator--560ba3b4-b0e8-43ce-8de3-45c0950d210b",
                "indicator--560ba3b4-77e4-44df-91a2-4472950d210b",
                "indicator--560ba3b4-a94c-4916-98ca-434b950d210b",
                "indicator--560ba3b4-ee9c-496f-aa5c-4512950d210b",
                "indicator--560ba3b4-a1a0-4564-917b-45b3950d210b",
                "indicator--560ba3b4-5268-4002-b7b1-420d950d210b",
                "indicator--560ba3b4-3ab8-4a65-a188-46f2950d210b",
                "indicator--560ba3b5-29ac-4983-bf7d-41d4950d210b",
                "indicator--560ba3b5-9ac4-4921-844a-489a950d210b",
                "indicator--560ba3b5-ab7c-4b34-990e-4501950d210b",
                "indicator--560ba3b5-a2dc-42a2-9757-4e04950d210b",
                "indicator--560ba3b5-4134-4f1d-b483-4841950d210b",
                "indicator--560ba3b5-2ab8-4c5f-81c5-45e4950d210b",
                "indicator--560ba3b5-6508-4034-8d75-4160950d210b",
                "indicator--560ba3b6-8904-4f91-ab50-465b950d210b",
                "indicator--560ba3b5-4f58-4a0e-95ce-464d950d210b",
                "indicator--560ba3b6-50f0-48d0-a9a9-4cdb950d210b",
                "indicator--560ba3b6-5c80-4806-983c-4984950d210b",
                "indicator--560ba3b6-ebd0-4cda-bf9b-4a32950d210b",
                "indicator--560ba3b6-e134-4718-85d2-4499950d210b",
                "indicator--560ba3b6-5918-44f1-9784-4fc5950d210b",
                "indicator--560ba3b6-d230-4a7f-8cdf-4fe2950d210b",
                "indicator--560ba3b6-6730-4374-801e-4eeb950d210b",
                "indicator--560ba3b7-07e4-4f08-89e9-42c1950d210b",
                "indicator--560ba3b7-5f24-4cd3-a278-4f6e950d210b",
                "indicator--560ba3b7-56d4-48d6-86f6-4872950d210b",
                "indicator--560ba3b7-0b34-4783-b177-4822950d210b",
                "indicator--560ba3b7-edf8-4312-8671-4cfb950d210b",
                "indicator--560ba3b7-64b0-4eef-ab2e-4662950d210b",
                "indicator--560ba3b7-4ef0-4f7d-9fc6-4a19950d210b",
                "indicator--560ba3b7-82fc-49b9-95da-4f12950d210b",
                "indicator--560ba3b8-fccc-4724-bd8c-4740950d210b",
                "indicator--560ba3b8-6e0c-4979-a752-4dbe950d210b",
                "indicator--560ba3b8-c358-4716-81f8-407e950d210b",
                "indicator--560ba3b8-f2c0-4f6e-9a8c-451c950d210b",
                "indicator--560ba3b8-1f34-405f-895b-4fd5950d210b",
                "indicator--560ba3b8-93d0-4c24-8457-49e9950d210b",
                "indicator--560ba3b8-c328-4b13-8b1f-4a6f950d210b",
                "indicator--560ba3b9-1b94-4cc6-83df-4bc1950d210b",
                "indicator--560ba3b9-427c-4fbc-9810-4381950d210b",
                "indicator--560ba3b9-4094-43b6-bca7-4dcc950d210b",
                "indicator--560ba3b9-e708-4072-9bf5-486c950d210b",
                "indicator--560ba3b9-64b4-402c-84cc-47c4950d210b",
                "indicator--560ba3b9-fa50-4060-b5f3-4481950d210b",
                "indicator--560ba3b9-9e7c-40f9-8fa7-487b950d210b",
                "indicator--560ba3b9-1794-4bb0-85a9-4894950d210b",
                "indicator--560ba3ba-e0ac-4dd9-9168-47d0950d210b",
                "indicator--560ba3ba-21bc-4ad8-b4ff-4b5a950d210b",
                "indicator--560ba3ba-ebb8-42ad-8731-4c1d950d210b",
                "indicator--560ba3ba-f6a8-4f31-a481-4172950d210b",
                "indicator--560ba3ba-9b6c-47ae-9169-41fe950d210b",
                "indicator--560ba3ba-b468-4c09-989d-48b9950d210b",
                "indicator--560ba3ba-a93c-48cf-a5f9-4294950d210b",
                "indicator--560ba3bb-3700-4017-a893-4e7e950d210b",
                "indicator--560ba3ba-b104-4af8-bbf4-460f950d210b",
                "indicator--560ba3bb-bb74-45e0-bb2d-46e8950d210b",
                "indicator--560ba3bb-eea4-45b3-ad11-471d950d210b",
                "indicator--560ba3bb-1294-48ec-b30c-48e4950d210b",
                "indicator--560ba3bb-c3f4-4eca-b61b-4794950d210b",
                "indicator--560ba3bb-7424-496b-ae9a-4987950d210b",
                "indicator--560ba3bb-31fc-4bff-8e94-46a9950d210b",
                "indicator--560ba3bb-8cec-44d4-9080-4e43950d210b",
                "indicator--560ba3bc-71fc-4db0-98e4-4050950d210b",
                "indicator--560ba3bc-1d48-4a51-9c51-41b9950d210b",
                "indicator--560ba3bc-84a0-4653-97be-41b0950d210b",
                "indicator--560ba3bc-d758-4413-8b0b-4ffb950d210b",
                "indicator--560ba3bc-8628-4c64-a25e-419b950d210b",
                "indicator--560ba3bc-ac20-433a-b686-4c13950d210b",
                "indicator--560ba3bc-3d3c-4403-8715-41b7950d210b",
                "indicator--560ba3bc-85e4-492b-94df-4555950d210b",
                "indicator--560ba3bd-def4-4cd3-960d-46fa950d210b",
                "indicator--560ba3bd-abe0-4d1b-8d6c-405d950d210b",
                "indicator--560ba3bd-67dc-4cb8-8a64-4daf950d210b",
                "indicator--560ba3bd-05dc-43ff-b921-43df950d210b",
                "indicator--560ba3bd-6a84-422b-8601-422b950d210b",
                "indicator--560ba3bd-0c8c-4e06-af59-4fc4950d210b",
                "indicator--560ba3bd-c9d4-415d-a8eb-4e00950d210b",
                "indicator--560ba3be-0478-4666-942b-4659950d210b",
                "indicator--560ba3bd-3960-4b28-bb05-4a3d950d210b",
                "indicator--560ba3be-18ac-46bd-a6d2-4c77950d210b",
                "indicator--560ba3be-bb0c-4166-ab5b-448a950d210b",
                "indicator--560ba3be-8e38-432d-84ef-4708950d210b",
                "indicator--560ba3be-5154-4462-aedd-4fa9950d210b",
                "indicator--560ba3be-06b8-4295-90f3-4526950d210b",
                "indicator--560ba3be-d69c-42f1-8c2f-4aa5950d210b",
                "indicator--560ba3bf-9e90-4f48-bf39-41c3950d210b",
                "indicator--560ba3bf-b830-4400-a607-45ed950d210b",
                "indicator--560ba3bf-cbd8-4b10-941b-4075950d210b",
                "indicator--560ba3bf-67b8-4eb6-beb9-4ff2950d210b",
                "indicator--560ba3bf-4394-4bb4-94ff-4d41950d210b",
                "indicator--560ba3bf-ad38-4978-bb5f-4e16950d210b",
                "indicator--560ba3bf-a9d0-458e-ab05-4701950d210b",
                "indicator--560ba3c0-f648-4ec8-bc1c-4271950d210b",
                "indicator--560ba3bf-01c0-4706-898e-4869950d210b",
                "indicator--560ba3c0-93fc-47ce-a366-4e12950d210b",
                "indicator--560ba3c0-6ac8-4da6-83e7-4895950d210b",
                "indicator--560ba3c0-468c-42d6-a074-4171950d210b",
                "indicator--560ba3c0-c780-46e3-aaf2-4210950d210b",
                "indicator--560ba3c0-4348-42d8-ab19-45fe950d210b",
                "indicator--560ba3c0-2b8c-46a5-996a-44e3950d210b",
                "indicator--560ba3c0-d584-4cda-92b1-4987950d210b",
                "indicator--560ba3c1-54e0-47cd-a190-48c0950d210b",
                "indicator--560ba3c1-ac84-47df-b205-4c13950d210b",
                "indicator--560ba3c1-b774-4594-b4e3-48a3950d210b",
                "indicator--560ba3c1-41f4-4dfb-956e-4fae950d210b",
                "indicator--560ba3c1-e3ac-4d3b-8827-4901950d210b",
                "indicator--560ba3c1-7888-4703-aa55-4e45950d210b",
                "indicator--560ba3c1-99c8-4b85-9d83-44df950d210b",
                "indicator--560ba3c1-97f8-49e1-8cd3-45d4950d210b",
                "indicator--560ba3c2-1608-49cd-93ef-49b7950d210b",
                "indicator--560ba3c2-6158-4e7f-8f22-4945950d210b",
                "indicator--560ba3c2-9480-4173-afbb-4337950d210b",
                "indicator--560ba3c2-d83c-4ab6-9e25-4285950d210b",
                "indicator--560ba3c2-4f9c-46c3-b92b-49b8950d210b",
                "indicator--560ba3c2-9ed4-4da6-a527-4204950d210b",
                "indicator--560ba3c2-03f8-4539-8c90-4eb2950d210b",
                "indicator--560ba3c3-ef60-4381-a9bf-4a76950d210b",
                "indicator--560ba3c3-ae68-4b83-8b46-4d96950d210b",
                "indicator--560ba3c3-3210-42a0-9956-48f4950d210b",
                "indicator--560ba3c3-2600-4806-a00d-4982950d210b",
                "indicator--560ba3c3-5c70-4509-8891-4fda950d210b",
                "indicator--560ba3c3-1854-4b16-9e62-49a7950d210b",
                "indicator--560ba3c3-73d8-4e72-b6dc-4348950d210b",
                "indicator--560ba3c3-da44-4acb-a53a-47f9950d210b",
                "indicator--560ba3c4-4430-447a-b60b-4824950d210b",
                "indicator--560ba3c4-8fd0-4587-9587-4ce3950d210b",
                "indicator--560ba3c4-fee0-4758-8e92-490a950d210b",
                "indicator--560ba3c4-43a4-4757-a91b-4f74950d210b",
                "indicator--560ba3c4-09a0-449e-aead-4334950d210b",
                "indicator--560ba3c4-26ec-4a23-8f59-4bfb950d210b",
                "indicator--560ba3c4-266c-488c-afa9-4b70950d210b",
                "indicator--560ba3c5-28b8-4f77-87ed-4a90950d210b",
                "indicator--560ba3c4-6cc8-41c2-96ef-44eb950d210b",
                "indicator--560ba3c5-7a40-44e0-a340-404c950d210b",
                "indicator--560ba3c5-9274-42e1-9ce8-48d3950d210b",
                "indicator--560ba3c5-2fb0-46f9-bc63-4afc950d210b",
                "indicator--560ba3c5-23e0-45e4-9484-4f3d950d210b",
                "indicator--560ba3c5-8edc-494f-875a-4e45950d210b",
                "indicator--560ba3c5-ea04-42b5-8775-4889950d210b",
                "indicator--560ba3c5-3180-4b25-a6f8-4d3c950d210b",
                "indicator--560ba3c6-3af0-4b56-9e81-4617950d210b",
                "indicator--560ba3c6-bec8-4e30-b4a1-483b950d210b",
                "indicator--560ba3c6-4b18-4ae4-805d-43a2950d210b",
                "indicator--560ba3c6-c240-432d-a110-44b1950d210b",
                "indicator--560ba3c6-f684-453f-8c56-4f44950d210b",
                "indicator--560ba3c6-fee0-446a-9d47-438b950d210b",
                "indicator--560ba3c6-17e0-4d6c-ac12-448a950d210b",
                "indicator--560ba3c6-80f8-44ac-b531-4868950d210b",
                "indicator--560ba3c7-8790-444f-90e0-4bd0950d210b",
                "indicator--560ba3c7-3650-454d-adc8-46cf950d210b",
                "indicator--560ba3c7-8364-4a13-9c84-456d950d210b",
                "indicator--560ba3c7-9e4c-43ba-9f56-4f7c950d210b",
                "indicator--560ba3c7-7e04-4c04-a6b4-4ef7950d210b",
                "indicator--560ba3c7-6d3c-4662-9a38-4e1e950d210b",
                "indicator--560ba3c7-2120-4fa4-be25-4e12950d210b",
                "indicator--560ba3c8-8da8-454a-a364-4717950d210b",
                "indicator--560ba3c8-def0-43cb-b531-4009950d210b",
                "indicator--560ba3c8-b37c-4411-9535-4379950d210b",
                "indicator--560ba3c8-3944-46bd-9e77-4fcf950d210b",
                "indicator--560ba3c8-e294-4518-b6d1-4063950d210b",
                "indicator--560ba3c8-01e0-4ef7-86ca-4859950d210b",
                "indicator--560ba3c8-f908-4b8e-9e49-468d950d210b",
                "indicator--560ba3c8-4494-49c4-9695-49bf950d210b",
                "indicator--560ba3c9-c0dc-493d-87b0-4ffb950d210b",
                "indicator--560ba3c9-0e40-46ea-bbb8-4187950d210b",
                "indicator--560ba3c9-f9c0-4313-a8b2-4577950d210b",
                "indicator--560ba3c9-1a68-424d-ad31-4a72950d210b",
                "indicator--560ba3c9-4db4-4118-aa5e-4e9e950d210b",
                "indicator--560ba3c9-74dc-4695-b6d5-43b3950d210b",
                "indicator--560ba3ca-2c90-48df-98fc-4b6e950d210b",
                "indicator--560ba3c9-eaec-4a63-91fc-4262950d210b",
                "indicator--560ba3ca-75fc-426c-a2d9-41fb950d210b",
                "indicator--560ba3ca-edf4-47bc-aa67-4e03950d210b",
                "indicator--560ba3ca-366c-49a0-b5b1-484c950d210b",
                "indicator--560ba3ca-f168-407f-aa78-41e3950d210b",
                "indicator--560ba3ca-f678-495f-8560-4677950d210b",
                "indicator--560ba3ca-a7f0-43e1-87d3-48c1950d210b",
                "indicator--560ba3cb-527c-4765-bed2-4f59950d210b",
                "indicator--560ba3cb-d93c-45f6-b62f-4054950d210b",
                "indicator--560ba3cb-5800-472a-a245-4d1a950d210b",
                "indicator--560ba3cb-b794-47a5-9682-4ab7950d210b",
                "indicator--560ba3cb-ce34-42bf-9851-41ca950d210b",
                "indicator--560ba3cb-b344-493c-a518-4c5e950d210b",
                "indicator--560ba3cb-65fc-4200-9e54-4297950d210b",
                "indicator--560ba3cc-dc78-4823-9a3f-4289950d210b",
                "indicator--560ba3cb-1e60-4225-8e11-45da950d210b",
                "indicator--560ba3cc-1e10-41d2-8370-434c950d210b",
                "indicator--560ba3cc-9f68-411a-804d-4141950d210b",
                "indicator--560ba3cc-7d74-4edc-bd1f-49ce950d210b",
                "indicator--560ba3cc-a70c-426f-a4f7-4846950d210b",
                "indicator--560ba3cc-7f30-4af6-8479-4999950d210b",
                "indicator--560ba3cc-5e68-4016-bd6e-4205950d210b",
                "indicator--560ba3cd-706c-402f-a43d-4530950d210b",
                "indicator--560ba3cd-7538-429c-a4bf-4e94950d210b",
                "indicator--560ba3cd-1b00-4126-b848-4a90950d210b",
                "indicator--560ba3cd-7164-4c56-b976-46d2950d210b",
                "indicator--560ba3cd-3e00-4b39-8d70-48c8950d210b",
                "indicator--560ba3cd-d3e0-42e7-9504-4cc8950d210b",
                "indicator--560ba3cd-3324-425a-95d3-439a950d210b",
                "indicator--560ba3ce-489c-45e0-9112-461b950d210b",
                "indicator--560ba3cd-986c-4e35-8d71-4076950d210b",
                "indicator--560ba3ce-ebf8-4446-adf3-4f68950d210b",
                "indicator--560ba3ce-6494-446c-ab52-4ac6950d210b",
                "indicator--560ba3ce-8720-44f1-b9c3-4e4d950d210b",
                "indicator--560ba3ce-4950-480d-8c4b-493a950d210b",
                "indicator--560ba3ce-25b8-47b6-947d-4b24950d210b",
                "indicator--560ba3ce-b5d8-4ff6-8b77-4f3c950d210b",
                "indicator--560ba3ce-e46c-4685-8a18-464f950d210b",
                "indicator--560ba3cf-d024-4389-bd61-4ff3950d210b",
                "indicator--560ba3cf-8460-4c39-ba3f-49f1950d210b",
                "indicator--560ba3cf-4ae0-42ea-b646-4034950d210b",
                "indicator--560ba3cf-b1a0-4aae-9493-46f0950d210b",
                "indicator--560ba3cf-882c-4e66-8d78-4e2c950d210b",
                "indicator--560ba3cf-12f8-4dd0-a00d-4d2d950d210b",
                "indicator--560ba3cf-1708-4e23-a49a-4555950d210b",
                "indicator--560ba3cf-17c4-49c6-8390-47cf950d210b",
                "indicator--560ba3d0-365c-48fb-ab8f-41fc950d210b",
                "indicator--560ba3d0-39e0-4799-b10a-4486950d210b",
                "indicator--560ba3d0-6494-4f7d-9140-4a6b950d210b",
                "indicator--560ba3d0-10f0-4764-862e-44b1950d210b",
                "indicator--560ba3d0-4c48-401c-b33a-4b30950d210b",
                "indicator--560ba3d0-3500-4391-8b17-4b2c950d210b",
                "indicator--560ba3d0-c91c-4579-8f3d-40e2950d210b",
                "indicator--560ba3d1-dad0-4ec0-9db1-4e96950d210b",
                "indicator--560ba3d1-f218-4851-a98e-4612950d210b",
                "indicator--560ba3d1-dfb8-41cf-9bd2-4183950d210b",
                "indicator--560ba3d1-dd90-4f88-b6dd-4054950d210b",
                "indicator--560ba3d1-a0f0-46c1-a4af-4388950d210b",
                "indicator--560ba3d1-d148-4557-9b87-4120950d210b",
                "indicator--560ba3d1-0830-4c91-941e-4b5e950d210b",
                "indicator--560ba3d1-fed8-4710-b66d-4cd0950d210b",
                "indicator--560ba3d2-4194-4841-a081-4434950d210b",
                "indicator--560ba3d2-f7f8-4c89-ad37-4101950d210b",
                "indicator--560ba3d2-26e0-4bd3-a577-4372950d210b",
                "indicator--560ba3d2-cfac-409b-bc17-48df950d210b",
                "indicator--560ba3d2-fdc8-458d-a953-4a68950d210b",
                "indicator--560ba3d2-3170-4ee0-99ea-4509950d210b",
                "indicator--560ba3d2-7ee0-407b-a31e-42bd950d210b",
                "indicator--560ba3d3-dcb4-472b-b41e-4bc6950d210b",
                "indicator--560ba3d2-d254-4506-943f-4e8c950d210b",
                "indicator--560ba3d3-152c-4d46-a87a-4230950d210b",
                "indicator--560ba3d3-3cec-4297-8dae-4941950d210b",
                "indicator--560ba3d3-ef24-47d7-be43-489c950d210b",
                "indicator--560ba3d3-d5bc-47e8-b2b3-4b45950d210b",
                "indicator--560ba3d3-a2f0-4170-98a7-4fb1950d210b",
                "indicator--560ba3d3-9f44-4c83-b441-4142950d210b",
                "indicator--560ba3d4-b3ac-488c-a87d-47f1950d210b",
                "indicator--560ba3d4-bef0-4f59-a902-4418950d210b",
                "indicator--560ba3d4-70d8-4c62-ad09-4a98950d210b",
                "indicator--560ba3d4-1300-4072-b285-44bc950d210b",
                "indicator--560ba3d4-0430-4ecf-8c97-4dab950d210b",
                "indicator--560ba3d4-8bc0-413a-ae3f-4751950d210b",
                "indicator--560ba3d4-3c44-4da9-a3fd-4023950d210b",
                "indicator--560ba3d5-d100-441b-ad1a-45b6950d210b",
                "indicator--560ba3d4-f7e0-46aa-889c-4bcd950d210b",
                "indicator--560ba3d5-ef8c-4ac9-a459-45cb950d210b",
                "indicator--560ba3d5-6f0c-4d5d-a74f-430d950d210b",
                "indicator--560ba3d5-8afc-4cb0-a3bb-4f28950d210b",
                "indicator--560ba3d5-d514-4fd7-abe0-49b1950d210b",
                "indicator--560ba3d5-37c0-4bea-947c-40e3950d210b",
                "indicator--560ba3d5-9280-4b0b-b880-4112950d210b",
                "indicator--560ba3d5-1128-42ad-9323-40f5950d210b",
                "indicator--560ba3d6-f8a0-4393-a53d-4abe950d210b",
                "indicator--560ba3d6-6dfc-44ee-835e-456a950d210b",
                "indicator--560ba3d6-4544-4b29-98ed-4298950d210b",
                "indicator--560ba3d6-08dc-4965-8ea0-4fb4950d210b",
                "indicator--560ba3d6-5a60-4976-a31d-47a8950d210b",
                "indicator--560ba3d6-b558-42f8-96b7-4c8b950d210b",
                "indicator--560ba3d6-488c-4c89-957d-4838950d210b",
                "indicator--560ba3d6-8568-48d0-b8f2-486d950d210b",
                "indicator--560ba3d7-c738-4354-925e-4d85950d210b",
                "indicator--560ba3d7-a81c-4a1b-a6d1-4e85950d210b",
                "indicator--560ba3d7-27dc-483a-b09f-4f9e950d210b",
                "indicator--560ba3d7-3eb8-47bb-88d9-4fa8950d210b",
                "indicator--560ba3d7-d354-47c3-8802-4c18950d210b",
                "indicator--560ba3d7-0b90-4626-9d92-4c2b950d210b",
                "indicator--560ba3d7-3488-4659-9e13-41c0950d210b",
                "indicator--560ba3d8-afa8-47bb-9273-4870950d210b",
                "indicator--560ba3d8-2b84-4d33-b2fb-441a950d210b",
                "indicator--560ba3d8-ada4-455c-9898-4aa0950d210b",
                "indicator--560ba3d8-ace8-4c59-9c2b-4dee950d210b",
                "indicator--560ba3d8-f6e8-4319-ba46-4e0a950d210b",
                "indicator--560ba3d8-5300-499a-83d0-4771950d210b",
                "indicator--560ba3d8-98dc-48e0-a444-4850950d210b",
                "indicator--560ba3d8-7d4c-4160-972a-4121950d210b",
                "indicator--560ba3d9-d25c-4dd6-8b97-49b0950d210b",
                "indicator--560ba3d9-81f8-47a3-b2ac-4116950d210b",
                "indicator--560ba3d9-5af0-4a0d-aad8-4511950d210b",
                "indicator--560ba3d9-bb30-49b5-bf81-402f950d210b",
                "indicator--560ba3d9-5230-4153-b07c-48e1950d210b",
                "indicator--560ba3d9-209c-4375-8f8d-4f08950d210b",
                "indicator--560ba3d9-a384-42bf-bfeb-400b950d210b",
                "indicator--560ba3da-4dc0-459a-a49a-4046950d210b",
                "indicator--560ba3d9-8770-4fe1-a914-4033950d210b",
                "indicator--560ba3da-3f3c-4514-abec-49a3950d210b",
                "indicator--560ba3da-1c2c-4248-9ed6-48cc950d210b",
                "indicator--560ba3da-3130-41de-b678-4bfa950d210b",
                "indicator--560ba3da-d888-42b0-9b2c-40d3950d210b",
                "indicator--560ba3da-20a4-4860-a0e8-46f9950d210b",
                "indicator--560ba3da-bcc0-4d53-92a3-4aa0950d210b",
                "indicator--560ba3db-74c0-47a8-9f9d-4225950d210b",
                "indicator--560ba3db-2bd4-4f09-8795-47e2950d210b",
                "indicator--560ba3db-eee8-45c8-802f-476a950d210b",
                "indicator--560ba3db-8b10-42ed-93da-4528950d210b",
                "indicator--560ba3db-d8d8-4e29-830c-42b3950d210b",
                "indicator--560ba3db-f724-44d4-815f-4fd9950d210b",
                "indicator--560ba3dc-bdd8-4040-bbb5-4bae950d210b",
                "indicator--560ba3dc-1a1c-4c72-bca3-458a950d210b",
                "indicator--560ba3dc-1ce8-4551-b069-4109950d210b",
                "indicator--560ba3dc-e100-4f60-8f60-4072950d210b",
                "indicator--560ba3dc-7838-49b7-9a39-4ed7950d210b",
                "indicator--560ba3dd-8c4c-4966-b529-46cf950d210b",
                "indicator--560ba3dd-c5a0-4840-a33d-41f8950d210b",
                "indicator--560ba3dd-00a8-4f59-b2d3-48fb950d210b",
                "indicator--560ba3dd-0dfc-40fa-a6dd-4ec6950d210b",
                "indicator--560ba3dd-45f4-4d36-9151-40e6950d210b",
                "indicator--560ba3de-2724-454d-b559-436d950d210b",
                "indicator--560ba3de-b5f8-459f-81a5-4c08950d210b",
                "indicator--560ba3de-0060-49ca-ad37-4a56950d210b",
                "indicator--560ba3de-d9c0-4f13-8358-43a8950d210b",
                "indicator--560ba3de-c1f8-4007-9746-4d28950d210b",
                "indicator--560ba3de-0584-49cd-b879-464b950d210b",
                "indicator--560ba3df-26a8-4c7d-a7a2-4ebb950d210b",
                "indicator--560ba3df-57b4-4ebb-a246-438b950d210b",
                "indicator--560ba3df-016c-4973-921e-4df7950d210b",
                "indicator--560ba3df-0148-4d19-8d18-429a950d210b",
                "indicator--560ba3df-04b4-4754-91aa-44dd950d210b",
                "indicator--560ba3e0-4560-4d06-9985-4aab950d210b",
                "indicator--560ba3e0-b7bc-4a4c-91bc-4f42950d210b",
                "indicator--560ba3e0-54a0-4aab-a2bd-44de950d210b",
                "indicator--560ba3e0-4484-4347-934c-4231950d210b",
                "indicator--560ba3e0-db8c-481c-b018-461e950d210b",
                "indicator--560ba3e1-b618-4ef2-bcde-463b950d210b",
                "indicator--560ba3e1-5b54-4be2-9ae6-4c7d950d210b",
                "indicator--560ba3e1-5ddc-4dc5-ae9a-4fda950d210b",
                "indicator--560ba3e1-cf00-4552-b00b-4dbc950d210b",
                "indicator--560ba3e1-eacc-4ac4-af34-4fb6950d210b",
                "indicator--560ba3e1-d1e0-4f0b-a7e3-4ccf950d210b",
                "indicator--560ba3e2-c9dc-4b9a-a053-4d69950d210b",
                "indicator--560ba3e2-5480-4233-b954-4969950d210b",
                "indicator--560ba3e2-a694-4b30-9f31-4492950d210b",
                "indicator--560ba3e2-43d4-4722-bf24-444a950d210b",
                "indicator--560ba3e2-db30-40b6-ab8d-4743950d210b",
                "indicator--560ba3e2-52a0-4494-ae3b-4765950d210b",
                "indicator--560ba3e3-71c8-4d85-b550-4d0a950d210b",
                "indicator--560ba3e3-172c-4e65-b170-48d8950d210b",
                "indicator--560ba3e3-2160-43ad-ab36-469d950d210b",
                "indicator--560ba3e3-6370-4f49-a609-49b8950d210b",
                "indicator--560ba3e4-7644-442d-9913-418f950d210b",
                "indicator--560ba3e4-6b0c-44e9-bfe6-46c3950d210b",
                "indicator--560ba3e4-5a0c-4722-8b7c-46e8950d210b",
                "indicator--560ba3e4-9ff8-4364-9175-40fc950d210b",
                "indicator--560ba3e4-2414-454b-ac34-4452950d210b",
                "indicator--560ba3e4-7910-4e40-8449-4335950d210b",
                "indicator--560ba3e5-0bbc-471f-9717-4866950d210b",
                "indicator--560ba3e5-0518-435d-a386-4edd950d210b",
                "indicator--560ba3e5-e28c-4199-9685-4e11950d210b",
                "indicator--560ba3e5-dd4c-4875-9d84-44c3950d210b",
                "indicator--560ba3e5-392c-4681-936a-4867950d210b",
                "indicator--560ba3e5-c6f8-404d-b108-4786950d210b",
                "indicator--560ba3e6-2c84-4b3f-ae09-4863950d210b",
                "indicator--560ba3e6-59b0-4921-a250-4b14950d210b",
                "indicator--560ba3e6-ab20-425e-9c7f-4fbf950d210b",
                "indicator--560ba3e6-b260-44f4-a3f4-4b50950d210b",
                "indicator--560ba3e6-2a3c-4a69-840a-46c3950d210b",
                "indicator--560ba3e7-dae0-46e7-ba19-4f72950d210b",
                "indicator--560ba3e7-e748-480c-8da5-4fea950d210b",
                "indicator--560ba3e7-b2bc-43cc-b612-483a950d210b",
                "indicator--560ba3e7-8ddc-410b-93da-40bf950d210b",
                "indicator--560ba3e7-6754-4700-8372-4463950d210b",
                "indicator--560ba3e8-4b90-4085-8228-415d950d210b",
                "indicator--560ba3e8-41bc-46b1-8486-4fbf950d210b",
                "indicator--560ba3e8-b50c-403f-94d9-41f5950d210b",
                "indicator--560ba3e8-ea08-4fbd-8444-42fe950d210b",
                "indicator--560ba3e8-5d34-4a38-b654-4d57950d210b",
                "indicator--560ba3e8-02fc-4d7d-a206-40ae950d210b",
                "indicator--560ba3e9-1bf8-42b5-afd3-4447950d210b",
                "indicator--560ba3e9-45e0-4eb1-9819-4984950d210b",
                "indicator--560ba3e9-7108-45b5-9045-430e950d210b",
                "indicator--560ba3e9-f430-4067-a6a0-43cf950d210b",
                "indicator--560ba3ea-d834-4c9b-b3c6-464b950d210b",
                "indicator--560ba3ea-f640-4f27-8390-40b6950d210b",
                "indicator--560ba3ea-b148-4f41-9949-47b8950d210b",
                "indicator--560ba3eb-a1c8-4af3-befe-45e1950d210b",
                "indicator--560ba3eb-c8d0-4d9b-bed8-481d950d210b",
                "indicator--560ba3eb-060c-44dd-bc4f-4d46950d210b",
                "indicator--560ba3ec-97cc-4998-9864-463d950d210b",
                "indicator--560ba3ec-cfe8-4cd1-87ff-49cc950d210b",
                "indicator--560ba3ed-9cf0-46ee-83d4-4152950d210b",
                "indicator--560ba3ed-c694-4f6e-9dd6-4510950d210b",
                "indicator--560ba3ed-24ac-4352-a962-4815950d210b",
                "indicator--560ba3ee-4b94-403f-b531-40a3950d210b",
                "indicator--560ba3ee-bc18-47f9-a32c-4204950d210b",
                "indicator--560ba3ee-7820-4ab1-bdd7-4144950d210b",
                "indicator--560ba3ef-72d0-476b-b933-4a79950d210b",
                "indicator--560ba3ef-53f0-4904-9761-450b950d210b",
                "indicator--560ba3f0-bea4-4154-8210-4251950d210b",
                "indicator--560ba3f0-8218-4868-a11d-4548950d210b",
                "indicator--560ba3f0-a100-4a55-b8c1-4a4a950d210b",
                "indicator--560ba3f1-4878-4dcc-972a-4624950d210b",
                "indicator--560ba3f1-0b68-40a4-8dc5-4f3c950d210b",
                "indicator--560ba3f1-7b54-45aa-bf03-4fb9950d210b",
                "indicator--560ba3f2-67f8-4707-98d0-497d950d210b",
                "indicator--560ba3f2-9990-4ec7-935b-4188950d210b",
                "indicator--560ba3f2-23ec-424c-ba68-451c950d210b",
                "indicator--560ba3f3-2cf4-41c0-b54b-4a15950d210b",
                "indicator--560ba3f3-5f6c-470e-b5d9-4dbe950d210b",
                "indicator--560ba3f4-5578-4406-a495-4c33950d210b",
                "indicator--560ba3f4-b708-4f62-968d-4e81950d210b",
                "indicator--560ba3f4-01ac-43bf-a4a9-41b9950d210b",
                "indicator--560ba3f5-01ec-4f46-ad6a-4b9d950d210b",
                "indicator--560ba3f5-3d34-4d94-b419-4702950d210b",
                "indicator--560ba3f5-1108-45dc-a37a-438a950d210b",
                "indicator--560ba3f6-d564-4457-8aa5-42a3950d210b",
                "indicator--560ba3f6-b918-4ab7-adf5-41e6950d210b",
                "indicator--560ba3f6-eadc-41fa-8256-4b79950d210b",
                "indicator--560ba3f7-6820-4a1b-a8e3-45d2950d210b",
                "indicator--560ba3f7-8928-4922-85ba-4679950d210b",
                "indicator--560ba3f8-d030-4aa1-a2fe-4e0a950d210b",
                "indicator--560ba3f8-5f34-4a6f-911d-4af4950d210b",
                "indicator--560ba3f8-a658-4874-9e15-40fb950d210b",
                "indicator--560ba3f9-8c54-42cc-bbde-4738950d210b",
                "indicator--560ba3f9-a1ec-413f-a611-494d950d210b",
                "indicator--560ba3f9-d4b0-42b4-9f71-4e39950d210b",
                "indicator--560ba3fa-c248-445c-af2e-467e950d210b",
                "indicator--560ba3fa-721c-45f1-857f-46e4950d210b",
                "indicator--560ba3fa-f0c8-4f34-a565-4337950d210b",
                "indicator--560ba3fb-a364-437d-980c-4a88950d210b",
                "indicator--560ba3fb-a4bc-4d7d-a324-4b1f950d210b",
                "indicator--560ba3fc-c100-4d6a-8699-4038950d210b",
                "indicator--560ba3fc-5730-4e9c-ac4d-497e950d210b",
                "indicator--560ba3fc-ece4-4ede-991b-4f33950d210b",
                "indicator--560ba3fd-b38c-4a87-9042-47a8950d210b",
                "indicator--560ba3fd-aa2c-442f-8f11-4229950d210b",
                "indicator--560ba3fd-8c38-47e2-91c1-4383950d210b",
                "indicator--560ba3fe-3338-4edd-969f-4f2d950d210b",
                "indicator--560ba3fe-2770-4874-8e03-403d950d210b",
                "indicator--560ba3ff-f784-4d03-bee2-47dc950d210b",
                "indicator--560ba3ff-dc1c-49d7-896d-4b9b950d210b",
                "indicator--560ba3ff-49a0-40e0-aadd-4b93950d210b",
                "indicator--560ba400-3cac-4da0-9ce3-4dc7950d210b",
                "indicator--560ba400-ab60-4d8e-9e19-4aa0950d210b",
                "indicator--560ba400-4dfc-42e7-8200-4ccc950d210b",
                "indicator--560ba401-7280-45a4-a02c-460d950d210b",
                "indicator--560ba401-a3b4-4950-a784-498e950d210b",
                "indicator--560ba401-2644-4e7a-8a35-4fb3950d210b",
                "indicator--560ba402-1a24-4d51-9123-4c03950d210b",
                "indicator--560ba402-0e1c-4c9a-a98e-440f950d210b",
                "indicator--560ba403-074c-44a3-9a7d-42a5950d210b",
                "indicator--560ba403-d5e0-4257-8b2b-4c43950d210b",
                "indicator--560ba403-2e7c-4367-9fb8-4c68950d210b",
                "indicator--560ba404-0cf0-48dc-bc85-4a1e950d210b",
                "indicator--560ba404-d2c4-4769-a48e-4aeb950d210b",
                "indicator--560ba404-98bc-4f92-8d43-43ef950d210b",
                "indicator--560ba405-d004-426c-a906-4146950d210b",
                "indicator--560ba405-5170-486f-aefe-4861950d210b",
                "indicator--560ba405-5cd0-4291-baae-4964950d210b",
                "indicator--560ba406-d828-4dac-9a9a-4ca6950d210b",
                "indicator--560ba406-90b8-46ee-8419-4c5f950d210b",
                "indicator--560ba407-78d4-4829-b93e-447c950d210b",
                "indicator--560ba407-a3c0-4d06-93da-45be950d210b",
                "indicator--560ba407-55e4-4894-a70c-4a0c950d210b",
                "indicator--560ba408-7b40-4324-83b1-4b25950d210b",
                "indicator--560ba408-2b0c-4841-8c50-4ba4950d210b",
                "indicator--560ba408-b12c-4c25-96f0-4c7f950d210b",
                "indicator--560ba409-7c28-48a6-a9e5-4c14950d210b",
                "indicator--560ba409-f5b8-4dc8-a9db-4238950d210b",
                "indicator--560ba409-2fb0-42a6-97d5-431a950d210b",
                "indicator--560ba40a-7138-4f26-9068-49a2950d210b",
                "indicator--560ba40a-4b18-466d-83d2-48b1950d210b",
                "indicator--560ba40b-c930-4e5d-ac10-4ba1950d210b",
                "indicator--560ba40b-e44c-461d-8e0b-452d950d210b",
                "indicator--560ba40b-35c4-4f1f-b985-4764950d210b",
                "indicator--560ba40c-fa34-4b41-9539-4a84950d210b",
                "indicator--560ba40c-bfa4-4c76-8553-4e95950d210b",
                "indicator--560ba40c-42e4-42e2-9f0b-49bd950d210b",
                "indicator--560ba40d-7b4c-45c8-a2eb-4eec950d210b",
                "indicator--560ba40d-d6d0-4822-af20-4591950d210b",
                "indicator--560ba40e-8f78-47c9-85ab-4c3c950d210b",
                "indicator--560ba40e-46ec-483e-943c-4ec7950d210b",
                "indicator--560ba40e-e85c-411a-aa4f-444e950d210b",
                "indicator--560ba40f-281c-4c95-9f74-4363950d210b",
                "indicator--560ba40f-1934-41fa-aaaf-4aa6950d210b",
                "indicator--560ba40f-96fc-433e-b832-41d3950d210b",
                "indicator--560ba410-a4fc-4cc9-9406-48eb950d210b",
                "indicator--560ba410-a52c-4471-aab7-4c8a950d210b",
                "indicator--560ba410-f228-4f4d-a0d4-4f87950d210b",
                "indicator--560ba411-5a9c-4da1-b9cc-4b0d950d210b",
                "indicator--560ba411-8970-4188-9152-4660950d210b",
                "indicator--560ba412-b88c-4dc7-86e0-4bd5950d210b",
                "indicator--560ba412-23a0-46ed-982e-4f7f950d210b",
                "indicator--560ba412-8b28-4c74-ac67-47d9950d210b",
                "indicator--560ba413-6c58-426f-8c75-45e9950d210b",
                "indicator--560ba413-0e84-4301-8a3a-4d2a950d210b",
                "indicator--560ba413-58f4-42d8-b236-4078950d210b",
                "indicator--560ba414-0b1c-46cc-b854-48e5950d210b",
                "indicator--560ba414-b124-40f4-80b9-4509950d210b",
                "indicator--560ba414-9924-48c3-9c5b-47c0950d210b",
                "indicator--560ba415-8cc4-40f8-8ecc-4801950d210b",
                "indicator--560ba415-c6d0-41fb-b638-474d950d210b",
                "indicator--560ba416-2500-4c84-9f60-4c30950d210b",
                "indicator--560ba416-f440-421b-8c6c-42c8950d210b",
                "indicator--560ba416-9058-4fd3-85f2-4d0f950d210b",
                "indicator--560ba417-3708-432e-93c0-4101950d210b",
                "indicator--560ba417-0a00-4d45-868d-42a1950d210b",
                "indicator--560ba417-32b8-47a1-9bd1-46b6950d210b",
                "indicator--560ba418-5af8-4653-aaef-4dbb950d210b",
                "indicator--560ba418-1f98-4f37-92b0-4461950d210b",
                "indicator--560ba419-0e20-477b-bb05-49b8950d210b",
                "indicator--560ba419-6c30-4c8f-85f2-492f950d210b",
                "indicator--560ba419-7f78-425e-81d4-4ed9950d210b",
                "indicator--560ba41a-95cc-4f8a-81c1-4547950d210b",
                "indicator--560ba41a-00b4-4f34-bcbf-40bf950d210b",
                "indicator--560ba41a-78c4-4b15-b4f7-4308950d210b",
                "indicator--560ba41b-62f4-4e6c-8815-45ab950d210b",
                "indicator--560ba41b-fd74-4a1c-af74-4e03950d210b",
                "indicator--560ba41c-0bdc-4643-af2f-44d6950d210b",
                "indicator--560ba41c-9e60-4063-a60f-48ce950d210b",
                "indicator--560ba41c-cd34-4804-aef0-4c89950d210b",
                "indicator--560ba41d-c00c-44a1-aec4-4d10950d210b",
                "indicator--560ba41d-259c-4ef7-9480-4d70950d210b",
                "indicator--560ba41d-b960-44be-a416-48d9950d210b",
                "indicator--560ba41e-b214-45b1-bb11-4087950d210b",
                "indicator--560ba41e-4e24-4ffa-b86e-4bab950d210b",
                "indicator--560ba41e-3644-48e3-be0c-44be950d210b",
                "indicator--560ba41f-f114-4532-ad85-4749950d210b",
                "indicator--560ba41f-df08-42f8-b59d-40cf950d210b",
                "indicator--560ba420-694c-4a5e-a3ad-4b99950d210b",
                "indicator--560ba420-bf94-4dbf-a7b8-4fea950d210b",
                "indicator--560ba420-5b5c-4dfa-bfee-4ead950d210b",
                "indicator--560ba421-b264-4730-a041-4985950d210b",
                "indicator--560ba421-0dec-47a4-8267-4504950d210b",
                "indicator--560ba421-29f4-4b78-9234-460e950d210b",
                "indicator--560ba422-0874-4422-bc72-454b950d210b",
                "indicator--560ba422-b684-44a0-96fb-41d3950d210b",
                "indicator--560ba423-a980-44c9-96be-4eb9950d210b",
                "indicator--560ba423-8644-4270-83b2-4a3b950d210b",
                "indicator--560ba423-8bc4-4f47-bb72-492a950d210b",
                "indicator--560ba424-0bd8-4d5f-a567-4a45950d210b",
                "indicator--560ba424-4068-4a82-880b-4951950d210b",
                "indicator--560ba424-a594-41ff-97f6-4f6d950d210b",
                "indicator--560ba425-5d60-4921-8f3a-42fc950d210b",
                "indicator--560ba425-7b20-4b0c-8116-419a950d210b",
                "indicator--560ba426-81a8-4647-92a6-4aba950d210b",
                "indicator--560ba426-f550-450b-96fb-4366950d210b",
                "indicator--560ba426-ad98-4a04-b893-460f950d210b",
                "indicator--560ba427-35a0-4432-8723-4008950d210b",
                "indicator--560ba427-e710-48e6-b694-42c6950d210b",
                "indicator--560ba427-d808-4a00-a83a-42bd950d210b",
                "indicator--560ba428-8f4c-4bab-91c7-4ffc950d210b",
                "indicator--560ba428-fc24-4767-aa4e-4e25950d210b",
                "indicator--560ba428-9cc4-4aaf-b096-4bd5950d210b",
                "indicator--560ba429-010c-4727-bd33-4390950d210b",
                "indicator--560ba429-d56c-4e83-a2bb-491b950d210b",
                "indicator--560ba42a-5fcc-490f-9134-44ba950d210b",
                "indicator--560ba42a-6ad8-4f14-b452-46f1950d210b",
                "indicator--560ba42a-9c2c-4bba-ab33-4475950d210b",
                "indicator--560ba42b-7380-4cfa-91ef-4fc8950d210b",
                "indicator--560ba42b-b88c-4e98-8b0b-4df8950d210b",
                "indicator--560ba42b-3bd0-4435-8c6e-4337950d210b",
                "indicator--560ba42c-2e70-4637-be36-4b77950d210b",
                "indicator--560ba42c-c99c-45aa-99be-4574950d210b",
                "indicator--560ba42d-fc98-4bdc-b8af-4953950d210b",
                "indicator--560ba42d-042c-4df8-9ce9-4f5e950d210b",
                "indicator--560ba42d-84b8-467c-8d40-4026950d210b",
                "indicator--560ba42e-afb4-4fd6-8776-4f79950d210b",
                "indicator--560ba42e-5128-405d-9be3-4609950d210b",
                "indicator--560ba42e-fc50-4e78-9ae1-459c950d210b",
                "indicator--560ba42f-977c-41c7-95da-40b5950d210b",
                "indicator--560ba42f-efd4-4cb0-8c4f-48e5950d210b",
                "indicator--560ba430-c4f4-414a-9f0b-496d950d210b",
                "indicator--560ba430-40d4-4dfc-b60b-466d950d210b",
                "indicator--560ba430-3440-4306-acf7-4e3e950d210b",
                "indicator--560ba431-de20-4d5f-bc11-40c9950d210b",
                "indicator--560ba431-dcf0-4eb3-a7ba-427e950d210b",
                "indicator--560ba431-40f8-457a-bc48-4a53950d210b",
                "indicator--560ba432-5504-41f7-8795-491c950d210b",
                "indicator--560ba432-f130-4bd0-a8a7-4612950d210b",
                "indicator--560ba433-bd78-44df-9d7c-4fe5950d210b",
                "indicator--560ba433-5114-4ed7-be1b-4069950d210b",
                "indicator--560ba433-17c0-4a95-99b2-4b39950d210b",
                "indicator--560ba434-d754-4d1a-b2de-4dc8950d210b",
                "indicator--560ba434-6c74-476d-8599-4adb950d210b",
                "indicator--560ba434-9dd4-4074-b6e4-415d950d210b",
                "indicator--560ba435-8f94-437d-99d6-4fb2950d210b",
                "indicator--560ba435-b844-4735-b3fc-4b07950d210b",
                "indicator--560ba436-6444-4bbd-bfa0-440c950d210b",
                "indicator--560ba436-1508-43be-9736-4f51950d210b",
                "indicator--560ba436-8814-4e86-8429-40d6950d210b",
                "indicator--560ba437-5580-45f3-87ad-4a1d950d210b",
                "indicator--560ba437-eb44-4e30-8a75-45d3950d210b",
                "indicator--560ba437-d098-4d0b-b0c7-47c7950d210b",
                "indicator--560ba438-dffc-4cd3-a9d6-4562950d210b",
                "indicator--560ba438-1da4-4317-963e-4fa7950d210b",
                "indicator--560ba438-4a1c-488a-8779-484f950d210b",
                "indicator--560ba439-d64c-4727-a27a-4f62950d210b",
                "indicator--560ba439-9d60-46d7-9c73-48f6950d210b",
                "indicator--560ba43a-b6d4-4823-bf22-475c950d210b",
                "indicator--560ba43a-74e0-4827-a3a4-4b5a950d210b",
                "indicator--560ba43a-0360-4029-b8b6-4d4e950d210b",
                "indicator--560ba43b-0c0c-45b2-b39f-40bb950d210b",
                "indicator--560ba43b-c9a4-49bd-af44-442f950d210b",
                "indicator--560ba43b-d760-4872-9e04-4f0c950d210b",
                "indicator--560ba43c-8ed0-4aaa-9087-4d77950d210b",
                "indicator--560ba43c-bd00-4171-97f1-413b950d210b",
                "indicator--560ba43d-bf44-4911-97cf-40b5950d210b",
                "indicator--560ba43d-3fa0-462d-a816-4cc0950d210b",
                "indicator--560ba43d-5434-43c3-9443-4bef950d210b",
                "indicator--560ba43e-7a08-48ad-aab1-4415950d210b",
                "indicator--560ba43e-2980-40d5-8701-4757950d210b",
                "indicator--560ba43e-92d8-4fdc-9ba5-4dd6950d210b",
                "indicator--560ba43f-7978-4a46-b78f-456f950d210b",
                "indicator--560ba43f-7b84-4d3b-a80e-4e18950d210b",
                "indicator--560ba440-d0e8-46d7-b74d-4681950d210b",
                "indicator--560ba440-15a4-4ca8-9926-407c950d210b",
                "indicator--560ba440-9468-4bb4-aab8-422b950d210b",
                "indicator--560ba441-3764-4df4-8c8b-4252950d210b",
                "indicator--560ba441-c9cc-4bb7-b23c-4957950d210b",
                "indicator--560ba441-aab8-465a-857b-47dd950d210b",
                "indicator--560ba442-02c4-473d-8847-46f6950d210b",
                "indicator--560ba442-a60c-44a5-bda7-42f2950d210b",
                "indicator--560ba443-c8e4-4e12-8ecd-4499950d210b",
                "indicator--560ba443-7188-4cf7-a4f0-4d86950d210b",
                "indicator--560ba443-0900-4088-9807-474a950d210b",
                "indicator--560ba444-f260-46df-bd94-4b49950d210b",
                "indicator--560ba444-1648-40ad-82a1-406e950d210b",
                "indicator--560ba444-29c4-43ee-acce-467f950d210b",
                "indicator--560ba445-c7e0-4f74-97a5-4471950d210b",
                "indicator--560ba445-64e8-4f29-b147-4520950d210b",
                "indicator--560ba446-5a2c-4d3c-9557-4380950d210b",
                "indicator--560ba446-0ddc-4bd3-b918-4439950d210b",
                "indicator--560ba446-e7b0-42c0-9861-478c950d210b",
                "indicator--560ba447-4868-4f7a-adca-4303950d210b",
                "indicator--560ba447-3f3c-456c-801a-4909950d210b",
                "indicator--560ba447-e8ec-4915-beed-4107950d210b",
                "indicator--560ba448-f6d4-481e-9225-4372950d210b",
                "indicator--560ba448-a6d0-45bc-851b-40da950d210b",
                "indicator--560ba448-1254-458f-8fdb-4d7c950d210b",
                "indicator--560ba449-0bac-43a6-a2d2-46f8950d210b",
                "indicator--560ba449-ee08-48ba-8225-4ea0950d210b",
                "indicator--560ba44a-4c78-4b59-b11c-4e52950d210b",
                "indicator--560ba44a-4d18-4d07-8d21-40d5950d210b",
                "indicator--560ba44a-d5e0-4b5e-b85b-4ab5950d210b",
                "indicator--560ba44b-5470-4c3e-85cf-4f4b950d210b",
                "indicator--560ba44b-8fcc-4626-a59b-4448950d210b",
                "indicator--560ba44b-85bc-4d7b-9333-4a44950d210b",
                "indicator--560ba44c-5e94-42ec-91f3-43b0950d210b",
                "indicator--560ba44c-6214-49f4-9890-4396950d210b",
                "indicator--560ba44c-1cd0-4ec4-9f8a-4356950d210b",
                "indicator--560ba44d-7934-4632-a4a0-4d86950d210b",
                "indicator--560ba44d-ea9c-4ba4-814e-4a74950d210b",
                "indicator--560ba44e-bf28-4547-a647-4437950d210b",
                "indicator--560ba44e-c8c4-44ea-a68f-42b2950d210b",
                "indicator--560ba44e-ace8-4233-ad03-46ce950d210b",
                "indicator--560ba44f-b1c0-4cd9-97cf-49ec950d210b",
                "indicator--560ba44f-3068-4749-a0d2-4c44950d210b",
                "indicator--560ba44f-73dc-43fe-bc3c-4a9e950d210b",
                "indicator--560ba450-6de0-410c-a7dd-497a950d210b",
                "indicator--560ba450-730c-44e6-b8bd-4fa1950d210b",
                "indicator--560ba450-6190-4f3c-9414-4cff950d210b",
                "indicator--560ba451-881c-474f-b0f5-49f0950d210b",
                "indicator--560ba451-c9c0-486d-97ce-4623950d210b",
                "indicator--560ba451-b528-46c3-934c-40ec950d210b",
                "indicator--560ba452-bb14-4533-be24-4e09950d210b",
                "indicator--560ba452-c36c-478d-b42a-4773950d210b",
                "indicator--560ba452-7130-4138-a016-49c4950d210b",
                "indicator--560ba453-7650-439c-a0bf-4447950d210b",
                "indicator--560ba453-4d18-4da1-a5f1-45b1950d210b",
                "indicator--560ba453-4304-417b-b2fd-41bb950d210b",
                "indicator--560ba453-b92c-459f-8945-4a38950d210b",
                "indicator--560ba453-f9d0-4cc5-9dbb-4f65950d210b",
                "indicator--560ba453-4790-4a19-9b83-4828950d210b",
                "indicator--560ba454-a1ac-4614-b388-4af7950d210b",
                "indicator--560ba454-281c-4513-baaf-491e950d210b",
                "indicator--560ba454-78f4-460e-a94d-4359950d210b",
                "indicator--560ba454-0ea0-4158-bdc6-4f68950d210b",
                "indicator--560ba455-08dc-4fd4-a5be-4cff950d210b",
                "indicator--560ba455-2390-47c4-ace8-4388950d210b",
                "indicator--560ba455-cd0c-4115-82ec-4575950d210b",
                "indicator--560ba455-2a5c-4885-a50c-4591950d210b",
                "indicator--560ba455-33b0-4642-a635-41db950d210b",
                "indicator--560ba456-7d9c-44eb-8301-47e5950d210b",
                "indicator--560ba456-db50-4d3d-9421-437e950d210b",
                "indicator--560ba456-ebac-481c-8f13-4d4b950d210b",
                "indicator--560ba456-8010-45bc-b997-44f1950d210b",
                "indicator--560ba456-80cc-4758-82c6-48eb950d210b",
                "indicator--560ba457-b6b8-472d-90d2-4fad950d210b",
                "indicator--560ba457-6548-4059-bba5-4a2c950d210b",
                "indicator--560ba457-1d80-4984-b76a-44d2950d210b",
                "indicator--560ba457-9a74-4dcd-9585-4d62950d210b",
                "indicator--560ba457-4bc0-4b3d-9e0b-451c950d210b",
                "indicator--560ba458-f19c-4ba0-8b4b-4ee0950d210b",
                "indicator--560ba458-91dc-4c99-9304-4f5a950d210b",
                "indicator--560ba458-aad0-44ba-a36d-4f24950d210b",
                "indicator--560ba458-efe8-4812-af59-45ad950d210b",
                "indicator--560ba458-9d0c-4d13-8985-42fe950d210b",
                "indicator--560ba458-e224-4eb3-8727-48f8950d210b",
                "indicator--560ba459-ee58-4838-99f7-4436950d210b",
                "indicator--560ba459-1454-4842-af2a-4ea4950d210b",
                "indicator--560ba459-aa2c-42c5-aec4-4921950d210b",
                "indicator--560ba459-340c-4379-b94e-4742950d210b",
                "indicator--560ba459-606c-4dd7-9e14-4647950d210b",
                "indicator--560ba45a-ef60-4433-8d46-4a2e950d210b",
                "indicator--560ba45a-c5ac-4155-9183-4a48950d210b",
                "indicator--560ba45a-3c84-4832-84b5-466b950d210b",
                "indicator--560ba45a-a420-4729-8687-4cae950d210b",
                "indicator--560ba45a-0d8c-403e-8592-48cd950d210b",
                "indicator--560ba45b-d5a4-48aa-a5e0-4d93950d210b",
                "indicator--560ba45b-4ce0-43f2-84f1-45ee950d210b",
                "indicator--560ba45b-d54c-428e-9530-49c6950d210b",
                "indicator--560ba45b-34f4-41c0-ba08-45aa950d210b",
                "indicator--560ba45b-99b0-4232-a541-49ad950d210b",
                "indicator--560ba45c-d58c-44a2-a939-4263950d210b",
                "indicator--560ba45c-0eb8-4c75-8aa5-433b950d210b",
                "indicator--560ba45c-bcc0-4349-8a87-4bf8950d210b",
                "indicator--560ba45c-0188-41c0-9f25-42cd950d210b",
                "indicator--560ba45c-0f18-4fdd-80fc-49de950d210b",
                "indicator--560ba45c-4a00-4f38-bc83-40d4950d210b",
                "indicator--560ba45d-e678-41c1-a139-481b950d210b",
                "indicator--560ba45d-0f34-44b4-b701-40f9950d210b",
                "indicator--560ba45d-45f0-415b-ad70-4342950d210b",
                "indicator--560ba45d-3710-456c-9780-4ed7950d210b",
                "indicator--560ba45d-0144-44ab-a55a-4495950d210b",
                "indicator--560ba45e-ac14-49e0-9dc5-4e9b950d210b",
                "indicator--560ba45e-9f34-4606-8de5-4b68950d210b",
                "indicator--560ba45e-19f4-4b42-b5f9-401f950d210b",
                "indicator--560ba45f-0398-43c9-9a78-4c2c950d210b",
                "indicator--560ba45f-cdcc-4ac5-93f0-4b1b950d210b",
                "indicator--560ba45f-8f04-4d62-8cfc-4e86950d210b",
                "indicator--560ba45f-770c-4225-8727-443a950d210b",
                "indicator--560ba45f-840c-44f9-baec-4215950d210b",
                "indicator--560ba460-8248-4fe8-a468-4fc7950d210b",
                "indicator--560ba460-777c-4077-98f5-4806950d210b",
                "indicator--560ba460-1e10-4f09-847c-42a2950d210b",
                "indicator--560ba461-e1b0-4227-bb29-45a0950d210b",
                "indicator--560ba461-570c-4823-b213-449b950d210b",
                "indicator--560ba462-5694-43da-8da5-4569950d210b",
                "indicator--560ba462-8c64-4b1a-98dc-4e06950d210b",
                "indicator--560ba462-dcc4-4f27-ad14-43ac950d210b",
                "indicator--560ba463-3cd8-4c2b-8a57-4d1b950d210b",
                "indicator--560ba463-7234-48f8-9bc1-41ba950d210b",
                "indicator--560ba464-f3fc-4801-b55a-4945950d210b",
                "indicator--560ba464-5420-4cdf-85c4-44ec950d210b",
                "indicator--560ba464-5698-431c-ae86-4078950d210b",
                "indicator--560ba465-a4d8-424b-8d22-4aa6950d210b",
                "indicator--560ba465-01a8-433f-a673-4d1d950d210b",
                "indicator--560ba466-59ac-4a61-9e22-40de950d210b",
                "indicator--560ba466-86e0-4fac-9104-453d950d210b",
                "indicator--560ba466-48f8-4278-b0b1-4ea4950d210b",
                "indicator--560ba467-56b4-4395-9876-4cd2950d210b",
                "indicator--560ba467-44c4-46da-a60e-4a9a950d210b",
                "indicator--560ba467-97c0-4f08-8401-4de8950d210b",
                "indicator--560ba468-3fd4-42e8-b25b-4a6e950d210b",
                "indicator--560ba468-5570-4d5d-a4e4-4aaf950d210b",
                "indicator--560ba469-af60-4344-bf43-42db950d210b",
                "indicator--560ba469-69b8-4ef2-9a92-4f3b950d210b",
                "indicator--560ba469-71e8-4f93-bde7-4472950d210b",
                "indicator--560ba46a-1b84-43dc-a76c-4f15950d210b",
                "indicator--560ba46a-83f8-4b76-be39-47c5950d210b",
                "indicator--560ba46b-e82c-411b-9ef7-4b4f950d210b",
                "indicator--560ba46b-5de4-4b37-b92d-40b1950d210b",
                "indicator--560ba46b-c3d4-425e-a8b1-4dd4950d210b",
                "indicator--560ba46c-e9a0-4a76-bdc2-4ea2950d210b",
                "indicator--560ba46c-1928-4037-a9da-477e950d210b",
                "indicator--560ba46c-251c-45d4-8a36-4705950d210b",
                "indicator--560ba46d-4ec0-4900-9815-495d950d210b",
                "indicator--560ba46d-3ce0-47c9-bd50-4ed1950d210b",
                "indicator--560ba46e-4ad0-4177-8cf7-4475950d210b",
                "indicator--560ba46e-4250-4210-a267-42e7950d210b",
                "indicator--560ba46e-2798-4605-87eb-4d18950d210b",
                "indicator--560ba46f-c9e8-4cc2-b198-4666950d210b",
                "indicator--560ba46f-6d48-4c98-a6ee-4249950d210b",
                "indicator--560ba470-f120-471a-9af3-455f950d210b",
                "indicator--560ba470-3d14-4493-ac96-4b54950d210b",
                "indicator--560ba470-b6bc-4aa4-98d5-4c0c950d210b",
                "indicator--560ba471-99b4-4c44-9639-44c5950d210b",
                "indicator--560ba471-343c-47bd-8005-4228950d210b",
                "indicator--560ba472-5ac0-4c89-ab09-40d0950d210b",
                "indicator--560ba472-4928-4e2e-8bfc-458b950d210b",
                "indicator--560ba472-a4c4-4d48-a908-4d0d950d210b",
                "indicator--560ba473-8330-434b-bbda-47cb950d210b",
                "indicator--560ba473-3694-4430-98f4-42e0950d210b",
                "indicator--560ba473-268c-4506-9713-4b71950d210b",
                "indicator--560ba474-2580-46df-ad4f-4652950d210b",
                "indicator--560ba474-2534-49a3-a319-4376950d210b",
                "indicator--560ba475-5c54-4bae-be91-4dee950d210b",
                "indicator--560ba475-5464-4869-9934-430e950d210b",
                "indicator--560ba475-2174-4b0c-9713-401c950d210b",
                "indicator--560ba476-5ef0-4bc2-a7fd-4042950d210b",
                "indicator--560ba476-1814-40fd-b505-4a39950d210b",
                "indicator--560ba477-85d4-4049-b41e-4a00950d210b",
                "indicator--560ba477-96d0-4064-bb60-46b4950d210b",
                "indicator--560ba477-c1e0-4781-8854-4841950d210b",
                "indicator--560ba478-6d28-41e3-8f62-4c28950d210b",
                "indicator--560ba478-e7dc-4743-b1b5-4b82950d210b",
                "indicator--560ba478-c074-4317-b24f-4210950d210b",
                "indicator--560ba479-28a0-410d-998b-4786950d210b",
                "indicator--560ba479-8a70-4948-a15f-4705950d210b",
                "indicator--560ba47a-4684-4508-8026-409c950d210b",
                "indicator--560ba47a-8ff8-4380-bfe2-4e88950d210b",
                "indicator--560ba47a-edfc-4685-913b-4c7b950d210b",
                "indicator--560ba47b-7320-4012-92b4-43e4950d210b",
                "indicator--560ba47b-9bf8-42fe-b660-4391950d210b",
                "indicator--560ba47c-b5bc-490c-aede-48f4950d210b",
                "indicator--560ba47c-c4d0-47c1-a8a0-47af950d210b",
                "indicator--560ba47c-3d5c-44d2-a8c0-4b2e950d210b",
                "indicator--560ba47d-af8c-4526-a721-48b2950d210b",
                "indicator--560ba47d-2cac-47e0-8fdb-471d950d210b",
                "indicator--560ba47e-2ce8-409d-9cb1-4f21950d210b",
                "indicator--560ba47e-cfc8-487b-834f-484d950d210b",
                "indicator--560ba47e-7790-4b2e-b443-4344950d210b",
                "indicator--560ba47f-bb04-4ecd-b048-475c950d210b",
                "indicator--560ba47f-efe8-4dbf-8d97-47a5950d210b",
                "indicator--560ba47f-c8c0-4ea5-adaf-49b4950d210b",
                "indicator--560ba480-9d44-4a35-887a-410b950d210b",
                "indicator--560ba480-8a00-4695-a2dd-4b09950d210b",
                "indicator--560ba481-1244-4b24-8f47-4f49950d210b",
                "indicator--560ba481-0134-47d0-a433-495e950d210b",
                "indicator--560ba481-0a6c-4dd2-8925-4f27950d210b",
                "indicator--560ba482-f1c4-4e62-93b1-47c0950d210b",
                "indicator--560ba482-1630-42dc-90bb-4d51950d210b",
                "indicator--560ba483-e520-4600-87dd-4c08950d210b",
                "indicator--560ba483-985c-4de6-ab80-434c950d210b",
                "indicator--560ba483-cf00-41bc-bbe3-4c5a950d210b",
                "indicator--560ba484-a37c-40a1-b30c-4102950d210b",
                "indicator--560ba484-e394-4250-9a49-4b7d950d210b",
                "indicator--560ba484-7bb4-4e88-803f-4ebf950d210b",
                "indicator--560ba485-58ac-48ec-8a37-450d950d210b",
                "indicator--560ba485-2d04-4658-b3c4-40cf950d210b",
                "indicator--560ba486-56e0-458c-a9e5-47c1950d210b",
                "indicator--560ba486-2444-491c-85bc-43a6950d210b",
                "indicator--560ba486-f96c-4de9-b39b-4274950d210b",
                "indicator--560ba487-2abc-4584-9c9f-4c28950d210b",
                "indicator--560ba487-0950-406a-b2b6-4248950d210b",
                "indicator--560ba488-7d74-4963-8d8c-4fb2950d210b",
                "indicator--560ba488-a870-4436-b15a-45c0950d210b",
                "indicator--560ba488-bda0-48f9-a429-4871950d210b",
                "indicator--560ba489-b700-4319-b603-4365950d210b",
                "indicator--560ba489-9c50-461a-9c46-4a3c950d210b",
                "indicator--560ba489-fdb4-4d45-b57a-4d48950d210b",
                "indicator--560ba48a-2c2c-465b-9e1f-47ee950d210b",
                "indicator--560ba48a-d6d0-4dfe-8266-4f25950d210b",
                "indicator--560ba48b-530c-4dd8-9d05-44e5950d210b",
                "indicator--560ba48b-f370-4d57-97c7-449a950d210b",
                "indicator--560ba48b-4744-4295-868f-47e7950d210b",
                "indicator--560ba48c-7d28-454b-b969-4a69950d210b",
                "indicator--560ba48c-42e8-4b94-853e-43b5950d210b",
                "indicator--560ba48d-1418-4a0d-ab03-41a8950d210b",
                "indicator--560ba48d-f5a8-4ec9-b785-49a6950d210b",
                "indicator--560ba48d-4fe4-4a27-b1a0-4a2f950d210b",
                "indicator--560ba48e-b418-477c-9aef-4bb6950d210b",
                "indicator--560ba48e-437c-43f0-a91d-4798950d210b",
                "indicator--560ba48f-9234-46d5-86ec-4037950d210b",
                "indicator--560ba48f-21bc-4466-8779-4ff2950d210b",
                "indicator--560ba48f-cfe0-41f1-9ef0-4ebc950d210b",
                "indicator--560ba490-9410-40dc-ae3b-4fc9950d210b",
                "indicator--560ba490-d2bc-4a58-b42f-479b950d210b",
                "indicator--560ba490-9d38-4a71-8a5e-46f8950d210b",
                "indicator--560ba491-ec8c-40db-ae82-4d0c950d210b",
                "indicator--560ba491-a168-406f-a6f1-4a81950d210b",
                "indicator--560ba492-3bbc-43f3-a1ba-424b950d210b",
                "indicator--560ba492-1b20-417f-936f-48f8950d210b",
                "indicator--560ba492-5048-469b-9ab5-4a42950d210b",
                "indicator--560ba493-a508-4f7d-ba70-45af950d210b",
                "indicator--560ba493-680c-4e53-b270-4fd5950d210b",
                "indicator--560ba494-3f94-4a66-9c6c-4543950d210b",
                "indicator--560ba494-8fb8-417c-a0dd-4985950d210b",
                "indicator--560ba494-aedc-49af-8e6d-4654950d210b",
                "indicator--560ba495-2c18-42fb-b91d-46d7950d210b",
                "indicator--560ba495-4f7c-4cf2-8d76-4406950d210b",
                "indicator--560ba496-f6e8-4277-9fcf-4cfe950d210b",
                "indicator--560ba496-105c-4f17-a25f-4a55950d210b",
                "indicator--560ba496-7fc8-47b9-a09b-4296950d210b",
                "indicator--560ba497-a574-4318-8169-4a21950d210b",
                "indicator--560ba497-6edc-4cd6-8b00-4583950d210b",
                "indicator--560ba497-bd38-4719-bc6d-4bea950d210b",
                "indicator--560ba498-d9f8-4b0e-995f-4e1b950d210b",
                "indicator--560ba498-c9f0-4227-abc6-4296950d210b",
                "indicator--560ba499-d01c-4829-a9e5-4cf6950d210b",
                "indicator--560ba499-d624-41fc-a628-4f1a950d210b",
                "indicator--560ba499-43a0-431f-90a8-4aec950d210b",
                "indicator--560ba49a-26ac-4861-a4a6-48af950d210b",
                "indicator--560ba49a-527c-48a0-8186-4cea950d210b",
                "indicator--560ba49b-9878-4ff9-aec3-4d7b950d210b",
                "indicator--560ba49b-43c4-40ae-9d6f-48ac950d210b",
                "indicator--560ba49b-23d0-4aba-b70f-49f2950d210b",
                "indicator--560ba49c-2e6c-44ea-add2-4a19950d210b",
                "indicator--560ba49c-4528-4274-8140-4343950d210b",
                "indicator--560ba49d-f524-4967-b71f-47e9950d210b",
                "indicator--560ba49d-5cb0-42ac-94b1-418f950d210b",
                "indicator--560ba49d-ff9c-4370-9a7a-4b32950d210b",
                "indicator--560ba49e-7394-43f7-a9ca-4525950d210b",
                "indicator--560ba49e-84f8-43a1-bd70-498a950d210b",
                "indicator--560ba49f-7748-45a3-8cb8-4d35950d210b",
                "indicator--560ba49f-527c-4149-ad50-4fdf950d210b",
                "indicator--560ba49f-5a30-4801-a578-4b53950d210b",
                "indicator--560ba4a0-031c-4e9a-8af2-4617950d210b",
                "indicator--560ba4a0-c518-4964-b3e4-4bf5950d210b",
                "indicator--560ba4a0-d020-460f-8e1d-47dd950d210b",
                "indicator--560ba4a1-8eb4-405b-9864-444d950d210b",
                "indicator--560ba4a1-c480-4619-aefe-4b00950d210b",
                "indicator--560ba4a2-7b18-4075-8e78-4b6e950d210b",
                "indicator--560ba4a2-5f90-4c7f-95eb-4c27950d210b",
                "indicator--560ba4a2-9624-4797-8b84-4c60950d210b",
                "indicator--560ba4a3-9010-4939-bf1d-4969950d210b",
                "indicator--560ba4a3-dc60-49e1-8695-44c8950d210b",
                "indicator--560ba4a4-7ff8-4f4f-b682-4d33950d210b",
                "indicator--560ba4a4-5bec-41d2-9df3-4ac6950d210b",
                "indicator--560ba4a4-6eb4-478f-9add-46ee950d210b",
                "indicator--560ba4a5-2ed0-4d6c-a87e-4a9c950d210b",
                "indicator--560ba4a5-7c70-40ac-b341-4fb0950d210b",
                "indicator--560ba4a6-8814-4353-831c-43b9950d210b",
                "indicator--560ba4a6-ee7c-42db-bd86-4ac0950d210b",
                "indicator--560ba4a6-81c8-4919-8e36-4ba9950d210b",
                "indicator--560ba4a7-0b58-47a2-b2ac-43df950d210b",
                "indicator--560ba4a7-ba20-4326-8159-4ec7950d210b",
                "indicator--560ba4a8-7208-4131-93ed-4bb6950d210b",
                "indicator--560ba4a8-bbe4-4feb-90c2-4ee1950d210b",
                "indicator--560ba4a8-e590-4ef7-8e3a-4a60950d210b",
                "indicator--560ba4a9-49cc-4177-9156-4a8d950d210b",
                "indicator--560ba4a9-2f44-4873-820c-488c950d210b",
                "indicator--560ba4a9-b588-44d9-b126-433c950d210b",
                "indicator--560ba4aa-0fc4-4710-a0a9-477b950d210b",
                "indicator--560ba4aa-f490-4510-abcb-4301950d210b",
                "indicator--560ba4ab-e538-4083-bc63-402c950d210b",
                "indicator--560ba4ab-8088-48ff-ba03-4007950d210b",
                "indicator--560ba4ab-1480-4d83-af7b-4861950d210b",
                "indicator--560ba4ac-eaa8-4bc2-b282-4a09950d210b",
                "indicator--560ba4ac-5024-4a80-9a15-440e950d210b",
                "indicator--560ba4ad-f810-47d3-972f-4455950d210b",
                "indicator--560ba4ad-c7d4-4ccc-bc7c-4af8950d210b",
                "indicator--560ba4ad-d340-4e98-9e49-49f3950d210b",
                "indicator--560ba4ae-1a4c-4a0b-847f-4cd7950d210b",
                "indicator--560ba4ae-c840-4898-865e-45a6950d210b",
                "indicator--560ba4af-5ebc-46c7-8e6b-479d950d210b",
                "indicator--560ba4af-9900-4b76-827b-4082950d210b",
                "indicator--560ba4af-44b0-4a28-b3a8-41f1950d210b",
                "indicator--560ba4b0-2e28-465d-b15a-4fc0950d210b",
                "indicator--560ba4b0-3868-4933-a745-4dbd950d210b",
                "indicator--560ba4b1-e7bc-4bd4-818d-4bbe950d210b",
                "indicator--560ba4b1-a0a4-4f40-bee5-4f22950d210b",
                "indicator--560ba4b1-e4f4-4d5e-ad21-4be8950d210b",
                "indicator--560ba4b2-57ac-4ec8-a4fb-42f0950d210b",
                "indicator--560ba4b2-b154-4182-9f44-4fab950d210b",
                "indicator--560ba4b2-dac0-4abf-9815-467c950d210b",
                "indicator--560ba4b3-c384-4131-820b-46dc950d210b",
                "indicator--560ba4b3-2b28-43f5-8b2b-44a2950d210b",
                "indicator--560ba4b4-0ed8-4c7c-a59c-4f24950d210b",
                "indicator--560ba4b4-b4f4-43f8-b764-4b11950d210b",
                "indicator--560ba4b4-9398-43d7-83f3-4cd2950d210b",
                "indicator--560ba4b5-1a10-431b-a100-43a0950d210b",
                "indicator--560ba4b5-d68c-4d40-86ac-482c950d210b",
                "indicator--560ba4b6-d7f4-467b-8688-4b93950d210b",
                "indicator--560ba4b6-a388-48f8-96e1-4764950d210b",
                "indicator--560ba4b6-8394-4897-8cdb-422f950d210b",
                "indicator--560ba4b7-917c-4613-84cc-469e950d210b",
                "indicator--560ba4b7-c55c-41a1-80ed-4ed1950d210b",
                "indicator--560ba4b8-8a60-4295-a83c-4828950d210b",
                "indicator--560ba4b8-6248-480a-bae1-4ad3950d210b",
                "indicator--560ba4b8-4e38-4cb0-b428-4c65950d210b",
                "indicator--560ba4b9-a48c-4b01-8354-46b8950d210b",
                "indicator--560ba4b9-5b38-4753-8fd1-4e14950d210b",
                "indicator--560ba4ba-e268-4287-91e7-43a9950d210b",
                "indicator--560ba4ba-9a08-495b-b8c4-495c950d210b",
                "indicator--560ba4ba-5ca4-4b41-b045-4556950d210b",
                "indicator--560ba4bb-beb8-4c5b-8806-461b950d210b",
                "indicator--560ba4bb-26a8-483d-924f-44c3950d210b",
                "indicator--560ba4bc-43a0-4048-a276-480d950d210b",
                "indicator--560ba4bc-e7e8-4425-bccc-4309950d210b",
                "indicator--560ba4bc-c004-4cc5-bdf6-4304950d210b",
                "indicator--560ba4bd-3fd0-469f-bd22-4483950d210b",
                "indicator--560ba4bd-2574-462b-bff5-4f1d950d210b",
                "indicator--560ba4bd-ef78-4db3-b5d3-42c7950d210b",
                "indicator--560ba4be-6b5c-434a-996e-4fed950d210b",
                "indicator--560ba4be-b508-40c5-8006-4012950d210b",
                "indicator--560ba4bf-9d30-448d-9b3c-468e950d210b",
                "indicator--560ba4bf-5e38-49ed-ab55-4e6e950d210b",
                "indicator--560ba4bf-dfd4-4e70-9b21-4fb1950d210b",
                "indicator--560ba4c0-a960-443a-8cf5-4779950d210b",
                "indicator--560ba4c0-dd10-45f9-8a5c-42af950d210b",
                "indicator--560ba4c1-8d70-4573-a718-4575950d210b",
                "indicator--560ba4c1-3044-4c3d-920e-470f950d210b",
                "indicator--560ba4c1-0524-4c30-9933-40c2950d210b",
                "indicator--560ba4c2-3c9c-4094-988d-409e950d210b",
                "indicator--560ba4c2-9f78-4f8c-9384-43ed950d210b",
                "indicator--560ba4c3-1e34-41d3-8813-4260950d210b",
                "indicator--560ba4c3-6774-4f09-87a1-4381950d210b",
                "indicator--560ba4c3-110c-482e-906d-41ba950d210b",
                "indicator--560ba4c4-60c4-4198-b657-42f1950d210b",
                "indicator--560ba4c4-ae54-4485-9008-4218950d210b",
                "indicator--560ba4c5-a1e4-47fa-b1f3-4e9c950d210b",
                "indicator--560ba4c5-6934-4fe8-bcb1-452e950d210b",
                "indicator--560ba4c5-65d4-4778-81d7-4447950d210b",
                "indicator--560ba4c6-4940-4134-a960-47d7950d210b",
                "indicator--560ba4c6-e86c-421e-b3b4-402f950d210b",
                "indicator--560ba4c7-a48c-4752-a66a-4b47950d210b",
                "indicator--560ba4c7-ccb8-4b45-a35a-4662950d210b",
                "indicator--560ba4c7-df54-4b62-933d-4c94950d210b",
                "indicator--560ba4c8-1750-4dc6-adec-40fa950d210b",
                "indicator--560ba4c8-8e40-4ef1-b320-4729950d210b",
                "indicator--560ba4c9-3458-4147-80f6-445f950d210b",
                "indicator--560ba4c9-3f30-4ae0-ad5b-4b36950d210b",
                "indicator--560ba4c9-2a74-4045-aff2-43b7950d210b",
                "indicator--560ba4ca-ae80-4f89-ab4b-473a950d210b",
                "indicator--560ba4ca-a75c-4927-90e8-438e950d210b",
                "indicator--560ba4cb-82f0-4818-ba92-45a4950d210b",
                "indicator--560ba4cb-88b4-4fe5-b793-46ab950d210b",
                "indicator--560ba4cb-5f8c-42f3-a36a-405a950d210b",
                "indicator--560ba4cc-9360-4df4-bd2a-4d9c950d210b",
                "indicator--560ba4cc-eef0-443e-b53f-4d7d950d210b",
                "indicator--560ba4cd-2ac8-4ba5-a4d9-4e72950d210b",
                "indicator--560ba4cd-fd0c-4b51-8811-4f3b950d210b",
                "indicator--560ba4cd-0688-4cab-b710-47a6950d210b",
                "indicator--560ba4ce-c80c-421c-9130-47ea950d210b",
                "indicator--560ba4ce-3538-429b-9c51-4a56950d210b",
                "indicator--560ba4cf-ec28-4f5a-8aa8-44e3950d210b",
                "indicator--560ba4cf-ad04-47b2-a6c5-4866950d210b",
                "indicator--560ba4cf-30a4-4e4d-8e41-4a76950d210b",
                "indicator--560ba4d0-96ac-4784-924c-4c48950d210b",
                "indicator--560ba4d0-a36c-4dca-90b1-4680950d210b",
                "indicator--560ba4d1-a564-47f1-ad7a-4692950d210b",
                "indicator--560ba4d1-63a0-41a4-b805-4ae2950d210b",
                "indicator--560ba4d1-c154-4415-9a8c-4fb9950d210b",
                "indicator--560ba4d2-4304-4af2-b4ac-4ec5950d210b",
                "indicator--560ba4d2-5768-4635-9b86-499b950d210b",
                "indicator--560ba4d3-cc58-4ae8-965f-4c28950d210b",
                "indicator--560ba4d3-7ea8-412f-b22a-44f5950d210b",
                "indicator--560ba4d3-dbb0-4ebc-b664-4e5f950d210b",
                "indicator--560ba4d4-cba8-4556-9fea-44ae950d210b",
                "indicator--560ba4d4-e1ec-4c01-ab7a-462f950d210b",
                "indicator--560ba4d5-78b0-43cc-9539-41b4950d210b",
                "indicator--560ba4d5-bf7c-4115-b89a-4968950d210b",
                "indicator--560ba4d5-f538-430f-bffa-4d8f950d210b",
                "indicator--560ba4d6-d538-4fc1-8cc7-4b9c950d210b",
                "indicator--560ba4d6-e0c4-4171-b8e3-485a950d210b",
                "indicator--560ba4d7-8918-46fc-8bc7-4332950d210b",
                "indicator--560ba4d7-0e98-4f39-9a51-4e02950d210b",
                "indicator--560ba4d7-ea7c-44ea-a532-4751950d210b",
                "indicator--560ba4d8-5340-41e7-96d3-452a950d210b",
                "indicator--560ba4d8-9ca4-4baa-8105-4b83950d210b",
                "indicator--560ba4d9-edcc-4593-8341-4649950d210b",
                "indicator--560ba4d9-eae0-486c-a9e2-443a950d210b",
                "indicator--560ba4d9-ff8c-4918-9ba4-4f56950d210b",
                "indicator--560ba4da-c270-4c8b-821e-457e950d210b",
                "indicator--560ba4da-a074-46a2-9287-4c9d950d210b",
                "indicator--560ba4db-e374-4a4e-83c8-471c950d210b",
                "indicator--560ba4db-ee94-4324-9335-464e950d210b",
                "indicator--560ba4db-9318-4b15-b493-4651950d210b",
                "indicator--560ba4dc-deb0-4643-b6c8-4e4c950d210b",
                "indicator--560ba4dc-ca94-4bcf-9520-4070950d210b",
                "indicator--560ba4dd-cc6c-4b65-9ed2-477f950d210b",
                "indicator--560ba4dd-00c0-4bda-a839-43cd950d210b",
                "indicator--560ba4dd-e228-4529-b3ba-4f26950d210b",
                "indicator--560ba4de-c1fc-419f-a45a-474e950d210b",
                "indicator--560ba4de-75e8-4096-87f1-41a5950d210b",
                "indicator--560ba4df-2530-4796-b906-4d71950d210b",
                "indicator--560ba4df-ef3c-4598-a8c5-4189950d210b",
                "indicator--560ba4df-a6c8-4fb3-8dc1-448d950d210b",
                "indicator--560ba4e0-40f4-4fde-b5f6-424f950d210b",
                "indicator--560ba4e0-de4c-4d01-bb5c-4ca1950d210b",
                "indicator--560ba4e0-70bc-4a2b-b661-4805950d210b",
                "indicator--560ba4e1-714c-4b3c-b3eb-43b7950d210b",
                "indicator--560ba4e1-a56c-45ab-960f-46fc950d210b",
                "indicator--560ba4e2-ae84-43f6-bf04-42e3950d210b",
                "indicator--560ba4e2-75bc-4ae0-8809-44dd950d210b",
                "indicator--560ba4e2-806c-4ba7-afa2-4a0d950d210b",
                "indicator--560ba4e3-0d00-4892-ad70-42f4950d210b",
                "indicator--560ba4e3-8fc8-4964-8903-4661950d210b",
                "indicator--560ba4e4-3578-4c3c-86dd-4296950d210b",
                "indicator--560ba4e4-d15c-417b-817d-4d04950d210b",
                "indicator--560ba4e4-a17c-42bb-8ad0-4439950d210b",
                "indicator--560ba4e5-9348-41f7-81cd-4ecb950d210b",
                "indicator--560ba4e5-bc44-4130-b78d-440d950d210b",
                "indicator--560ba4e6-ab00-4027-a151-4a2a950d210b",
                "indicator--560ba4e6-d594-4bdb-a153-4716950d210b",
                "indicator--560ba4e6-c130-48d2-8020-4c6b950d210b",
                "indicator--560ba4e7-a9dc-49a1-a721-4b38950d210b",
                "indicator--560ba4e7-0320-46db-953f-4a0d950d210b",
                "indicator--560ba4e8-19ec-4728-b36f-4d03950d210b",
                "indicator--560ba4e8-a524-4755-8c42-4dad950d210b",
                "indicator--560ba4e8-ecfc-4022-b6c7-4215950d210b",
                "indicator--560ba4e9-7594-4a8d-959f-42cf950d210b",
                "indicator--560ba4e9-a08c-4bd8-9f1e-4a00950d210b",
                "indicator--560ba4ea-09fc-453d-b4f3-4143950d210b",
                "indicator--560ba4ea-7e90-4737-af6b-48c5950d210b",
                "indicator--560ba4ea-bafc-4494-83c6-4c43950d210b",
                "indicator--560ba4eb-01dc-402f-bd36-4f3c950d210b",
                "indicator--560ba4eb-7f40-4683-846b-4533950d210b",
                "indicator--560ba4ec-1bf8-4079-9136-4f89950d210b",
                "indicator--560ba4ec-492c-40ba-bbd9-4eb1950d210b",
                "indicator--560ba4ec-ea6c-4cc5-b6b8-45ac950d210b",
                "indicator--560ba4ed-50f8-48b7-9ec6-48aa950d210b",
                "indicator--560ba4ed-f16c-4752-abcc-4614950d210b",
                "indicator--560ba4ee-a174-43da-9e78-4aa0950d210b",
                "indicator--560ba4ee-c700-453c-8b6e-4ee4950d210b",
                "indicator--560ba4ee-e008-40bd-86ee-426c950d210b",
                "indicator--560ba4ef-3b64-4744-9331-417e950d210b",
                "indicator--560ba4ef-df18-4dd1-91f2-45a8950d210b",
                "indicator--560ba4f0-5994-4595-b8c0-4d46950d210b",
                "indicator--560ba4f0-a034-481f-9913-4fc3950d210b",
                "indicator--560ba4f0-17e0-4a3b-9e8e-4464950d210b",
                "indicator--560ba4f1-e214-4544-afa6-4614950d210b",
                "indicator--560ba4f1-86ac-41d5-ac97-490c950d210b",
                "indicator--560ba4f2-fa4c-4da8-8db6-4540950d210b",
                "indicator--560ba4f2-e534-4196-a917-40e9950d210b",
                "indicator--560ba4f2-3f30-4592-9967-4e74950d210b",
                "indicator--560ba4f3-0d38-48db-99d6-4d96950d210b",
                "indicator--560ba4f3-4b38-4c73-8e93-4604950d210b",
                "indicator--560ba4f4-ea98-46fa-ac8b-4d39950d210b",
                "indicator--560ba4f4-cda8-46c2-93d2-4e7d950d210b",
                "indicator--560ba4f4-79c0-49bb-8c49-484b950d210b",
                "indicator--560ba4f5-18a8-43fe-a6d7-4a8c950d210b",
                "indicator--560ba4f5-8e8c-4110-a568-4c06950d210b",
                "indicator--560ba4f5-6e30-410e-a467-463b950d210b",
                "indicator--560ba4f6-d264-4aae-a1bb-4853950d210b",
                "indicator--560ba4f6-74e4-429b-918a-47ce950d210b",
                "indicator--560ba4f7-f584-4e7b-bf37-46af950d210b",
                "indicator--560ba4f7-7fa0-4c6a-9041-4c04950d210b",
                "indicator--560ba4f7-69ec-4ed0-ad24-4d20950d210b",
                "indicator--560ba4f8-7560-4e72-b71f-4e91950d210b",
                "indicator--560ba4f8-5aa8-467d-83f0-4e92950d210b",
                "indicator--560ba4f9-94cc-421c-9d1d-4228950d210b",
                "indicator--560ba4f9-1878-482d-bb04-4727950d210b",
                "indicator--560ba4f9-c8bc-4009-93b5-4032950d210b",
                "indicator--560ba4fa-b628-481b-b1bb-4659950d210b",
                "indicator--560ba4fa-f2e0-4580-a47b-4ed3950d210b",
                "indicator--560ba4fb-ce1c-4a10-9cfc-4125950d210b",
                "indicator--560ba4fb-e82c-4ad6-89b5-4d7f950d210b",
                "indicator--560ba4fb-59a8-4a0b-b020-4d89950d210b",
                "indicator--560ba4fc-c220-49ff-be13-4ab5950d210b",
                "indicator--560ba4fc-fd54-43af-8929-45d8950d210b",
                "indicator--560ba4fc-3108-4f26-9fd9-453f950d210b",
                "indicator--560ba4fd-b41c-4884-b44c-4d9e950d210b",
                "indicator--560ba4fd-c12c-45c1-b85b-40f4950d210b",
                "indicator--560ba4fe-dfb0-4bf7-aa36-4d81950d210b",
                "indicator--560ba4fe-0438-42b4-8b21-4fe5950d210b",
                "indicator--560ba4ff-c870-4396-bc7f-4d84950d210b",
                "indicator--560ba4ff-81e8-48a4-b95c-4f29950d210b",
                "indicator--560ba4ff-a4fc-46f3-9b03-4539950d210b",
                "indicator--560ba500-9080-46fb-9122-4c7b950d210b",
                "indicator--560ba500-233c-4d61-a046-4ff2950d210b",
                "indicator--560ba501-9edc-4b33-b0d8-40c8950d210b",
                "indicator--560ba501-6be0-4afb-bccd-4aff950d210b",
                "indicator--560ba501-6434-4d61-94b7-4ab2950d210b",
                "indicator--560ba502-496c-4866-bbf6-4cbc950d210b",
                "indicator--560ba502-6150-4f9c-a513-4653950d210b",
                "indicator--560ba503-eccc-49a8-9447-436c950d210b",
                "indicator--560ba503-02bc-4629-ae1b-4143950d210b",
                "indicator--560ba503-6bc4-4637-9e0b-428e950d210b",
                "indicator--560ba504-3590-4dd8-a157-4126950d210b",
                "indicator--560ba504-22a0-458e-a43a-44a7950d210b",
                "indicator--560ba504-0030-42b7-b031-4f16950d210b",
                "indicator--560ba505-b39c-4a69-a511-4c45950d210b",
                "indicator--560ba505-1364-4aa6-8f98-4b7e950d210b",
                "indicator--560ba506-5e18-42c5-962e-41c1950d210b",
                "indicator--560ba506-aff4-4a9c-9a07-4598950d210b",
                "indicator--560ba506-0700-4c0f-abca-4518950d210b",
                "indicator--560ba506-ab30-4f60-a341-480e950d210b",
                "indicator--560ba506-6e84-4b9e-b96e-4888950d210b",
                "indicator--560ba507-d834-44fb-904b-4843950d210b",
                "indicator--560ba507-4540-44c8-8827-4f4f950d210b",
                "indicator--560ba507-935c-471e-a64b-49c7950d210b",
                "indicator--560ba508-ab24-43c3-830f-4e29950d210b",
                "indicator--560ba508-3520-4257-8066-4a10950d210b",
                "indicator--560ba509-aa94-4fbb-89c7-4f05950d210b",
                "indicator--560ba509-973c-4c85-afd6-4df3950d210b",
                "indicator--560ba509-c964-4c04-9980-44ad950d210b",
                "indicator--560ba509-467c-477f-b1fe-4a6d950d210b",
                "indicator--560ba50a-0a48-4c5e-b2db-4813950d210b",
                "indicator--560ba50a-1d50-4bcb-a249-4cae950d210b",
                "indicator--560ba50b-7e2c-4644-a891-46f8950d210b",
                "indicator--560ba50b-043c-451c-9207-4610950d210b",
                "indicator--560ba50b-b5a0-4d3d-ab34-4753950d210b",
                "indicator--560ba50b-6644-45af-843d-4514950d210b",
                "indicator--560ba50b-3498-462c-a417-45e0950d210b",
                "indicator--560ba50c-37c4-4fd0-bb28-4067950d210b",
                "indicator--560ba50c-3e7c-4c4c-b4b9-4f27950d210b",
                "indicator--560ba50c-9600-404f-b45d-49ca950d210b",
                "indicator--560ba50c-be84-49e7-99f2-4a15950d210b",
                "indicator--560ba50d-94b4-4a3b-a465-40fb950d210b",
                "indicator--560ba50d-a290-49ed-bc8e-4a32950d210b",
                "indicator--560ba50d-bb5c-4a0a-965c-4020950d210b",
                "indicator--560ba50e-ffbc-464e-902e-46b8950d210b",
                "indicator--560ba50e-60b8-4e25-bc59-4053950d210b",
                "indicator--560ba50e-a700-4f3a-a0f1-4a21950d210b",
                "indicator--560ba50e-f144-43d7-9e45-41bd950d210b",
                "indicator--560ba50e-9ee4-4030-a7c3-417c950d210b",
                "indicator--560ba50f-6bf0-4688-b01b-4c6b950d210b",
                "indicator--560ba50f-1374-4580-a7b0-4c70950d210b",
                "indicator--560ba50f-2f58-478f-a9ac-45cb950d210b",
                "indicator--560ba50f-0424-47ab-b4eb-483f950d210b",
                "indicator--560ba50f-0344-49fe-a291-4bc4950d210b",
                "indicator--560ba510-0544-4db1-be30-425f950d210b",
                "indicator--560ba510-601c-4111-8964-4e8e950d210b",
                "indicator--560ba510-267c-444b-b475-4f17950d210b",
                "indicator--560ba510-b430-4d3b-a1bb-42ba950d210b",
                "indicator--560ba510-36bc-4b5d-a85a-4f95950d210b",
                "indicator--560ba511-88b4-4a41-baee-412e950d210b",
                "indicator--560ba511-a078-4b7b-b29e-4b41950d210b",
                "indicator--560ba511-9594-42ee-a6d7-410e950d210b",
                "indicator--560ba511-91c0-47bf-ae80-465e950d210b",
                "indicator--560ba511-309c-44eb-b504-4f55950d210b",
                "indicator--560ba512-1cfc-427d-9371-435a950d210b",
                "indicator--560ba512-8cdc-4d37-88f4-496b950d210b",
                "indicator--560ba512-1eb0-459c-b784-45e4950d210b",
                "indicator--560ba513-947c-484a-8fc3-4103950d210b",
                "indicator--560ba513-d4bc-438b-a312-41f9950d210b",
                "indicator--560ba513-aea4-4820-b4d0-448d950d210b",
                "indicator--560ba513-7724-47e8-ba6a-47b2950d210b",
                "indicator--560ba513-7aa0-4a79-a03b-4854950d210b",
                "indicator--560ba514-8fa8-4b36-b846-457a950d210b",
                "indicator--560ba514-7c58-4066-9862-4c74950d210b",
                "indicator--560ba514-8e00-45f7-9692-4fd8950d210b",
                "indicator--560ba514-167c-47ec-b597-4fb2950d210b",
                "indicator--560ba514-7f78-4769-be13-4987950d210b",
                "indicator--560ba515-cf60-474b-8032-40d7950d210b",
                "indicator--560ba515-7000-403e-9e45-4cf7950d210b",
                "indicator--560ba515-2308-4804-b3a7-4e19950d210b",
                "indicator--560ba515-c368-4c09-84eb-4299950d210b",
                "indicator--560ba515-2804-4699-8fb1-4494950d210b",
                "indicator--560ba516-4ab8-4713-8402-4434950d210b",
                "indicator--560ba516-8050-450b-bdbe-4679950d210b",
                "indicator--560ba516-58f0-4b6a-9a3f-446a950d210b",
                "indicator--560ba516-87e0-47ba-88ca-429d950d210b",
                "indicator--560ba517-0bb4-4319-8051-4b5b950d210b",
                "indicator--560ba517-a570-4ff6-81c7-4393950d210b",
                "indicator--560ba517-a32c-4819-8a5d-4ced950d210b",
                "indicator--560ba517-7e1c-4f18-8afd-4e56950d210b",
                "indicator--560ba517-4d5c-4fa5-af22-4cf7950d210b",
                "indicator--560ba518-dd70-4108-a239-4ef8950d210b",
                "indicator--560ba518-dc08-4f0b-bed9-42a1950d210b",
                "indicator--560ba518-7814-4c9c-8a56-4619950d210b",
                "indicator--560ba518-fd5c-49f2-80e5-456c950d210b",
                "indicator--560ba518-7dd0-46c4-9be1-4a1f950d210b",
                "indicator--560ba519-18f0-45d8-9ac4-430e950d210b",
                "indicator--560ba519-d9a0-4b8f-86ca-41ae950d210b",
                "indicator--560ba519-0cc0-48e3-8bfe-44b2950d210b",
                "indicator--560ba519-0ee4-4285-b30d-4904950d210b",
                "indicator--560ba51a-d314-4343-86ab-4140950d210b",
                "indicator--560ba51a-8e18-4784-8ba9-4de4950d210b",
                "indicator--560ba51a-60b8-45d8-b00d-4ed2950d210b",
                "indicator--560ba51a-af50-4e16-a825-4dbc950d210b",
                "indicator--560ba51a-6ae4-4997-a939-43dc950d210b",
                "indicator--560ba51b-211c-4255-bf7b-4fbf950d210b",
                "indicator--560ba51b-3858-40fc-8708-48ea950d210b",
                "indicator--560ba51b-d9dc-4aa9-a7be-4502950d210b",
                "indicator--560ba51b-08a4-499e-8ca6-44cd950d210b",
                "indicator--560ba51b-ee8c-4937-adfe-4893950d210b",
                "indicator--560ba51c-182c-49a5-ba86-4b98950d210b",
                "indicator--560ba51c-1e5c-4507-ba99-49a9950d210b",
                "indicator--560ba51c-0d1c-4dd7-9d45-48bc950d210b",
                "indicator--560ba51c-cd60-4b7e-83d7-44fe950d210b",
                "indicator--560ba51c-a258-411a-b0e4-45a6950d210b",
                "indicator--560ba51d-71d0-4c92-8597-4261950d210b",
                "indicator--560ba51d-8128-46f1-9ffe-43dd950d210b",
                "indicator--560ba51d-ee30-423c-9f71-47f4950d210b",
                "indicator--560ba51e-f218-4cf6-a26e-4253950d210b",
                "indicator--560ba51e-086c-463f-b19b-4fde950d210b",
                "indicator--560ba51f-ab60-46c9-a9a9-4aef950d210b",
                "indicator--560ba51f-a020-401d-a6bf-4e6f950d210b",
                "indicator--560ba51f-672c-48d0-8a3c-43f4950d210b",
                "indicator--560ba51f-5ee0-465c-b575-43e1950d210b",
                "indicator--560ba51f-ebf8-49e9-a191-4cee950d210b",
                "indicator--560ba520-a238-43f0-910e-46ec950d210b",
                "indicator--560ba520-63a0-45c6-aad1-49d0950d210b",
                "indicator--560ba520-9da0-4216-8ebd-48b2950d210b",
                "indicator--560ba520-adf8-4b0d-b09c-4ded950d210b",
                "indicator--560ba520-6968-4f89-82dd-4de2950d210b",
                "indicator--560ba521-5f98-4f79-a5cf-4904950d210b",
                "indicator--560ba521-2fe0-4e28-a5ab-4124950d210b",
                "indicator--560ba521-64cc-4d59-9963-47cd950d210b",
                "indicator--560ba521-8830-4309-a5db-4b8a950d210b",
                "indicator--560ba521-3ce4-4b61-8145-4722950d210b",
                "indicator--560ba522-a794-4577-a8bd-4890950d210b",
                "indicator--560ba522-d258-40c6-a8b9-46d1950d210b",
                "indicator--560ba522-8e90-436c-9c2a-4bc9950d210b",
                "indicator--560ba522-3678-464f-b24c-4ecc950d210b",
                "indicator--560ba522-232c-45f5-86a9-4fb3950d210b",
                "indicator--560ba523-22c4-4f67-ad0d-464d950d210b",
                "indicator--560ba523-1f94-4562-99b1-4845950d210b",
                "indicator--560ba523-68b4-44ed-b027-42fb950d210b",
                "indicator--560ba523-05c8-48ce-a04e-4fef950d210b",
                "indicator--560ba523-61c4-4bd0-81eb-48f4950d210b",
                "indicator--560ba524-f7ec-4318-a390-4dc2950d210b",
                "indicator--560ba524-f5a0-42bb-81bf-4c55950d210b",
                "indicator--560ba524-0d00-47f0-9245-462d950d210b",
                "indicator--560ba524-20b0-4b0f-8f55-4474950d210b",
                "indicator--560ba524-9360-44c2-94c4-42a6950d210b",
                "indicator--560ba525-4630-4390-aa15-4663950d210b",
                "indicator--560ba525-a078-41d9-b834-433d950d210b",
                "indicator--560ba525-5bc4-48ce-af68-4fe6950d210b",
                "indicator--560ba525-61a4-4c5d-a45c-4c6b950d210b",
                "indicator--560ba525-6838-4b5e-8f82-44c9950d210b",
                "indicator--560ba526-3264-4ba1-97a2-4602950d210b",
                "indicator--560ba526-e15c-4943-9bd9-4c22950d210b",
                "indicator--560ba526-669c-494f-9213-424a950d210b",
                "indicator--560ba526-ffd0-4a9f-bd45-4a5f950d210b",
                "indicator--560ba526-874c-4345-814a-488a950d210b",
                "indicator--560ba527-578c-4546-a856-429e950d210b",
                "indicator--560ba527-00c4-4355-a317-45fe950d210b",
                "indicator--560ba527-f36c-478d-b78d-4131950d210b",
                "indicator--560ba527-c4f0-4e9a-b880-45c6950d210b",
                "indicator--560ba527-4868-4ebe-b3c8-4ac5950d210b",
                "indicator--560ba528-35f0-4dbe-abf7-476d950d210b",
                "indicator--560ba528-aa1c-49f5-8cdb-4846950d210b",
                "indicator--560ba528-ba08-480a-8c49-4ffa950d210b",
                "indicator--560ba528-1b58-45bf-a70a-44a9950d210b",
                "indicator--560ba529-07dc-4e1b-b32f-4133950d210b",
                "indicator--560ba529-5d90-43ce-88fb-4214950d210b",
                "indicator--560ba529-808c-4df7-85d7-4ea5950d210b",
                "indicator--560ba529-aca8-405d-b261-4e14950d210b",
                "indicator--560ba529-1c90-4099-96f0-4649950d210b",
                "indicator--560ba52a-74f4-45a0-9618-4d5c950d210b",
                "indicator--560ba52a-2168-4e13-80f0-4b58950d210b",
                "indicator--560ba52a-ef48-453a-9d09-4ce1950d210b",
                "indicator--560ba52a-d164-4f8d-9be7-4f85950d210b",
                "indicator--560ba52a-86b8-444f-b269-46e9950d210b",
                "indicator--560ba52b-2b1c-4a65-b148-4cd5950d210b",
                "indicator--560ba52b-cb50-48e9-8cd5-47cc950d210b",
                "indicator--560ba52b-bfac-4bfc-9dfe-4219950d210b",
                "indicator--560ba52b-bbd8-42b9-968a-4969950d210b",
                "indicator--560ba52b-4414-4374-b6ac-40cb950d210b",
                "indicator--560ba52c-5814-4fe5-bcd8-4fd8950d210b",
                "indicator--560ba52c-d014-4417-876b-4d32950d210b",
                "indicator--560ba52c-4378-49fd-8d54-48ea950d210b",
                "indicator--560ba52c-3020-49ed-a01a-4d21950d210b",
                "indicator--560ba52c-c0bc-409c-ab85-418d950d210b",
                "indicator--560ba52d-5cd0-4caf-96f4-4ed6950d210b",
                "indicator--560ba52d-8b6c-491d-91f3-49e9950d210b",
                "indicator--560ba52d-e7f0-43d7-9e3a-47fc950d210b",
                "indicator--560ba52d-a27c-4dc2-b406-45a9950d210b",
                "indicator--560ba52d-6c7c-4561-a871-4fb1950d210b",
                "indicator--560ba52e-6a38-49e5-b8fe-4cf9950d210b",
                "indicator--560ba52e-ea6c-4a7d-af22-411f950d210b",
                "indicator--560ba52e-e2e8-49d8-8817-4614950d210b",
                "indicator--560ba52e-99c4-419f-b0ce-4320950d210b",
                "indicator--560ba52e-bd24-465a-943c-4ee4950d210b",
                "indicator--560ba52f-fd50-40ae-94d4-49e3950d210b",
                "indicator--560ba52f-42e4-43e9-8647-4899950d210b",
                "indicator--560ba52f-8db8-46d5-98d9-4a69950d210b",
                "indicator--560ba52f-8ecc-4a66-944c-4ae4950d210b",
                "indicator--560ba52f-8e2c-470c-aa9b-4ce0950d210b",
                "indicator--560ba530-a54c-477e-acb4-4948950d210b",
                "indicator--560ba530-dff8-4599-8485-4eb9950d210b",
                "indicator--560ba530-ea20-4f09-a747-44bd950d210b",
                "indicator--560ba531-7f74-4d98-a07e-466f950d210b",
                "indicator--560ba531-7388-411d-ade9-4e7a950d210b",
                "indicator--560ba531-5cd0-4183-915a-4e9a950d210b",
                "indicator--560ba532-08a0-4016-a187-4608950d210b",
                "indicator--560ba532-4c30-4893-b0b6-4a51950d210b",
                "indicator--560ba532-c328-4b80-9625-4e0c950d210b",
                "indicator--560ba533-b4b4-46b2-a4aa-40e4950d210b",
                "indicator--560ba533-0098-4b3e-96da-4dd8950d210b",
                "indicator--560ba533-d5ec-4dbf-aff4-4800950d210b",
                "indicator--560ba534-b998-4c59-a1a9-4168950d210b",
                "indicator--560ba534-4390-4dba-8dea-4365950d210b",
                "indicator--560ba534-2704-4127-9df3-4ecd950d210b",
                "indicator--560ba534-8cf0-45c2-b901-437f950d210b",
                "indicator--560ba534-ac4c-4bce-b2d9-448e950d210b",
                "indicator--560ba535-7ed8-4abf-8a5b-4a89950d210b",
                "indicator--560ba535-7cdc-4086-af80-4a9a950d210b",
                "indicator--560ba535-6588-424e-a56b-4599950d210b",
                "indicator--560ba535-2b4c-4214-8d36-4dfd950d210b",
                "indicator--560ba535-9f40-4f74-9754-4de3950d210b",
                "indicator--560ba536-5524-4aa6-ad36-4922950d210b",
                "indicator--560ba536-0e90-4b84-817a-4252950d210b",
                "indicator--560ba536-c7c8-4439-8d65-48cb950d210b",
                "indicator--560ba537-b388-4fc7-ab4a-4511950d210b",
                "indicator--560ba537-9c68-4ef8-a663-46f4950d210b",
                "indicator--560ba537-f428-4c47-bf0f-42af950d210b",
                "indicator--560ba538-1128-445e-ac17-4536950d210b",
                "indicator--560ba538-6d98-41c2-8756-46b7950d210b",
                "indicator--560ba539-50f4-4562-8a97-4589950d210b",
                "indicator--560ba539-50bc-4394-84fd-426b950d210b",
                "indicator--560ba539-0c94-4f6c-af1f-4c19950d210b",
                "indicator--560ba53a-6628-4e6e-8837-4ce6950d210b",
                "indicator--560ba53a-6790-4ef0-8cda-41a4950d210b",
                "indicator--560ba53a-3a38-474d-8de0-489b950d210b",
                "indicator--560ba53b-4410-4b05-8134-40d3950d210b",
                "indicator--560ba53b-fd94-46fa-ab84-4d96950d210b",
                "indicator--560ba53b-ea8c-4b1e-a9fb-4265950d210b",
                "indicator--560ba53b-4f70-4be6-957d-4bb2950d210b",
                "indicator--560ba53b-a534-4518-bc0a-4089950d210b",
                "indicator--560ba53c-1ef0-49c4-9893-44c4950d210b",
                "indicator--560ba53c-7d44-42f9-a56c-4bc5950d210b",
                "indicator--560ba53c-8910-4b83-95d0-44e7950d210b",
                "indicator--560ba53c-f948-4837-8204-48ef950d210b",
                "indicator--560ba53c-3ddc-4b8a-9dda-4b87950d210b",
                "indicator--560ba53d-426c-4407-88c1-4789950d210b",
                "indicator--560ba53d-77dc-4062-a5e2-46e2950d210b",
                "indicator--560ba53d-9138-46cd-99f0-49c0950d210b",
                "indicator--560ba53d-c928-4830-9f84-4a74950d210b",
                "indicator--560ba53e-7548-4166-8e7a-420a950d210b",
                "indicator--560ba53e-4bd8-4af9-a09f-40de950d210b",
                "indicator--560ba53e-c6dc-40e0-90bd-4519950d210b",
                "indicator--560ba53e-ef90-4cdf-bbec-4ce0950d210b",
                "indicator--560ba53e-cc60-435a-ad57-4df2950d210b",
                "indicator--560ba53f-e940-4ba3-961f-4b24950d210b",
                "indicator--560ba53f-cda0-480c-ae3e-4887950d210b",
                "indicator--560ba53f-f348-4fe9-99f6-403d950d210b",
                "indicator--560ba53f-cb30-4f90-8cc7-4ebe950d210b",
                "indicator--560ba540-7de4-4d97-a2a5-483f950d210b",
                "indicator--560ba540-3bec-477d-8b0a-4b91950d210b",
                "indicator--560ba540-b608-4cd9-bfd8-42dc950d210b",
                "indicator--560ba540-e6cc-469e-89be-4479950d210b",
                "indicator--560ba540-6788-4f23-a8d0-4d81950d210b",
                "indicator--560ba541-ca38-4d9f-8fa1-4e5a950d210b",
                "indicator--560ba541-4af4-4f75-a93f-4b6c950d210b",
                "indicator--560ba541-3638-4b5b-ac7a-40df950d210b",
                "indicator--560ba541-48e4-4564-b63b-4c4c950d210b",
                "indicator--560ba542-0bd8-46f0-8c03-4d9e950d210b",
                "indicator--560ba542-a934-4ab6-ba45-4ec2950d210b",
                "indicator--560ba543-4ed8-468d-9730-4c7f950d210b",
                "indicator--560ba543-33f4-4b29-8ef0-4e3e950d210b",
                "indicator--560ba543-c150-4227-b949-4da2950d210b",
                "indicator--560ba544-a6a0-4d5f-b194-4df1950d210b",
                "indicator--560ba544-51d4-41b6-af83-41f6950d210b",
                "indicator--560ba544-5b50-4e93-bfc1-4328950d210b",
                "indicator--560ba544-6f90-415b-875b-4b0b950d210b",
                "indicator--560ba545-6840-4fee-86cf-4658950d210b",
                "indicator--560ba545-9198-43a1-a1ba-4d6d950d210b",
                "indicator--560ba545-24f8-43f5-b309-4804950d210b",
                "indicator--560ba545-b47c-4ebb-b37f-4cd7950d210b",
                "indicator--560ba545-57e8-47b2-81a4-4874950d210b",
                "indicator--560ba546-73bc-48be-b958-410d950d210b",
                "indicator--560ba546-fc84-4dfd-9ffd-487b950d210b",
                "indicator--560ba547-b458-4086-85de-474f950d210b",
                "indicator--560ba547-5a14-4a20-8f65-4bde950d210b",
                "indicator--560ba547-e904-4e1e-9a5d-4bb6950d210b",
                "indicator--560ba547-2b94-42d8-a1b2-4fd0950d210b",
                "indicator--560ba548-f30c-4f40-92da-4fcb950d210b",
                "indicator--560ba548-4374-4cf7-80b6-4fe3950d210b",
                "indicator--560ba548-fef8-4e48-a8cc-48ee950d210b",
                "indicator--560ba548-6b88-43af-a8a0-4e92950d210b",
                "indicator--560ba548-e458-4397-aa74-4847950d210b",
                "indicator--560ba549-5294-441f-b75e-4230950d210b",
                "indicator--560ba549-0e94-4657-9658-4f0f950d210b",
                "indicator--560ba549-baf4-4f61-8ea5-46c6950d210b",
                "indicator--560ba549-de9c-4c91-b92e-4460950d210b",
                "indicator--560ba549-d448-432a-84d3-4bd6950d210b",
                "indicator--560ba54a-5e88-4b53-8a3d-4788950d210b",
                "indicator--560ba54a-fc34-4346-afe1-456d950d210b",
                "indicator--560ba54a-31d4-45b8-8572-4476950d210b",
                "indicator--560ba54a-e388-4a29-bee0-4bfc950d210b",
                "indicator--560ba54a-4b44-4f58-83f4-4b9b950d210b",
                "indicator--560ba54b-a8e0-4a81-acdb-4c7c950d210b",
                "indicator--560ba54b-c48c-43a8-9a2f-4c73950d210b",
                "indicator--560ba54b-84e0-481e-a24c-4574950d210b",
                "indicator--560ba54b-90b4-469a-90c1-4b41950d210b",
                "indicator--560ba54b-d228-4886-b583-45b0950d210b",
                "indicator--560ba54c-c754-4332-ba4e-44d2950d210b",
                "indicator--560ba54c-8de0-4cff-90cd-464f950d210b",
                "indicator--560ba54c-3fb0-408b-8332-422f950d210b",
                "indicator--560ba54c-1388-4623-afe4-4a1c950d210b",
                "indicator--560ba54d-6c38-487c-9521-4a7e950d210b",
                "indicator--560ba54d-7c98-4616-a38d-4128950d210b",
                "indicator--560ba54d-a698-4a9c-af51-436c950d210b",
                "indicator--560ba54e-cb70-432a-a81d-4d9f950d210b",
                "indicator--560ba54e-d2f8-4374-bd65-4285950d210b",
                "indicator--560ba54e-bd74-4ade-80aa-4a55950d210b",
                "indicator--560ba54f-5f88-4e60-b230-45fc950d210b",
                "indicator--560ba54f-266c-4a9b-9a51-44be950d210b",
                "indicator--560ba54f-95e4-44a0-90ab-4b97950d210b",
                "indicator--560ba550-62b8-4b17-ae63-4c31950d210b",
                "indicator--560ba550-08b4-4a7b-b998-4b8a950d210b",
                "indicator--560ba550-2d00-474d-8452-4d00950d210b",
                "indicator--560ba550-fa30-4e52-93dd-4229950d210b",
                "indicator--560ba551-b928-422d-988a-4a7f950d210b",
                "indicator--560ba551-9780-419b-9709-4e1e950d210b",
                "indicator--560ba551-6f34-4043-a46d-43f6950d210b",
                "indicator--560ba551-f1e4-4ece-99d4-4d54950d210b",
                "indicator--560ba551-00f4-4214-94aa-4c1c950d210b",
                "indicator--560ba552-3e1c-4a22-bcb1-48cd950d210b",
                "indicator--560ba552-0ed8-4372-a5c2-4b43950d210b",
                "indicator--560ba552-ac78-43a1-b35f-4ccb950d210b",
                "indicator--560ba552-d7a0-4fab-a4cf-4a34950d210b",
                "indicator--560ba553-fff8-4e9d-855e-42f7950d210b",
                "indicator--560ba553-ef9c-4460-8212-4711950d210b",
                "indicator--560ba553-0dbc-4aff-bba4-41ce950d210b",
                "indicator--560ba553-8a64-4ebc-8bbb-4a77950d210b",
                "indicator--560ba553-15e4-401e-bde6-4579950d210b",
                "indicator--560ba553-a5b0-48ed-aa11-4a93950d210b",
                "indicator--560ba554-bb14-4b90-bfc4-40a9950d210b",
                "indicator--560ba554-394c-4891-a3a5-49ff950d210b",
                "indicator--560ba554-ced0-4144-80d2-4e0e950d210b",
                "indicator--560ba554-d8a0-48b9-9530-467a950d210b",
                "indicator--560ba554-fcf8-4e24-825c-4450950d210b",
                "indicator--560ba555-8494-43f9-b81a-4115950d210b",
                "indicator--560ba555-5be0-43b3-a4d1-47ca950d210b",
                "indicator--560ba555-97b0-4f7f-99aa-457f950d210b",
                "indicator--560ba555-b160-4c1f-85d9-4035950d210b",
                "indicator--560ba555-bc5c-41a1-95b9-4812950d210b",
                "indicator--560ba555-4240-4458-9f77-4cbe950d210b",
                "indicator--560ba556-8f58-4b3f-b30d-4da6950d210b",
                "indicator--560ba556-14b4-4a3b-9ed4-48aa950d210b",
                "indicator--560ba556-c14c-4430-85ae-4179950d210b",
                "indicator--560ba557-cd74-4aa2-8ce9-4c09950d210b",
                "indicator--560ba557-8be0-4c71-9a91-4fae950d210b",
                "indicator--560ba557-50cc-423f-8d16-4abf950d210b",
                "indicator--560ba557-0294-4c9d-83e8-4827950d210b",
                "indicator--560ba557-f74c-4562-8c52-4979950d210b",
                "indicator--560ba558-00dc-4f68-8b7e-4d12950d210b",
                "indicator--560ba558-8960-492a-a643-47fa950d210b",
                "indicator--560ba558-6ad0-4ef9-8b3d-4409950d210b",
                "indicator--560ba558-dba8-4cdb-b734-4331950d210b",
                "indicator--560ba559-bf20-4bdf-829a-434d950d210b",
                "indicator--560ba559-f660-4d7c-b8af-4152950d210b",
                "indicator--560ba559-1e60-4914-998a-480f950d210b",
                "indicator--560ba55a-a900-4f6f-ac0f-4a57950d210b",
                "indicator--560ba55a-8a9c-4b8e-8f90-448b950d210b",
                "indicator--560ba55a-879c-42e9-9462-4a75950d210b",
                "indicator--560ba55b-a278-4aa3-8825-42ab950d210b",
                "indicator--560ba55b-29c8-4187-a4a8-400c950d210b",
                "indicator--560ba55b-3628-4963-830c-43d0950d210b",
                "indicator--560ba55b-ddd0-42e3-abed-438f950d210b",
                "indicator--560ba55c-f948-4f12-ae60-43b1950d210b",
                "indicator--560ba55c-5fd0-49ef-833b-41a2950d210b",
                "indicator--560ba55d-62c4-469d-9e74-4817950d210b",
                "indicator--560ba55d-82c8-4650-ba9e-4ea1950d210b",
                "indicator--560ba55d-cd8c-4e24-95ef-4eb6950d210b",
                "indicator--560ba55e-15e4-48e4-8f62-4016950d210b",
                "indicator--560ba55e-1fd0-403d-b6f6-441a950d210b",
                "indicator--560ba55e-e3c8-48f4-9637-4bd0950d210b",
                "indicator--560ba55f-4c18-4aa6-a4e4-4850950d210b",
                "indicator--560ba55f-04e0-410d-bc85-492a950d210b",
                "indicator--560ba55f-eedc-404d-a251-4d9e950d210b",
                "indicator--560ba560-b7b4-493f-9989-47de950d210b",
                "indicator--560ba560-fd1c-4535-9e12-4692950d210b",
                "indicator--560ba561-08a0-4917-ab46-4a12950d210b",
                "indicator--560ba561-7ba0-4446-a7d1-4c85950d210b",
                "indicator--560ba561-ee28-43dd-acda-461e950d210b",
                "indicator--560ba562-1f48-41c6-aa11-4dd0950d210b",
                "indicator--560ba562-fc40-4718-9406-4ce5950d210b",
                "indicator--560ba562-4b18-4485-9eba-499c950d210b",
                "indicator--560ba563-03e8-4d1d-8329-43e2950d210b",
                "indicator--560ba563-c658-4c05-97fd-4511950d210b",
                "indicator--560ba564-252c-42d8-849a-4653950d210b",
                "indicator--560ba564-d2a8-40a8-b1e9-4734950d210b",
                "indicator--560ba564-a904-4599-97ed-4765950d210b",
                "indicator--560ba565-1934-40fc-8eae-4f9a950d210b",
                "indicator--560ba565-fcd8-4c5f-b21c-41a9950d210b",
                "indicator--560ba565-dddc-4ff1-9262-4ff8950d210b",
                "indicator--560ba566-edc0-440e-a508-418c950d210b",
                "indicator--560ba566-260c-46c5-aff5-458a950d210b",
                "indicator--560ba566-6874-41a6-bbea-4ad2950d210b",
                "indicator--560ba567-aa70-4b38-9d53-40da950d210b",
                "indicator--560ba567-0798-452a-802f-4475950d210b",
                "indicator--560ba568-6084-4ce1-9386-4670950d210b",
                "indicator--560ba568-ddcc-4c41-a946-4d4f950d210b",
                "indicator--560ba568-3cdc-406c-b8fa-4832950d210b",
                "indicator--560ba569-365c-4214-b979-475d950d210b",
                "indicator--560ba569-d3c0-4b1e-88e0-459d950d210b",
                "indicator--560ba569-8158-4235-a56f-4e07950d210b",
                "indicator--560ba56a-1064-4194-afb4-4473950d210b",
                "indicator--560ba56a-de78-40c6-a600-452b950d210b",
                "indicator--560ba56a-695c-49b8-8af3-442f950d210b",
                "indicator--560ba56b-4f28-4bc8-b36e-497d950d210b",
                "indicator--560ba56b-fff8-42fb-9d0f-4e58950d210b",
                "indicator--560ba56c-db30-45a9-b571-47f8950d210b",
                "indicator--560ba56c-96b0-4414-98f8-45ba950d210b",
                "indicator--560ba56c-2778-4e87-8f99-4d79950d210b",
                "indicator--560ba56d-e52c-467e-8b9b-4ad6950d210b",
                "indicator--560ba56d-7090-4b97-b161-4b16950d210b",
                "indicator--560ba56d-f4d8-40ca-92c7-42a8950d210b",
                "indicator--560ba56e-afec-455f-91ea-46a3950d210b",
                "indicator--560ba56e-b048-45b9-8a08-418a950d210b",
                "indicator--560ba56e-fa5c-42bf-9e51-47dd950d210b",
                "indicator--560ba56f-c89c-45ab-87be-4efa950d210b",
                "indicator--560ba56f-4fe0-4463-b779-4bfd950d210b",
                "indicator--560ba570-f538-404c-a9ad-42a1950d210b",
                "indicator--560ba570-f7c8-4312-84fb-4bc5950d210b",
                "indicator--560ba570-6fe4-4d8d-9e67-457b950d210b",
                "indicator--560ba571-3f00-4d8e-a41b-4e9d950d210b",
                "indicator--560ba571-dd74-4125-8811-4a59950d210b",
                "indicator--560ba571-7940-4e44-88b7-4394950d210b",
                "indicator--560ba572-08f0-4ead-b85b-4197950d210b",
                "indicator--560ba572-49b0-4888-8d20-4069950d210b",
                "indicator--560ba572-cd84-42b2-a383-4343950d210b",
                "indicator--560ba573-0280-40a1-b324-4db1950d210b",
                "indicator--560ba573-6088-4f23-8ebf-471f950d210b",
                "indicator--560ba574-dacc-4fb2-9dc1-41fd950d210b",
                "indicator--560ba574-35a4-46fd-b490-4ac3950d210b",
                "indicator--560ba574-1a94-4586-9978-46c3950d210b",
                "indicator--560ba575-4d9c-4934-a327-4342950d210b",
                "indicator--560ba575-847c-4a1d-a18e-4a27950d210b",
                "indicator--560ba575-4e30-41b7-ba7e-4c39950d210b",
                "indicator--560ba576-4728-49b3-90a6-4521950d210b",
                "indicator--560ba576-6768-4680-86cc-4a94950d210b",
                "indicator--560ba577-02b4-4cfc-9ffb-4e15950d210b",
                "indicator--560ba577-d890-488b-b351-4b27950d210b",
                "indicator--560ba577-77e0-463c-9e72-4f79950d210b",
                "indicator--560ba578-eff0-4b3a-8c6b-4d84950d210b",
                "indicator--560ba578-03b0-430f-bb92-497d950d210b",
                "indicator--560ba578-309c-494f-b0b6-4712950d210b",
                "indicator--560ba579-3348-4d78-bb6f-4ae4950d210b",
                "indicator--560ba579-a870-4aab-8331-4e3a950d210b",
                "indicator--560ba579-1d6c-4e14-841b-4b19950d210b",
                "indicator--560ba57a-f2a4-402a-b973-47c8950d210b",
                "indicator--560ba57a-5b14-4f71-87f3-42e8950d210b",
                "indicator--560ba57b-0a44-41b6-a60d-4676950d210b",
                "indicator--560ba57b-0ca8-4a4a-a02e-4012950d210b",
                "indicator--560ba57b-c1a4-4c13-bd4f-4d92950d210b",
                "indicator--560ba57c-51a8-4119-ac48-4aab950d210b",
                "indicator--560ba57c-da08-47f0-99ba-4952950d210b",
                "indicator--560ba57c-07a4-48df-a2d8-4ebc950d210b",
                "indicator--560ba57d-afe0-442a-8676-4521950d210b",
                "indicator--560ba57d-7abc-4cb9-ae9c-4b7a950d210b",
                "indicator--560ba57d-dc70-4f57-b698-47fd950d210b",
                "indicator--560ba57e-5040-49db-9c28-4189950d210b",
                "indicator--560ba57e-e214-4fb8-a8f6-4f37950d210b",
                "indicator--560ba57f-6178-498f-8ede-4bd9950d210b",
                "indicator--560ba57f-fba4-42a9-9050-4450950d210b",
                "indicator--560ba57f-edf4-413b-b6e3-4e74950d210b",
                "indicator--560ba580-52fc-4779-b419-4471950d210b",
                "indicator--560ba580-1bf8-45f9-ae1e-4cd5950d210b",
                "indicator--560ba580-ad34-4041-8871-4b47950d210b",
                "indicator--560ba581-2e5c-44b1-af1a-4bec950d210b",
                "indicator--560ba581-3cc8-433a-982f-4cf8950d210b",
                "indicator--560ba581-54dc-4ce9-b8fe-4d01950d210b",
                "indicator--560ba582-b270-44b0-bdbb-471d950d210b",
                "indicator--560ba582-40d0-44d8-90ab-4039950d210b",
                "indicator--560ba583-7fec-467c-a8bf-4185950d210b",
                "indicator--560ba583-0c28-49d1-80b8-421f950d210b",
                "indicator--560ba583-08f8-4b34-abc2-48e7950d210b",
                "indicator--560ba584-9618-4d2d-813c-43f1950d210b",
                "indicator--560ba584-bc08-4e54-8ed9-44b6950d210b",
                "indicator--560ba584-011c-46ad-9ade-4f67950d210b",
                "indicator--560ba585-a060-4d5d-93b9-48b8950d210b",
                "indicator--560ba585-b5b0-47a8-a24c-4c09950d210b",
                "indicator--560ba586-6674-44ce-afa9-43bd950d210b",
                "indicator--560ba586-86cc-4497-9647-4010950d210b",
                "indicator--560ba586-3a74-4b94-90ee-401e950d210b",
                "indicator--560ba587-e418-4653-9a75-4208950d210b",
                "indicator--560ba587-7ca8-4be7-98a1-4011950d210b",
                "indicator--560ba587-4950-42ef-8da6-469e950d210b",
                "indicator--560ba588-0d58-4237-8fbf-4adf950d210b",
                "indicator--560ba588-6f78-48d9-8108-4307950d210b",
                "indicator--560ba588-829c-48e0-9b35-4ec7950d210b",
                "indicator--560ba589-0e08-47a1-a1aa-403d950d210b",
                "indicator--560ba589-232c-47ef-b51b-494f950d210b",
                "indicator--560ba58a-6e08-4690-96dd-4950950d210b",
                "indicator--560ba58a-84a8-4db3-9bfa-48b7950d210b",
                "indicator--560ba58a-f7e4-4e7b-9477-4877950d210b",
                "indicator--560ba58b-c7b4-41df-8446-4eb4950d210b",
                "indicator--560ba58b-7d20-4df1-b8ad-4115950d210b",
                "indicator--560ba58b-f5ec-46c6-b144-4d28950d210b",
                "indicator--560ba58c-a6bc-4c37-b9f7-42f1950d210b",
                "indicator--560ba58c-753c-4c65-9352-4888950d210b",
                "indicator--560ba58c-de14-4e12-b272-41f8950d210b",
                "indicator--560ba58d-f894-4aa4-9f79-49fe950d210b",
                "indicator--560ba58d-4b94-4d4a-a034-4267950d210b",
                "indicator--560ba58e-07f8-4d17-b5ab-432e950d210b",
                "indicator--560ba58e-3d2c-4a98-82e4-4a0e950d210b",
                "indicator--560ba58e-b3c0-4f9b-b89a-4502950d210b",
                "indicator--560ba58f-d854-46cc-8ca4-4f7d950d210b",
                "indicator--560ba58f-4e7c-4c4d-ab3c-4fd3950d210b",
                "indicator--560ba58f-d1f0-4337-bd1a-4c7e950d210b",
                "indicator--560ba590-be08-402f-b13a-475e950d210b",
                "indicator--560ba590-dbfc-4da9-a707-4fbf950d210b",
                "indicator--560ba590-45ac-4c46-bbe3-410c950d210b",
                "indicator--560ba591-512c-4e15-a58a-4d43950d210b",
                "indicator--560ba591-fa0c-4ab8-9a3a-4e7d950d210b",
                "indicator--560ba592-18fc-46b4-be80-4ecb950d210b",
                "indicator--560ba592-bdb0-4115-bd31-42e6950d210b",
                "indicator--560ba592-cf10-4c14-9a61-4437950d210b",
                "indicator--560ba593-129c-422b-a607-432c950d210b",
                "indicator--560ba593-af0c-4268-93b5-4c0b950d210b",
                "indicator--560ba593-be5c-45f7-b46d-4a92950d210b",
                "indicator--560ba594-0a38-466a-9132-43de950d210b",
                "indicator--560ba594-d1bc-44de-b399-4882950d210b",
                "indicator--560ba594-7d34-4a46-94e6-4aa4950d210b",
                "indicator--560ba595-1804-494a-b5bb-481b950d210b",
                "indicator--560ba595-85a8-49a9-b181-4b03950d210b",
                "indicator--560ba596-10a8-4289-829d-4176950d210b",
                "indicator--560ba596-177c-4e6d-8679-42a8950d210b",
                "indicator--560ba596-a2c8-479e-ad7a-445b950d210b",
                "indicator--560ba597-94d8-4bf6-8c4f-45e3950d210b",
                "indicator--560ba597-e3f0-433b-97fc-4a88950d210b",
                "indicator--560ba597-c070-4c79-b5c4-479e950d210b",
                "indicator--560ba598-50f4-437d-b974-4982950d210b",
                "indicator--560ba598-17f8-4e79-9e04-4fc6950d210b",
                "indicator--560ba599-0408-4608-b10e-4a28950d210b",
                "indicator--560ba599-68c0-44ea-8876-41f5950d210b",
                "indicator--560ba599-fbd0-4d2e-9dba-41d8950d210b",
                "indicator--560ba59a-12a8-4060-bdc7-44df950d210b",
                "indicator--560ba59a-4550-43e6-9025-4d73950d210b",
                "indicator--560ba59a-cae4-4f85-ac91-47d6950d210b",
                "indicator--560ba59b-ea20-4d13-aa10-47e7950d210b",
                "indicator--560ba59b-0cd0-44f6-a6ea-41d8950d210b",
                "indicator--560ba59c-f85c-47e5-9dec-4307950d210b",
                "indicator--560ba59c-a1f8-4a05-9df2-4047950d210b",
                "indicator--560ba59c-57cc-4a1a-ad9a-4724950d210b",
                "indicator--560ba59d-74dc-4615-b6c7-48fe950d210b",
                "indicator--560ba59d-059c-4bc7-b759-46b8950d210b",
                "indicator--560ba59d-e18c-4a2c-8013-4aeb950d210b",
                "indicator--560ba59e-9724-483a-8025-47ab950d210b",
                "indicator--560ba59e-4b60-45c0-884f-40ed950d210b",
                "indicator--560ba59e-c37c-45cb-ae57-4801950d210b",
                "indicator--560ba59f-d928-4fa1-bd58-4700950d210b",
                "indicator--560ba59f-eae4-4130-9f06-4870950d210b",
                "indicator--560ba5a0-7428-4045-8a17-4ae6950d210b",
                "indicator--560ba5a0-8860-4d06-bfb1-4f49950d210b",
                "indicator--560ba5a0-9f30-4bb2-a7d9-45a1950d210b",
                "indicator--560ba5a1-e158-4913-ba25-4beb950d210b",
                "indicator--560ba5a1-a614-47d2-9365-4b22950d210b",
                "indicator--560ba5a1-2e80-493e-9a23-4e1c950d210b",
                "indicator--560ba5a2-1b58-42fd-873e-4ec7950d210b",
                "indicator--560ba5a2-86b4-4fe9-89c7-4a00950d210b",
                "indicator--560ba5a3-a834-4dba-aabb-44a6950d210b",
                "indicator--560ba5a3-a644-4185-9f2b-437e950d210b",
                "indicator--560ba5a3-6d5c-47a3-b690-4dbb950d210b",
                "indicator--560ba5a4-6ef8-417a-8458-4ea2950d210b",
                "indicator--560ba5a4-aee8-47f7-98bc-4f56950d210b",
                "indicator--560ba5a4-0538-4072-a03a-42b8950d210b",
                "indicator--560ba5a5-4fb4-449d-b37e-4b07950d210b",
                "indicator--560ba5a5-71ac-4978-a573-4c61950d210b",
                "indicator--560ba5a5-68f4-401e-bdc0-497c950d210b",
                "indicator--560ba5a6-8e30-49d9-99b7-499b950d210b",
                "indicator--560ba5a6-8b40-46d9-b2e5-45cf950d210b",
                "indicator--560ba5a7-6d28-4fd0-ae7c-443a950d210b",
                "indicator--560ba5a7-0998-409d-9f7a-4e2f950d210b",
                "indicator--560ba5a7-dae0-4882-8f47-4260950d210b",
                "indicator--560ba5a8-75c8-4bc4-91d7-472a950d210b",
                "indicator--560ba5a8-11a0-4b3b-bef8-4a45950d210b",
                "indicator--560ba5a8-69c8-492d-9474-4c6b950d210b",
                "indicator--560ba5a9-b038-4a4f-a2de-4cf0950d210b",
                "indicator--560ba5a9-e23c-468e-bf43-4f44950d210b",
                "indicator--560ba5aa-dcc4-465b-b36a-43f7950d210b",
                "indicator--560ba5aa-2df4-4af3-8cde-4f5e950d210b",
                "indicator--560ba5aa-bbb8-4187-b53f-4054950d210b",
                "indicator--560ba5ab-4aa8-4424-ba7d-46c1950d210b",
                "indicator--560ba5ab-419c-4826-9b92-4503950d210b",
                "indicator--560ba5ab-5960-4b04-85b5-465f950d210b",
                "indicator--560ba5ac-696c-48a6-8744-4c0d950d210b",
                "indicator--560ba5ac-87a8-429e-a9c7-4897950d210b",
                "indicator--560ba5ac-db30-496a-978f-46c7950d210b",
                "indicator--560ba5ad-cd60-4559-bd6d-48bb950d210b",
                "indicator--560ba5ad-6374-4a9c-9ee2-4f42950d210b",
                "indicator--560ba5ae-0e28-4dc2-9d51-40a8950d210b",
                "indicator--560ba5ae-09b8-4467-94b9-4755950d210b",
                "indicator--560ba5ae-4828-44ff-985b-4c4b950d210b",
                "indicator--560ba5af-e0a4-4d09-b131-447d950d210b",
                "indicator--560ba5af-c29c-4103-bd29-4b1c950d210b",
                "indicator--560ba5af-56e0-44e2-94b8-4868950d210b",
                "indicator--560ba5b0-c83c-45c8-b463-4125950d210b",
                "indicator--560ba5b0-da88-4bf3-9ba4-43ec950d210b",
                "indicator--560ba5b0-0430-4156-a73c-4444950d210b",
                "indicator--560ba5b1-52c0-48a5-b15c-45a8950d210b",
                "indicator--560ba5b1-1e60-409a-b807-4f44950d210b",
                "indicator--560ba5b2-984c-477c-8cc6-4685950d210b",
                "indicator--560ba5b2-6f38-4e54-bf8a-46b6950d210b",
                "indicator--560ba5b2-3ac8-4e17-aa17-4d5c950d210b",
                "indicator--560ba5b3-897c-4702-ac46-45da950d210b",
                "indicator--560ba5b3-f7f8-4cff-9652-4048950d210b",
                "indicator--560ba5b3-b934-4e8c-9f9d-43cd950d210b",
                "indicator--560ba5b4-7b14-4f00-a43b-40f2950d210b",
                "indicator--560ba5b4-6470-47fe-9573-4d15950d210b",
                "indicator--560ba5b4-16f0-41b7-bdd3-4efa950d210b",
                "indicator--560ba5b5-f614-47d8-b5af-4c9d950d210b",
                "indicator--560ba5b5-8ec8-49c5-b066-47f0950d210b",
                "indicator--560ba5b6-3ee4-4f3a-9420-4354950d210b",
                "indicator--560ba5b6-124c-4f74-9049-4d87950d210b",
                "indicator--560ba5b6-0d58-4253-9472-4322950d210b",
                "indicator--560ba5b7-de94-4d68-a092-4088950d210b",
                "indicator--560ba5b7-cf90-421f-b296-451d950d210b",
                "indicator--560ba5b7-98ac-4985-ac3f-42b2950d210b",
                "indicator--560ba5b8-ac78-499e-ace1-4127950d210b",
                "indicator--560ba5b8-4dbc-4876-b930-4518950d210b",
                "indicator--560ba5b9-d860-45f1-85cb-4575950d210b",
                "indicator--560ba5b9-7070-45fe-a35e-4174950d210b",
                "indicator--560ba5b9-9310-40f4-a5a7-4d69950d210b",
                "indicator--560ba5ba-7114-4732-b327-4222950d210b",
                "indicator--560ba5ba-08d4-4951-acdd-45d7950d210b",
                "indicator--560ba5ba-6510-4c6a-ba36-41be950d210b",
                "indicator--560ba5bb-b024-4f8e-8cfc-496d950d210b",
                "indicator--560ba5bb-a370-4fba-b265-4e96950d210b",
                "indicator--560ba5bb-7820-49b8-90b5-4fa4950d210b",
                "indicator--560ba5bc-0b84-47d2-ba68-4686950d210b",
                "indicator--560ba5bc-2bcc-4dfb-b946-4024950d210b",
                "indicator--560ba5bd-df90-4e13-9faa-4526950d210b",
                "indicator--560ba5bd-9204-4971-9ef3-4e50950d210b",
                "indicator--560ba5bd-1dcc-4583-986b-4dc9950d210b",
                "indicator--560ba5be-48d0-43ca-aced-453d950d210b",
                "indicator--560ba5be-1368-45bc-bd87-41f8950d210b",
                "indicator--560ba5be-c33c-4b95-ba52-4642950d210b",
                "indicator--560ba5bf-d12c-46b7-a6a0-42d5950d210b",
                "indicator--560ba5bf-04ac-458e-8a28-47a6950d210b",
                "indicator--560ba5c0-d594-4c11-9469-4386950d210b",
                "indicator--560ba5c0-a938-46d4-8f2f-48bc950d210b",
                "indicator--560ba5c0-2bf0-4e3d-933f-44a9950d210b",
                "indicator--560ba5c1-9088-4288-993e-4603950d210b",
                "indicator--560ba5c1-3c64-458d-8b3c-4f7d950d210b",
                "indicator--560ba5c1-e428-4589-87d3-4f16950d210b",
                "indicator--560ba5c2-32d8-4465-b24e-4820950d210b",
                "indicator--560ba5c2-467c-462e-b963-42da950d210b",
                "indicator--560ba5c3-28c0-4052-9275-4683950d210b",
                "indicator--560ba5c3-672c-458d-b7f1-4119950d210b",
                "indicator--560ba5c3-0150-49c0-a6e6-48ff950d210b",
                "indicator--560ba5c4-2cb8-4855-95b7-491a950d210b",
                "indicator--560ba5c4-e664-4852-bcc5-4c94950d210b",
                "indicator--560ba5c4-269c-4348-a85d-41c0950d210b",
                "indicator--560ba5c5-3080-481a-a14b-4032950d210b",
                "indicator--560ba5c5-dba4-4ece-b0fb-4c24950d210b",
                "indicator--560ba5c5-1918-446f-9f7b-4e09950d210b",
                "indicator--560ba5c6-bb6c-48cc-adda-4514950d210b",
                "indicator--560ba5c6-497c-49cc-bc2a-4569950d210b",
                "indicator--560ba5c7-5a94-48cb-b58b-4943950d210b",
                "indicator--560ba5c7-b304-4089-83f7-480c950d210b",
                "indicator--560ba5c7-f210-40c0-a2a5-4143950d210b",
                "indicator--560ba5c8-e098-45e7-90a8-43e1950d210b",
                "indicator--560ba5c8-32c8-49d4-ac57-4707950d210b",
                "indicator--560ba5c8-2298-402a-aae9-45d6950d210b",
                "indicator--560ba5c9-d764-48a4-bab7-47c0950d210b",
                "indicator--560ba5c9-0618-403f-9079-49ea950d210b",
                "indicator--560ba5ca-3290-4f3b-b3c4-4cdd950d210b",
                "indicator--560ba5ca-7f18-44b8-81ad-4a58950d210b",
                "indicator--560ba5ca-7d1c-4e5d-8068-4520950d210b",
                "indicator--560ba5cb-e980-4bb9-bbda-4012950d210b",
                "indicator--560ba5cb-fd04-4244-bfc3-42db950d210b",
                "indicator--560ba5cb-34d8-473d-af2c-4fdf950d210b",
                "indicator--560ba5cc-665c-425d-91d9-4f43950d210b",
                "indicator--560ba5cc-ccc0-4cba-b8b9-4e99950d210b",
                "indicator--560ba5cc-d828-44cd-9243-4fda950d210b",
                "indicator--560ba5cd-e990-4563-9af9-4bc7950d210b",
                "indicator--560ba5cd-6b28-4287-9fd2-4759950d210b",
                "indicator--560ba5ce-99b0-4568-910a-4bc7950d210b",
                "indicator--560ba5ce-e240-4d0e-a30b-4ea4950d210b",
                "indicator--560ba5ce-e034-49c1-a935-4712950d210b",
                "indicator--560ba5cf-dfd0-4f8b-9e8e-47db950d210b",
                "indicator--560ba5cf-db34-42f2-a653-4e98950d210b",
                "indicator--560ba5cf-2428-402c-b6b6-4875950d210b",
                "indicator--560ba5d0-378c-4aba-8cc0-4c32950d210b",
                "indicator--560ba5d0-7fc0-4ba5-9ced-4c43950d210b",
                "indicator--560ba5d0-d46c-4912-8666-4a83950d210b",
                "indicator--560ba5d1-e964-485e-a5fb-4240950d210b",
                "indicator--560ba5d1-7c18-401a-8627-4058950d210b",
                "indicator--560ba5d2-f1a4-4a99-a2f7-4f3b950d210b",
                "indicator--560ba5d2-45ec-4275-ab5a-45b1950d210b",
                "indicator--560ba5d2-8b2c-40ba-bae6-4370950d210b",
                "indicator--560ba5d3-f610-468b-9ae1-4ac8950d210b",
                "indicator--560ba5d3-0728-4629-b1ba-4981950d210b",
                "indicator--560ba5d3-8730-47b3-8e75-489b950d210b",
                "indicator--560ba5d4-5850-4db5-a622-4d71950d210b",
                "indicator--560ba5d4-aa48-4b3e-8739-42ac950d210b",
                "indicator--560ba5d4-e6f8-4c5b-ba2e-408b950d210b",
                "indicator--560ba5d5-6d44-4320-8e21-4c6c950d210b",
                "indicator--560ba5d5-bc90-4c37-b214-48d4950d210b",
                "indicator--560ba5d6-b9d4-4b71-a341-4c9a950d210b",
                "indicator--560ba5d6-32b4-4d5d-8b62-447a950d210b",
                "indicator--560ba5d6-5328-46c4-b361-4df8950d210b",
                "indicator--560ba5d7-67b8-45da-ba7d-43af950d210b",
                "indicator--560ba5d7-4de8-4dcf-83ea-4f5e950d210b",
                "indicator--560ba5d7-f130-412f-9f09-4a72950d210b",
                "indicator--560ba5d8-4e14-4a5c-8747-4a7e950d210b",
                "indicator--560ba5d8-d9d0-4004-a51f-4799950d210b",
                "indicator--560ba5d8-d1a4-43fa-9100-497f950d210b",
                "indicator--560ba5d9-281c-4a1e-945d-4636950d210b",
                "indicator--560ba5d9-79c8-4111-b402-4d09950d210b",
                "indicator--560ba5d9-da8c-4f7b-8ed9-4fc2950d210b",
                "indicator--560ba5da-b640-4922-82e0-404e950d210b",
                "indicator--560ba5da-6fc4-416a-a05d-46d0950d210b",
                "indicator--560ba5db-0cd8-444e-86a1-4d41950d210b",
                "indicator--560ba5db-dadc-49ba-be5f-49e3950d210b",
                "indicator--560ba5db-1008-47b0-946f-4cb9950d210b",
                "indicator--560ba5dc-8ee4-482b-863f-4d8e950d210b",
                "indicator--560ba5dc-d984-4ca9-93b2-430b950d210b",
                "indicator--560ba5dc-3f3c-4ed6-a8f6-4f2f950d210b",
                "indicator--560ba5dd-ca84-405e-b9bb-4a19950d210b",
                "indicator--560ba5dd-abb4-48b3-a1c9-4cd2950d210b",
                "indicator--560ba5de-f9cc-496e-b3c9-4c31950d210b",
                "indicator--560ba5de-7634-4406-a046-402f950d210b",
                "indicator--560ba5de-d99c-4b83-84c9-4244950d210b",
                "indicator--560ba5de-a938-4792-b728-4ec0950d210b",
                "indicator--560ba5de-3860-44f1-9ca7-4e2e950d210b",
                "indicator--560ba5df-68c0-4ed3-8bda-4e1f950d210b",
                "indicator--560ba5df-515c-4641-ba00-4f13950d210b",
                "indicator--560ba5df-2d94-4640-9016-48e5950d210b",
                "indicator--560ba5df-1694-4e74-89f4-4731950d210b",
                "indicator--560ba5df-5ccc-4b78-8c6a-4e78950d210b",
                "indicator--560ba5df-7464-46a5-a9dd-4717950d210b",
                "indicator--560ba5e0-0e34-426a-a30f-4bad950d210b",
                "indicator--560ba5e0-373c-49b8-a747-480d950d210b",
                "indicator--560ba5e0-0190-412f-addb-4d24950d210b",
                "indicator--560ba5e0-c144-4e7d-b96a-493e950d210b",
                "indicator--560ba5e0-32fc-4248-82bf-4925950d210b",
                "indicator--560ba5e1-6954-458c-822e-4319950d210b",
                "indicator--560ba5e1-4974-4778-965e-4bc8950d210b",
                "indicator--560ba5e1-dd8c-455d-8de8-4821950d210b",
                "indicator--560ba5e1-5120-4c8c-b997-43a9950d210b",
                "indicator--560ba5e2-3c88-41d9-9940-4dbc950d210b",
                "indicator--560ba5e2-a5e8-407b-a619-4c9e950d210b",
                "indicator--560ba5e2-7180-41cf-b978-4d7f950d210b",
                "indicator--560ba5e3-74cc-4246-b777-4eb9950d210b",
                "indicator--560ba5e3-fe84-4695-bd6e-44b7950d210b",
                "indicator--560ba5e3-33f4-4c23-9778-4e5d950d210b",
                "indicator--560ba5e4-483c-4eb3-8632-463d950d210b",
                "indicator--560ba5e4-7310-4322-9746-4b3b950d210b",
                "indicator--560ba5e5-91b4-44c9-8382-45cb950d210b",
                "indicator--560ba5e5-33c8-4bbd-93a6-4c24950d210b",
                "indicator--560ba5e5-2b94-41a0-82a6-42a2950d210b",
                "indicator--560ba5e6-be2c-458d-a40f-48c5950d210b",
                "indicator--560ba5e6-76cc-41cd-8e59-4b58950d210b",
                "indicator--560ba5e6-76d4-4a36-99a9-499c950d210b",
                "indicator--560ba5e7-324c-42ec-9223-4231950d210b",
                "indicator--560ba5e7-d47c-4dfb-9dca-46fa950d210b",
                "indicator--560ba5e7-7d68-4c62-bdbd-43da950d210b",
                "indicator--560ba5e8-6ce4-415a-b27c-47d0950d210b",
                "indicator--560ba5e8-5ce0-48f4-9071-4b7b950d210b",
                "indicator--560ba5e9-518c-41b7-b71d-4adf950d210b",
                "indicator--560ba5e9-ba00-494c-9f30-46a7950d210b",
                "indicator--560ba5e9-139c-4377-a163-4454950d210b",
                "indicator--560ba5e9-1dac-491b-8e90-407a950d210b",
                "indicator--560ba5e9-870c-453b-8b0e-421d950d210b",
                "indicator--560ba5e9-9180-4cc8-bfaa-4ffa950d210b",
                "indicator--560ba5ea-b830-4fdb-9034-4229950d210b",
                "indicator--560ba5ea-885c-4cf3-901c-4452950d210b",
                "indicator--560ba5ea-bde8-4274-bea1-491d950d210b",
                "indicator--560ba5eb-b844-45e9-9c8e-4cdc950d210b",
                "indicator--560ba5eb-f3a4-45e6-aad6-4a37950d210b",
                "indicator--560ba5ec-0420-40c9-9eb8-4931950d210b",
                "indicator--560ba5ec-6ea8-4957-afac-4c30950d210b",
                "indicator--560ba5ec-0e1c-49f1-bb1f-49ea950d210b",
                "indicator--560ba5ed-94b4-4c22-ae95-48a7950d210b",
                "indicator--560ba5ed-ea80-4e58-b61d-462d950d210b",
                "indicator--560ba5ed-be14-45d6-9eaa-47ea950d210b",
                "indicator--560ba5ee-9b6c-4fb1-b843-4e5c950d210b",
                "indicator--560ba5ee-da74-4f07-9702-487f950d210b",
                "indicator--560ba5ee-090c-4472-af3b-4ae4950d210b",
                "indicator--560ba5ef-ebdc-44f8-b20a-4902950d210b",
                "indicator--560ba5ef-d1f0-4b1e-868d-4b16950d210b",
                "indicator--560ba5ef-6f54-41ae-a1ed-4d2e950d210b",
                "indicator--560ba5f0-cc44-4e97-9b2a-4c6d950d210b",
                "indicator--560ba5f0-f554-46b8-9a62-43bf950d210b",
                "indicator--560ba5f0-0198-4c93-becc-4de1950d210b",
                "indicator--560ba5f1-68a0-4940-8e68-4cbb950d210b",
                "indicator--560ba5f1-0294-4a70-b27a-4839950d210b",
                "indicator--560ba5f1-870c-4b08-8dbe-4af0950d210b",
                "indicator--560ba5f1-7be0-435e-8efe-49fe950d210b",
                "indicator--560ba5f1-84a0-49b3-8cf1-4a79950d210b",
                "indicator--560ba5f2-f52c-4e3c-995b-472d950d210b",
                "indicator--560ba5f2-5440-497d-8ea0-413c950d210b",
                "indicator--560ba5f2-bb48-4e98-89e1-4250950d210b",
                "indicator--560ba5f2-e8a4-423b-b56f-4b33950d210b",
                "indicator--560ba5f2-fdc8-41f1-a54d-42a8950d210b",
                "indicator--560ba5f3-f754-4eb1-9486-4e6e950d210b",
                "indicator--560ba5f3-7fa8-4249-9f0e-4ad4950d210b",
                "indicator--560ba5f3-c108-4bb9-aab2-4369950d210b",
                "indicator--560ba5f4-1cb8-484b-b459-4d15950d210b",
                "indicator--560ba5f4-4b50-4dd5-9f1e-4adb950d210b",
                "indicator--560ba5f4-bd3c-42c5-9a45-4486950d210b",
                "indicator--560ba5f5-aeec-44d3-bba1-4c94950d210b",
                "indicator--560ba5f5-7a70-47ac-99f8-4768950d210b",
                "indicator--560ba5f5-4610-46f4-97a4-42ab950d210b",
                "indicator--560ba5f6-65d8-4a7c-bee9-4364950d210b",
                "indicator--560ba5f6-5cc4-4a38-a3be-439d950d210b",
                "indicator--560ba5f6-6a18-4d13-8372-412d950d210b",
                "indicator--560ba5f7-4590-467b-b41d-4d1b950d210b",
                "indicator--560ba5f7-d008-416f-878c-4e8d950d210b",
                "indicator--560ba5f7-c204-48b6-92f9-48bd950d210b",
                "indicator--560ba5f7-bde0-4e4a-b824-431e950d210b",
                "indicator--560ba5f7-63f0-455a-a5e0-4b82950d210b",
                "indicator--560ba5f8-e7e0-48ba-b8a4-4ef3950d210b",
                "indicator--560ba5f8-53fc-4ad0-8dbf-4015950d210b",
                "indicator--560ba5f8-94e8-4dd9-9f6c-4e39950d210b",
                "indicator--560ba5f9-1c1c-432c-a794-4b29950d210b",
                "indicator--560ba5f9-26f4-4aea-a3e0-4554950d210b",
                "indicator--560ba5f9-1718-4e0d-9e96-4d92950d210b",
                "indicator--560ba5f9-8e64-4b53-b820-4eb3950d210b",
                "indicator--560ba5f9-79d8-4730-9e9b-4b6c950d210b",
                "indicator--560ba5fa-ad2c-462c-9b74-42ae950d210b",
                "indicator--560ba5fa-dbe4-4464-a7dd-4644950d210b",
                "indicator--560ba5fa-6654-491e-afcc-4048950d210b",
                "indicator--560ba5fa-0d90-4768-9c2f-4deb950d210b",
                "indicator--560ba5fa-1f0c-4186-b816-44f8950d210b",
                "indicator--560ba5fa-dad8-48fd-9dca-46f7950d210b",
                "indicator--560ba5fb-f8f8-4cbe-b210-4bb7950d210b",
                "indicator--560ba5fb-c4b8-4eaf-83cc-49a8950d210b",
                "indicator--560ba5fb-dbe4-4017-901d-41b1950d210b",
                "indicator--560ba5fb-1960-4574-a6d3-471e950d210b",
                "indicator--560ba5fb-2370-4e71-8179-422d950d210b",
                "indicator--560ba5fc-8970-43e6-bd15-4487950d210b",
                "indicator--560ba5fc-2938-4ccd-81fd-4adb950d210b",
                "indicator--560ba5fc-e798-449f-a69a-4ee5950d210b",
                "indicator--560ba5fd-4df0-4e0a-9e1b-4a2a950d210b",
                "indicator--560ba5fd-c198-4456-8a73-4e73950d210b",
                "indicator--560ba5fd-e83c-4648-a2a8-4d1c950d210b",
                "indicator--560ba5fe-cbc0-4270-a33f-4b40950d210b",
                "indicator--560ba5fe-39e8-48b5-b7fc-4b76950d210b",
                "indicator--560ba5fe-23dc-499d-b463-459d950d210b",
                "indicator--560ba5ff-b1e0-4b30-a573-4f71950d210b",
                "indicator--560ba5ff-e5f0-4108-8469-4dde950d210b",
                "indicator--560ba600-899c-45d0-bcef-4c33950d210b",
                "indicator--560ba600-28f8-4d08-b213-429c950d210b",
                "indicator--560ba600-f138-47c8-ac14-4ea1950d210b",
                "indicator--560ba601-6bd8-47ec-9deb-4c87950d210b",
                "indicator--560ba601-8550-473e-8dfd-498a950d210b",
                "indicator--560ba601-5c90-4bb2-8ec6-4d3b950d210b",
                "indicator--560ba602-3c80-4626-b36b-4ff5950d210b",
                "indicator--560ba602-ebc8-4406-b251-4722950d210b",
                "indicator--560ba602-e62c-4172-96f4-405a950d210b",
                "indicator--560ba603-8ffc-4ff9-b382-4d86950d210b",
                "indicator--560ba603-4900-4950-b260-4fb7950d210b",
                "indicator--560ba604-cd48-4fe6-8c08-41fc950d210b",
                "indicator--560ba604-8188-4807-8f55-4b3c950d210b",
                "indicator--560ba604-2ac0-422c-9246-4174950d210b",
                "indicator--560ba605-4d48-429c-8bce-4b97950d210b",
                "indicator--560ba605-b084-4422-8751-4ec8950d210b",
                "indicator--560ba605-55b0-4d91-9c60-4d6f950d210b",
                "indicator--560ba606-d5ec-4854-ae27-4ddb950d210b",
                "indicator--560ba606-e3d8-497e-9289-428e950d210b",
                "indicator--560ba606-6a80-4cec-b395-447c950d210b",
                "indicator--560ba607-05d4-4f7a-92f5-44aa950d210b",
                "indicator--560ba607-bd50-45b6-9efb-400e950d210b",
                "indicator--560ba608-0b68-48b7-ada7-4d35950d210b",
                "indicator--560ba608-8970-4fd0-bfa1-4a2c950d210b",
                "indicator--560ba608-6d58-41b4-ae56-4159950d210b",
                "indicator--560ba609-7250-4c63-bf23-4e1c950d210b",
                "indicator--560ba609-3924-4317-b053-4744950d210b",
                "indicator--560ba609-54e0-49c2-a482-45af950d210b",
                "indicator--560ba60a-6160-444a-9cc2-4660950d210b",
                "indicator--560ba60a-a118-448e-bd67-4d4c950d210b",
                "indicator--560ba60a-f770-4a7a-b08d-4788950d210b",
                "indicator--560ba60b-5eb8-453c-aaee-45b6950d210b",
                "indicator--560ba60b-4ba0-4894-9835-4f85950d210b",
                "indicator--560ba60c-1f00-4b8b-b0ab-4510950d210b",
                "indicator--560ba60c-e658-48d8-8678-424a950d210b",
                "indicator--560ba60c-5f98-434b-9836-4a0f950d210b",
                "indicator--560ba60d-0a20-4f71-a599-418d950d210b",
                "indicator--560ba60d-ab80-4f8e-98c3-406f950d210b",
                "indicator--560ba60d-a520-429b-96d8-45cb950d210b",
                "indicator--560ba60e-d0dc-4078-bbb5-4ada950d210b",
                "indicator--560ba60e-dac4-4597-b2d8-4df9950d210b",
                "indicator--560ba60e-afc8-439e-aeb7-41e4950d210b",
                "indicator--560ba60f-9644-4c7c-a491-442a950d210b",
                "indicator--560ba60f-9218-43f4-9d36-4211950d210b",
                "indicator--560ba610-17fc-4a62-b8f4-430d950d210b",
                "indicator--560ba610-189c-4178-bae6-4404950d210b",
                "indicator--560ba610-6484-4ad0-bc01-4f0c950d210b",
                "indicator--560ba611-7f60-4cf8-89f3-4d22950d210b",
                "indicator--560ba611-7138-465c-a1a5-4e03950d210b",
                "indicator--560ba611-c9cc-4d86-853c-40b4950d210b",
                "indicator--560ba612-78c4-4656-b3a4-43f6950d210b",
                "indicator--560ba612-bf84-4bfc-bac7-426b950d210b",
                "indicator--560ba613-0584-4229-a198-4149950d210b",
                "indicator--560ba613-5fb0-46f4-801a-41d6950d210b",
                "indicator--560ba613-f388-47d7-9b8e-45bb950d210b",
                "indicator--560ba614-40f0-497a-bcee-4969950d210b",
                "indicator--560ba614-9108-4a33-ad5a-4722950d210b",
                "indicator--560ba614-2a7c-4701-9f62-47e2950d210b",
                "indicator--560ba615-90a8-4bf4-b902-4088950d210b",
                "indicator--560ba615-b0fc-41d5-8db5-4377950d210b",
                "indicator--560ba615-8ee0-4b1a-9ff3-4e46950d210b",
                "indicator--560ba616-c810-4d44-92b5-46c2950d210b",
                "indicator--560ba616-0ff4-4aa5-8c23-42f8950d210b",
                "indicator--560ba617-aa54-4ce2-b5a7-443c950d210b",
                "indicator--560ba617-8194-4273-bdf7-476e950d210b",
                "indicator--560ba617-8540-4c5b-8637-4fd2950d210b",
                "indicator--560ba618-c1bc-4d64-89e1-4bc8950d210b",
                "indicator--560ba618-1cc4-4a82-bfdb-4195950d210b",
                "indicator--560ba618-c768-4137-8771-4112950d210b",
                "indicator--560ba619-0f80-430f-9dbd-4e3a950d210b",
                "indicator--560ba619-06e8-4ab5-b17e-4524950d210b",
                "indicator--560ba619-ef14-472e-8d05-4c30950d210b",
                "indicator--560ba61a-9ad0-4c73-b60d-4d83950d210b",
                "indicator--560ba61a-f2a8-4deb-8558-4353950d210b",
                "indicator--560ba61b-982c-455e-8418-484a950d210b",
                "indicator--560ba61b-7738-4a7c-aac2-4608950d210b",
                "indicator--560ba61b-65a4-4bd8-9455-448f950d210b",
                "indicator--560ba61c-0958-4292-b46f-435d950d210b",
                "indicator--560ba61c-91d0-4e06-859a-4e89950d210b",
                "indicator--560ba61c-6b64-424a-9068-4067950d210b",
                "indicator--560ba61d-b34c-4262-83b7-484d950d210b",
                "indicator--560ba61d-38b8-409a-8962-4058950d210b",
                "indicator--560ba61d-3060-42b5-880e-43c2950d210b",
                "indicator--560ba61e-399c-452b-8014-467f950d210b",
                "indicator--560ba61e-2e70-4e31-95be-41fa950d210b",
                "indicator--560ba61f-87c8-4b8a-b920-4e91950d210b",
                "indicator--560ba61f-2b90-4d25-bae7-4be1950d210b",
                "indicator--560ba61f-1a60-48cb-be66-4cdc950d210b",
                "indicator--560ba620-d154-4723-9790-443a950d210b",
                "indicator--560ba620-2804-40a1-ae7b-4541950d210b",
                "indicator--560ba620-8ab4-43ca-9c5e-48b9950d210b",
                "indicator--560ba621-8d04-491c-8d6d-473a950d210b",
                "indicator--560ba621-6ff4-4d82-9c53-4669950d210b",
                "indicator--560ba621-aba0-45e4-8643-4ee7950d210b",
                "indicator--560ba622-eae0-4d0b-be50-41db950d210b",
                "indicator--560ba622-b898-4faf-bd83-46b5950d210b",
                "indicator--560ba623-fb9c-40ed-8c58-4ff5950d210b",
                "indicator--560ba623-f604-40ee-aa30-499d950d210b",
                "indicator--560ba623-032c-4f1c-9f0d-4d6d950d210b",
                "indicator--560ba624-c8bc-4c74-8359-4bb9950d210b",
                "indicator--560ba624-5780-43d6-b523-4748950d210b",
                "indicator--560ba624-eabc-4c6d-ba45-4e33950d210b",
                "indicator--560ba625-4f48-4eca-891e-4d25950d210b",
                "indicator--560ba625-d954-48e6-94e7-4c8f950d210b",
                "indicator--560ba625-f268-4bb6-9465-4415950d210b",
                "indicator--560ba626-d530-4314-9d0e-4230950d210b",
                "indicator--560ba626-b71c-40b0-96e9-40d1950d210b",
                "indicator--560ba627-2814-4108-aaad-46f6950d210b",
                "indicator--560ba627-3304-44a8-af11-4860950d210b",
                "indicator--560ba627-1094-4eb7-a14d-405f950d210b",
                "indicator--560ba628-b2d4-414a-8728-4d63950d210b",
                "indicator--560ba628-2158-42ca-b30e-4f6b950d210b",
                "indicator--560ba628-f440-4bba-ae6a-4487950d210b",
                "indicator--560ba629-4468-422f-9a35-4225950d210b",
                "indicator--560ba629-30a0-40a4-8b78-4655950d210b",
                "indicator--560ba629-8fe8-4d9d-8cd4-4d37950d210b",
                "indicator--560ba62a-fab8-425b-bab1-468b950d210b",
                "indicator--560ba62a-d724-4454-9eac-4d86950d210b",
                "indicator--560ba62b-9eb0-4a1a-a743-40f1950d210b",
                "indicator--560ba62b-10f0-4bca-b2e7-469d950d210b",
                "indicator--560ba62b-6a04-4f03-b213-454d950d210b",
                "indicator--560ba62c-e190-4f67-bfcb-419c950d210b",
                "indicator--560ba62c-cc50-4470-819b-43e4950d210b",
                "indicator--560ba62c-6c7c-4e69-9247-4491950d210b",
                "indicator--560ba62d-0410-4c47-aca7-443d950d210b",
                "indicator--560ba62d-a458-48bc-85a4-41a6950d210b",
                "indicator--560ba62e-0d7c-44ca-9d16-4e74950d210b",
                "indicator--560ba62e-ebfc-4725-8ca7-4c62950d210b",
                "indicator--560ba62e-46ac-4902-9e29-4f6f950d210b",
                "indicator--560ba62f-068c-4037-b092-4529950d210b",
                "indicator--560ba62f-839c-41af-9dfc-4f8c950d210b",
                "indicator--560ba62f-8ac4-4c74-8ae5-4e26950d210b",
                "indicator--560ba630-ac98-4556-8560-4a37950d210b",
                "indicator--560ba630-d8b0-4a9c-b667-4cc0950d210b",
                "indicator--560ba630-0978-4d84-9ca6-4b0f950d210b",
                "indicator--560ba631-a510-40ce-b09a-4a78950d210b",
                "indicator--560ba631-c710-4316-adfa-4881950d210b",
                "indicator--560ba632-8c04-4a3f-bc42-41a0950d210b",
                "indicator--560ba632-bb54-4501-9f7e-4de6950d210b",
                "indicator--560ba632-9a94-4641-9dbd-4a8e950d210b",
                "indicator--560ba633-812c-43d5-bd9b-4e19950d210b",
                "indicator--560ba633-41d4-4cba-937f-4f6e950d210b",
                "indicator--560ba634-82d4-480b-a0fa-4ab1950d210b",
                "indicator--560ba634-e958-4575-8d8d-4454950d210b",
                "indicator--560ba634-c810-452e-a08f-4a0b950d210b",
                "indicator--560ba635-0c88-4c0c-8562-467c950d210b",
                "indicator--560ba635-d368-4abd-9a2f-4055950d210b",
                "indicator--560ba635-673c-4655-84b7-4345950d210b",
                "indicator--560ba636-a804-458d-a8bd-42aa950d210b",
                "indicator--560ba636-9d54-4a9e-acd1-4502950d210b",
                "indicator--560ba637-4010-49cf-bf70-470d950d210b",
                "indicator--560ba637-73b0-4509-8973-44ef950d210b",
                "indicator--560ba637-c998-4fac-bae9-4a56950d210b",
                "indicator--560ba638-7fac-4110-94e2-4078950d210b",
                "indicator--560ba638-1854-450c-81aa-49ed950d210b",
                "indicator--560ba638-a914-4ca0-9f06-4434950d210b",
                "indicator--560ba639-37ac-43cc-93d3-4fe8950d210b",
                "indicator--560ba639-06cc-41e7-8a2a-42a5950d210b",
                "indicator--560ba63a-e198-4bc3-af5a-4845950d210b",
                "indicator--560ba63a-b4a4-4974-a632-4a7c950d210b",
                "indicator--560ba63a-a1e4-4eb0-ab71-4abe950d210b",
                "indicator--560ba63b-8b28-4ef3-b17c-4951950d210b",
                "indicator--560ba63b-bc70-4190-9b74-44d4950d210b",
                "indicator--560ba63b-1a28-46d2-8787-4b6b950d210b",
                "indicator--560ba63c-1710-4738-9c2b-42c4950d210b",
                "indicator--560ba63c-eec0-436d-8166-4125950d210b",
                "indicator--560ba63d-12b0-4075-8bdb-48cf950d210b",
                "indicator--560ba63d-9680-43db-8770-43ae950d210b",
                "indicator--560ba63d-ac14-4fd1-a1df-4d54950d210b",
                "indicator--560ba63e-6134-4b71-a2bd-4b4c950d210b",
                "indicator--560ba63e-d1cc-4dd6-93dd-41bb950d210b",
                "indicator--560ba63e-57dc-4883-acd2-485d950d210b",
                "indicator--560ba63f-2f8c-45c0-8f71-421f950d210b",
                "indicator--560ba63f-4d20-417c-bd01-403b950d210b",
                "indicator--560ba640-4f90-4b5c-882b-4384950d210b",
                "indicator--560ba640-8e40-4e91-bb95-496d950d210b",
                "indicator--560ba640-2cc4-4a98-848e-4a49950d210b",
                "indicator--560ba641-1f60-440b-98b0-473c950d210b",
                "indicator--560ba641-9e74-41e4-bd95-4ef0950d210b",
                "indicator--560ba641-88e0-4e35-ad2c-4bee950d210b",
                "indicator--560ba642-0dcc-4da0-8543-4e38950d210b",
                "indicator--560ba642-dd78-4d13-92d0-42f2950d210b",
                "indicator--560ba643-3f18-4e5f-86ff-4dfb950d210b",
                "indicator--560ba643-2fc4-4376-ac16-40ac950d210b",
                "indicator--560ba643-f3f8-44e7-8c72-4b0b950d210b",
                "indicator--560ba644-c2e4-45d7-80c6-45f2950d210b",
                "indicator--560ba644-4768-4ec9-813f-462b950d210b",
                "indicator--560ba644-e234-4a42-a517-41d0950d210b",
                "indicator--560ba645-5f88-4dfe-bbdf-4fb3950d210b",
                "indicator--560ba645-bfd4-4dd6-bcbb-4faf950d210b",
                "indicator--560ba646-64e0-4139-b4db-4a26950d210b",
                "indicator--560ba646-0bd4-4b3b-9b8f-4404950d210b",
                "indicator--560ba646-e270-4b40-a31b-447b950d210b",
                "indicator--560ba647-e934-444c-ac15-4ae8950d210b",
                "indicator--560ba647-3ac0-45e2-9b40-4b6a950d210b",
                "indicator--560ba648-98e4-44f0-a88e-4d45950d210b",
                "indicator--560ba648-a2e0-44d6-b3a5-4559950d210b",
                "indicator--560ba648-6240-4c3f-a06e-472a950d210b",
                "indicator--560ba649-14d0-47c0-97c9-442c950d210b",
                "indicator--560ba649-ec80-4131-8426-4859950d210b",
                "indicator--560ba649-42cc-49d7-85f3-4e50950d210b",
                "indicator--560ba64a-a80c-4521-97ac-4ee7950d210b",
                "indicator--560ba64a-5dd4-451f-9096-4c88950d210b",
                "indicator--560ba64b-da70-415b-8632-408c950d210b",
                "indicator--560ba64b-5660-40da-81cb-4021950d210b",
                "indicator--560ba64b-f168-498b-ba8e-4456950d210b",
                "indicator--560ba64c-eee8-46c8-9095-4cdf950d210b",
                "indicator--560ba64c-2270-4cf7-81ae-49b1950d210b",
                "indicator--560ba64c-652c-4900-80f9-429c950d210b",
                "indicator--560ba64d-b1c4-4cdf-8a86-46ce950d210b",
                "indicator--560ba64d-6158-48ab-9482-4b6a950d210b",
                "indicator--560ba64e-3c34-40cb-b03c-4547950d210b",
                "indicator--560ba64e-cfb8-4b3d-804c-40bd950d210b",
                "indicator--560ba64e-9004-413d-b647-4e87950d210b",
                "indicator--560ba64f-bc04-419c-8b5a-4cf9950d210b",
                "indicator--560ba64f-0b38-4ea1-b049-460f950d210b",
                "indicator--560ba64f-8f50-4484-80ae-411a950d210b",
                "indicator--560ba650-e838-48cd-877c-4458950d210b",
                "indicator--560ba650-7f24-4429-839f-4543950d210b",
                "indicator--560ba651-9914-4bbd-bc45-4a33950d210b",
                "indicator--560ba651-7928-4537-8bfd-4d02950d210b",
                "indicator--560ba651-17fc-4ac3-acd8-4580950d210b",
                "indicator--560ba652-6860-421d-a4eb-4f5b950d210b",
                "indicator--560ba652-2510-450c-a134-4094950d210b",
                "indicator--560ba652-f26c-45e5-aeaf-4e35950d210b",
                "indicator--560ba653-5c14-4d6e-9f68-4cce950d210b",
                "indicator--560ba653-5098-48ca-a06a-48e0950d210b",
                "indicator--560ba654-86cc-43b9-a61e-4e6d950d210b",
                "indicator--560ba654-e134-40cb-950d-4946950d210b",
                "indicator--560ba654-dc2c-476b-9efa-4ce8950d210b",
                "indicator--560ba655-07a8-4a3c-b4ff-4339950d210b",
                "indicator--560ba655-1d98-4417-bf0d-4b51950d210b",
                "indicator--560ba655-290c-4b0d-93c5-47e7950d210b",
                "indicator--560ba656-171c-418f-8356-4367950d210b",
                "indicator--560ba656-f118-4530-b71e-4f15950d210b",
                "indicator--560ba657-c730-45b6-a309-4330950d210b",
                "indicator--560ba657-8864-4011-82c6-44b6950d210b",
                "indicator--560ba657-d5d8-409e-ac41-448b950d210b",
                "indicator--560ba658-51cc-49a2-9dc4-4edb950d210b",
                "indicator--560ba658-288c-4e29-8340-4ddc950d210b",
                "indicator--560ba659-8610-4669-94b1-40e8950d210b",
                "indicator--560ba659-082c-4326-9395-47e8950d210b",
                "indicator--560ba659-2b2c-40fb-b868-4528950d210b",
                "indicator--560ba65a-ea70-4b4e-9d35-42d6950d210b",
                "indicator--560ba65a-3294-4a30-9ac1-4d4b950d210b",
                "indicator--560ba65a-8744-44b6-aa86-402c950d210b",
                "indicator--560ba65b-3c8c-4047-932a-4f62950d210b",
                "indicator--560ba65b-8fa4-48f1-86b5-45d4950d210b",
                "indicator--560ba65c-3fd4-4209-85d0-486b950d210b",
                "indicator--560ba65c-0428-4a78-8838-41bd950d210b",
                "indicator--560ba65c-8578-48c3-aa5c-44f3950d210b",
                "indicator--560ba65d-c294-4b69-b740-4c59950d210b",
                "indicator--560ba65d-8a58-45c4-a0d9-445e950d210b",
                "indicator--560ba65d-02a8-4e31-b1f5-46af950d210b",
                "indicator--560ba65e-a888-4a28-8f82-4581950d210b",
                "indicator--560ba65e-67e0-448c-8daf-47bf950d210b",
                "indicator--560ba65f-e8a0-4838-9f44-44c4950d210b",
                "indicator--560ba65f-cb20-4b96-aecc-40fa950d210b",
                "indicator--560ba65f-1128-4caf-9d2e-4594950d210b",
                "indicator--560ba660-04ac-474e-ad45-4502950d210b",
                "indicator--560ba660-7108-4a2c-9dcf-4e8b950d210b",
                "indicator--560ba661-33d0-4e18-a380-4074950d210b",
                "indicator--560ba661-c6e0-497f-87c6-41a0950d210b",
                "indicator--560ba661-9434-41a6-ad23-43de950d210b",
                "indicator--560ba662-64d8-4cca-a192-4b41950d210b",
                "indicator--560ba662-5228-451b-8192-4a3e950d210b",
                "indicator--560ba662-0300-4792-a76e-46d9950d210b",
                "indicator--560ba663-0e20-4ddc-8562-4508950d210b",
                "indicator--560ba663-b02c-4284-ae22-4540950d210b",
                "indicator--560ba664-ec1c-4a89-9f3f-4b94950d210b",
                "indicator--560ba664-b158-4edd-994a-4d45950d210b",
                "indicator--560ba664-8b94-4466-9c99-4700950d210b",
                "indicator--560ba665-f758-4cfe-a633-4ac5950d210b",
                "indicator--560ba665-bc64-40f4-934a-4180950d210b",
                "indicator--560ba665-75f4-4c07-9f8f-443f950d210b",
                "indicator--560ba666-b344-4f22-899e-4a0b950d210b",
                "indicator--560ba666-1d74-4ced-ac43-4c0f950d210b",
                "indicator--560ba667-f760-449c-a1ac-4472950d210b",
                "indicator--560ba667-1660-4111-9b40-45f0950d210b",
                "indicator--560ba667-9818-4d67-b733-4e43950d210b",
                "indicator--560ba668-56f0-4f34-9f63-4824950d210b",
                "indicator--560ba668-7bfc-4730-8ec1-4c34950d210b",
                "indicator--560ba668-bfac-46c2-ba39-40d7950d210b",
                "indicator--560ba669-5c64-4d73-b7cf-4167950d210b",
                "indicator--560ba669-5d2c-4934-9288-457b950d210b",
                "indicator--560ba66a-dfbc-4a4b-93b2-4a68950d210b",
                "indicator--560ba66a-73e0-4f35-8c33-4538950d210b",
                "indicator--560ba66a-23b8-4529-b1cc-4b14950d210b",
                "indicator--560ba66b-71e4-4f55-beb5-43e0950d210b",
                "indicator--560ba66b-1908-4eb6-a69e-4b44950d210b",
                "indicator--560ba66c-3564-420f-8d9b-4b06950d210b",
                "indicator--560ba66c-ead0-41e4-8eac-4a95950d210b",
                "indicator--560ba66c-725c-4d4a-9e1b-4ed8950d210b",
                "indicator--560ba66d-cd94-4b33-a045-41f5950d210b",
                "indicator--560ba66d-731c-4431-9d37-4f04950d210b",
                "indicator--560ba66d-ded4-4f35-8686-47c6950d210b",
                "indicator--560ba66e-380c-4abc-92c0-4758950d210b",
                "indicator--560ba66e-b18c-46fe-819b-4597950d210b",
                "indicator--560ba66f-a514-4ed3-b4e3-4350950d210b",
                "indicator--560ba66f-fe14-41b4-94a0-465f950d210b",
                "indicator--560ba66f-c60c-41c9-8122-4020950d210b",
                "indicator--560ba670-cc30-430a-9103-45f7950d210b",
                "indicator--560ba670-3e80-4f51-8e93-496c950d210b",
                "indicator--560ba670-c6bc-44f6-be9b-4fd3950d210b",
                "indicator--560ba671-1ac8-407d-b8f7-4c26950d210b",
                "indicator--560ba671-0534-4748-9c95-4456950d210b",
                "indicator--560ba672-b950-4f58-986e-4bf1950d210b",
                "indicator--560ba672-91d4-47ae-b364-4adb950d210b",
                "indicator--560ba672-14b0-48b8-8725-4da8950d210b",
                "indicator--560ba673-7624-4bab-b818-440c950d210b",
                "indicator--560ba673-7f48-414f-a8c6-4b67950d210b",
                "indicator--560ba673-6338-4a65-a061-4d24950d210b",
                "indicator--560ba674-a240-4001-991e-4e1c950d210b",
                "indicator--560ba674-ca10-4fcb-820b-4e3d950d210b",
                "indicator--560ba675-bb9c-4413-b4a4-444d950d210b",
                "indicator--560ba675-816c-478b-b409-4c23950d210b",
                "indicator--560ba675-f06c-47de-afae-4f8f950d210b",
                "indicator--560ba676-c4c4-4a0c-b120-4315950d210b",
                "indicator--560ba676-67e8-4302-8e7a-4848950d210b",
                "indicator--560ba676-e908-4386-86b1-4783950d210b",
                "indicator--560ba677-bb2c-47b0-bea7-49ee950d210b",
                "indicator--560ba677-d9b0-4961-8f2f-4312950d210b",
                "indicator--560ba678-9858-4701-b8c7-413f950d210b",
                "indicator--560ba678-87ac-47bd-b5ae-410d950d210b",
                "indicator--560ba678-995c-4cc6-8c37-4513950d210b",
                "indicator--560ba679-1fb0-4bb3-a5dd-4b5b950d210b",
                "indicator--560ba679-1050-4a3f-9d83-4e93950d210b",
                "indicator--560ba679-e688-4389-a150-4330950d210b",
                "indicator--560ba67a-886c-4860-8b32-481b950d210b",
                "indicator--560ba67a-1d7c-41aa-a8bc-4c43950d210b",
                "indicator--560ba67b-f324-43b5-abc7-4655950d210b",
                "indicator--560ba67b-4f58-4d39-b7df-4a5d950d210b",
                "indicator--560ba67b-8014-4dc3-96af-4a26950d210b",
                "indicator--560ba67c-08b4-453a-b806-4552950d210b",
                "indicator--560ba67c-3670-423b-97f8-4366950d210b",
                "indicator--560ba67d-a0f8-4fff-b48e-43b9950d210b",
                "indicator--560ba67d-28e4-4b37-839f-469f950d210b",
                "indicator--560ba67d-6208-44ef-bd56-4a43950d210b",
                "indicator--560ba67e-7f74-43d6-b194-4aff950d210b",
                "indicator--560ba67e-a850-4d5b-b892-470b950d210b",
                "indicator--560ba67e-28b0-425d-be71-478e950d210b",
                "indicator--560ba67f-cce8-4638-a0c6-4171950d210b",
                "indicator--560ba67f-94c4-4b1e-ae18-4cb9950d210b",
                "indicator--560ba680-f63c-4e0c-ae19-4952950d210b",
                "indicator--560ba680-8e40-4db9-8700-48ad950d210b",
                "indicator--560ba680-7860-430d-9a6a-4ba3950d210b",
                "indicator--560ba681-8f38-49ef-a775-4861950d210b",
                "indicator--560ba681-bc88-4720-ae2f-4cbc950d210b",
                "indicator--560ba681-87b4-4052-91f7-4e7c950d210b",
                "indicator--560ba682-ee84-453c-b011-4956950d210b",
                "indicator--560ba682-a0d0-42f7-9e65-4458950d210b",
                "indicator--560ba683-85cc-4006-bdad-4f0e950d210b",
                "indicator--560ba683-8cdc-478e-a06e-43b9950d210b",
                "indicator--560ba683-a48c-4f2a-b0de-4067950d210b",
                "indicator--560ba684-b65c-4271-abbb-4546950d210b",
                "indicator--560ba684-7594-4c92-8be0-4ca9950d210b",
                "indicator--560ba684-0254-48d9-8088-45a5950d210b",
                "indicator--560ba685-4968-4458-9bf7-46c6950d210b",
                "indicator--560ba685-761c-48bf-b011-4134950d210b",
                "indicator--560ba686-173c-46c3-9978-4d1d950d210b",
                "indicator--560ba686-e508-43ec-9b03-43c4950d210b",
                "indicator--560ba686-f1bc-4c6c-ac95-4d28950d210b",
                "indicator--560ba687-944c-4d85-8bb1-4732950d210b",
                "indicator--560ba687-ed80-474f-a7ac-4e16950d210b",
                "indicator--560ba687-be6c-4331-a8c4-4557950d210b",
                "indicator--560ba688-6cec-4a14-8d6e-4f3b950d210b",
                "indicator--560ba688-83e8-40e3-86f2-497b950d210b",
                "indicator--560ba689-0670-4437-894b-47a1950d210b",
                "indicator--560ba689-0eec-4590-a908-4ab0950d210b",
                "indicator--560ba689-cdb8-49fe-81b9-4dbc950d210b",
                "indicator--560ba68a-979c-4338-b225-480e950d210b",
                "indicator--560ba68a-34f8-4181-a82b-4f36950d210b",
                "indicator--560ba68a-1664-4523-a466-4236950d210b",
                "indicator--560ba68b-07a0-4c18-8d70-4468950d210b",
                "indicator--560ba68b-6dd0-4e3e-9e84-4f3e950d210b",
                "indicator--560ba68c-67f8-4e0e-8764-4cf1950d210b",
                "indicator--560ba68c-397c-472d-92d1-409b950d210b",
                "indicator--560ba68c-d3f0-4565-8550-4310950d210b",
                "indicator--560ba68d-c2f4-40f2-8023-403c950d210b",
                "indicator--560ba68d-5b28-48fb-adc5-4006950d210b",
                "indicator--560ba68e-4bfc-4de3-9820-4125950d210b",
                "indicator--560ba68e-9068-4d11-82e6-4567950d210b",
                "indicator--560ba68e-37bc-4e42-9c39-4c84950d210b",
                "indicator--560ba68f-57dc-48ff-a0e6-492c950d210b",
                "indicator--560ba68f-eaa4-4c46-bbba-436a950d210b",
                "indicator--560ba68f-7428-43a8-8038-4bdf950d210b",
                "indicator--560ba690-a724-46b8-864c-419c950d210b",
                "indicator--560ba690-618c-42fd-9ad1-4bae950d210b",
                "indicator--560ba691-a9dc-4263-a9fb-4cad950d210b",
                "indicator--560ba691-ead8-4564-946a-4b4d950d210b",
                "indicator--560ba691-1e4c-465e-a838-491d950d210b",
                "indicator--560ba692-f3a4-473d-a2a8-4232950d210b",
                "indicator--560ba692-8fa4-4a83-8501-4b86950d210b",
                "indicator--560ba692-9108-4805-a9ca-4f50950d210b",
                "indicator--560ba693-52d4-41f9-979e-4a45950d210b",
                "indicator--560ba693-ff7c-4b36-85d3-488e950d210b",
                "indicator--560ba694-e424-4ff0-af5f-41cf950d210b",
                "indicator--560ba694-2ab8-4132-bb07-489f950d210b",
                "indicator--560ba694-4ea0-42e5-b091-4b15950d210b",
                "indicator--560ba695-e6cc-4743-ad95-40cb950d210b",
                "indicator--560ba695-5128-4af8-b325-4651950d210b",
                "indicator--560ba695-a664-4ba1-9368-47b0950d210b",
                "indicator--560ba696-4d88-4c4b-b527-4b57950d210b",
                "indicator--560ba696-3ce4-4caa-abbd-40b4950d210b",
                "indicator--560ba697-f4ac-4831-acdb-4c32950d210b",
                "indicator--560ba697-e894-40a2-a2c3-49b8950d210b",
                "indicator--560ba697-f5f4-4770-87f7-4b3e950d210b",
                "indicator--560ba698-8c6c-40b0-b55d-4ce6950d210b",
                "indicator--560ba698-4f54-40b8-adf1-4a21950d210b",
                "indicator--560ba699-1cc4-4195-9b5c-4d3e950d210b",
                "indicator--560ba699-9de4-467d-b65a-43bf950d210b",
                "indicator--560ba699-4fb0-4bf9-a891-464b950d210b",
                "indicator--560ba69a-d674-41c8-be5a-4f5a950d210b",
                "indicator--560ba69a-3e8c-4d55-989a-404d950d210b",
                "indicator--560ba69a-1708-4f1b-a734-415c950d210b",
                "indicator--560ba69b-1c5c-432a-8948-4e39950d210b",
                "indicator--560ba69b-c8b0-4edf-81e5-43d2950d210b",
                "indicator--560ba69c-a4cc-4cf5-b114-4526950d210b",
                "indicator--560ba69c-050c-4dff-b6c9-4de8950d210b",
                "indicator--560ba69c-de38-4a18-9f2c-4912950d210b",
                "indicator--560ba69d-f030-42c4-a858-4b4f950d210b",
                "indicator--560ba69d-9164-47ce-b50e-4f4d950d210b",
                "indicator--560ba69e-b2bc-494c-bb98-4225950d210b",
                "indicator--560ba69e-d318-4878-94ab-4c85950d210b",
                "indicator--560ba69e-96e4-49f3-98c7-4975950d210b",
                "indicator--560ba69f-aa10-462c-8fae-4d3d950d210b",
                "indicator--560ba69f-8714-4bb1-8d3e-4be6950d210b",
                "indicator--560ba69f-bb98-450d-9a8d-429f950d210b",
                "indicator--560ba6a0-afe0-4ee0-8fdb-48b8950d210b",
                "indicator--560ba6a0-d520-46fa-a5cc-4f6c950d210b",
                "indicator--560ba6a1-2cb4-49ff-8be7-4a73950d210b",
                "indicator--560ba6a1-38a4-42de-84e9-4520950d210b",
                "indicator--560ba6a1-7bdc-487a-9fc8-4e94950d210b",
                "indicator--560ba6a2-d884-449e-b456-41a8950d210b",
                "indicator--560ba6a2-0514-4d09-ae45-49b7950d210b",
                "indicator--560ba6a3-aa68-4fc7-8c58-4746950d210b",
                "indicator--560ba6a3-0574-4983-8727-4e5a950d210b",
                "indicator--560ba6a3-8b20-4805-a593-4217950d210b",
                "indicator--560ba6a4-b364-45a8-a35f-46c1950d210b",
                "indicator--560ba6a4-647c-4535-a34d-4368950d210b",
                "indicator--560ba6a4-c55c-42fb-81cc-4c4e950d210b",
                "indicator--560ba6a5-39cc-47d4-855c-437a950d210b",
                "indicator--560ba6a5-85a8-437d-94be-43bd950d210b",
                "indicator--560ba6a6-5838-427c-84e8-48cd950d210b",
                "indicator--560ba6a6-c0e8-4075-9dd6-4287950d210b",
                "indicator--560ba6a6-aa78-4386-9c0a-4645950d210b",
                "indicator--560ba6a7-f344-459c-9f31-436a950d210b",
                "indicator--560ba6a7-8924-4f35-be2e-4d70950d210b",
                "indicator--560ba6a7-8d8c-45cd-99ea-46e2950d210b",
                "indicator--560ba6a8-8814-4ddc-84f3-4bed950d210b",
                "indicator--560ba6a8-bc4c-4945-8334-473f950d210b",
                "indicator--560ba6a9-0b48-442c-a5c3-4dea950d210b",
                "indicator--560ba6a9-b67c-485a-8a1c-41b9950d210b",
                "indicator--560ba6a9-9058-4dd7-bdc5-43a9950d210b",
                "indicator--560ba6aa-0fcc-413f-90a8-491f950d210b",
                "indicator--560ba6aa-ef3c-46de-b139-48c7950d210b",
                "indicator--560ba6aa-7bf8-469e-a20d-41ac950d210b",
                "indicator--560ba6ab-f970-4d49-b0a9-4c48950d210b",
                "indicator--560ba6ab-cfd0-4d9a-9fad-44a9950d210b",
                "indicator--560ba6ac-a1ac-4cd9-8cda-4790950d210b",
                "indicator--560ba6ac-c840-4308-b4f5-427b950d210b",
                "indicator--560ba6ac-4540-44ae-af1b-4387950d210b",
                "indicator--560ba6ad-d6b8-459c-ad4c-428c950d210b",
                "indicator--560ba6ad-e7a4-4c11-9060-4048950d210b",
                "indicator--560ba6ae-78f4-4004-b646-4693950d210b",
                "indicator--560ba6ae-e780-45e1-9683-473a950d210b",
                "indicator--560ba6ae-7304-40d4-9330-4482950d210b",
                "indicator--560ba6af-94c4-405f-8028-4083950d210b",
                "indicator--560ba6af-4e38-4cc6-9dd8-4442950d210b",
                "indicator--560ba6af-a9ec-40f5-9577-4a1a950d210b",
                "indicator--560ba6b0-24f0-4e28-b0af-43fb950d210b",
                "indicator--560ba6b0-0744-4f18-86fd-4f5c950d210b",
                "indicator--560ba6b1-c4dc-4099-a32a-40f6950d210b",
                "indicator--560ba6b1-6e2c-459c-bf3d-4155950d210b",
                "indicator--560ba6b1-67f8-4f2b-bbaf-497a950d210b",
                "indicator--560ba6b2-9228-43e5-81c9-4be9950d210b",
                "indicator--560ba6b2-bf40-4283-a75d-48fd950d210b",
                "indicator--560ba6b3-430c-45b1-8423-400c950d210b",
                "indicator--560ba6b3-940c-475e-aeaf-46cb950d210b",
                "indicator--560ba6b3-d114-4235-9a8f-4da7950d210b",
                "indicator--560ba6b4-3214-4f84-adb2-4348950d210b",
                "indicator--560ba6b4-d11c-466a-96a3-4d37950d210b",
                "indicator--560ba6b4-cdb4-49b7-9f80-4b07950d210b",
                "indicator--560ba6b5-bba0-4ef0-86e5-49e5950d210b",
                "indicator--560ba6b5-0e70-4054-b2c9-42fe950d210b",
                "indicator--560ba6b6-1bf8-4ed6-b10d-4296950d210b",
                "indicator--560ba6b6-a05c-450b-9d98-4ae9950d210b",
                "indicator--560ba6b6-d058-4d84-b004-437c950d210b",
                "indicator--560ba6b7-2790-4dc1-b3b0-4e7e950d210b",
                "indicator--560ba6b7-7ee0-480d-9fea-4e7b950d210b",
                "indicator--560ba6b7-38e8-4b41-9305-42cc950d210b",
                "indicator--560ba6b8-d62c-469d-80c7-482f950d210b",
                "indicator--560ba6b8-236c-456e-8442-4424950d210b",
                "indicator--560ba6b9-f7fc-4b7f-97a3-4d74950d210b",
                "indicator--560ba6b9-bbf8-4b4b-871e-40ca950d210b",
                "indicator--560ba6b9-4368-440c-a981-4dcc950d210b",
                "indicator--560ba6ba-1518-4be3-b11a-43df950d210b",
                "indicator--560ba6ba-2fa8-4aed-8133-438c950d210b",
                "indicator--560ba6ba-9c98-438a-bb24-452d950d210b",
                "indicator--560ba6bb-8eac-45b6-a329-4f24950d210b",
                "indicator--560ba6bb-ff20-4464-a6a0-41d0950d210b",
                "indicator--560ba6bc-1114-463f-9a95-4430950d210b",
                "indicator--560ba6bc-8c14-4033-a006-42c5950d210b",
                "indicator--560ba6bc-e218-420f-ad5f-4c57950d210b",
                "indicator--560ba6bd-8360-4100-adf2-4376950d210b",
                "indicator--560ba6bd-d8d0-4c62-aff3-41c5950d210b",
                "indicator--560ba6be-606c-4a8a-8e3b-4e5c950d210b",
                "indicator--560ba6be-0734-42bc-ae59-4206950d210b",
                "indicator--560ba6be-314c-4e73-a6b9-4453950d210b",
                "indicator--560ba6bf-35e8-4ab4-9196-488d950d210b",
                "indicator--560ba6bf-7fc0-4ab9-9707-4cf5950d210b",
                "indicator--560ba6bf-a414-4d11-aa83-4c0c950d210b",
                "indicator--560ba6c0-4a0c-4918-913c-440a950d210b",
                "indicator--560ba6c0-8158-4ad0-8183-46f5950d210b",
                "indicator--560ba6c1-d470-4782-8f86-4693950d210b",
                "indicator--560ba6c1-ead0-434b-9e6e-4d8c950d210b",
                "indicator--560ba6c1-e6f4-4b15-a3aa-437d950d210b",
                "indicator--560ba6c2-bda4-42c4-a662-4b8d950d210b",
                "indicator--560ba6c2-f9b0-4ddc-b86c-44f6950d210b",
                "indicator--560ba6c2-8ecc-4131-9db6-4d1b950d210b",
                "indicator--560ba6c3-9dfc-4dc2-8c19-465d950d210b",
                "indicator--560ba6c3-fc9c-4519-b6d0-481c950d210b",
                "indicator--560ba6c4-0864-408a-b02f-4231950d210b",
                "indicator--560ba6c4-f44c-45e8-b5ab-4d54950d210b",
                "indicator--560ba6c4-8ac8-42ec-8e88-41b4950d210b",
                "indicator--560ba6c5-baf8-4b47-b43a-4d67950d210b",
                "indicator--560ba6c5-7694-4f65-ad9f-4f3f950d210b",
                "indicator--560ba6c5-9ad4-4bd4-98e7-4abb950d210b",
                "indicator--560ba6c6-e970-4aa6-97d0-450a950d210b",
                "indicator--560ba6c6-d5e8-4445-9ca9-46ab950d210b",
                "indicator--560ba6c7-2368-4489-8813-4771950d210b",
                "indicator--560ba6c7-d368-43f8-94d1-42ca950d210b",
                "indicator--560ba6c7-b308-4165-992f-467c950d210b",
                "indicator--560ba6c8-1804-41b1-a509-41a0950d210b",
                "indicator--560ba6c8-e618-4c75-bf90-4100950d210b",
                "indicator--560ba6c9-7b24-4fd1-af83-40aa950d210b",
                "indicator--560ba6c9-8b9c-4393-8c54-4a16950d210b",
                "indicator--560ba6c9-ff3c-47de-bef6-423a950d210b",
                "indicator--560ba6ca-330c-42c0-af59-45c6950d210b",
                "indicator--560ba6ca-cc60-4c35-a213-499e950d210b",
                "indicator--560ba6ca-9630-4416-8502-463f950d210b",
                "indicator--560ba6cb-64d4-4e43-93c9-45da950d210b",
                "indicator--560ba6cb-6438-472b-9045-4ccc950d210b",
                "indicator--560ba6cc-87c8-4046-90e7-4d4f950d210b",
                "indicator--560ba6cc-767c-4d49-a6db-4cfb950d210b",
                "indicator--560ba6cc-be24-4f92-8fba-47e5950d210b",
                "indicator--560ba6cd-b924-48fb-a6a1-4e89950d210b",
                "indicator--560ba6cd-25ac-4ac0-a280-4fd9950d210b",
                "indicator--560ba6cd-8020-4add-9366-47c5950d210b",
                "indicator--560ba6ce-5644-4f6b-8e21-4185950d210b",
                "indicator--560ba6ce-fb14-45fb-b459-4ac1950d210b",
                "indicator--560ba6ce-78a8-46f8-b489-4e7e950d210b",
                "indicator--560ba6cf-5108-4cdb-8d53-4d63950d210b",
                "indicator--560ba6cf-26a4-4169-9cb7-49f0950d210b",
                "indicator--560ba6d0-cf8c-4d27-82f2-42ee950d210b",
                "indicator--560ba6d0-d704-422b-baa2-4879950d210b",
                "indicator--560ba6d0-5964-487f-b7d2-4031950d210b",
                "indicator--560ba6d1-03b8-4d50-8062-4105950d210b",
                "indicator--560ba6d1-56a8-4b9a-a370-4788950d210b",
                "indicator--560ba6d1-0330-47aa-bf0f-4e23950d210b",
                "indicator--560ba6d2-223c-4de7-ae56-4bf8950d210b",
                "indicator--560ba6d2-7044-4d9a-b623-41cc950d210b",
                "indicator--560ba6d2-ab60-431f-8158-46fe950d210b",
                "indicator--560ba6d3-6ad4-4511-8552-496c950d210b",
                "indicator--560ba6d3-9c58-42f8-b1a8-4ee7950d210b",
                "indicator--560ba6d4-4c24-41a2-8f81-4723950d210b",
                "indicator--560ba6d4-d48c-453f-b949-4c25950d210b",
                "indicator--560ba6d4-ca78-4de3-9b41-40b8950d210b",
                "indicator--560ba6d5-0a80-4456-8643-45dd950d210b",
                "indicator--560ba6d5-83fc-424a-8076-4976950d210b",
                "indicator--560ba6d5-1ae0-446f-b178-4aa7950d210b",
                "indicator--560ba6d6-a8d0-45c2-8566-43a4950d210b",
                "indicator--560ba6d6-bcbc-4eb5-9df9-4c50950d210b",
                "indicator--560ba6d7-3e54-4e3a-99e6-4b38950d210b",
                "indicator--560ba6d7-33f4-4d5b-87f3-4fd0950d210b",
                "indicator--560ba6d7-c688-460b-8ca6-4958950d210b",
                "indicator--560ba6d8-16c0-4d28-903e-4320950d210b",
                "indicator--560ba6d8-442c-41fe-a412-465b950d210b",
                "indicator--560ba6d8-dd80-436f-b8f7-49db950d210b",
                "indicator--560ba6d9-6e90-4f76-a630-4e2a950d210b",
                "indicator--560ba6d9-57e0-4f33-bd6f-433e950d210b",
                "indicator--560ba6da-ca58-448c-adca-478b950d210b",
                "indicator--560ba6da-26d0-445d-9c44-47a3950d210b",
                "indicator--560ba6da-121c-493f-bd60-406d950d210b",
                "indicator--560ba6db-da64-4be6-a790-40f1950d210b",
                "indicator--560ba6db-c840-471b-bd11-4196950d210b",
                "indicator--560ba6db-c7a0-4115-8255-4c66950d210b",
                "indicator--560ba6dc-577c-46d8-9aa8-4dad950d210b",
                "indicator--560ba6dc-6160-4a6f-bad7-4ca1950d210b",
                "indicator--560ba6dd-4570-413a-a680-4bda950d210b",
                "indicator--560ba6dd-e2a0-440e-b4bc-4eda950d210b",
                "indicator--560ba6dd-0ea0-4b50-b0c2-4d63950d210b",
                "indicator--560ba6de-68b0-463e-9206-447f950d210b",
                "indicator--560ba6de-60a0-4c2b-8eba-41e7950d210b",
                "indicator--560ba6df-628c-44c4-ae0c-41cb950d210b",
                "indicator--560ba6df-5168-44ee-a083-470b950d210b",
                "indicator--560ba6df-d3e4-4ee8-8f2b-429a950d210b",
                "indicator--560ba6e0-4414-4af2-87c7-4e57950d210b",
                "indicator--560ba6e0-514c-4f05-8faf-40ce950d210b",
                "indicator--560ba6e0-5cac-40bd-8c33-4943950d210b",
                "indicator--560ba6e1-f518-4ad7-80a1-4377950d210b",
                "indicator--560ba6e1-c014-4f53-9a56-406f950d210b",
                "indicator--560ba6e2-5fd8-4e32-9761-40cd950d210b",
                "indicator--560ba6e2-3164-48cb-a6f1-4bc9950d210b",
                "indicator--560ba6e2-4400-4454-9657-4fad950d210b",
                "indicator--560ba6e3-d1f4-4453-a02e-495d950d210b",
                "indicator--560ba6e3-6e90-4815-936c-4e50950d210b",
                "indicator--560ba6e3-36bc-4901-91e3-4c03950d210b",
                "indicator--560ba6e4-7a9c-42cf-8857-4845950d210b",
                "indicator--560ba6e4-29a8-481a-a2ad-46fb950d210b",
                "indicator--560ba6e5-059c-4429-be82-423a950d210b",
                "indicator--560ba6e5-b404-4bff-a9c9-4b6f950d210b",
                "indicator--560ba6e5-31bc-4cbe-9366-4e00950d210b",
                "indicator--560ba6e6-8530-40a6-bc94-4020950d210b",
                "indicator--560ba6e6-7810-4e18-b39f-40fe950d210b",
                "indicator--560ba6e7-61b4-484f-b399-4ced950d210b",
                "indicator--560ba6e7-0fd4-496a-8157-4c1c950d210b",
                "indicator--560ba6e7-5b64-4bf2-aee2-4128950d210b",
                "indicator--560ba6e7-efc0-4c7c-bb65-4674950d210b",
                "indicator--560ba6e8-f114-46aa-81a2-483e950d210b",
                "indicator--560ba6e8-95cc-429f-ac18-48b9950d210b",
                "indicator--560ba6e8-9160-4d74-977c-4c22950d210b",
                "indicator--560ba6e8-139c-4ef9-b200-4e23950d210b",
                "indicator--560ba6e9-2e90-47a6-a40c-470c950d210b",
                "indicator--560ba6e9-d578-407a-bc80-4f94950d210b",
                "indicator--560ba6e9-64a0-4199-b883-4e1a950d210b",
                "indicator--560ba6e9-4cdc-4518-ba18-4b43950d210b",
                "indicator--560ba6ea-2aa8-4c4b-b32f-45e4950d210b",
                "indicator--560ba6ea-cf38-4482-aac4-4270950d210b",
                "indicator--560ba6ea-3e48-4ff7-bc8e-42a8950d210b",
                "indicator--560ba6ea-fccc-4bbf-bc25-401e950d210b",
                "indicator--560ba6eb-222c-48f0-89ca-4be9950d210b",
                "indicator--560ba6eb-1a74-4c9d-878a-46a5950d210b",
                "indicator--560ba6ec-d318-41f6-991e-4181950d210b",
                "indicator--560ba6ec-28a0-4661-bb28-4f8c950d210b",
                "indicator--560ba6ec-5350-4fd1-b025-4f85950d210b",
                "indicator--560ba6ec-f0ec-4896-bdbd-4f3f950d210b",
                "indicator--560ba6ed-ca60-48f3-8f49-4846950d210b",
                "indicator--560ba6ed-31a4-4889-a71c-40d4950d210b",
                "indicator--560ba6ed-7f18-4bec-9150-42d9950d210b",
                "indicator--560ba6ed-74e4-42a6-9e73-4ea2950d210b",
                "indicator--560ba6ee-2394-4838-915d-42f6950d210b",
                "indicator--560ba6ee-3cac-403e-99d3-4748950d210b",
                "indicator--560ba6ee-c6b0-4202-a451-4da2950d210b",
                "indicator--560ba6ee-a738-4af5-adfa-44e6950d210b",
                "indicator--560ba6ef-0bcc-4d16-b89d-4b6a950d210b",
                "indicator--560ba6ef-a298-41a9-b068-4d97950d210b",
                "indicator--560ba6ef-23a0-4a22-b789-48cf950d210b",
                "indicator--560ba6f0-d608-4f1b-b95b-4ffe950d210b",
                "indicator--560ba6f0-feac-437e-871a-480f950d210b",
                "indicator--560ba6f0-f6c8-40b1-a809-4776950d210b",
                "indicator--560ba6f0-fef0-4ec5-b06f-4c0a950d210b",
                "indicator--560ba6f1-7128-48bf-aa89-47aa950d210b",
                "indicator--560ba6f1-be90-46ab-9272-4488950d210b",
                "indicator--560ba6f1-c088-45e7-b5e9-46cc950d210b",
                "indicator--560ba6f1-27ac-4f10-9fc3-486f950d210b",
                "indicator--560ba6f2-f32c-42f4-94e9-48e8950d210b",
                "indicator--560ba6f2-28e8-4226-82c0-4637950d210b",
                "indicator--560ba6f2-32b0-4fcb-9024-4b23950d210b",
                "indicator--560ba6f2-18a8-4f09-8fd7-45b6950d210b",
                "indicator--560ba6f3-720c-4900-b4e5-495c950d210b",
                "indicator--560ba6f3-e484-4869-85f6-4826950d210b",
                "indicator--560ba6f3-7964-4c2d-bccb-469a950d210b",
                "indicator--560ba6f4-f200-4171-90e1-48ed950d210b",
                "indicator--560ba6f4-69d8-4447-a2bc-47aa950d210b",
                "indicator--560ba6f4-bba8-4b12-8ad1-4248950d210b",
                "indicator--560ba6f4-80c8-4dce-802e-478d950d210b",
                "indicator--560ba6f4-ddc4-43a6-967c-49d2950d210b",
                "indicator--560ba6f5-6080-4a52-8e08-4ae0950d210b",
                "indicator--560ba6f5-343c-466d-a047-4e1b950d210b",
                "indicator--560ba6f5-7940-4230-b231-4bad950d210b",
                "indicator--560ba6f5-4e84-44cd-935e-4c1e950d210b",
                "indicator--560ba6f6-1ea8-40de-87ce-4eef950d210b",
                "indicator--560ba6f6-3298-4872-a772-474f950d210b",
                "indicator--560ba6f6-8018-402f-9579-4973950d210b",
                "indicator--560ba6f7-d570-4647-8c0a-49ce950d210b",
                "indicator--560ba6f7-a2ac-44eb-aded-4901950d210b",
                "indicator--560ba6f7-5058-417c-9dd3-41f7950d210b",
                "indicator--560ba6f7-aebc-4da9-ad7f-4712950d210b",
                "indicator--560ba6f8-22e8-45b8-a3c9-497d950d210b",
                "indicator--560ba6f8-4f38-4a7c-9c9c-481e950d210b",
                "indicator--560ba6f8-70ec-4214-ad2f-43f4950d210b",
                "indicator--560ba6f8-3b48-4c33-a713-48ab950d210b",
                "indicator--560ba6f9-1ef0-46dd-b942-47d9950d210b",
                "indicator--560ba6f9-ca04-42b0-8f2c-4062950d210b",
                "indicator--560ba6f9-f0dc-4eca-a55d-4174950d210b",
                "indicator--560ba6fa-ce84-4ce4-83c3-4d9b950d210b",
                "indicator--560ba6fa-321c-4a3f-a162-4013950d210b",
                "indicator--560ba6fa-5480-442f-88af-4879950d210b",
                "indicator--560ba6fa-7cf8-40b4-ac94-4da1950d210b",
                "indicator--560ba6fb-09ec-42cb-a5df-43b0950d210b",
                "indicator--560ba6fb-3328-41c2-b4aa-4628950d210b",
                "indicator--560ba6fb-c1c0-4786-b278-40a8950d210b",
                "indicator--560ba6fb-a798-472b-8a97-43a2950d210b",
                "indicator--560ba6fc-b94c-4845-bf3a-467a950d210b",
                "indicator--560ba6fc-9b20-407b-a179-4d9b950d210b",
                "indicator--560ba6fd-d8d0-4931-ad7c-4262950d210b",
                "indicator--560ba6fd-de90-47f8-ac44-4ffa950d210b",
                "indicator--560ba6fe-ca24-4d36-9073-4987950d210b",
                "indicator--560ba6fe-2658-4e32-8060-4a7a950d210b",
                "indicator--560ba6fe-723c-4ee4-af9d-48a6950d210b",
                "indicator--560ba6fe-60a0-4a7a-89de-4d99950d210b",
                "indicator--560ba6ff-4740-433d-8197-48b4950d210b",
                "indicator--560ba6ff-be9c-48a6-886d-4d6a950d210b",
                "indicator--560ba6ff-6a80-427e-9156-4611950d210b",
                "indicator--560ba6ff-d2bc-4005-846c-48ce950d210b",
                "indicator--560ba700-3d04-4f5c-a5d9-4ae1950d210b",
                "indicator--560ba700-f344-4a36-9066-428f950d210b",
                "indicator--560ba700-4590-45af-95e5-48c1950d210b",
                "indicator--560ba700-f12c-4f48-9638-4e3e950d210b",
                "indicator--560ba701-99f0-4104-8dc9-4090950d210b",
                "indicator--560ba701-bfb0-4294-8f5f-4ed9950d210b",
                "indicator--560ba701-d220-487a-94a0-42c7950d210b",
                "indicator--560ba701-62ac-43b0-88a9-4ce4950d210b",
                "indicator--560ba702-93c0-4e9a-885c-433f950d210b",
                "indicator--560ba702-424c-4d42-b832-41a1950d210b",
                "indicator--560ba702-b398-4e55-a81e-47e8950d210b",
                "indicator--560ba702-37b0-4779-bbdf-40eb950d210b",
                "indicator--560ba703-3294-4c95-aace-4713950d210b",
                "indicator--560ba703-1460-418d-a22d-4923950d210b",
                "indicator--560ba703-9e28-4201-b9cb-4bb3950d210b",
                "indicator--560ba704-dbbc-41df-982d-41ae950d210b",
                "indicator--560ba704-ddf4-4cd6-9c27-4055950d210b",
                "indicator--560ba704-c340-4e9a-8f46-4e1c950d210b",
                "indicator--560ba704-f51c-4d06-9f14-400d950d210b",
                "indicator--560ba705-efa8-4a0f-bc21-4842950d210b",
                "indicator--560ba705-a59c-4ee6-a22f-40eb950d210b",
                "indicator--560ba705-2e30-4451-aa7d-43f3950d210b",
                "indicator--560ba705-f058-47e3-a4cd-4b7f950d210b",
                "indicator--560ba706-fee8-43ac-a332-4cfb950d210b",
                "indicator--560ba706-15ec-4c89-9b42-4e2b950d210b",
                "indicator--560ba706-a2d0-47a1-be3f-42df950d210b",
                "indicator--560ba706-9548-49e2-b767-4762950d210b",
                "indicator--560ba707-0d90-4e86-b790-4ed9950d210b",
                "indicator--560ba707-2a98-481e-b77f-41a8950d210b",
                "indicator--560ba707-1968-414a-b6a0-4f0a950d210b",
                "indicator--560ba707-56fc-4ccb-b6e8-47f6950d210b",
                "indicator--560ba708-ef34-44aa-808c-4093950d210b",
                "indicator--560ba708-0e98-41d4-925d-4742950d210b",
                "indicator--560ba708-d4e4-4e20-8331-42a6950d210b",
                "indicator--560ba708-65b0-4dc5-bbd1-48de950d210b",
                "indicator--560ba709-a66c-467e-be6e-4451950d210b",
                "indicator--560ba709-3a94-47b4-8b4f-4559950d210b",
                "indicator--560ba709-4b40-4e6d-98c9-40b2950d210b",
                "indicator--560ba709-4760-442a-93bb-4c44950d210b",
                "indicator--560ba70a-6368-434e-8105-430d950d210b",
                "indicator--560ba70a-6d70-46ea-9b19-4f21950d210b",
                "indicator--560ba70a-7ee8-4de1-9675-459b950d210b",
                "indicator--560ba70b-16d4-462d-ab0e-4e7c950d210b",
                "indicator--560ba70b-5fc0-4e7f-ab19-4d47950d210b",
                "indicator--560ba70b-3128-4820-bf98-405f950d210b",
                "indicator--560ba70b-4290-45bb-94d8-4c8f950d210b",
                "indicator--560ba70c-5fe0-4666-9d3d-4138950d210b",
                "indicator--560ba70c-aa84-4151-b1c7-40a6950d210b",
                "indicator--560ba70c-1880-46ad-9c67-4083950d210b",
                "indicator--560ba70c-1ab8-4e4d-a373-4eea950d210b",
                "indicator--560ba70d-222c-4cd8-b8ed-4d91950d210b",
                "indicator--560ba70d-9020-4bb1-86e4-4c07950d210b",
                "indicator--560ba70d-065c-4d3a-b4b8-4444950d210b",
                "indicator--560ba70d-8bd8-48ce-8251-47b7950d210b",
                "indicator--560ba70e-e8ac-4ae7-90ee-41b4950d210b",
                "indicator--560ba70e-622c-4fa8-abd9-49fa950d210b",
                "indicator--560ba70e-dda4-4e98-9fc6-41cf950d210b",
                "indicator--560ba70f-7230-4ac6-b368-4021950d210b",
                "indicator--560ba70f-bdd8-41c2-affe-47e1950d210b",
                "indicator--560ba70f-3924-4c46-882c-4c59950d210b",
                "indicator--560ba70f-4b74-49ba-8b8c-47e0950d210b",
                "indicator--560ba70f-fb40-4424-9a2b-473f950d210b",
                "indicator--560ba710-e170-4885-a844-4f7d950d210b",
                "indicator--560ba710-cd08-4766-a83a-4e90950d210b",
                "indicator--560ba710-f90c-4bcb-a85b-405f950d210b",
                "indicator--560ba710-3a24-4886-a700-40e4950d210b",
                "indicator--560ba711-f9f0-441d-be30-4b81950d210b",
                "indicator--560ba711-ee7c-4f4a-84a3-49cb950d210b",
                "indicator--560ba711-b348-47b4-b910-4a31950d210b",
                "indicator--560ba712-fa18-456c-9a51-4aff950d210b",
                "indicator--560ba712-37b0-4cde-955f-4de4950d210b",
                "indicator--560ba712-93cc-4ba6-bfdd-4dfc950d210b",
                "indicator--560ba712-9788-4d41-899f-412a950d210b",
                "indicator--560ba713-35c0-4a50-a138-4af8950d210b",
                "indicator--560ba713-d9ac-4db0-8b92-47ef950d210b",
                "indicator--560ba713-ab7c-43c3-86ac-4a6b950d210b",
                "indicator--560ba713-3be4-497e-a457-4289950d210b",
                "indicator--560ba714-6cdc-49ed-93ca-414b950d210b",
                "indicator--560ba714-a4b0-4687-bcbf-4c98950d210b",
                "indicator--560ba714-8a64-43a4-8576-4671950d210b",
                "indicator--560ba714-f698-4abd-a080-4942950d210b",
                "indicator--560ba715-43f4-4308-a12e-491e950d210b",
                "indicator--560ba715-e678-4691-8c17-4752950d210b",
                "indicator--560ba715-7188-431d-81fe-475d950d210b",
                "indicator--560ba716-2888-4a4b-8591-4fd7950d210b",
                "indicator--560ba716-b34c-40a2-adf1-41f4950d210b",
                "indicator--560ba716-1b90-403e-9176-4e19950d210b",
                "indicator--560ba717-ff84-4978-b79c-4204950d210b",
                "indicator--560ba717-9264-40cd-a8d5-4b08950d210b",
                "indicator--560ba717-0318-435e-afd9-4370950d210b",
                "indicator--560ba718-a030-43d9-958d-428c950d210b",
                "indicator--560ba718-0a0c-4af4-9b97-4c25950d210b",
                "indicator--560ba719-d7f0-441b-a082-402c950d210b",
                "indicator--560ba719-4564-4d17-91b0-4457950d210b",
                "indicator--560ba719-32c8-4d97-a0a0-4938950d210b",
                "indicator--560ba71a-97a4-4365-8343-40c3950d210b",
                "indicator--560ba71a-ff50-48e6-8fdc-4784950d210b",
                "indicator--560ba71b-8e70-4581-89c1-4e95950d210b",
                "indicator--560ba71b-b6f4-4255-aafd-47ce950d210b",
                "indicator--560ba71b-9e34-4c72-be2a-4ce1950d210b",
                "indicator--560ba71c-46fc-40e1-842f-422c950d210b",
                "indicator--560ba71c-4d80-471e-be03-41da950d210b",
                "indicator--560ba71c-1abc-493b-af2f-487e950d210b",
                "indicator--560ba71d-af24-4acd-96e9-4996950d210b",
                "indicator--560ba71d-433c-4717-aad5-4780950d210b",
                "indicator--560ba71e-f104-4473-bbbc-4c28950d210b",
                "indicator--560ba71e-691c-4229-a83c-49fb950d210b",
                "indicator--560ba71e-a930-4a64-bfbb-4633950d210b",
                "indicator--560ba71f-9270-48b2-8969-4651950d210b",
                "indicator--560ba71f-9948-4099-9e37-4cb0950d210b",
                "indicator--560ba720-5988-43db-b3a4-4d29950d210b",
                "indicator--560ba720-d670-4bed-ba67-446d950d210b",
                "indicator--560ba720-d924-4721-a0d1-4aaa950d210b",
                "indicator--560ba721-37a8-4dc3-921b-4f29950d210b",
                "indicator--560ba721-8a50-4c4f-97b3-41f5950d210b",
                "indicator--560ba721-315c-424a-bf20-4ff3950d210b",
                "indicator--560ba722-0940-42fc-94ab-4a0b950d210b",
                "indicator--560ba722-2520-4760-8c5d-4d29950d210b",
                "indicator--560ba723-7968-4288-8295-4d79950d210b",
                "indicator--560ba723-62c8-4a5a-917d-43fb950d210b",
                "indicator--560ba723-4208-4de0-8d22-49f0950d210b",
                "indicator--560ba724-2454-4bb0-b0e7-4e17950d210b",
                "indicator--560ba724-3058-4f7a-a0b9-433d950d210b",
                "indicator--560ba725-dee8-490d-a6cb-42ef950d210b",
                "indicator--560ba725-ba94-4bc2-b71d-4abe950d210b",
                "indicator--560ba725-8010-4b22-b6cf-4e00950d210b",
                "indicator--560ba726-6d40-40e8-8dc4-410a950d210b",
                "indicator--560ba726-7a90-42c0-9ea9-41f2950d210b",
                "indicator--560ba726-a05c-48c9-91ff-4de2950d210b",
                "indicator--560ba727-ab98-4f38-9394-44a9950d210b",
                "indicator--560ba727-ac24-4357-ba2f-43a5950d210b",
                "indicator--560ba728-3908-4cb9-8d85-4b5f950d210b",
                "indicator--560ba728-b974-4158-b395-41f1950d210b",
                "indicator--560ba728-a3c4-4c55-9ab7-4b94950d210b",
                "indicator--560ba729-96c4-4764-b2f2-44f0950d210b",
                "indicator--560ba729-17fc-41e3-8221-4703950d210b",
                "indicator--560ba72a-a7bc-42ec-b3d5-4e4b950d210b",
                "indicator--560ba72a-4dd8-41e7-8681-4c22950d210b",
                "indicator--560ba72a-a25c-46c8-810e-4b0f950d210b",
                "indicator--560ba72b-b848-49a8-ab5f-4325950d210b",
                "indicator--560ba72b-c73c-469b-b5a1-408b950d210b",
                "indicator--560ba72b-4d60-4b4c-9fd1-443e950d210b",
                "indicator--560ba72c-b8c0-48e5-90a6-44a0950d210b",
                "indicator--560ba72c-582c-4aa0-87ea-4f18950d210b",
                "indicator--560ba72d-c880-4dbf-a449-43a2950d210b",
                "indicator--560ba72d-a854-409e-b5b3-461c950d210b",
                "indicator--560ba72d-1aac-4d32-8cf7-499a950d210b",
                "indicator--560ba72e-f9cc-404b-8c90-48ca950d210b",
                "indicator--560ba72e-626c-4fc3-ad75-44d9950d210b",
                "indicator--560ba72e-cce4-4bd1-9159-4d11950d210b",
                "indicator--560ba72f-b168-4eca-9c9d-4011950d210b",
                "indicator--560ba72f-d128-4286-b616-4d66950d210b",
                "indicator--560ba730-ae80-4a14-b4f9-4538950d210b",
                "indicator--560ba730-ac30-4d0e-a8f8-4c0e950d210b",
                "indicator--560ba730-5364-40d2-bf76-4fec950d210b",
                "indicator--560ba731-c0bc-4ea1-b406-45b0950d210b",
                "indicator--560ba731-8be4-4454-8fde-4cc8950d210b",
                "indicator--560ba732-229c-453f-8e98-4816950d210b",
                "indicator--560ba732-d52c-4885-818c-4426950d210b",
                "indicator--560ba732-e910-4883-909b-4430950d210b",
                "indicator--560ba733-1bd0-4ea4-b8b2-452b950d210b",
                "indicator--560ba733-3e58-4aa8-ab93-4773950d210b",
                "indicator--560ba733-d97c-4539-8a8c-4b11950d210b",
                "indicator--560ba734-1510-4463-823d-4682950d210b",
                "indicator--560ba734-25a8-4f6a-b420-4252950d210b",
                "indicator--560ba735-1fa0-438f-8580-4179950d210b",
                "indicator--560ba735-a6b8-47a0-aef8-4117950d210b",
                "indicator--560ba735-611c-4519-8e2a-4623950d210b",
                "indicator--560ba736-b940-4ce5-9f94-4e5d950d210b",
                "indicator--560ba736-f44c-4553-82e6-40af950d210b",
                "indicator--560ba736-658c-4da4-afae-45f2950d210b",
                "indicator--560ba737-b444-4f46-ae88-405d950d210b",
                "indicator--560ba737-e950-464a-bbcd-48eb950d210b",
                "indicator--560ba738-4560-4842-a339-4810950d210b",
                "indicator--560ba738-1d8c-4bda-9ca0-46d4950d210b",
                "indicator--560ba738-4530-4dbb-979f-4867950d210b",
                "indicator--560ba739-89d8-4543-88e3-481d950d210b",
                "indicator--560ba739-3680-4dc5-98d6-4337950d210b",
                "indicator--560ba73a-5234-42fc-9b92-49ec950d210b",
                "indicator--560ba73a-6d28-4960-a2d9-499c950d210b",
                "indicator--560ba73a-57dc-48b9-8c73-46f5950d210b",
                "indicator--560ba73b-dcc0-4379-86ed-4ff1950d210b",
                "indicator--560ba73b-9994-4320-9e3d-4591950d210b",
                "indicator--560ba73b-61bc-40a0-bd8a-4fc5950d210b",
                "indicator--560ba73c-6618-47c5-89fb-475a950d210b",
                "indicator--560ba73c-3328-4826-8944-4d0f950d210b",
                "indicator--560ba73d-e9ec-4682-9d2b-4ec0950d210b",
                "indicator--560ba73d-c8e0-49e8-b14e-4cf0950d210b",
                "indicator--560ba73d-2338-468a-a1fb-4aec950d210b",
                "indicator--560ba73e-f8b4-4d6c-ab6a-45ee950d210b",
                "indicator--560ba73e-dbc4-433a-9e2d-4646950d210b",
                "indicator--560ba73e-d6cc-4bbb-8277-47be950d210b",
                "indicator--560ba73f-bdb4-4cd9-8797-4df9950d210b",
                "indicator--560ba73f-15d4-4d63-9e55-4a3d950d210b",
                "indicator--560ba740-bd18-46c0-9453-4449950d210b",
                "indicator--560ba740-f394-466a-8f60-4205950d210b",
                "indicator--560ba740-3978-4f60-afbc-4ff0950d210b",
                "indicator--560ba741-a4a4-4ec2-8223-41fd950d210b",
                "indicator--560ba741-f240-4298-af9a-493a950d210b",
                "indicator--560ba742-5ff0-458d-8b68-43d9950d210b",
                "indicator--560ba742-148c-4fed-bfcd-41f1950d210b",
                "indicator--560ba742-72c4-4ead-8d1b-4ea8950d210b",
                "indicator--560ba743-46b4-44f7-85ee-49a5950d210b",
                "indicator--560ba743-a24c-4e41-a02f-45a8950d210b",
                "indicator--560ba743-82dc-43e3-9168-4ba1950d210b",
                "indicator--560ba744-7f64-42a7-baa7-4310950d210b",
                "indicator--560ba744-6094-4f48-a3b8-48e0950d210b",
                "indicator--560ba745-4048-463d-b5ad-484e950d210b",
                "indicator--560ba745-26b0-4a81-8fb7-4e42950d210b",
                "indicator--560ba745-fa20-41e4-9373-4752950d210b",
                "indicator--560ba746-5c00-4a5a-a2bf-4740950d210b",
                "indicator--560ba746-245c-42be-9b7a-4af4950d210b",
                "indicator--560ba747-9aac-4d3d-ab35-4026950d210b",
                "indicator--560ba747-16d4-4c25-99b3-4b8a950d210b",
                "indicator--560ba747-4cf8-42ee-b44d-4e5c950d210b",
                "indicator--560ba748-fa68-4c69-9384-407b950d210b",
                "indicator--560ba748-2490-4c1e-94fd-4204950d210b",
                "indicator--560ba748-6ddc-43d1-9e51-43a8950d210b",
                "indicator--560ba749-6948-4c48-9277-44ab950d210b",
                "indicator--560ba749-d764-41f5-ab88-4557950d210b",
                "indicator--560ba74a-c60c-4e80-b8f6-4789950d210b",
                "indicator--560ba74a-b2a8-4e80-b7cb-4adb950d210b",
                "indicator--560ba74a-b0d0-416d-a2be-4204950d210b",
                "indicator--560ba74b-88d4-4da9-9d4b-41fe950d210b",
                "indicator--560ba74b-bdd0-4c3a-90f5-4eae950d210b",
                "indicator--560ba74b-6aa8-490a-b73c-420a950d210b",
                "indicator--560ba74c-b770-4a20-9bf9-4047950d210b",
                "indicator--560ba74c-0e28-45d7-861a-4be7950d210b",
                "indicator--560ba74d-8b68-45a2-9dcf-4cf1950d210b",
                "indicator--560ba74d-30b8-48fe-84bf-4ecd950d210b",
                "indicator--560ba74d-e40c-4c2e-a873-424b950d210b",
                "indicator--560ba74e-de18-4b0e-b3f3-4cfd950d210b",
                "indicator--560ba74e-16b4-470a-93e4-4e50950d210b",
                "indicator--560ba74e-3718-4999-8a58-44dc950d210b",
                "indicator--560ba74f-3650-44d5-b561-408b950d210b",
                "indicator--560ba74f-d2dc-4324-841b-42a2950d210b",
                "indicator--560ba750-07b4-47c7-99d9-41a9950d210b",
                "indicator--560ba750-a6fc-4737-a8d8-4fad950d210b",
                "indicator--560ba750-4e7c-4779-9a6e-48bb950d210b",
                "indicator--560ba751-1a30-4158-9448-4aca950d210b",
                "indicator--560ba751-82cc-43e4-8cc3-4530950d210b",
                "indicator--560ba752-87f8-4162-acb2-45c0950d210b",
                "indicator--560ba752-08e0-4af0-9174-4f89950d210b",
                "indicator--560ba752-0c20-49ed-a3be-4524950d210b",
                "indicator--560ba753-21e8-4cef-82d1-424c950d210b",
                "indicator--560ba753-7dc8-45ae-a74d-4bd3950d210b",
                "indicator--560ba753-9a18-4677-9f1b-4a28950d210b",
                "indicator--560ba754-3670-4f70-a691-4797950d210b",
                "indicator--560ba754-82f0-4701-a27f-45f5950d210b",
                "indicator--560ba755-fd10-4834-966a-4776950d210b",
                "indicator--560ba755-2b50-427f-a364-47af950d210b",
                "indicator--560ba755-7b14-428f-9a7f-4b43950d210b",
                "indicator--560ba756-c6cc-4867-ac34-4acf950d210b",
                "indicator--560ba756-45cc-47c2-8bcd-4c60950d210b",
                "indicator--560ba757-36d8-47d9-8f22-4e94950d210b",
                "indicator--560ba757-0dc0-461f-815e-42b9950d210b",
                "indicator--560ba757-d91c-44de-ae88-454c950d210b",
                "indicator--560ba758-f084-445c-a31d-4b7f950d210b",
                "indicator--560ba758-9f24-4bf0-83d1-4449950d210b",
                "indicator--560ba758-abc0-42ff-8be6-496b950d210b",
                "indicator--560ba759-2308-4ff1-9ffa-4ce2950d210b",
                "indicator--560ba759-8850-481d-84fd-49fb950d210b",
                "indicator--560ba75a-5608-4959-a588-46e2950d210b",
                "indicator--560ba75a-59cc-4119-8b63-4a80950d210b",
                "indicator--560ba75a-5e68-4ec0-bf13-4eb1950d210b",
                "indicator--560ba75b-39fc-4648-bd93-479f950d210b",
                "indicator--560ba75b-6bf8-4faf-b252-43e1950d210b",
                "indicator--560ba75b-a780-400f-96c8-4489950d210b",
                "indicator--560ba75c-bdfc-4aa2-8aec-4509950d210b",
                "indicator--560ba75c-b500-4264-84fc-459e950d210b",
                "indicator--560ba75d-2a1c-4882-8471-4f81950d210b",
                "indicator--560ba75d-d408-4bd3-9c95-4b08950d210b",
                "indicator--560ba75d-8e28-40e0-831d-4510950d210b",
                "indicator--560ba75e-e070-48b4-90ed-491d950d210b",
                "indicator--560ba75e-4610-4f1c-a4f9-4fb5950d210b",
                "indicator--560ba75f-008c-4732-8bc8-4e36950d210b",
                "indicator--560ba75f-b240-4f6c-be4a-459a950d210b",
                "indicator--560ba75f-f9b0-4328-ac48-410b950d210b",
                "indicator--560ba760-41e0-4d09-a864-47a5950d210b",
                "indicator--560ba760-6d80-4d49-bdef-4184950d210b",
                "indicator--560ba761-6600-4287-9d4d-4fe3950d210b",
                "indicator--560ba761-ce40-454b-998a-414d950d210b",
                "indicator--560ba761-213c-40f5-9777-40f1950d210b",
                "indicator--560ba762-f190-43fb-962a-4a74950d210b",
                "indicator--560ba762-d8e8-426c-83a7-441f950d210b",
                "indicator--560ba762-1758-4c15-8a7e-4c8f950d210b",
                "indicator--560ba763-b320-4814-b74c-47bd950d210b",
                "indicator--560ba763-f2d8-4aa9-a79f-49cb950d210b",
                "indicator--560ba764-3218-46c2-9919-4e2f950d210b",
                "indicator--560ba764-1284-4a0c-85e2-446d950d210b",
                "indicator--560ba764-f450-4cee-b0ce-43a4950d210b",
                "indicator--560ba765-93c4-4157-9c86-4ca4950d210b",
                "indicator--560ba765-b8c4-4b66-bfa9-46c5950d210b",
                "indicator--560ba765-428c-46dd-99fc-4c86950d210b",
                "indicator--560ba766-366c-4316-9411-4dde950d210b",
                "indicator--560ba766-f0cc-443d-b804-4edc950d210b",
                "indicator--560ba767-7ba0-42e1-8197-4a96950d210b",
                "indicator--560ba767-d81c-4cca-9f5a-43ae950d210b",
                "indicator--560ba767-9fb0-4541-abf2-4128950d210b",
                "indicator--560ba768-aaf0-4d56-84ac-4af5950d210b",
                "indicator--560ba768-0adc-4bbe-ba70-4dde950d210b",
                "indicator--560ba769-3e34-4f72-ae9a-4cbe950d210b",
                "indicator--560ba769-2868-42ac-9412-4291950d210b",
                "indicator--560ba769-acd0-492b-b792-4d43950d210b",
                "indicator--560ba76a-d980-42ab-83f2-4b3b950d210b",
                "indicator--560ba76a-b24c-4017-8bb6-4961950d210b",
                "indicator--560ba76b-78b8-4da7-9373-4b2c950d210b",
                "indicator--560ba76b-89ac-4617-954b-4798950d210b",
                "indicator--560ba76b-00f8-4b4c-a8a2-46f6950d210b",
                "indicator--560ba76c-8d78-4980-86f2-44bd950d210b",
                "indicator--560ba76c-92d0-4952-9f3f-4ec6950d210b",
                "indicator--560ba76c-e204-45a8-8e68-489b950d210b",
                "indicator--560ba76d-7da4-4f39-83fb-46a2950d210b",
                "indicator--560ba76d-2320-4a8a-8d15-473b950d210b",
                "indicator--560ba76e-02f8-4bbc-a564-4e6d950d210b",
                "indicator--560ba76e-8bfc-4c6a-b9f1-4b6d950d210b",
                "indicator--560ba76e-4714-4223-b1e3-4a76950d210b",
                "indicator--560ba76f-0884-4490-99d4-43cd950d210b",
                "indicator--560ba76f-a2fc-47d1-ad48-4f92950d210b",
                "indicator--560ba770-7228-4467-87c0-411a950d210b",
                "indicator--560ba770-3b54-4814-ac8e-467c950d210b",
                "indicator--560ba770-eb80-4208-80d2-4859950d210b",
                "indicator--560ba771-2e68-44aa-bd54-4d93950d210b",
                "indicator--560ba771-ba48-4d7b-8ab8-4c51950d210b",
                "indicator--560ba771-8178-4cc3-9941-430f950d210b",
                "indicator--560ba772-26f4-487a-8afd-4a9f950d210b",
                "indicator--560ba772-8674-45bf-b99e-43f6950d210b",
                "indicator--560ba773-7e18-44cb-b0ca-44b6950d210b",
                "indicator--560ba773-920c-42a8-a262-4205950d210b",
                "indicator--560ba773-14f8-4c3b-bc9e-485c950d210b",
                "indicator--560ba774-1f90-4bfa-a8f2-4bf2950d210b",
                "indicator--560ba774-4668-4c32-aeed-42d8950d210b",
                "indicator--560ba774-977c-45df-b77b-4e78950d210b",
                "indicator--560ba775-2b14-42e4-8664-4eda950d210b",
                "indicator--560ba775-7594-44b5-8ed9-468e950d210b",
                "indicator--560ba776-5c10-4381-91dd-4a33950d210b",
                "indicator--560ba776-d8e0-40dc-99d7-47a3950d210b",
                "indicator--560ba776-f860-4294-a22d-45d0950d210b",
                "indicator--560ba777-b318-4dc9-8181-4769950d210b",
                "indicator--560ba777-198c-44f7-bda0-4ca4950d210b",
                "indicator--560ba778-5900-4d47-a354-4041950d210b",
                "indicator--560ba778-08a8-4abc-a673-4a59950d210b",
                "indicator--560ba778-50e4-48d1-b2ee-45b4950d210b",
                "indicator--560ba779-7ae0-4cc2-901d-4e5e950d210b",
                "indicator--560ba779-1c6c-42bd-88f1-4bbf950d210b",
                "indicator--560ba779-df88-4685-8da5-4e97950d210b",
                "indicator--560ba77a-7808-4d1a-83de-4be8950d210b",
                "indicator--560ba77a-872c-453c-bce5-4c29950d210b",
                "indicator--560ba77b-e604-4852-9524-4843950d210b",
                "indicator--560ba77b-fdf4-41e4-9cea-4644950d210b",
                "indicator--560ba77b-a240-411a-89ea-4dae950d210b",
                "indicator--560ba77c-d62c-4605-87f2-4bc1950d210b",
                "indicator--560ba77c-d6e4-4cdd-a68d-4463950d210b",
                "indicator--560ba77c-8ccc-4241-b407-4013950d210b",
                "indicator--560ba77d-dbc4-4997-9a59-417f950d210b",
                "indicator--560ba77d-f658-44c5-bdc6-4a8c950d210b",
                "indicator--560ba77e-374c-4922-b002-4e33950d210b",
                "indicator--560ba77e-7c94-4598-b97c-40b7950d210b",
                "indicator--560ba77e-7594-4bd3-8b83-4e67950d210b",
                "indicator--560ba77f-7374-4917-b2bb-4a9a950d210b",
                "indicator--560ba77f-fb98-48dd-b64c-43f8950d210b",
                "indicator--560ba780-83fc-4249-a3c8-4fcf950d210b",
                "indicator--560ba780-695c-418b-a202-40b5950d210b",
                "indicator--560ba780-853c-40f0-898c-417b950d210b",
                "indicator--560ba781-d39c-470b-b651-4e0b950d210b",
                "indicator--560ba781-5574-4645-a5cf-4803950d210b",
                "indicator--560ba781-b6b8-45c8-b699-4c01950d210b",
                "indicator--560ba782-6114-4a77-a768-4bc5950d210b",
                "indicator--560ba782-ab84-466b-b10e-4dbe950d210b",
                "indicator--560ba783-ff18-4adc-a405-4cbd950d210b",
                "indicator--560ba783-a57c-4f9e-ba19-45f8950d210b",
                "indicator--560ba783-5f9c-44f8-b313-48f6950d210b",
                "indicator--560ba784-d87c-4752-931a-4613950d210b",
                "indicator--560ba784-77a0-4131-8856-426d950d210b",
                "indicator--560ba784-cf70-4510-8f7b-4434950d210b",
                "indicator--560ba785-14b0-4818-a40a-4096950d210b",
                "indicator--560ba785-9314-4ae0-acb5-4e35950d210b",
                "indicator--560ba786-bfb8-4910-916e-4fb5950d210b",
                "indicator--560ba786-a4a0-4d1b-a2e4-4196950d210b",
                "indicator--560ba786-cb3c-418a-a524-451a950d210b",
                "indicator--560ba787-f7fc-4a16-80e3-4409950d210b",
                "indicator--560ba787-dc14-4753-a321-4615950d210b",
                "indicator--560ba788-e458-47a9-9b2d-484b950d210b",
                "indicator--560ba788-e684-46fd-9260-4f5b950d210b",
                "indicator--560ba788-1b68-44c3-8c17-4754950d210b",
                "indicator--560ba789-b258-45ee-9204-4153950d210b",
                "indicator--560ba789-b754-4511-bb50-4b3d950d210b",
                "indicator--560ba789-b2b8-4dfc-a0de-45ef950d210b",
                "indicator--560ba78a-7b88-4df9-8391-444e950d210b",
                "indicator--560ba78a-cb28-4548-8951-4c70950d210b",
                "indicator--560ba78b-b5a4-4a7e-b1ec-46b9950d210b",
                "indicator--560ba78b-9280-453d-a308-4b57950d210b",
                "indicator--560ba78b-4ac8-4a48-a824-4666950d210b",
                "indicator--560ba78c-a44c-4e0c-96b6-47a0950d210b",
                "indicator--560ba78c-0498-4d87-bddb-40a1950d210b",
                "indicator--560ba78c-10ac-41b8-be79-49dc950d210b",
                "indicator--560ba78d-e190-4a31-ab3a-4a26950d210b",
                "indicator--560ba78d-610c-4744-8317-4b11950d210b",
                "indicator--560ba78e-5848-4855-ab40-4949950d210b",
                "indicator--560ba78e-3db4-4980-8c1c-43cb950d210b",
                "indicator--560ba78e-7d2c-4288-8ac2-49a1950d210b",
                "indicator--560ba78f-5cac-40a8-a3b2-4fc1950d210b",
                "indicator--560ba78f-d604-4d0b-874d-4b6c950d210b",
                "indicator--560ba790-4f9c-4c87-a4ef-4e4e950d210b",
                "indicator--560ba790-aba8-410d-bba9-469c950d210b",
                "indicator--560ba790-aad8-4300-ad75-4bb6950d210b",
                "indicator--560ba791-40ac-4b8b-a1c0-47a8950d210b",
                "indicator--560ba791-dadc-4f0a-b50a-477c950d210b",
                "indicator--560ba791-56a4-44fe-b10c-46b2950d210b",
                "indicator--560ba792-d958-4b25-8346-434c950d210b",
                "indicator--560ba792-a1fc-4776-ab62-461c950d210b",
                "indicator--560ba793-4398-46cf-a317-43bc950d210b",
                "indicator--560ba793-9cc8-46f7-89b4-4e64950d210b",
                "indicator--560ba793-ead0-4d6b-aea4-4a61950d210b",
                "indicator--560ba794-ac3c-4f64-9630-441c950d210b",
                "indicator--560ba794-5530-4a58-9087-43a3950d210b",
                "indicator--560ba794-fd98-4633-a22c-4165950d210b",
                "indicator--560ba795-7e68-4e13-a027-4063950d210b",
                "indicator--560ba795-a720-471e-b9c3-426b950d210b",
                "indicator--560ba796-7bd8-4e76-b449-4129950d210b",
                "indicator--560ba796-54b4-411b-b57c-454c950d210b",
                "indicator--560ba796-3320-499c-9306-48f1950d210b",
                "indicator--560ba797-2d70-4fce-9ca5-48ee950d210b",
                "indicator--560ba797-58f4-4c16-ab93-47ae950d210b",
                "indicator--560ba797-6e1c-4c0f-a9f1-4522950d210b",
                "indicator--560ba798-b170-4aaf-b91c-4ed8950d210b",
                "indicator--560ba798-8d60-44c1-b9a9-412f950d210b",
                "indicator--560ba799-eec0-4b33-bea5-4b75950d210b",
                "indicator--560ba799-75d8-4fb5-af3b-42ff950d210b",
                "indicator--560ba799-fb0c-4426-8903-4323950d210b",
                "indicator--560ba79a-a488-4dfb-b17e-476a950d210b",
                "indicator--560ba79a-ebd8-481f-b8a9-44fc950d210b",
                "indicator--560ba79b-4f74-4940-b002-4ac2950d210b",
                "indicator--560ba79b-099c-4aa1-94e0-4ad9950d210b",
                "indicator--560ba79b-354c-4442-a276-4062950d210b",
                "indicator--560ba79c-49e8-4c77-bd9f-477b950d210b",
                "indicator--560ba79c-18f8-4820-8240-46df950d210b",
                "indicator--560ba79c-3660-494c-9e24-4ff2950d210b",
                "indicator--560ba79d-49dc-4549-9c28-4576950d210b",
                "indicator--560ba79d-13ac-444b-b330-4810950d210b",
                "indicator--560ba79e-10a8-4dbd-bb8e-4c71950d210b",
                "indicator--560ba79e-edcc-4841-a928-4c97950d210b",
                "indicator--560ba79e-3830-4cc2-bdfc-4380950d210b",
                "indicator--560ba79f-5170-430c-8d8c-4771950d210b",
                "indicator--560ba79f-a184-4f65-b677-43c8950d210b",
                "indicator--560ba7a0-7c94-4906-819f-4a8e950d210b",
                "indicator--560ba7a0-17e8-44dc-bcd9-43b1950d210b",
                "indicator--560ba7a0-22f4-40c0-8941-4b21950d210b",
                "indicator--560ba7a1-e678-4424-900d-4ad1950d210b",
                "indicator--560ba7a1-cab8-467d-8d52-43d2950d210b",
                "indicator--560ba7a1-736c-4b65-bd50-492c950d210b",
                "indicator--560ba7a2-ce98-410a-8f89-42d8950d210b",
                "indicator--560ba7a2-da90-44bb-90ef-45d6950d210b",
                "indicator--560ba7a3-4d68-4540-a3ba-4844950d210b",
                "indicator--560ba7a3-5c14-46ba-a524-405d950d210b",
                "indicator--560ba7a3-d978-42cf-a5c7-4047950d210b",
                "indicator--560ba7a4-5890-4323-bcb0-49c9950d210b",
                "indicator--560ba7a4-02f4-4bda-b31d-4e32950d210b",
                "indicator--560ba7a5-dab8-43bf-9162-44af950d210b",
                "indicator--560ba7a5-b3e8-42db-9358-471f950d210b",
                "indicator--560ba7a5-7b68-415c-9fc2-442a950d210b",
                "indicator--560ba7a6-f824-41d8-8ee0-4b34950d210b",
                "indicator--560ba7a6-8b04-49ea-b4eb-404a950d210b",
                "indicator--560ba7a6-46e8-4f4e-9e0e-40c1950d210b",
                "indicator--560ba7a7-0838-4755-b30e-4111950d210b",
                "indicator--560ba7a7-2e60-4cfa-b698-4e4a950d210b",
                "indicator--560ba7a8-3384-4427-9434-448b950d210b",
                "indicator--560ba7a8-0f00-4722-899a-442d950d210b",
                "indicator--560ba7a8-8310-45a0-bd3c-4e78950d210b",
                "indicator--560ba7a9-bfac-49b2-af1b-4577950d210b",
                "indicator--560ba7a9-8034-4281-8eab-4458950d210b",
                "indicator--560ba7a9-35e0-4190-8862-4514950d210b",
                "indicator--560ba7aa-48e0-4a52-a9bf-4d67950d210b",
                "indicator--560ba7aa-f42c-4adf-8e8e-42e6950d210b",
                "indicator--560ba7ab-7724-4dec-895f-4a16950d210b",
                "indicator--560ba7ab-8e94-4636-bbd8-4fd3950d210b",
                "indicator--560ba7ab-5f6c-4ca7-9594-4c0e950d210b",
                "indicator--560ba7ac-de00-4d09-baed-49f9950d210b",
                "indicator--560ba7ac-5b34-4a9a-a55b-470f950d210b",
                "indicator--560ba7ac-fadc-456d-bffb-4980950d210b",
                "indicator--560ba7ad-a4f0-46db-a469-460f950d210b",
                "indicator--560ba7ad-a82c-4246-83fa-43d4950d210b",
                "indicator--560ba7ae-42b8-47f2-9c15-4731950d210b",
                "indicator--560ba7ae-befc-4dea-b0e6-4885950d210b",
                "indicator--560ba7ae-58a0-44af-a802-42dd950d210b",
                "indicator--560ba7af-f92c-42a7-a537-430e950d210b",
                "indicator--560ba7af-28e8-4f17-afe3-416b950d210b",
                "indicator--560ba7af-a00c-416a-acef-4097950d210b",
                "indicator--560ba7b0-ba04-447d-83c3-488f950d210b",
                "indicator--560ba7b0-afb4-4e38-a24b-4aa5950d210b",
                "indicator--560ba7b1-b8cc-4165-aad8-46cf950d210b",
                "indicator--560ba7b1-5488-4afa-87fa-40d0950d210b",
                "indicator--560ba7b1-9890-40d5-842b-49e8950d210b",
                "indicator--560ba7b2-5c88-4670-b154-4d80950d210b",
                "indicator--560ba7b2-0090-4e0e-8009-4be5950d210b",
                "indicator--560ba7b2-4ecc-4867-a82c-4cd9950d210b",
                "indicator--560ba7b3-f894-41e1-a114-45a9950d210b",
                "indicator--560ba7b3-8c58-4df0-bf3b-4777950d210b",
                "indicator--560ba7b4-9f3c-405a-80b9-4685950d210b",
                "indicator--560ba7b4-0d1c-4f47-a5d2-448a950d210b",
                "indicator--560ba7b4-a92c-4e25-b11f-4b95950d210b",
                "indicator--560ba7b5-2c5c-4d2d-b0fc-492a950d210b",
                "indicator--560ba7b5-61b4-4867-98a1-49a4950d210b",
                "indicator--560ba7b6-bb90-4a78-ac44-4bb2950d210b",
                "indicator--560ba7b6-31fc-4cee-8c4d-4f5a950d210b",
                "indicator--560ba7b6-aee4-41c3-96f8-491d950d210b",
                "indicator--560ba7b7-0e1c-47ff-b6ba-44a8950d210b",
                "indicator--560ba7b7-cdd0-4db1-9808-4a12950d210b",
                "indicator--560ba7b7-91b0-48b4-9247-4c41950d210b",
                "indicator--560ba7b8-bb20-4e5a-9ce5-46a2950d210b",
                "indicator--560ba7b8-d5a8-43cb-9597-4051950d210b",
                "indicator--560ba7b9-c0ac-49ba-a014-4898950d210b",
                "indicator--560ba7b9-1d28-4cec-8118-4e66950d210b",
                "indicator--560ba7b9-c7e8-407a-9775-4774950d210b",
                "indicator--560ba7ba-5584-4178-92f0-4f92950d210b",
                "indicator--560ba7ba-0c5c-455f-8738-4500950d210b",
                "indicator--560ba7ba-1a40-4a14-bb94-4c15950d210b",
                "indicator--560ba7bb-9038-4ca7-b2bd-4360950d210b",
                "indicator--560ba7bb-8478-4418-964f-499a950d210b",
                "indicator--560ba7bc-f0c0-470b-bd1e-45a1950d210b",
                "indicator--560ba7bc-4ca0-4ec5-97ff-484a950d210b",
                "indicator--560ba7bc-787c-4bfa-835f-4a3c950d210b",
                "indicator--560ba7bd-087c-4499-ba0d-4e7e950d210b",
                "indicator--560ba7bd-5a28-446e-a757-45b2950d210b",
                "indicator--560ba7bd-0b38-449b-b8a8-4714950d210b",
                "indicator--560ba7be-70d4-4252-ad43-4ef1950d210b",
                "indicator--560ba7be-69f4-49ee-a7a2-461a950d210b",
                "indicator--560ba7bf-62c0-43d0-b31f-47e2950d210b",
                "indicator--560ba7bf-bcd8-4ae5-b3aa-46c4950d210b",
                "indicator--560ba7bf-b8e8-4d26-aff2-42f1950d210b",
                "indicator--560ba7c0-2c94-4842-9731-4dbe950d210b",
                "indicator--560ba7c0-5a88-4129-8986-472e950d210b",
                "indicator--560ba7c1-c5d0-459e-8440-4c67950d210b",
                "indicator--560ba7c1-e92c-4566-97df-4184950d210b",
                "indicator--560ba7c1-3660-4a30-97a5-42f4950d210b",
                "indicator--560ba7c2-6188-4a80-99d1-48bf950d210b",
                "indicator--560ba7c2-f5d8-4203-b45b-42bd950d210b",
                "indicator--560ba7c2-5d78-4448-829c-4fc1950d210b",
                "indicator--560ba7c3-0ae8-47e3-9d57-4206950d210b",
                "indicator--560ba7c3-cfc8-47d6-b96c-4f17950d210b",
                "indicator--560ba7c4-7d9c-4bb1-9f01-4515950d210b",
                "indicator--560ba7c4-4e2c-40b2-9639-4718950d210b",
                "indicator--560ba7c4-32a4-4638-a5ac-4242950d210b",
                "indicator--560ba7c5-482c-41bc-9913-4beb950d210b",
                "indicator--560ba7c5-ae98-40f8-b3ed-4cd2950d210b",
                "indicator--560ba7c5-6270-4bab-abd2-48eb950d210b",
                "indicator--560ba7c6-101c-4f61-be7d-429a950d210b",
                "indicator--560ba7c6-bc2c-47fa-aa7d-498a950d210b",
                "indicator--560ba7c7-4478-45b5-865c-4917950d210b",
                "indicator--560ba7c7-3d70-4ff3-998b-41cf950d210b",
                "indicator--560ba7c7-ab98-46b6-98a8-4ee6950d210b",
                "indicator--560ba7c8-57ec-4158-be2a-4d51950d210b",
                "indicator--560ba7c8-a838-4615-9902-4aba950d210b",
                "indicator--560ba7c8-a970-438c-a711-4eed950d210b",
                "indicator--560ba7c9-f978-4258-b6cd-4305950d210b",
                "indicator--560ba7c9-1d58-4ab0-92d7-4997950d210b",
                "indicator--560ba7ca-7458-4ee2-a04e-46ca950d210b",
                "indicator--560ba7ca-e0f4-40f2-bb48-4d35950d210b",
                "indicator--560ba7ca-6a60-4a5c-92b0-4886950d210b",
                "indicator--560ba7cb-8af8-48dc-956e-4d16950d210b",
                "indicator--560ba7cb-e450-4483-9299-40b5950d210b",
                "indicator--560ba7cc-7a08-48fb-8a38-4bbf950d210b",
                "indicator--560ba7cc-b910-4ea2-965e-487b950d210b",
                "indicator--560ba7cc-f934-4ba2-b932-45a5950d210b",
                "indicator--560ba7cd-ae7c-4456-823b-41cc950d210b",
                "indicator--560ba7cd-86b4-4217-b9b4-4904950d210b",
                "indicator--560ba7cd-e1e0-4889-9c59-48f9950d210b",
                "indicator--560ba7ce-8078-423d-bc4b-4541950d210b",
                "indicator--560ba7ce-fd78-412a-ad7a-4915950d210b",
                "indicator--560ba7cf-daf8-408b-92bf-4d6e950d210b",
                "indicator--560ba7cf-9950-4d39-88aa-42b6950d210b",
                "indicator--560ba7cf-9ebc-4c3b-9e24-48b0950d210b",
                "indicator--560ba7d0-9ad4-4ade-8fe3-4367950d210b",
                "indicator--560ba7d0-3cc4-4c99-bb16-4d67950d210b",
                "indicator--560ba7d0-ffc4-42cc-a61c-4165950d210b",
                "indicator--560ba7d1-bacc-412c-9a48-47bd950d210b",
                "indicator--560ba7d1-7070-4db3-b527-4dae950d210b",
                "indicator--560ba7d2-595c-4bac-b51f-48f9950d210b",
                "indicator--560ba7d2-515c-4c4d-85b5-4758950d210b",
                "indicator--560ba7d2-0464-4f68-a69e-49c7950d210b",
                "indicator--560ba7d3-a6f4-4faa-910b-4c7e950d210b",
                "indicator--560ba7d3-a2c4-4ab8-9964-4921950d210b",
                "indicator--560ba7d3-dd08-494b-b0f7-436b950d210b",
                "indicator--560ba7d4-eb30-4f0c-9959-45ab950d210b",
                "indicator--560ba7d4-f680-4c53-b83d-45bb950d210b",
                "indicator--560ba7d5-bb3c-46fb-8e95-4753950d210b",
                "indicator--560ba7d5-5930-4b1d-b1b5-4c72950d210b",
                "indicator--560ba7d5-cb38-4daf-ac76-4dd2950d210b",
                "indicator--560ba7d6-48e8-41e4-bd72-4dbd950d210b",
                "indicator--560ba7d6-cc7c-40a6-ae65-4146950d210b",
                "indicator--560ba7d7-d734-4cd0-aefe-464c950d210b",
                "indicator--560ba7d7-9808-4dea-91d1-4b22950d210b",
                "indicator--560ba7d7-09cc-4a1d-8b7c-4de8950d210b",
                "indicator--560ba7d8-92ac-4fa8-acc1-4675950d210b",
                "indicator--560ba7d8-6080-4016-9b19-493c950d210b",
                "indicator--560ba7d8-37f8-4952-87f0-48dc950d210b",
                "indicator--560ba7d9-326c-4fbc-ae43-4cf7950d210b",
                "indicator--560ba7d9-c0c8-4e8e-8867-465c950d210b",
                "indicator--560ba7da-3034-4279-8598-4435950d210b",
                "indicator--560ba7da-5f5c-4afa-8c93-41f7950d210b",
                "indicator--560ba7da-c1bc-4ab6-a738-4640950d210b",
                "indicator--560ba7db-e3e4-4588-acb0-49c7950d210b",
                "indicator--560ba7db-31d8-4a99-b2c9-4d78950d210b",
                "indicator--560ba7db-5104-4824-81d6-47e5950d210b",
                "indicator--560ba7dc-6858-48da-b039-4857950d210b",
                "indicator--560ba7dc-19d0-4df3-8cb0-492d950d210b",
                "indicator--560ba7dd-0414-4b56-872a-43ca950d210b",
                "indicator--560ba7dd-a9fc-44ba-b3c3-45bd950d210b",
                "indicator--560ba7dd-be24-4a01-99cf-42b5950d210b",
                "indicator--560ba7de-d1b4-4cba-89ed-4451950d210b",
                "indicator--560ba7de-6ac0-48c8-83bf-4266950d210b",
                "indicator--560ba7de-de38-4993-922b-4e1d950d210b",
                "indicator--560ba7df-5d08-4ed3-afc3-4699950d210b",
                "indicator--560ba7df-63c8-44b5-844b-4127950d210b",
                "indicator--560ba7e0-1018-4001-9708-44c3950d210b",
                "indicator--560ba7e0-ef4c-4613-9b6f-47d6950d210b",
                "indicator--560ba7e0-7b50-48e5-86dc-4f3d950d210b",
                "indicator--560ba7e1-45d8-42d0-af7f-48f0950d210b",
                "indicator--560ba7e1-5068-4eb7-b41f-4732950d210b",
                "indicator--560ba7e2-8d34-4927-b5e2-48f1950d210b",
                "indicator--560ba7e2-c3a0-4ad3-b172-4c31950d210b",
                "indicator--560ba7e2-8378-40db-a18b-4051950d210b",
                "indicator--560ba7e3-6288-4823-8db9-48c3950d210b",
                "indicator--560ba7e3-2a74-4094-af4d-41de950d210b",
                "indicator--560ba7e3-ea38-49ea-94e0-417e950d210b",
                "indicator--560ba7e4-618c-4ced-9d01-4426950d210b",
                "indicator--560ba7e4-2264-4933-ab5d-4645950d210b",
                "indicator--560ba7e5-1390-476a-b5d6-4eda950d210b",
                "indicator--560ba7e5-fc7c-498a-bd7a-4548950d210b",
                "indicator--560ba7e5-607c-464a-a400-491c950d210b",
                "indicator--560ba7e6-d590-4449-bd7c-4d00950d210b",
                "indicator--560ba7e6-601c-4fe7-a6c5-4e45950d210b",
                "indicator--560ba7e6-703c-419c-b89d-4ef5950d210b",
                "indicator--560ba7e7-0748-49ce-a550-4fd9950d210b",
                "indicator--560ba7e7-f8d4-4481-bc6d-43d7950d210b",
                "indicator--560ba7e8-2d04-4c37-a211-4ce4950d210b",
                "indicator--560ba7e8-0278-4a0a-881f-4aad950d210b",
                "indicator--560ba7e8-89e8-464d-860a-43b0950d210b",
                "indicator--560ba7e9-2560-45f3-a100-4861950d210b",
                "indicator--560ba7e9-b14c-45ca-a5df-4a67950d210b",
                "indicator--560ba7e9-1de0-460e-985b-4431950d210b",
                "indicator--560ba7ea-c2c8-480c-8748-4566950d210b",
                "indicator--560ba7ea-8db8-41e3-93b4-4be1950d210b",
                "indicator--560ba7eb-f95c-4fc9-96b8-483a950d210b",
                "indicator--560ba7eb-32b8-4ae3-8efa-45e2950d210b",
                "indicator--560ba7eb-4cb8-46eb-9ab2-4c02950d210b",
                "indicator--560ba7ec-f5c0-4fa4-97a4-4a4d950d210b",
                "indicator--560ba7ec-802c-498c-9741-4d77950d210b",
                "indicator--560ba7ed-9570-49c8-8787-44f0950d210b",
                "indicator--560ba7ed-b6cc-4bbd-b09c-4234950d210b",
                "indicator--560ba7ed-f138-4c4a-92be-4fe5950d210b",
                "indicator--560ba7ee-98ac-45d2-bf9b-4b84950d210b",
                "indicator--560ba7ee-dee4-4f6a-b04d-4d26950d210b",
                "indicator--560ba7ee-c36c-4c53-946d-46d2950d210b",
                "indicator--560ba7ef-5214-44d7-8379-4e16950d210b",
                "indicator--560ba7ef-65f4-46d7-ac6b-4b03950d210b",
                "indicator--560ba7f0-2dd0-49d9-87d5-4b56950d210b",
                "indicator--560ba7f0-6624-4152-988b-4599950d210b",
                "indicator--560ba7f0-40f8-413f-84ce-4884950d210b",
                "indicator--560ba7f1-79b8-4f0b-a986-4ef9950d210b",
                "indicator--560ba7f1-182c-4d70-9f93-4a73950d210b",
                "indicator--560ba7f2-3908-4d38-83bc-4175950d210b",
                "indicator--560ba7f2-d5f8-4447-a382-4805950d210b",
                "indicator--560ba7f2-767c-40d3-bde8-47e9950d210b",
                "indicator--560ba7f3-94b4-4466-83f9-44c9950d210b",
                "indicator--560ba7f3-3070-4750-b571-4026950d210b",
                "indicator--560ba7f3-4d00-4b43-9b38-4792950d210b",
                "indicator--560ba7f4-3fa0-4651-bd78-4fba950d210b",
                "indicator--560ba7f4-e6dc-4d07-bdf0-4de7950d210b",
                "indicator--560ba7f5-d0dc-45a5-a670-424f950d210b",
                "indicator--560ba7f5-0f88-42e5-937e-47ee950d210b",
                "indicator--560ba7f5-7cc0-4d9a-9884-4ff7950d210b",
                "indicator--560ba7f6-0bd4-4a11-b488-4644950d210b",
                "indicator--560ba7f6-21d0-4706-b08e-467e950d210b",
                "indicator--560ba7f6-6ca4-4e21-84f1-472c950d210b",
                "indicator--560ba7f7-5b64-4c7f-9aae-4748950d210b",
                "indicator--560ba7f7-cdac-4724-a9bf-40ad950d210b",
                "indicator--560ba7f8-b8cc-4b98-a634-4aea950d210b",
                "indicator--560ba7f8-5288-4355-86fa-460b950d210b",
                "indicator--560ba7f8-3b3c-49cd-bb98-42af950d210b",
                "indicator--560ba7f9-8204-473f-82be-4259950d210b",
                "indicator--560ba7f9-cfe8-4065-ac18-4d45950d210b",
                "indicator--560ba7f9-b128-4cbb-bcaf-4a8e950d210b",
                "indicator--560ba7fa-674c-4006-b9f5-4f32950d210b",
                "indicator--560ba7fa-3c30-47d5-9ba3-47c5950d210b",
                "indicator--560ba7fb-80f0-4f7b-808c-48b4950d210b",
                "indicator--560ba7fb-39c0-4911-a931-4510950d210b",
                "indicator--560ba7fb-9670-4866-859b-45f6950d210b",
                "indicator--560ba7fc-45e4-4281-b553-4b85950d210b",
                "indicator--560ba7fc-12f0-4892-b7b6-4c4f950d210b",
                "indicator--560ba7fc-5b4c-42d3-96da-44ae950d210b",
                "indicator--560ba7fd-cc00-4631-b27b-4bff950d210b",
                "indicator--560ba7fd-9928-4268-945a-4d5e950d210b",
                "indicator--560ba7fe-2b3c-4357-b90d-415c950d210b",
                "indicator--560ba7fe-82dc-4f81-95fb-46e3950d210b",
                "indicator--560ba7fe-7210-4c3c-aee5-4aac950d210b",
                "indicator--560ba7ff-4820-4440-be94-4ed0950d210b",
                "indicator--560ba7ff-e458-4512-9454-4c34950d210b",
                "indicator--560ba800-0c58-48ec-841d-4833950d210b",
                "indicator--560ba800-ae58-4aae-8ccf-41a3950d210b",
                "indicator--560ba800-e6b4-4b2b-a520-4058950d210b",
                "indicator--560ba801-eda8-430c-8b8f-40d6950d210b",
                "indicator--560ba801-a5d4-4595-982e-4edd950d210b",
                "indicator--560ba801-4adc-4058-93d5-4ed4950d210b",
                "indicator--560ba802-9d38-4f56-89e3-4179950d210b",
                "indicator--560ba802-6960-4c80-98d7-4f6c950d210b",
                "indicator--560ba803-eb74-48d2-a14d-4ec7950d210b",
                "indicator--560ba803-feb4-4e61-aa03-466a950d210b",
                "indicator--560ba803-15ac-4c85-b4c3-4ee8950d210b",
                "indicator--560ba804-407c-4c00-a88c-463d950d210b",
                "indicator--560ba804-b698-4af6-9c39-423d950d210b",
                "indicator--560ba804-8ba4-4806-9cb6-494c950d210b",
                "indicator--560ba805-2264-4827-819b-4a5b950d210b",
                "indicator--560ba805-690c-4982-865a-403a950d210b",
                "indicator--560ba806-4c08-4bca-bc64-4c10950d210b",
                "indicator--560ba806-4a30-43b3-af90-4d4d950d210b",
                "indicator--560ba806-d148-4061-8fd7-4335950d210b",
                "indicator--560ba807-3c30-4375-a761-40d7950d210b",
                "indicator--560ba807-3c04-486e-a34a-49b0950d210b",
                "indicator--560ba808-2bdc-4ce4-bb81-472b950d210b",
                "indicator--560ba808-8428-4d10-9c7b-4128950d210b",
                "indicator--560ba808-002c-404f-a389-441d950d210b",
                "indicator--560ba809-e8a0-4716-96d0-4916950d210b",
                "indicator--560ba809-b084-492c-9771-4b85950d210b",
                "indicator--560ba809-a140-4554-8247-4b0d950d210b",
                "indicator--560ba80a-7e98-4cf1-83cc-4271950d210b",
                "indicator--560ba80a-2514-475b-ab81-4629950d210b",
                "indicator--560ba80b-28c4-45df-9537-4e71950d210b",
                "indicator--560ba80b-1838-4c0c-b252-4270950d210b",
                "indicator--560ba80b-2e44-4209-ac1a-4b54950d210b",
                "indicator--560ba80c-e0a4-443a-86ea-4fad950d210b",
                "indicator--560ba80c-de28-49ca-be88-432b950d210b",
                "indicator--560ba80c-d118-4683-b579-4cd3950d210b",
                "indicator--560ba80d-d420-45f8-9564-4fd5950d210b",
                "indicator--560ba80d-e0ec-485d-b019-4bf8950d210b",
                "indicator--560ba80e-8b58-4915-b9c9-44d0950d210b",
                "indicator--560ba80e-a0d4-4d3d-a248-404a950d210b",
                "indicator--560ba80e-b408-4a61-a0f6-4884950d210b",
                "indicator--560ba80f-e63c-4863-a1fc-46d0950d210b",
                "indicator--560ba80f-3574-4155-b91d-4c6c950d210b",
                "indicator--560ba80f-088c-4b80-b88b-49d9950d210b",
                "indicator--560ba810-cb88-40f4-b4d4-4ebe950d210b",
                "indicator--560ba810-b398-4d78-9822-449a950d210b",
                "indicator--560ba811-3d10-4320-884f-408c950d210b",
                "indicator--560ba811-9158-4bf1-b7af-4bf1950d210b",
                "indicator--560ba811-150c-43c8-8ba1-45e1950d210b",
                "indicator--560ba812-edf0-4e9c-9312-433a950d210b",
                "indicator--560ba812-7d64-4f16-9f3f-4dc8950d210b",
                "indicator--560ba813-d27c-4890-a7b5-4536950d210b",
                "indicator--560ba813-60d4-4e84-ab2f-4164950d210b",
                "indicator--560ba813-eecc-4201-8dd3-4649950d210b",
                "indicator--560ba814-e7d4-4b2b-b529-4d53950d210b",
                "indicator--560ba814-f260-4b7a-95bf-4e9a950d210b",
                "indicator--560ba814-9614-415d-ad64-42eb950d210b",
                "indicator--560ba815-858c-4a3c-9b62-4ee9950d210b",
                "indicator--560ba815-ea78-420f-9d51-42b6950d210b",
                "indicator--560ba816-f438-440b-a44d-44e2950d210b",
                "indicator--560ba816-f008-4ec5-bc89-471a950d210b",
                "indicator--560ba816-7eb4-4c5e-96c0-4f8f950d210b",
                "indicator--560ba817-3acc-49d4-af47-4da0950d210b",
                "indicator--560ba817-b278-4fc6-a53f-4af3950d210b",
                "indicator--560ba817-fd60-45cb-a583-4233950d210b",
                "indicator--560ba818-be10-43ff-96bd-426b950d210b",
                "indicator--560ba818-9158-4a11-b680-4c5c950d210b",
                "indicator--560ba819-c248-4a11-ae19-477a950d210b",
                "indicator--560ba819-bd68-4853-8445-461e950d210b",
                "indicator--560ba819-99e4-45ae-8eb4-496a950d210b",
                "indicator--560ba81a-d8d0-42fb-9e9b-4545950d210b",
                "indicator--560ba81a-c844-4360-bb88-446c950d210b",
                "indicator--560ba81a-5048-42aa-9414-40ae950d210b",
                "indicator--560ba81b-71f4-4fe0-b663-4a07950d210b",
                "indicator--560ba81b-08fc-4421-bbab-4808950d210b",
                "indicator--560ba81c-6e84-4f18-af8a-4ef8950d210b",
                "indicator--560ba81c-b544-41ad-99ef-4948950d210b",
                "indicator--560ba81c-f2b0-48d3-9c45-4bb9950d210b",
                "indicator--560ba81d-5940-42f3-8b60-4278950d210b",
                "indicator--560ba81d-612c-4961-a1c6-45b8950d210b",
                "indicator--560ba81e-4630-43d2-a82f-44e2950d210b",
                "indicator--560ba81e-5264-4714-81a9-49f0950d210b",
                "indicator--560ba81e-bae8-475b-9a1b-4783950d210b",
                "indicator--560ba81f-7efc-47e7-b6f3-4a02950d210b",
                "indicator--560ba81f-2fa8-46f5-9732-4911950d210b",
                "indicator--560ba81f-4864-4808-94f0-4dc6950d210b",
                "indicator--560ba820-6020-494d-bce9-4cbe950d210b",
                "indicator--560ba820-d4a4-42d3-a507-4a37950d210b",
                "indicator--560ba821-d6c0-42f7-8582-4f03950d210b",
                "indicator--560ba821-77a8-4c3c-9937-4f8b950d210b",
                "indicator--560ba821-37d0-4028-aec9-4845950d210b",
                "indicator--560ba822-1588-4a08-964f-4d54950d210b",
                "indicator--560ba822-344c-4675-9941-411f950d210b",
                "indicator--560ba822-99f8-4e24-9948-4f16950d210b",
                "indicator--560ba823-0ad4-4f39-9c87-48c5950d210b",
                "indicator--560ba823-2b34-4b2b-8669-4905950d210b",
                "indicator--560ba824-0330-4db5-9e6c-4864950d210b",
                "indicator--560ba824-e624-4edb-8ecc-4540950d210b",
                "indicator--560ba824-0b34-4adf-b6ca-452d950d210b",
                "indicator--560ba825-67b8-4af7-b509-49a8950d210b",
                "indicator--560ba825-ffa4-4657-bbb5-4a56950d210b",
                "indicator--560ba826-05f0-4aa9-bb57-4917950d210b",
                "indicator--560ba826-2520-4252-9e99-423c950d210b",
                "indicator--560ba826-19cc-42fb-9dbe-400b950d210b",
                "indicator--560ba827-c804-4bb1-ba0a-4d74950d210b",
                "indicator--560ba827-166c-44c1-9f91-4391950d210b",
                "indicator--560ba827-f318-43e0-9c10-453b950d210b",
                "indicator--560ba828-d768-404a-aa86-4816950d210b",
                "indicator--560ba828-e53c-4b72-be69-4f2c950d210b",
                "indicator--560ba829-4484-41c2-a1d0-4e92950d210b",
                "indicator--560ba829-f01c-4827-a676-4eac950d210b",
                "indicator--560ba829-c3ec-48d7-a678-43d7950d210b",
                "indicator--560ba82a-9884-4976-bdfc-469e950d210b",
                "indicator--560ba82a-08ec-4f1d-b6d1-412a950d210b",
                "indicator--560ba82a-8380-476d-93ea-4c15950d210b",
                "indicator--560ba82b-3f08-41f5-9fcc-4e51950d210b",
                "indicator--560ba82b-88cc-48bb-a407-46a1950d210b",
                "indicator--560ba82c-a5f4-448c-93c5-4db5950d210b",
                "indicator--560ba82c-5bb4-40d5-b12c-4cf1950d210b",
                "indicator--560ba82c-52a0-4388-936f-4a2c950d210b",
                "indicator--560ba82d-05e8-447f-8220-4afc950d210b",
                "indicator--560ba82d-64f8-4f4d-b022-47f8950d210b",
                "indicator--560ba82d-e250-46a6-9b10-4600950d210b",
                "indicator--560ba82e-9e64-4bf4-a54a-453d950d210b",
                "indicator--560ba82e-2e00-46bf-9fa7-4310950d210b",
                "indicator--560ba82f-327c-4777-8988-4728950d210b",
                "indicator--560ba82f-2dac-463b-a451-4acd950d210b",
                "indicator--560ba82f-8c98-407b-8350-47c0950d210b",
                "indicator--560ba830-5890-40c4-9e3e-4475950d210b",
                "indicator--560ba830-6224-4362-9d9f-4fc6950d210b",
                "indicator--560ba831-80f4-4534-8b90-485f950d210b",
                "indicator--560ba831-f8d0-4c2d-b5cb-4552950d210b",
                "indicator--560ba831-5f68-4945-96aa-4003950d210b",
                "indicator--560ba832-32b4-4859-a16f-4a92950d210b",
                "indicator--560ba832-3fe4-47f7-9be6-4a4d950d210b",
                "indicator--560ba832-2028-483e-814d-4354950d210b",
                "indicator--560ba833-97f8-40b3-8625-4b97950d210b",
                "indicator--560ba833-ee98-4b2a-b8ec-47bb950d210b",
                "indicator--560ba834-d618-4132-8a1a-4f33950d210b",
                "indicator--560ba834-1a4c-44d0-abe6-4805950d210b",
                "indicator--560ba834-1210-4a14-ab84-4508950d210b",
                "indicator--560ba835-d4ec-4071-8f23-4c74950d210b",
                "indicator--560ba835-9d1c-4cf2-98f0-4785950d210b",
                "indicator--560ba836-4ab4-4edd-9aa5-4ea5950d210b",
                "indicator--560ba836-84d4-4211-a18c-4886950d210b",
                "indicator--560ba836-37b4-46dc-a579-4f1f950d210b",
                "indicator--560ba837-a700-4f79-bf5f-4d98950d210b",
                "indicator--560ba837-5ccc-438d-8652-4d1b950d210b",
                "indicator--560ba838-baf0-4536-8314-4338950d210b",
                "indicator--560ba838-4180-4591-b89c-4ab7950d210b",
                "indicator--560ba838-93d0-4ade-8ca1-4108950d210b",
                "indicator--560ba839-c154-4d46-b173-4312950d210b",
                "indicator--560ba839-9bf0-4a0f-8758-4d87950d210b",
                "indicator--560ba839-6448-4b8b-9eff-4ace950d210b",
                "indicator--560ba83a-4448-490e-bfae-4415950d210b",
                "indicator--560ba83a-7910-498e-9fca-426a950d210b",
                "indicator--560ba83b-2e80-41cc-9edb-4936950d210b",
                "indicator--560ba83b-bac8-4db0-a2c5-4c64950d210b",
                "indicator--560ba83b-39c0-4998-8b6d-4356950d210b",
                "indicator--560ba83c-f74c-41ce-8404-4f83950d210b",
                "indicator--560ba83c-95a0-429c-98c2-429b950d210b",
                "indicator--560ba83c-44c8-4d60-9281-4bce950d210b",
                "indicator--560ba83d-44d0-4132-bd09-47e6950d210b",
                "indicator--560ba83d-41e4-4bfc-9810-4e33950d210b",
                "indicator--560ba83e-c0d0-4e99-aab4-4c66950d210b",
                "indicator--560ba83e-b710-445a-8d32-47d4950d210b",
                "indicator--560ba83e-2960-4953-b0b7-41da950d210b",
                "indicator--560ba83f-a88c-47fe-adb3-4052950d210b",
                "indicator--560ba83f-71dc-43d5-b820-40cc950d210b",
                "indicator--560ba840-dcdc-42b4-aef8-46e8950d210b",
                "indicator--560ba840-3328-474e-9233-416a950d210b",
                "indicator--560ba840-6ec4-4b1d-b93a-478e950d210b",
                "indicator--560ba841-e540-4786-a699-4b3e950d210b",
                "indicator--560ba841-815c-4c1b-b958-4ac6950d210b",
                "indicator--560ba842-cb18-4d6d-b8ca-40db950d210b",
                "indicator--560ba842-697c-4afd-b3d7-4e29950d210b",
                "indicator--560ba842-ce28-47d5-a918-4971950d210b",
                "indicator--560ba843-0d98-4b20-916d-4995950d210b",
                "indicator--560ba843-8a5c-40ea-894e-4189950d210b",
                "indicator--560ba843-a290-42a2-bc90-4d33950d210b",
                "indicator--560ba844-cf08-42e8-88e1-4382950d210b",
                "indicator--560ba844-4a28-40ea-beb0-42c5950d210b",
                "indicator--560ba845-0858-464d-b846-4055950d210b",
                "indicator--560ba845-44d0-476d-85aa-4ff9950d210b",
                "indicator--560ba845-0f94-4ed5-8e10-4444950d210b",
                "indicator--560ba846-7220-4ec7-9847-41fc950d210b",
                "indicator--560ba846-7e74-4b78-8c1a-4207950d210b",
                "indicator--560ba847-bffc-489d-afaa-46c1950d210b",
                "indicator--560ba847-1eb0-4765-8fa8-4248950d210b",
                "indicator--560ba847-36ac-472f-be0b-4951950d210b",
                "indicator--560ba848-f27c-445a-a7e1-4d7a950d210b",
                "indicator--560ba848-4c04-4478-a5a6-4f01950d210b",
                "indicator--560ba848-fc58-42e3-b06a-4f43950d210b",
                "indicator--560ba849-3ff0-4f37-9e8c-4069950d210b",
                "indicator--560ba849-4de8-46b3-8408-45fb950d210b",
                "indicator--560ba84a-06d0-457f-9b9a-4fb9950d210b",
                "indicator--560ba84a-34ec-4812-a351-405d950d210b",
                "indicator--560ba84a-92e8-4dc5-a8a5-470d950d210b",
                "indicator--560ba84b-2744-43f5-9a2b-4d2d950d210b",
                "indicator--560ba84b-5130-4eb8-8e1e-479d950d210b",
                "indicator--560ba84b-8798-4788-a97d-4ded950d210b",
                "indicator--560ba84c-7a50-4c2f-9104-417f950d210b",
                "indicator--560ba84c-9fcc-49f1-8842-4052950d210b",
                "indicator--560ba84d-89ec-42b7-a091-470e950d210b",
                "indicator--560ba84d-37a4-466a-8621-4663950d210b",
                "indicator--560ba84d-87a0-47c1-9767-4a37950d210b",
                "indicator--560ba84e-5f38-488c-8339-4da8950d210b",
                "indicator--560ba84e-003c-44b3-9f6c-4b99950d210b",
                "indicator--560ba84f-de68-410c-8509-46e8950d210b",
                "indicator--560ba84f-e1d0-4247-a19d-41ab950d210b",
                "indicator--560ba84f-0110-4f05-a5ad-42ab950d210b",
                "indicator--560ba850-a18c-46bc-87b6-4814950d210b",
                "indicator--560ba850-fe50-4df0-835c-495b950d210b",
                "indicator--560ba850-7cfc-4a55-8db0-4053950d210b",
                "indicator--560ba851-d364-46c0-8a41-48b6950d210b",
                "indicator--560ba851-54bc-4caf-841e-41fe950d210b",
                "indicator--560ba852-08f0-4ce1-ab6c-4bd2950d210b",
                "indicator--560ba852-f114-4541-a818-4904950d210b",
                "indicator--560ba852-a8a4-4f08-a8a4-4b6d950d210b",
                "indicator--560ba853-8470-4ce0-8e71-45de950d210b",
                "indicator--560ba853-a1d0-4996-91d5-4c1c950d210b",
                "indicator--560ba854-ed1c-4241-a4e3-4595950d210b",
                "indicator--560ba854-1d18-4580-8e06-4e05950d210b",
                "indicator--560ba854-db34-4b69-bf1a-433b950d210b",
                "indicator--560ba855-b1f4-432d-a409-4345950d210b",
                "indicator--560ba855-fd60-477d-8edc-4b85950d210b",
                "indicator--560ba855-fb1c-45be-8b0f-4bb1950d210b",
                "indicator--560ba856-c990-46ac-877a-47d8950d210b",
                "indicator--560ba856-39ec-4985-bd0b-4864950d210b",
                "indicator--560ba857-4a0c-4ca2-ad92-43c1950d210b",
                "indicator--560ba857-e1d0-40db-b743-44ae950d210b",
                "indicator--560ba857-26f8-4092-bec7-4446950d210b",
                "indicator--560ba858-370c-43b4-8e9f-4c2c950d210b",
                "indicator--560ba858-19cc-4afd-bcd3-4f96950d210b",
                "indicator--560ba859-e65c-4e24-990d-463b950d210b",
                "indicator--560ba859-e66c-4616-8372-4ae6950d210b",
                "indicator--560ba859-a110-499a-b4b5-414c950d210b",
                "indicator--560ba85a-bf14-4486-9b8e-4f6a950d210b",
                "indicator--560ba85a-3b84-4ad2-9ca7-414a950d210b",
                "indicator--560ba85a-854c-4b86-96e9-461d950d210b",
                "indicator--560ba85b-747c-46da-9915-484d950d210b",
                "indicator--560ba85b-37b4-49cd-9432-4f42950d210b",
                "indicator--560ba85c-3c68-43c0-b68f-4899950d210b",
                "indicator--560ba85c-da94-425e-bfd9-40f0950d210b",
                "indicator--560ba85c-b3dc-4868-b02a-4766950d210b",
                "indicator--560ba85d-5980-4c9a-9c25-4007950d210b",
                "indicator--560ba85d-d8b4-41be-9f49-4977950d210b",
                "indicator--560ba85d-2954-4f52-91d8-4ddc950d210b",
                "indicator--560ba85e-8114-42ce-bfb8-44f6950d210b",
                "indicator--560ba85e-5b28-445f-a502-4053950d210b",
                "indicator--560ba85f-9bb8-4acb-9c54-4cbc950d210b",
                "indicator--560ba85f-638c-48b0-9d9f-410a950d210b",
                "indicator--560ba85f-a31c-433e-a04d-456d950d210b",
                "indicator--560ba860-b40c-45e8-81a3-4815950d210b",
                "indicator--560ba860-ee60-4ec7-8a23-4b04950d210b",
                "indicator--560ba860-eff8-4ca8-8e8b-4b55950d210b",
                "indicator--560ba861-e530-4593-a114-48a7950d210b",
                "indicator--560ba861-2c28-4257-9e22-411c950d210b",
                "indicator--560ba862-2028-451d-80af-4b87950d210b",
                "indicator--560ba862-2c68-4e46-8fa9-4f9f950d210b",
                "indicator--560ba862-79b8-4657-b8b2-45da950d210b",
                "indicator--560ba863-1e2c-42fb-a192-404d950d210b",
                "indicator--560ba863-b938-4c25-a2ff-4fd8950d210b",
                "indicator--560ba864-baac-4f44-9c73-4bb7950d210b",
                "indicator--560ba864-c698-497e-bfdd-491a950d210b",
                "indicator--560ba864-2450-4922-8ccc-4fe3950d210b",
                "indicator--560ba865-0e68-4d4e-8a34-40f7950d210b",
                "indicator--560ba865-1958-4f4e-a61d-42b1950d210b",
                "indicator--560ba865-de54-4f39-a110-4c4d950d210b",
                "indicator--560ba866-4254-42c9-a9d5-4313950d210b",
                "indicator--560ba866-4f70-40d4-a783-48a1950d210b",
                "indicator--560ba867-5518-4baa-98dd-4385950d210b",
                "indicator--560ba867-c8c8-428d-ab99-475c950d210b",
                "indicator--560ba867-cf3c-4694-9ffc-4bb6950d210b",
                "indicator--560ba868-eb38-4ef6-9976-4ae1950d210b",
                "indicator--560ba868-28cc-4940-a3f6-4469950d210b",
                "indicator--560ba868-1338-4a02-afd6-49b7950d210b",
                "indicator--560ba869-4e88-4bf4-8175-4a61950d210b",
                "indicator--560ba869-943c-444f-b92c-4ee7950d210b",
                "indicator--560ba86a-4c14-4bad-87c5-4add950d210b",
                "indicator--560ba86a-dd8c-4b9e-a09f-4a0c950d210b",
                "indicator--560ba86a-9c54-4ae8-9a30-4696950d210b",
                "indicator--560ba86b-5e3c-40d7-ba72-49d4950d210b",
                "indicator--560ba86b-7394-4cd8-a0e9-4ce8950d210b",
                "indicator--560ba86b-d8b8-496a-a670-4465950d210b",
                "indicator--560ba86c-7d0c-4fd7-866b-4b01950d210b",
                "indicator--560ba86c-75dc-4c5e-b0c3-462a950d210b",
                "indicator--560ba86d-8d04-48a3-923e-4520950d210b",
                "indicator--560ba86d-ed78-4466-9133-4a7c950d210b",
                "indicator--560ba86d-85ac-4c83-a552-49f9950d210b",
                "indicator--560ba86e-a430-4abe-bb78-494b950d210b",
                "indicator--560ba86e-ab14-4f81-904c-4e81950d210b",
                "indicator--560ba86f-8654-4237-9bec-4561950d210b",
                "indicator--560ba86f-648c-4b9a-b3a3-4a3e950d210b",
                "indicator--560ba86f-44b0-4fe0-9137-47c6950d210b",
                "indicator--560ba870-7ba8-401b-9769-4ed1950d210b",
                "indicator--560ba870-9c4c-4486-82e5-42e6950d210b",
                "indicator--560ba870-117c-4798-a03b-4f78950d210b",
                "indicator--560ba871-cc80-481f-91ef-470c950d210b",
                "indicator--560ba871-0a9c-4c70-8a52-4548950d210b",
                "indicator--560ba872-da1c-43d1-8d61-46ff950d210b",
                "indicator--560ba872-7414-4a93-89f9-42de950d210b",
                "indicator--560ba872-300c-4b6f-8f72-4177950d210b",
                "indicator--560ba873-0024-403c-9d0a-4f6f950d210b",
                "indicator--560ba873-be68-4ba8-aa7e-4938950d210b",
                "indicator--560ba873-6f00-4233-997f-4ef7950d210b",
                "indicator--560ba874-3078-43b1-96f5-41b1950d210b",
                "indicator--560ba874-0fdc-4d00-94bf-4f8c950d210b",
                "indicator--560ba875-c2fc-42a2-8d86-43f7950d210b",
                "indicator--560ba875-5bdc-443d-8694-4e83950d210b",
                "indicator--560ba875-2b20-4571-9147-43fb950d210b",
                "indicator--560ba876-6408-4cdc-a3f2-46cf950d210b",
                "indicator--560ba876-050c-4d74-b03f-407d950d210b",
                "indicator--560ba876-d2c8-4656-979f-4d48950d210b",
                "indicator--560ba877-ce98-45bc-a982-45ff950d210b",
                "indicator--560ba877-0c48-400b-ba1e-470b950d210b",
                "indicator--560ba878-5e10-4076-97c3-4931950d210b",
                "indicator--560ba878-05dc-4233-9c87-434e950d210b",
                "indicator--560ba878-5d0c-4da9-8080-4fa4950d210b",
                "indicator--560ba879-24d4-4391-9967-49f0950d210b",
                "indicator--560ba879-6838-4859-b878-4e07950d210b",
                "indicator--560ba879-2a40-4658-b6ce-4f77950d210b",
                "indicator--560ba87a-0f6c-4273-8cd6-43e1950d210b",
                "indicator--560ba87a-bb48-44e7-bcec-4060950d210b",
                "indicator--560ba87b-5b44-4e1f-91f4-4c59950d210b",
                "indicator--560ba87b-9ddc-42cb-acf6-41a4950d210b",
                "indicator--560ba87b-3fc0-47c1-b616-4028950d210b",
                "indicator--560ba87c-fcf4-489f-9e77-4648950d210b",
                "indicator--560ba87c-c750-4484-b731-467c950d210b",
                "indicator--560ba87d-ab70-4363-8881-4aae950d210b",
                "indicator--560ba87d-8260-44f4-b661-450c950d210b",
                "indicator--560ba87d-b0b0-4aad-9540-47cb950d210b",
                "indicator--560ba87e-fd1c-4b75-8b65-46b5950d210b",
                "indicator--560ba87e-2598-4005-97fa-4fac950d210b",
                "indicator--560ba87e-4e5c-457d-9dc3-46b3950d210b",
                "indicator--560ba87f-9aa8-4725-825c-4bb4950d210b",
                "indicator--560ba87f-8a5c-4095-a1fb-4da1950d210b",
                "indicator--560ba880-581c-458a-a2aa-4bb2950d210b",
                "indicator--560ba880-55d0-4490-b660-4735950d210b",
                "indicator--560ba880-844c-486a-97e4-412a950d210b",
                "indicator--560ba881-8e5c-4614-92f5-4d3f950d210b",
                "indicator--560ba881-02bc-4d59-80cf-4b20950d210b",
                "indicator--560ba882-1de0-4ac8-aeb5-45c6950d210b",
                "indicator--560ba882-2bac-4ff8-87a1-46c8950d210b",
                "indicator--560ba882-c918-44cc-ab07-4428950d210b",
                "indicator--560ba883-4b08-4f91-ae57-402a950d210b",
                "indicator--560ba883-e134-4a26-9b70-43db950d210b",
                "indicator--560ba883-e458-4422-b534-4937950d210b",
                "indicator--560ba884-3c30-4e73-a9c7-4e21950d210b",
                "indicator--560ba884-d258-464b-aeb8-41b3950d210b",
                "indicator--560ba885-c2f8-461f-a43c-4491950d210b",
                "indicator--560ba885-b104-418d-b6c0-4dd9950d210b",
                "indicator--560ba885-548c-4be7-8716-43e3950d210b",
                "indicator--560ba886-f49c-4072-aa52-4e6a950d210b",
                "indicator--560ba886-abac-4c3b-b5a3-40d2950d210b",
                "indicator--560ba886-7c70-4b1a-94ec-45cc950d210b",
                "indicator--560ba887-5f04-4424-9935-4f2b950d210b",
                "indicator--560ba887-110c-4df9-87e0-4285950d210b",
                "indicator--560ba888-5528-46dc-b344-49a0950d210b",
                "indicator--560ba888-d55c-4c3b-b5d1-4128950d210b",
                "indicator--560ba888-d938-4b38-b7bc-48ba950d210b",
                "indicator--560ba889-a27c-4252-bdbb-49f5950d210b",
                "indicator--560ba889-1340-4d51-aac1-4856950d210b",
                "indicator--560ba88a-980c-41f2-84e6-4270950d210b",
                "indicator--560ba88a-0df8-4154-b7cd-4464950d210b",
                "indicator--560ba88a-ec94-4873-8812-42ae950d210b",
                "indicator--560ba88b-2374-4452-bccb-4041950d210b",
                "indicator--560ba88b-cc74-4ff2-a2be-43f8950d210b",
                "indicator--560ba88b-1db4-4269-a5f5-43f8950d210b",
                "indicator--560ba88c-f574-43e3-8001-489a950d210b",
                "indicator--560ba88c-0b60-4312-9bff-49dd950d210b",
                "indicator--560ba88d-db94-4583-bed7-4215950d210b",
                "indicator--560ba88d-49e4-48b7-87b0-46d7950d210b",
                "indicator--560ba88d-2aa8-4adb-ade3-4a4d950d210b",
                "indicator--560ba88e-58ac-4221-85e2-45aa950d210b",
                "indicator--560ba88e-46c0-4013-9220-4330950d210b",
                "indicator--560ba88f-ec34-4c0a-a45e-49e7950d210b",
                "indicator--560ba88f-7b88-4696-bacb-411d950d210b",
                "indicator--560ba88f-9e08-413e-8f4e-4767950d210b",
                "indicator--560ba890-d7c8-4647-ab88-4c7c950d210b",
                "indicator--560ba890-6494-4579-8510-4c5b950d210b",
                "indicator--560ba890-1624-4b5f-8af6-4411950d210b",
                "indicator--560ba891-6030-4dba-803c-4b95950d210b",
                "indicator--560ba891-2970-480e-861a-48ab950d210b",
                "indicator--560ba892-6e54-4e53-b2b7-423b950d210b",
                "indicator--560ba892-f0b4-4999-9b03-43bb950d210b",
                "indicator--560ba892-3150-4504-aacf-409e950d210b",
                "indicator--560ba893-8f30-4c5a-a488-4458950d210b",
                "indicator--560ba893-1048-4849-ba93-4205950d210b",
                "indicator--560ba893-9b10-470e-bff3-4ec1950d210b",
                "indicator--560ba894-aa04-4226-a91b-4a7c950d210b",
                "indicator--560ba894-251c-4c52-838b-46c4950d210b",
                "indicator--560ba895-76dc-4869-90df-4e9f950d210b",
                "indicator--560ba895-ffd4-40c0-8919-47b2950d210b",
                "indicator--560ba895-3e30-4ebf-a7e2-42cd950d210b",
                "indicator--560ba896-9cd4-412e-bc94-4e26950d210b",
                "indicator--560ba896-604c-4ee3-9127-4c1b950d210b",
                "indicator--560ba897-b368-49ae-b19d-4647950d210b",
                "indicator--560ba897-0384-4af8-a300-4477950d210b",
                "indicator--560ba897-1c08-469a-a3e6-4323950d210b",
                "indicator--560ba898-7130-4a3a-b5ac-4026950d210b",
                "indicator--560ba898-41a4-406d-a045-4b8b950d210b",
                "indicator--560ba898-c98c-4dcc-b0b7-4325950d210b",
                "indicator--560ba899-9848-4d7a-958e-4e1c950d210b",
                "indicator--560ba899-7980-409a-b95e-4fda950d210b",
                "indicator--560ba89a-1038-4902-b2a4-4795950d210b",
                "indicator--560ba89a-07b4-4d7e-a3bf-4a86950d210b",
                "indicator--560ba89a-c35c-43db-b75a-4200950d210b",
                "indicator--560ba89b-39f8-41f2-8c4e-4e42950d210b",
                "indicator--560ba89b-b9ac-4eca-9b2d-4c3a950d210b",
                "indicator--560ba89b-a600-4551-979f-43fc950d210b",
                "indicator--560ba89c-7a34-43e5-9500-4b0d950d210b",
                "indicator--560ba89c-b4f4-4bdb-b2eb-4c79950d210b",
                "indicator--560ba89d-be90-4075-9344-4376950d210b",
                "indicator--560ba89d-ca2c-492c-8c5d-47c4950d210b",
                "indicator--560ba89d-f7a4-423e-863b-459a950d210b",
                "indicator--560ba89e-bf48-48e9-8454-45b8950d210b",
                "indicator--560ba89e-19e0-4afb-8241-4d51950d210b",
                "indicator--560ba89f-a1f0-4957-914d-44a1950d210b",
                "indicator--560ba89f-69f0-414b-b6ad-41a0950d210b",
                "indicator--560ba89f-e7c4-441d-97e5-4a50950d210b",
                "indicator--560ba8a0-d950-4165-b568-4e26950d210b",
                "indicator--560ba8a0-f19c-4c92-93e8-452d950d210b",
                "indicator--560ba8a0-3ef4-46d8-8b51-4d4c950d210b",
                "indicator--560ba8a1-b3e8-4da2-9f48-4531950d210b",
                "indicator--560ba8a1-59fc-4e28-9148-4c65950d210b",
                "indicator--560ba8a2-7ed8-499f-9d73-4eff950d210b",
                "indicator--560ba8a2-eec0-4b76-bf92-4769950d210b",
                "indicator--560ba8a2-d614-484a-bc53-44d2950d210b",
                "indicator--560ba8a3-0d7c-4d1f-b0a7-4746950d210b",
                "indicator--560ba8a3-3dc0-4384-b88d-4423950d210b",
                "indicator--560ba8a3-afc4-4b35-8414-4226950d210b",
                "indicator--560ba8a4-64a0-4d8d-8058-4ace950d210b",
                "indicator--560ba8a4-af60-46f3-96ca-4edb950d210b",
                "indicator--560ba8a5-b2f8-4393-be81-4dd7950d210b",
                "indicator--560ba8a5-6610-4929-b27d-4487950d210b",
                "indicator--560ba8a5-eb18-4f24-952b-4654950d210b",
                "indicator--560ba8a6-e7cc-4f01-be44-4f0c950d210b",
                "indicator--560ba8a6-48d4-4b99-b596-4bc0950d210b",
                "indicator--560ba8a7-2c14-4841-9bd3-413d950d210b",
                "indicator--560ba8a7-ff64-4593-871f-4421950d210b",
                "indicator--560ba8a7-f960-4045-851f-48c7950d210b",
                "indicator--560ba8a8-d9d4-4263-b803-48c1950d210b",
                "indicator--560ba8a8-2eec-4245-b931-4294950d210b",
                "indicator--560ba8a8-54f8-4b52-8500-457f950d210b",
                "indicator--560ba8a9-3c8c-42cd-b642-447f950d210b",
                "indicator--560ba8a9-4024-4da7-a8d4-44cd950d210b",
                "indicator--560ba8aa-ec9c-476d-94b3-4119950d210b",
                "indicator--560ba8aa-0e74-417e-a1f5-42bb950d210b",
                "indicator--560ba8aa-bd88-49ab-b3f9-4bd7950d210b",
                "indicator--560ba8ab-8b74-4064-90d7-4358950d210b",
                "indicator--560ba8ab-3d70-46e3-bb6f-4ba6950d210b",
                "indicator--560ba8ac-022c-4137-8468-4926950d210b",
                "indicator--560ba8ac-4454-4895-aead-495a950d210b",
                "indicator--560ba8ac-7ef8-4253-bff3-4de4950d210b",
                "indicator--560ba8ad-8b88-44e0-a9f2-4a70950d210b",
                "indicator--560ba8ad-0bbc-4665-8694-47c6950d210b",
                "indicator--560ba8ad-24d8-4883-b769-45f1950d210b",
                "indicator--560ba8ae-5a44-4427-92ac-474e950d210b",
                "indicator--560ba8ae-8374-4559-b914-4a41950d210b",
                "indicator--560ba8af-6170-4f11-9b26-4545950d210b",
                "indicator--560ba8af-641c-46a1-a34a-44a8950d210b",
                "indicator--560ba8af-267c-4b9a-9fb4-4f63950d210b",
                "indicator--560ba8b0-ca64-46bd-9314-4f91950d210b",
                "indicator--560ba8b0-dd4c-4f55-86c3-4426950d210b",
                "indicator--560ba8b0-80d4-4623-a6f2-4901950d210b",
                "indicator--560ba8b1-5fc8-4276-8f78-4c79950d210b",
                "indicator--560ba8b1-0c2c-4bb2-8c0d-403c950d210b",
                "indicator--560ba8b2-1364-4eb4-a494-4a69950d210b",
                "indicator--560ba8b2-7824-4773-9418-4fe4950d210b",
                "indicator--560ba8b2-8a9c-499a-83e7-44fb950d210b",
                "indicator--560ba8b3-d25c-4761-a435-42cf950d210b",
                "indicator--560ba8b3-3e9c-4d66-8710-4dec950d210b",
                "indicator--560ba8b4-55e0-400a-a852-464b950d210b",
                "indicator--560ba8b4-225c-48aa-9969-4aaa950d210b",
                "indicator--560ba8b4-2060-4560-9463-4a0c950d210b",
                "indicator--560ba8b5-ccc0-45b1-8955-4cf9950d210b",
                "indicator--560ba8b5-930c-44e9-9e66-4d7c950d210b",
                "indicator--560ba8b5-c9f0-4ee2-b1e5-4dbe950d210b",
                "indicator--560ba8b6-0360-4732-a758-4134950d210b",
                "indicator--560ba8b6-a4c8-480f-95f4-40a0950d210b",
                "indicator--560ba8b7-0ce8-4233-9a4b-4452950d210b",
                "indicator--560ba8b7-f14c-4a09-a877-4c91950d210b",
                "indicator--560ba8b7-4680-4276-8e75-4fb7950d210b",
                "indicator--560ba8b8-ff44-444f-8070-4f08950d210b",
                "indicator--560ba8b8-6c2c-49f9-bb3d-43d3950d210b",
                "indicator--560ba8b9-6cec-4d76-a462-4a38950d210b",
                "indicator--560ba8b9-c964-49e4-93c4-4482950d210b",
                "indicator--560ba8b9-f510-430f-95e4-459a950d210b",
                "indicator--560ba8ba-0a50-4e50-b663-4a1a950d210b",
                "indicator--560ba8ba-ede8-473d-b7fe-40c1950d210b",
                "indicator--560ba8ba-de64-4d0b-8dae-45c2950d210b",
                "indicator--560ba8bb-1178-4340-9450-4422950d210b",
                "indicator--560ba8bb-486c-44fa-993c-47f9950d210b",
                "indicator--560ba8bc-b5f4-4142-aa4e-4923950d210b",
                "indicator--560ba8bc-2720-4be0-a4a4-4243950d210b",
                "indicator--560ba8bc-6944-4dec-a415-436c950d210b",
                "indicator--560ba8bd-5548-4878-98ef-4598950d210b",
                "indicator--560ba8bd-f348-4ba7-b5e5-41b7950d210b",
                "indicator--560ba8bd-7b78-43dc-8343-427f950d210b",
                "indicator--560ba8be-7264-48f6-bbca-44ce950d210b",
                "indicator--560ba8be-7970-4515-b780-49a4950d210b",
                "indicator--560ba8bf-7138-4988-8389-4d6e950d210b",
                "indicator--560ba8bf-7bb4-4a4e-8311-4337950d210b",
                "indicator--560ba8bf-20d8-4e6c-946b-46ec950d210b",
                "indicator--560ba8c0-ed08-4cf1-83aa-45c2950d210b",
                "indicator--560ba8c0-32f4-4501-8b43-4ad5950d210b",
                "indicator--560ba8c1-145c-48e1-981c-4f4c950d210b",
                "indicator--560ba8c1-c514-4334-8947-4b95950d210b",
                "indicator--560ba8c1-12b8-4c24-85ec-4b26950d210b",
                "indicator--560ba8c2-1f3c-42b7-9502-4d40950d210b",
                "indicator--560ba8c2-82dc-4744-85e3-49ab950d210b",
                "indicator--560ba8c2-ac2c-49cd-9b30-4aa2950d210b",
                "indicator--560ba8c3-9b98-4fea-a335-4f5f950d210b",
                "indicator--560ba8c3-fe78-477c-a8b6-477c950d210b",
                "indicator--560ba8c4-3b6c-42e9-ad4b-4dc5950d210b",
                "indicator--560ba8c4-c158-466e-bc41-465c950d210b",
                "indicator--560ba8c4-734c-4094-b5f1-4101950d210b",
                "indicator--560ba8c5-67fc-4b0a-90dc-48e8950d210b",
                "indicator--560ba8c5-ee88-466d-8444-4e70950d210b",
                "indicator--560ba8c6-9e1c-4546-9299-487a950d210b",
                "indicator--560ba8c6-6f4c-417f-a988-4986950d210b",
                "indicator--560ba8c6-aa88-4cba-929d-4104950d210b",
                "indicator--560ba8c7-cfdc-48f2-8128-495f950d210b",
                "indicator--560ba8c7-11e4-43d9-a3bd-43df950d210b",
                "indicator--560ba8c7-ee14-4a65-aed4-4a99950d210b",
                "indicator--560ba8c8-1900-4aea-8593-47fa950d210b",
                "indicator--560ba8c8-d488-4113-bb6d-464d950d210b",
                "indicator--560ba8c9-7d7c-4eaf-a776-4e8f950d210b",
                "indicator--560ba8c9-65c8-4fb5-b4bb-4078950d210b",
                "indicator--560ba8c9-2bac-4563-a7e0-4e96950d210b",
                "indicator--560ba8ca-f488-401d-844a-4fa2950d210b",
                "indicator--560ba8ca-8624-440f-896f-41af950d210b",
                "indicator--560ba8cb-9ca8-4236-a965-4bf4950d210b",
                "indicator--560ba8cb-3b44-4b1e-a17d-46ce950d210b",
                "indicator--560ba8cb-8050-4de2-9b1b-4cb7950d210b",
                "indicator--560ba8cc-b078-4c49-baa8-46d4950d210b",
                "indicator--560ba8cc-0b08-48ce-bcb7-4bc3950d210b",
                "indicator--560ba8cc-dc40-4ad7-aa0c-4b5d950d210b",
                "indicator--560ba8cd-e884-45a7-822f-490d950d210b",
                "indicator--560ba8cd-9c5c-45df-9ad0-4a6a950d210b",
                "indicator--560ba8ce-5d3c-4ee8-85c8-4618950d210b",
                "indicator--560ba8ce-9b1c-409a-971a-4351950d210b",
                "indicator--560ba8ce-cab0-472c-a347-4a8d950d210b",
                "indicator--560ba8cf-abd8-4358-9af3-4d5c950d210b",
                "indicator--560ba8cf-c060-4866-beda-427d950d210b",
                "indicator--560ba8d0-8438-479c-8231-47f6950d210b",
                "indicator--560ba8d0-cfec-42ba-896f-4c0a950d210b",
                "indicator--560ba8d0-0fa4-4230-8542-4763950d210b",
                "indicator--560ba8d1-a7c0-4d12-911e-4846950d210b",
                "indicator--560ba8d1-a954-4b56-9e6f-4260950d210b",
                "indicator--560ba8d1-c4d4-49ee-ae65-45b5950d210b",
                "indicator--560ba8d2-5b14-44cf-8c77-47d4950d210b",
                "indicator--560ba8d2-845c-4479-87c8-4012950d210b",
                "indicator--560ba8d3-ca9c-49ae-9c9e-4c2d950d210b",
                "indicator--560ba8d3-ef98-4945-a109-4f3b950d210b",
                "indicator--560ba8d3-ed34-4b7e-9606-450d950d210b",
                "indicator--560ba8d4-bc64-433c-a897-45f2950d210b",
                "indicator--560ba8d4-b990-4cd1-a55c-4114950d210b",
                "indicator--560ba8d5-9d58-4f6e-a575-4437950d210b",
                "indicator--560ba8d5-7130-405c-96e1-4969950d210b",
                "indicator--560ba8d5-3f04-42de-8876-439e950d210b",
                "indicator--560ba8d6-38bc-4662-9268-4c63950d210b",
                "indicator--560ba8d6-bac0-4a7e-b01e-475c950d210b",
                "indicator--560ba8d7-3464-42ac-ba89-409c950d210b",
                "indicator--560ba8d7-47a8-4bde-b15d-4725950d210b",
                "indicator--560ba8d8-75c0-4a7f-8cf0-4f67950d210b",
                "indicator--560ba8d8-26c0-46ed-9fc1-48b6950d210b",
                "indicator--560ba8d9-012c-41ed-81aa-47f0950d210b",
                "indicator--560ba8d9-4998-4a19-831a-4f9d950d210b",
                "indicator--560ba8d9-66cc-4f23-b8df-48bd950d210b",
                "indicator--560ba8da-0478-4c4f-83d9-4acc950d210b",
                "indicator--560ba8da-0b98-42d1-886e-4ff8950d210b",
                "indicator--560ba8da-6b20-451e-802a-4627950d210b",
                "indicator--560ba8db-23c8-4359-b652-4f7e950d210b",
                "indicator--560ba8db-ee60-45c0-a9d5-42a7950d210b",
                "indicator--560ba8dc-68f0-46b8-ae8f-4958950d210b",
                "indicator--560ba8dc-2bf8-4099-966c-4177950d210b",
                "indicator--560ba8dc-aaf8-476e-92f8-4422950d210b",
                "indicator--560ba8dd-cfd0-491c-aee7-4eb3950d210b",
                "indicator--560ba8dd-cf70-4c2a-a4ed-4f3d950d210b",
                "indicator--560ba8dd-e16c-4a13-ba8e-4e4a950d210b",
                "indicator--560ba8de-d104-4d18-b0c8-4739950d210b",
                "indicator--560ba8de-09a0-465e-8c68-4d80950d210b",
                "indicator--560ba8df-dbec-4e3e-bb7a-48ab950d210b",
                "indicator--560ba8df-3768-4d05-83c9-4ffe950d210b",
                "indicator--560ba8df-d938-4fed-b6c4-4f72950d210b",
                "indicator--560ba8e0-02fc-43cc-a13e-4976950d210b",
                "indicator--560ba8e0-9ba4-4b96-bbdb-451c950d210b",
                "indicator--560ba8e1-6fe4-47ba-92f6-440c950d210b",
                "indicator--560ba8e1-1f98-49eb-9be1-4352950d210b",
                "indicator--560ba8e1-3704-48dd-b8d7-4670950d210b",
                "indicator--560ba8e2-49f4-44d1-9e96-40d0950d210b",
                "indicator--560ba8e2-1ed4-41d3-b98f-43db950d210b",
                "indicator--560ba8e2-9c40-4b96-ae98-4cc6950d210b",
                "indicator--560ba8e3-7fc0-4a47-aaa2-40d6950d210b",
                "indicator--560ba8e3-73ec-4f66-a1fd-4536950d210b",
                "indicator--560ba8e4-f624-46b3-b48a-4ab0950d210b",
                "indicator--560ba8e4-e790-4016-bf05-4af9950d210b",
                "indicator--560ba8e4-24a8-4923-9ed5-4176950d210b",
                "indicator--560ba8e5-3bec-49e7-8e8e-4402950d210b",
                "indicator--560ba8e5-f00c-46b1-b92b-4801950d210b",
                "indicator--560ba8e6-52a4-4e0f-81d2-4c37950d210b",
                "indicator--560ba8e6-63c8-4d6c-9369-40cb950d210b",
                "indicator--560ba8e6-ac24-4ef6-b149-44ad950d210b",
                "indicator--560ba8e7-31c4-4128-9c02-4d3a950d210b",
                "indicator--560ba8e7-75dc-46f5-b830-4592950d210b",
                "indicator--560ba8e8-9e24-469c-a7cb-47ec950d210b",
                "indicator--560ba8e8-cf5c-4379-b046-488b950d210b",
                "indicator--560ba8e8-6b80-4fc4-8a87-4604950d210b",
                "indicator--560ba8e9-c3ac-4e4a-800f-403a950d210b",
                "indicator--560ba8e9-a654-4948-8748-4c57950d210b",
                "indicator--560ba8e9-f0b4-4145-9683-405c950d210b",
                "indicator--560ba8ea-6840-4397-a60e-4d21950d210b",
                "indicator--560ba8ea-1fb4-4a00-b98e-4a79950d210b",
                "indicator--560ba8eb-5e2c-4b49-8e7b-4483950d210b",
                "indicator--560ba8eb-cfe4-4143-9c94-48b9950d210b",
                "indicator--560ba8eb-76a4-4b7a-a853-4a34950d210b",
                "indicator--560ba8ec-edf8-45b3-8069-4cb4950d210b",
                "indicator--560ba8ec-1104-4e37-86fe-43db950d210b",
                "indicator--560ba8ed-0bf4-4a53-a5ac-4203950d210b",
                "indicator--560ba8ed-b9d0-48d1-b2d9-483c950d210b",
                "indicator--560ba8ed-4210-4e4e-abe3-4a79950d210b",
                "indicator--560ba8ee-dc40-4df9-a180-4331950d210b",
                "indicator--560ba8ee-cb20-426d-823f-4a7a950d210b",
                "indicator--560ba8ee-5510-4110-92fc-49a8950d210b",
                "indicator--560ba8ef-35a4-4005-9af8-4622950d210b",
                "indicator--560ba8ef-db24-4616-99f1-4986950d210b",
                "indicator--560ba8f0-ae7c-4a5e-964e-46c4950d210b",
                "indicator--560ba8f0-5fa4-439f-9e6d-4892950d210b",
                "indicator--560ba8f0-b4c4-4a65-b540-4e6d950d210b",
                "indicator--560ba8f1-30fc-47d9-860b-4999950d210b",
                "indicator--560ba8f1-e10c-4a94-83ff-415a950d210b",
                "indicator--560ba8f1-3d70-4232-94c6-4a9d950d210b",
                "indicator--560ba8f2-5340-48b4-a18f-4f33950d210b",
                "indicator--560ba8f2-b828-46ca-b87a-4c26950d210b",
                "indicator--560ba8f3-27e8-4701-8d8a-4aa1950d210b",
                "indicator--560ba8f3-7f58-4a68-9ef0-4f64950d210b",
                "indicator--560ba8f3-a130-47b2-8670-40b0950d210b",
                "indicator--560ba8f4-36f8-4840-834d-44f3950d210b",
                "indicator--560ba8f4-140c-4b76-9742-4899950d210b",
                "indicator--560ba8f4-a398-460e-92cf-4359950d210b",
                "indicator--560ba8f5-2ce8-4d0f-9437-4319950d210b",
                "indicator--560ba8f5-3688-4fd2-8169-407c950d210b",
                "indicator--560ba8f6-4970-432f-b720-4d6c950d210b",
                "indicator--560ba8f6-7970-489d-8be8-4738950d210b",
                "indicator--560ba8f6-11c8-4b87-a96c-4ec1950d210b",
                "indicator--560ba8f7-847c-4ec8-a155-4bac950d210b",
                "indicator--560ba8f7-eeb0-494f-b3c3-47fa950d210b",
                "indicator--560ba8f7-63f8-4b4d-8717-4a6c950d210b",
                "indicator--560ba8f8-8f54-461f-a24a-4fb0950d210b",
                "indicator--560ba8f8-a728-4291-9559-4b38950d210b",
                "indicator--560ba8f9-4c84-44dd-a783-4a44950d210b",
                "indicator--560ba8f9-8974-44ad-bd3d-474c950d210b",
                "indicator--560ba8f9-c0ac-41ba-9d54-4413950d210b",
                "indicator--560ba8fa-c320-4427-8f66-4145950d210b",
                "indicator--560ba8fa-e314-44d0-80c1-4cfa950d210b",
                "indicator--560ba8fa-d46c-4734-a137-4dfb950d210b",
                "indicator--560ba8fb-b3f4-4d29-bd77-4602950d210b",
                "indicator--560ba8fb-6858-4c32-a1df-44d1950d210b",
                "indicator--560ba8fc-87f8-463b-9b06-4aed950d210b",
                "indicator--560ba8fc-1038-456b-bb8a-44d2950d210b",
                "indicator--560ba8fc-6328-4b0e-9b8f-4a90950d210b",
                "indicator--560ba8fd-2cd4-4988-96ed-4252950d210b",
                "indicator--560ba8fd-9c1c-42f7-abc9-40a4950d210b",
                "indicator--560ba8fd-28d0-4286-9189-4fcf950d210b",
                "indicator--560ba8fe-09ac-4b5e-8827-4644950d210b",
                "indicator--560ba8fe-250c-4b5a-942e-4c77950d210b",
                "indicator--560ba8ff-8ab4-4123-a303-4703950d210b",
                "indicator--560ba8ff-9e80-4668-ba5a-4877950d210b",
                "indicator--560ba8ff-0610-403b-b2ec-4e94950d210b",
                "indicator--560ba900-fee8-447a-98db-40a8950d210b",
                "indicator--560ba900-4b24-4bb9-9ee1-4384950d210b",
                "indicator--560ba901-7714-4e24-9614-4f41950d210b",
                "indicator--560ba901-78f4-47ec-b405-4036950d210b",
                "indicator--560ba901-3184-41d9-9cd8-43e1950d210b",
                "indicator--560ba902-867c-4260-876b-4156950d210b",
                "indicator--560ba902-6130-476f-9ac8-475f950d210b",
                "indicator--560ba902-198c-404e-be30-4f22950d210b",
                "indicator--560ba903-bc9c-4479-8b67-4eba950d210b",
                "indicator--560ba903-5a68-4b49-9eda-441d950d210b",
                "indicator--560ba904-d6c4-44d0-a8ea-4c49950d210b",
                "indicator--560ba904-17b4-4b41-8e5a-4fd2950d210b",
                "indicator--560ba904-dcc0-4db8-b7dd-4c0b950d210b",
                "indicator--560ba905-ad90-4b52-b03c-4d13950d210b",
                "indicator--560ba905-8f34-4e8c-bdfd-4f39950d210b",
                "indicator--560ba905-c468-4813-aa7d-419e950d210b",
                "indicator--560ba906-19b4-40a9-a346-4aad950d210b",
                "indicator--560ba906-4e94-416f-9c66-4a38950d210b",
                "indicator--560ba907-9608-480f-87bc-46e7950d210b",
                "indicator--560ba907-5dd4-4597-a5d0-490a950d210b",
                "indicator--560ba907-8de0-4d6d-b40d-4fb4950d210b",
                "indicator--560ba908-9fb4-42b1-87de-4042950d210b",
                "indicator--560ba908-18ec-4eb7-89c6-4564950d210b",
                "indicator--560ba908-f1b8-4325-8ad3-4cec950d210b",
                "indicator--560ba909-b74c-41f8-a0e9-45c6950d210b",
                "indicator--560ba909-5080-46b8-a9d9-4f8b950d210b",
                "indicator--560ba90a-9638-4e34-8721-4914950d210b",
                "indicator--560ba90a-0230-4dab-b3bb-4b9d950d210b",
                "indicator--560ba90a-dce4-4096-9e87-4899950d210b",
                "indicator--560ba90b-8600-418d-a3d8-4eb9950d210b",
                "indicator--560ba90b-58f0-4db0-9ec9-497c950d210b",
                "indicator--560ba90b-8cd8-4a61-9328-4097950d210b",
                "indicator--560ba90c-4b74-4c0a-9597-4605950d210b",
                "indicator--560ba90c-b9fc-4e4f-a839-4c57950d210b",
                "indicator--560ba90d-4f60-4f4a-bb64-410d950d210b",
                "indicator--560ba90d-2798-43a7-8060-42b4950d210b",
                "indicator--560ba90d-3c80-4a59-bd1b-4820950d210b",
                "indicator--560ba90e-75e8-440a-a248-4406950d210b",
                "indicator--560ba90e-eed0-4e19-bbaf-45d1950d210b",
                "indicator--560ba90e-a1a0-4adc-b898-4653950d210b",
                "indicator--560ba90f-85d8-47b9-bc6f-463b950d210b",
                "indicator--560ba90f-6770-49b6-a270-4f7c950d210b",
                "indicator--560ba910-bf50-4be9-ac60-433f950d210b",
                "indicator--560ba910-0a60-4558-8c03-4275950d210b",
                "indicator--560ba910-1afc-4836-9c73-4711950d210b",
                "indicator--560ba911-afe0-47f8-9b13-4502950d210b",
                "indicator--560ba911-5838-4dd4-bbe2-497a950d210b",
                "indicator--560ba911-dbc8-4390-b92b-45fb950d210b",
                "indicator--560ba912-60cc-4c15-9840-4cca950d210b",
                "indicator--560ba912-2a20-4dec-b0cb-4f20950d210b",
                "indicator--560ba913-f9a4-4c1b-ad74-420f950d210b",
                "indicator--560ba913-4ff4-454c-a772-483a950d210b",
                "indicator--560ba913-2590-48a6-9fb6-42f6950d210b",
                "indicator--560ba914-d430-4969-baac-4945950d210b",
                "indicator--560ba914-3c9c-429c-9eea-4cfe950d210b",
                "indicator--560ba914-bd2c-4c5e-99fd-4275950d210b",
                "indicator--560ba915-7748-4a69-9df6-4db6950d210b",
                "indicator--560ba915-6e40-45be-a069-4ae5950d210b",
                "indicator--560ba916-af00-4bdd-88c4-42c7950d210b",
                "indicator--560ba916-56c8-43be-bd79-4224950d210b",
                "indicator--560ba916-333c-4edb-84de-4479950d210b",
                "indicator--560ba917-ca88-4494-9b06-4399950d210b",
                "indicator--560ba917-85ac-4555-8165-419a950d210b",
                "indicator--560ba917-5280-4df0-a3b7-4563950d210b",
                "indicator--560ba918-234c-4d14-a9eb-4c44950d210b",
                "indicator--560ba918-99ac-4818-9186-469d950d210b",
                "indicator--560ba919-72c0-43c1-96c0-4f6a950d210b",
                "indicator--560ba919-0f28-4b06-b90a-42fa950d210b",
                "indicator--560ba919-62b4-4e38-83e8-45e9950d210b",
                "indicator--560ba91a-b3c4-4386-9497-488c950d210b",
                "indicator--560ba91a-0dd8-49a4-8a97-439b950d210b",
                "indicator--560ba91a-e964-4fdc-bf36-42e5950d210b",
                "indicator--560ba91b-667c-434a-a020-428a950d210b",
                "indicator--560ba91b-0e34-466e-9c09-411d950d210b",
                "indicator--560ba91c-43dc-42b3-abb9-4b6e950d210b",
                "indicator--560ba91c-f0b0-4034-a12d-4fd1950d210b",
                "indicator--560ba91c-2604-49bf-a4e6-4dc6950d210b",
                "indicator--560ba91d-90a8-459d-863f-45d4950d210b",
                "indicator--560ba91d-cf74-4ee3-acb2-4f2b950d210b",
                "indicator--560ba91d-6ac4-43f5-9196-4a84950d210b",
                "indicator--560ba91e-7b2c-4ce4-8d5c-49c2950d210b",
                "indicator--560ba91e-cd4c-4533-b87b-4b19950d210b",
                "indicator--560ba91f-7548-4209-b819-436e950d210b",
                "indicator--560ba91f-1d94-4e78-b625-4311950d210b",
                "indicator--560ba91f-c710-4621-958e-43dc950d210b",
                "indicator--560ba920-f110-4f23-82b7-41c6950d210b",
                "indicator--560ba920-4f04-41ef-8495-45af950d210b",
                "indicator--560ba920-8fb8-495f-bd98-405f950d210b",
                "indicator--560ba921-c470-430c-ac10-4a92950d210b",
                "indicator--560ba921-b430-46db-a0d6-4fc7950d210b",
                "indicator--560ba922-f74c-4c1f-ac4d-4f59950d210b",
                "indicator--560ba922-92ac-4086-98a7-4f51950d210b",
                "indicator--560ba922-a068-460e-ac5d-4492950d210b",
                "indicator--560ba923-bc7c-4695-aca9-4844950d210b",
                "indicator--560ba923-da68-4a30-a7b3-471e950d210b",
                "indicator--560ba923-7aa4-4d49-bb2a-4bda950d210b",
                "indicator--560ba924-6c7c-4a8b-bc2a-4fe8950d210b",
                "indicator--560ba924-9cf8-4230-b441-4b31950d210b",
                "indicator--560ba925-5ec0-4793-93b3-4582950d210b",
                "indicator--560ba925-4338-4236-b908-452a950d210b",
                "indicator--560ba925-19f8-4f96-8fd4-4ab3950d210b",
                "indicator--560ba926-2608-4980-8ae9-459f950d210b",
                "indicator--560ba926-1d18-498f-b8c6-4574950d210b",
                "indicator--560ba926-245c-44c2-b0ec-4f5f950d210b",
                "indicator--560ba927-7124-4a9c-814b-4b79950d210b",
                "indicator--560ba927-a398-474a-90af-4222950d210b",
                "indicator--560ba928-8960-4568-ab29-4347950d210b",
                "indicator--560ba928-bf58-4a36-bd0c-419d950d210b",
                "indicator--560ba928-5934-4daf-88fb-4870950d210b",
                "indicator--560ba929-a700-4ecf-8bc5-4783950d210b",
                "indicator--560ba929-7868-48a6-a98f-4a87950d210b",
                "indicator--560ba929-0290-47d1-a0f9-4444950d210b",
                "indicator--560ba92a-9814-4eab-9352-445d950d210b",
                "indicator--560ba92a-df60-42ff-b4ea-4017950d210b",
                "indicator--560ba92b-2d20-4584-bfc3-4290950d210b",
                "indicator--560ba92b-550c-49f5-bbed-4d5a950d210b",
                "indicator--560ba92b-1cd8-4c17-b5ab-449a950d210b",
                "indicator--560ba92c-1ae4-4707-9f48-45ac950d210b",
                "indicator--560ba92c-483c-4886-a12d-4bb3950d210b",
                "indicator--560ba92c-b334-4d17-a62b-41be950d210b",
                "indicator--560ba92d-4b9c-49c4-8e38-4ea2950d210b",
                "indicator--560ba92d-6b90-4851-8f2b-4e44950d210b",
                "indicator--560ba92e-1a44-4ea1-97db-41ea950d210b",
                "indicator--560ba92e-d748-4fed-a474-4bf5950d210b",
                "indicator--560ba92e-6ff0-4d30-a36c-4624950d210b",
                "indicator--560ba92f-255c-479b-8723-4c3f950d210b",
                "indicator--560ba92f-c2fc-40b1-9a46-4e20950d210b",
                "indicator--560ba92f-3b58-4c31-8de0-4fa1950d210b",
                "indicator--560ba930-0c38-49e0-9845-4f5d950d210b",
                "indicator--560ba930-a8a4-4063-985f-4ad9950d210b",
                "indicator--560ba931-460c-4699-9c30-4a42950d210b",
                "indicator--560ba931-7be8-4d1f-85a1-4c18950d210b",
                "indicator--560ba931-d24c-4844-8962-42b5950d210b",
                "indicator--560ba932-54c4-466b-90bf-4a61950d210b",
                "indicator--560ba932-fc3c-4c53-a4d4-47c0950d210b",
                "indicator--560ba932-fd40-4ef4-b317-48be950d210b",
                "indicator--560ba933-defc-42d2-b59d-4d42950d210b",
                "indicator--560ba933-3c88-4f5b-a117-4ddb950d210b",
                "indicator--560ba934-fb1c-4daf-8091-41c6950d210b",
                "indicator--560ba934-c118-48b0-ab86-4f00950d210b",
                "indicator--560ba934-af84-45b7-8307-427c950d210b",
                "indicator--560ba935-7058-4dc4-95da-46d7950d210b",
                "indicator--560ba935-7ea8-4b04-927b-4e49950d210b",
                "indicator--560ba935-391c-49f9-9631-45cc950d210b",
                "indicator--560ba936-1c44-478b-99dd-4707950d210b",
                "indicator--560ba936-ed58-40d1-937b-4b8a950d210b",
                "indicator--560ba937-3bac-449c-bbe1-4e57950d210b",
                "indicator--560ba937-16d0-4e58-81a9-4816950d210b",
                "indicator--560ba937-118c-468a-8e98-4bee950d210b",
                "indicator--560ba938-3eec-4314-bb7e-48d1950d210b",
                "indicator--560ba938-3fc4-472f-a551-43d6950d210b",
                "indicator--560ba938-aa1c-4c90-9c3f-45d1950d210b",
                "indicator--560ba939-987c-47a3-a4ea-44eb950d210b",
                "indicator--560ba939-b02c-4926-bc00-438a950d210b",
                "indicator--560ba93a-9294-44c1-99d5-48af950d210b",
                "indicator--560ba93a-c2f0-404a-8900-41b7950d210b",
                "indicator--560ba93a-d9a0-4d54-86d3-489b950d210b",
                "indicator--560ba93b-5864-4089-81f2-4057950d210b",
                "indicator--560ba93b-8768-4464-8f55-49a1950d210b",
                "indicator--560ba93b-c8fc-4120-9144-4705950d210b",
                "indicator--560ba93c-611c-4b92-9b32-41ba950d210b",
                "indicator--560ba93c-8e40-4d41-848c-4349950d210b",
                "indicator--560ba93d-3998-4176-9b02-4dac950d210b",
                "indicator--560ba93d-3148-4dd9-821b-4005950d210b",
                "indicator--560ba93d-cb00-44d7-9dd5-47da950d210b",
                "indicator--560ba93e-a99c-4fbc-a0aa-47ec950d210b",
                "indicator--560ba93e-89ec-47b8-b116-438c950d210b",
                "indicator--560ba93e-4ec8-4218-a0e1-444a950d210b",
                "indicator--560ba93f-3654-4cd3-a23c-4bc9950d210b",
                "indicator--560ba93f-4bf4-486a-a7a7-429c950d210b",
                "indicator--560ba940-9240-45de-b000-4669950d210b",
                "indicator--560ba940-93e0-4b07-89c9-46f1950d210b",
                "indicator--560ba940-012c-4eec-ac35-4e9b950d210b",
                "indicator--560ba941-703c-4fe6-809c-492f950d210b",
                "indicator--560ba941-83d4-4db8-b9c5-47d8950d210b",
                "indicator--560ba941-f6b8-4f04-8ec9-44ac950d210b",
                "indicator--560ba942-6530-4be8-ae14-4fb5950d210b",
                "indicator--560ba942-ea34-49af-920e-4688950d210b",
                "indicator--560ba943-4438-4007-9067-4bf9950d210b",
                "indicator--560ba943-6c84-4d31-9628-4e2c950d210b",
                "indicator--560ba943-35f8-48ef-806d-45c0950d210b",
                "indicator--560ba944-0088-440d-81e7-410d950d210b",
                "indicator--560ba944-cc8c-4a9a-b55c-45c1950d210b",
                "indicator--560ba945-3348-4487-9373-469f950d210b",
                "indicator--560ba945-0dd4-404f-8d82-4c8e950d210b",
                "indicator--560ba945-9e98-4864-96a5-431d950d210b",
                "indicator--560ba946-f5b0-4e05-af11-4996950d210b",
                "indicator--560ba946-9038-43f5-b44e-446f950d210b",
                "indicator--560ba946-0820-44e4-b740-418c950d210b",
                "indicator--560ba947-547c-4c83-9b87-4f54950d210b",
                "indicator--560ba947-8e64-4d66-a0cc-474a950d210b",
                "indicator--560ba947-6b70-491d-8502-4f0a950d210b",
                "indicator--560ba948-8784-46c6-99b9-47ef950d210b",
                "indicator--560ba948-9630-4df6-a132-4fc0950d210b",
                "indicator--560ba949-91e0-468e-9d04-4dec950d210b",
                "indicator--560ba949-4b3c-42cd-b9a3-4d8c950d210b",
                "indicator--560ba949-3ec4-41e6-a532-4e3c950d210b",
                "indicator--560ba94a-9a28-4f23-b25d-444a950d210b",
                "indicator--560ba94a-dff0-4468-a3fa-468d950d210b",
                "indicator--560ba94b-37f8-4454-be8d-4122950d210b",
                "indicator--560ba94b-0f68-48df-8502-414c950d210b",
                "indicator--560ba94b-2a44-453e-b9ad-4852950d210b",
                "indicator--560ba94c-0a60-47ec-810a-4a95950d210b",
                "indicator--560ba94c-2d74-4c34-91e4-4e2e950d210b",
                "indicator--560ba94c-76cc-4e73-bd37-45a1950d210b",
                "indicator--560ba94d-b8bc-45ed-b571-4c1c950d210b",
                "indicator--560ba94d-8d90-4b90-8029-43d8950d210b",
                "indicator--560ba94e-65a8-4bda-972a-43e0950d210b",
                "indicator--560ba94e-9828-4aba-a09d-4da8950d210b",
                "indicator--560ba94e-2b34-4073-a144-447f950d210b",
                "indicator--560ba94f-12d8-4ee5-acdf-47d1950d210b",
                "indicator--560ba94f-8bc0-448a-9286-4683950d210b",
                "indicator--560ba94f-601c-47aa-b6fd-4126950d210b",
                "indicator--560ba950-86ec-487b-b182-470a950d210b",
                "indicator--560ba950-4a54-490d-94aa-453c950d210b",
                "indicator--560ba951-e668-4165-a16d-49b3950d210b",
                "indicator--560ba951-c394-4072-bb44-4c52950d210b",
                "indicator--560ba951-bbf0-4a42-ad6c-404f950d210b",
                "indicator--560ba952-8cd8-4e0a-8b77-4d65950d210b",
                "indicator--560ba952-7e54-475f-b1c2-4bbd950d210b",
                "indicator--560ba952-9d40-475c-abd5-4f28950d210b",
                "indicator--560ba953-5b84-4acc-8133-449f950d210b",
                "indicator--560ba953-89ec-4ade-8d08-4440950d210b",
                "indicator--560ba954-5f18-47ca-a0d2-4c5c950d210b",
                "indicator--560ba954-a024-42e1-809a-434e950d210b",
                "indicator--560ba954-2c04-4ea3-9097-49e4950d210b",
                "indicator--560ba955-1eb4-48fe-9e9a-4515950d210b",
                "indicator--560ba955-8104-4b97-b974-4fe3950d210b",
                "indicator--560ba955-c6b8-4b19-9e24-47a7950d210b",
                "indicator--560ba956-7914-4322-a12b-4d17950d210b",
                "indicator--560ba956-5900-41cf-acb8-4340950d210b",
                "indicator--560ba957-be20-4896-9e1d-417b950d210b",
                "indicator--560ba957-f310-4b79-9d79-47da950d210b",
                "indicator--560ba957-ecc4-4866-9f75-416e950d210b",
                "indicator--560ba958-ca48-48bb-9c2d-4223950d210b",
                "indicator--560ba958-560c-4ff9-a511-4542950d210b",
                "indicator--560ba958-e9f0-41c2-99a2-4430950d210b",
                "indicator--560ba959-cf44-4ab0-90e0-41e9950d210b",
                "indicator--560ba959-1bc0-4eee-8e8b-43b9950d210b",
                "indicator--560ba95a-4abc-47a4-9a7d-48ba950d210b",
                "indicator--560ba95a-4d3c-4030-a979-4f35950d210b",
                "indicator--560ba95a-a0a4-4cac-a0d6-41c3950d210b",
                "indicator--560ba95b-a4e4-4dd6-bb1b-4360950d210b",
                "indicator--560ba95b-cdb4-4e65-b1dc-4698950d210b",
                "indicator--560ba95b-9e00-49a4-abd4-423a950d210b",
                "indicator--560ba95c-3548-453b-9456-4cad950d210b",
                "indicator--560ba95c-7404-4833-a197-4f9a950d210b",
                "indicator--560ba95c-8d7c-4883-8fc2-409a950d210b",
                "indicator--560ba95d-d3f4-4b8f-a9ac-4632950d210b",
                "indicator--560ba95d-b498-4f51-95f6-4aa2950d210b",
                "indicator--560ba95e-15ac-440d-a844-4a57950d210b",
                "indicator--560ba95e-0e34-4992-95e3-465f950d210b",
                "indicator--560ba95e-e970-473e-aa7f-479d950d210b",
                "indicator--560ba95f-4824-462b-a922-4731950d210b",
                "indicator--560ba95f-5be8-4326-beb9-4a66950d210b",
                "indicator--560ba95f-d9b4-401f-a1ff-4169950d210b",
                "indicator--560ba960-2684-47d8-922a-4e9e950d210b",
                "indicator--560ba960-1ad0-446e-95d8-4312950d210b",
                "indicator--560ba961-ca84-4636-ad8f-4862950d210b",
                "indicator--560ba961-4740-4ab4-badc-4fb2950d210b",
                "indicator--560ba961-9b88-4b2e-ab99-4489950d210b",
                "indicator--560ba962-72f0-43f0-9a1a-4458950d210b",
                "indicator--560ba962-e588-4c09-996a-4846950d210b",
                "indicator--560ba962-df5c-4691-9b25-4fd3950d210b",
                "indicator--560ba963-b64c-4553-ad1b-4c1e950d210b",
                "indicator--560ba963-ea94-49f4-aff3-4feb950d210b",
                "indicator--560ba964-1abc-425c-a036-48d5950d210b",
                "indicator--560ba964-513c-445a-95aa-44a6950d210b",
                "indicator--560ba964-029c-4e0b-835c-4bdb950d210b",
                "indicator--560ba965-06d4-4380-a625-4917950d210b",
                "indicator--560ba965-6898-4681-bd00-4fa6950d210b",
                "indicator--560ba965-8e88-4a7a-9bd1-4ecc950d210b",
                "indicator--560ba966-bdd4-478d-b82d-4aa9950d210b",
                "indicator--560ba966-ad24-4d01-ac57-4bd8950d210b",
                "indicator--560ba967-2080-45e4-95a5-409f950d210b",
                "indicator--560ba967-40bc-4886-802e-4fae950d210b",
                "indicator--560ba967-841c-4fe5-b12a-4ffc950d210b",
                "indicator--560ba968-3d74-4886-b93f-4c68950d210b",
                "indicator--560ba968-ec28-4800-aa6d-409f950d210b",
                "indicator--560ba969-4798-4937-b3eb-4334950d210b",
                "indicator--560ba969-42ec-472a-ac75-49c3950d210b",
                "indicator--560ba969-d01c-4b23-a219-4fa7950d210b",
                "indicator--560ba96a-d6b4-4eb6-9d7c-4302950d210b",
                "indicator--560ba96a-3100-4563-8824-4123950d210b",
                "indicator--560ba96a-12ec-4fc5-b6f9-4dfc950d210b",
                "indicator--560ba96b-0348-4b37-9ac2-4e57950d210b",
                "indicator--560ba96b-e4bc-4d1c-b6bd-43d4950d210b",
                "indicator--560ba96c-cad8-418d-bb7f-488a950d210b",
                "indicator--560ba96c-d4b4-4e64-83f5-48dc950d210b",
                "indicator--560ba96c-09c4-47fe-aabf-4f8e950d210b",
                "indicator--560ba96d-5638-409c-949f-4a12950d210b",
                "indicator--560ba96d-f1b0-4010-87ca-4f41950d210b",
                "indicator--560ba96d-e2a0-49a0-a4c9-4433950d210b",
                "indicator--560ba96e-ed34-4460-b2bd-497e950d210b",
                "indicator--560ba96e-8984-44a4-beb9-4205950d210b",
                "indicator--560ba96e-63ac-4a90-beea-4236950d210b",
                "indicator--560ba96f-cfa4-48c7-af2a-4f61950d210b",
                "indicator--560ba96f-40dc-43b9-8a78-4079950d210b",
                "indicator--560ba970-557c-4b45-838a-4a99950d210b",
                "indicator--560ba970-d010-427b-ac77-4e25950d210b",
                "indicator--560ba970-eae0-44e0-b89c-41ad950d210b",
                "indicator--560ba971-3840-4c1f-98ff-4b3b950d210b",
                "indicator--560ba971-60e4-41a8-a665-4100950d210b",
                "indicator--560ba972-fd20-4e34-a762-4e7c950d210b",
                "indicator--560ba972-bcf4-4d70-af25-4c85950d210b",
                "indicator--560ba972-6e5c-44d7-b7f4-41dd950d210b",
                "indicator--560ba973-4010-4afd-9f28-4a12950d210b",
                "indicator--560ba973-07a0-46f9-879a-47ef950d210b",
                "indicator--560ba973-7d50-4be3-810e-4337950d210b",
                "indicator--560ba974-0ce0-4eae-adf3-4be2950d210b",
                "indicator--560ba974-cd88-493d-90be-47d5950d210b",
                "indicator--560ba975-1410-4e21-90ec-4ae8950d210b",
                "indicator--560ba975-86f8-4d71-8a3a-449d950d210b",
                "indicator--560ba975-b3d8-4974-81c9-4821950d210b",
                "indicator--560ba976-95e4-4837-a8c7-4fdc950d210b",
                "indicator--560ba976-bdc4-40dc-a336-4a42950d210b",
                "indicator--560ba976-f588-4ed8-8694-4fc4950d210b",
                "indicator--560ba977-18a4-4cfe-9e68-4afd950d210b",
                "indicator--560ba977-876c-4895-9103-4c76950d210b",
                "indicator--560ba978-10a0-4338-bc08-4069950d210b",
                "indicator--560ba978-6798-4210-8665-4e1e950d210b",
                "indicator--560ba978-36bc-4fa4-95de-499e950d210b",
                "indicator--560ba979-4b88-4552-8dac-42c0950d210b",
                "indicator--560ba979-2b98-443b-9c12-40ae950d210b",
                "indicator--560ba979-df90-45d8-854c-4c86950d210b",
                "indicator--560ba97a-d7f8-4d1b-b358-4195950d210b",
                "indicator--560ba97a-a5b0-4487-9c1e-489b950d210b",
                "indicator--560ba97b-f620-4e42-aa8f-44e3950d210b",
                "indicator--560ba97b-5f3c-425e-80bc-4221950d210b",
                "indicator--560ba97b-936c-4dda-8320-458d950d210b",
                "indicator--560ba97c-c19c-45e0-9fdb-48ca950d210b",
                "indicator--560ba97c-2c78-4b9a-a326-4053950d210b",
                "indicator--560ba97c-e534-45ac-a05e-4228950d210b",
                "indicator--560ba97d-386c-413e-988e-46ef950d210b",
                "indicator--560ba97d-e04c-45dd-86fe-4ad5950d210b",
                "indicator--560ba97e-a908-4673-b301-4678950d210b",
                "indicator--560ba97e-c968-4c0b-9052-451d950d210b",
                "indicator--560ba97e-2ec8-47a7-a92f-4501950d210b",
                "indicator--560ba97f-6d14-443a-aefe-4db1950d210b",
                "indicator--560ba97f-57e8-4f8a-be97-46bf950d210b",
                "indicator--560ba97f-7104-4b75-82cc-4029950d210b",
                "indicator--560ba980-138c-4bfd-b304-4e8e950d210b",
                "indicator--560ba980-cd28-4f21-a8e5-45f4950d210b",
                "indicator--560ba981-5c44-4d2f-a42b-43b0950d210b",
                "indicator--560ba981-bd8c-4df4-9fcc-4c0c950d210b",
                "indicator--560ba981-5e6c-4900-9be8-47ed950d210b",
                "indicator--560ba982-d308-4668-b0a4-492c950d210b",
                "indicator--560ba982-600c-4ba9-b51a-4bff950d210b",
                "indicator--560ba982-03e0-40c9-b640-4dc0950d210b",
                "indicator--560ba983-0414-4239-8c5f-41c4950d210b",
                "indicator--560ba983-3444-4c68-b7a8-47f8950d210b",
                "indicator--560ba984-3a64-4d51-bee4-497a950d210b",
                "indicator--560ba984-e7fc-4219-a615-48dc950d210b",
                "indicator--560ba984-7834-4494-959d-45df950d210b",
                "indicator--560ba985-a9e0-42bd-a716-4907950d210b",
                "indicator--560ba985-e8d4-4ea1-b191-4bd9950d210b",
                "indicator--560ba985-8e04-478e-adb8-4533950d210b",
                "indicator--560ba986-db70-44bb-bf01-4959950d210b",
                "indicator--560ba986-2874-425b-8dd7-4a37950d210b",
                "indicator--560ba987-0838-4a4d-8d82-4817950d210b",
                "indicator--560ba987-64e0-44b5-b924-4ab7950d210b",
                "indicator--560ba987-811c-4306-9273-4dcf950d210b",
                "indicator--560ba988-db4c-45e4-8681-43db950d210b",
                "indicator--560ba988-fcd0-4e9e-9e17-4ac2950d210b",
                "indicator--560ba988-d9bc-4519-9732-4190950d210b",
                "indicator--560ba989-94b8-4843-8941-4481950d210b",
                "indicator--560ba989-12cc-4fe9-b70b-4053950d210b",
                "indicator--560ba98a-2b80-48eb-b1d0-4384950d210b",
                "indicator--560ba98a-6520-4286-8eae-44a3950d210b",
                "indicator--560ba98a-1504-431e-9c3f-41e4950d210b",
                "indicator--560ba98b-67a4-4edb-bd0c-48ff950d210b",
                "indicator--560ba98b-ea6c-4cb7-978c-4c53950d210b",
                "indicator--560ba98b-c2a0-4e81-950b-474d950d210b",
                "indicator--560ba98c-0134-4b30-b0ce-44d4950d210b",
                "indicator--560ba98c-af34-40c1-a886-4cc2950d210b",
                "indicator--560ba98d-f53c-44c1-8947-4786950d210b",
                "indicator--560ba98d-4618-4c40-9455-4cdb950d210b",
                "indicator--560ba98d-309c-4c8a-8b2b-4d6c950d210b",
                "indicator--560ba98e-37d8-4bb3-8e9b-41c0950d210b",
                "indicator--560ba98e-7754-4700-aa4d-4745950d210b",
                "indicator--560ba98e-dad4-4a11-80c2-4cad950d210b",
                "indicator--560ba98f-251c-4a25-932a-4418950d210b",
                "indicator--560ba98f-7dbc-4290-b5f6-4995950d210b",
                "indicator--560ba990-bd80-4ae5-88ba-40ea950d210b",
                "indicator--560ba990-7b70-4cc5-99ae-49f9950d210b",
                "indicator--560ba990-8c2c-47bc-b02c-4ac8950d210b",
                "indicator--560ba991-4624-4908-b56f-4e20950d210b",
                "indicator--560ba991-379c-45ca-b729-4a56950d210b",
                "indicator--560ba991-ae18-4f0e-8586-42cf950d210b",
                "indicator--560ba992-975c-4bd7-a1f4-47e6950d210b",
                "indicator--560ba992-1550-437c-a70f-4c5b950d210b",
                "indicator--560ba993-8ec4-4bb6-9e86-4a4c950d210b",
                "indicator--560ba993-c778-4672-b9b8-46ff950d210b",
                "indicator--560ba993-9ba0-4be3-8f44-42e9950d210b",
                "indicator--560ba994-6118-4d0f-a32c-4d23950d210b",
                "indicator--560ba994-dd20-41e1-9cb5-476d950d210b",
                "indicator--560ba994-9ac8-4ca5-9064-4595950d210b",
                "indicator--560ba995-d4f0-4913-9602-4973950d210b",
                "indicator--560ba995-eabc-4456-8758-413c950d210b",
                "indicator--560ba996-dde0-4b77-86bc-457a950d210b",
                "indicator--560ba996-4f84-433c-a2ae-49a2950d210b",
                "indicator--560ba996-4908-4bc3-b6fb-4806950d210b",
                "indicator--560ba997-715c-451a-93e0-4c6b950d210b",
                "indicator--560ba997-5484-49a8-b4cb-481c950d210b",
                "indicator--560ba997-8d30-4bd4-bc35-4061950d210b",
                "indicator--560ba998-845c-42d6-9102-4bf5950d210b",
                "indicator--560ba998-027c-40db-898c-49e4950d210b",
                "indicator--560ba999-6168-4184-8422-4579950d210b",
                "indicator--560ba999-6c4c-47d3-96ba-451c950d210b",
                "indicator--560ba999-4340-4cfe-b71e-4a3a950d210b",
                "indicator--560ba99a-e634-4c8c-853a-4728950d210b",
                "indicator--560ba99a-0d9c-465a-8e35-4ef1950d210b",
                "indicator--560ba99a-80cc-49dd-b078-4cfe950d210b",
                "indicator--560ba99b-5650-44d7-847e-4448950d210b",
                "indicator--560ba99b-0a70-4eea-97c4-47f8950d210b",
                "indicator--560ba99c-7ce4-4cb3-9049-4a96950d210b",
                "indicator--560ba99c-fba8-4371-a026-4094950d210b",
                "indicator--560ba99c-a3bc-4109-91f8-4bda950d210b",
                "indicator--560ba99d-7f5c-4b01-a199-4727950d210b",
                "indicator--560ba99d-3880-4aa9-8a98-415e950d210b",
                "indicator--560ba99d-14bc-43f6-83e5-4f84950d210b",
                "indicator--560ba99e-37c8-4978-a7fd-48d7950d210b",
                "indicator--560ba99e-2f94-404a-b418-468e950d210b",
                "indicator--560ba99f-278c-4515-8420-4eb1950d210b",
                "indicator--560ba99f-db30-42ec-bdb6-41dc950d210b",
                "indicator--560ba99f-a83c-48d0-8e6c-4c66950d210b",
                "indicator--560ba9a0-df98-4731-9df0-4f62950d210b",
                "indicator--560ba9a0-9444-4016-a53e-4446950d210b",
                "indicator--560ba9a0-b840-4f9b-aa2c-455c950d210b",
                "indicator--560ba9a1-51b8-4c8a-bc63-4d30950d210b",
                "indicator--560ba9a1-dbd0-48f7-9f0f-41e9950d210b",
                "indicator--560ba9a2-cf54-4cd0-9dc1-47a6950d210b",
                "indicator--560ba9a2-b4f8-4ef8-a606-4dab950d210b",
                "indicator--560ba9a2-ac74-4c48-805c-4cb0950d210b",
                "indicator--560ba9a3-32fc-4952-ba2a-4071950d210b",
                "indicator--560ba9a3-38c8-4746-83df-447f950d210b",
                "indicator--560ba9a3-7778-4394-8ce1-4f44950d210b",
                "indicator--560ba9a4-70ac-41d4-9bab-4a7c950d210b",
                "indicator--560ba9a4-5554-4312-98fa-4019950d210b",
                "indicator--560ba9a5-6924-4a17-9863-4189950d210b",
                "indicator--560ba9a5-2d70-4e55-87a3-4df8950d210b",
                "indicator--560ba9a5-17c8-4dde-b92b-4242950d210b",
                "indicator--560ba9a6-8e70-478d-8661-4ac7950d210b",
                "indicator--560ba9a6-e4a4-4f17-b524-4017950d210b",
                "indicator--560ba9a6-1188-4ec4-a364-42f9950d210b",
                "indicator--560ba9a7-4620-4ed2-b76d-4d5a950d210b",
                "indicator--560ba9a7-6a24-4606-a640-404e950d210b",
                "indicator--560ba9a8-bdd0-4cd8-bc31-4bf1950d210b",
                "indicator--560ba9a8-57a0-499f-a766-434a950d210b",
                "indicator--560ba9a8-4284-4607-9e0b-4914950d210b",
                "indicator--560ba9a9-1490-48cf-9236-4b4f950d210b",
                "indicator--560ba9a9-28c8-474d-8c92-4f0f950d210b",
                "indicator--560ba9aa-45d8-4e76-93bf-46d1950d210b",
                "indicator--560ba9aa-9934-4759-a4f4-4e7d950d210b",
                "indicator--560ba9aa-aed0-408e-9517-4aa4950d210b",
                "indicator--560ba9ab-37f8-4d26-abdd-49b1950d210b",
                "indicator--560ba9ab-8378-41fa-91c0-4f02950d210b",
                "indicator--560ba9ab-3c00-45ea-b0c2-446f950d210b",
                "indicator--560ba9ac-1d24-4e39-81fa-4628950d210b",
                "indicator--560ba9ac-7638-4a07-9445-4041950d210b",
                "indicator--560ba9ad-8dc4-47d2-95c1-4f7c950d210b",
                "indicator--560ba9ad-85c8-4710-9814-4752950d210b",
                "indicator--560ba9ad-1108-4ecd-8fd1-4afd950d210b",
                "indicator--560ba9ae-e66c-4445-b591-495f950d210b",
                "indicator--560ba9ae-f948-47d4-9982-4a09950d210b",
                "indicator--560ba9af-7eb8-4d97-b92d-4fe9950d210b",
                "indicator--560ba9af-bb50-4f3f-9ea7-41f6950d210b",
                "indicator--560ba9af-8114-42f6-8aa5-44a4950d210b",
                "indicator--560ba9b0-7d38-4d7b-856c-4b03950d210b",
                "indicator--560ba9b0-ecf4-4a24-b89d-45fc950d210b",
                "indicator--560ba9b0-9e50-45ad-943e-4722950d210b",
                "indicator--560ba9b1-dab0-4c8a-a37d-4fb7950d210b",
                "indicator--560ba9b1-41cc-4092-825e-4109950d210b",
                "indicator--560ba9b2-ffb0-4bac-bf19-40ba950d210b",
                "indicator--560ba9b2-92f8-462e-8024-4dfa950d210b",
                "indicator--560ba9b2-58c0-4f22-a617-4559950d210b",
                "indicator--560ba9b3-b038-4982-b9ab-49bd950d210b",
                "indicator--560ba9b3-a840-4399-bc26-4642950d210b",
                "indicator--560ba9b4-2b84-4bbe-8e87-46b4950d210b",
                "indicator--560ba9b4-cc2c-4cef-a5c2-4db7950d210b",
                "indicator--560ba9b4-c3ac-4cab-8f11-4018950d210b",
                "indicator--560ba9b5-0590-406c-b5ff-44e5950d210b",
                "indicator--560ba9b5-bc40-41fc-a4e0-4b7c950d210b",
                "indicator--560ba9b5-3728-4989-bdcf-43d8950d210b",
                "indicator--560ba9b6-05e8-461c-9ca1-4644950d210b",
                "indicator--560ba9b6-dabc-4635-81b2-4322950d210b",
                "indicator--560ba9b7-de18-4f5d-90de-4f94950d210b",
                "indicator--560ba9b7-47b4-448d-9744-407d950d210b",
                "indicator--560ba9b7-e108-4a0d-be7e-4fc2950d210b",
                "indicator--560ba9b8-d9c4-4111-9a08-4754950d210b",
                "indicator--560ba9b8-b140-40a4-994b-4337950d210b",
                "indicator--560ba9b8-2284-48be-9014-48ba950d210b",
                "indicator--560ba9b9-853c-47f2-9ca4-4273950d210b",
                "indicator--560ba9b9-4d64-4e5c-b0a7-45e9950d210b",
                "indicator--560ba9ba-47d4-4ab8-be38-4bf4950d210b",
                "indicator--560ba9ba-d0d0-460a-9bda-4a90950d210b",
                "indicator--560ba9ba-071c-4d06-9a62-4e19950d210b",
                "indicator--560ba9bb-2400-44c1-a6b5-422e950d210b",
                "indicator--560ba9bb-d884-477f-aef4-41d3950d210b",
                "indicator--560ba9bc-2a50-45fa-b9ad-48a8950d210b",
                "indicator--560ba9bc-1398-4fde-957b-4b99950d210b",
                "indicator--560ba9bc-adbc-43f6-bc6a-470b950d210b",
                "indicator--560ba9bd-3aa0-46c0-9ad4-4459950d210b",
                "indicator--560ba9bd-0a8c-4982-940b-474a950d210b",
                "indicator--560ba9bd-53e4-4a9c-a99a-4687950d210b",
                "indicator--560ba9be-4d54-42ac-bf61-4eed950d210b",
                "indicator--560ba9be-68d8-435f-85fc-46d3950d210b",
                "indicator--560ba9bf-528c-46eb-b2af-4ee3950d210b",
                "indicator--560ba9bf-2f00-4773-b370-49b4950d210b",
                "indicator--560ba9bf-843c-44e3-83ee-4629950d210b",
                "indicator--560ba9c0-667c-44f6-8087-439e950d210b",
                "indicator--560ba9c0-4d64-41e1-8aad-4712950d210b",
                "indicator--560ba9c1-8130-4e15-af3e-4921950d210b",
                "indicator--560ba9c1-8044-4236-8a17-4e77950d210b",
                "indicator--560ba9c1-af68-4877-8710-4b18950d210b",
                "indicator--560ba9c2-ffc0-499c-ba2e-433e950d210b",
                "indicator--560ba9c2-ee54-457c-abe9-4e47950d210b",
                "indicator--560ba9c2-2cb0-4519-b026-40cb950d210b",
                "indicator--560ba9c3-0d68-4e2c-ace8-4fdc950d210b",
                "indicator--560ba9c3-efb0-4917-b5d1-48c5950d210b",
                "indicator--560ba9c4-c194-4c18-9615-463b950d210b",
                "indicator--560ba9c4-3b54-480c-ab68-4776950d210b",
                "indicator--560ba9c4-48c4-437e-820d-4097950d210b",
                "indicator--560ba9c5-4c8c-4a2f-bab5-4255950d210b",
                "indicator--560ba9c5-02e8-4f18-8a52-4ef6950d210b",
                "indicator--560ba9c5-78a0-47ff-8937-4a23950d210b",
                "indicator--560ba9c6-ef48-4ac9-b8e7-4d49950d210b",
                "indicator--560ba9c6-b2a8-4b8d-9764-4cbf950d210b",
                "indicator--560ba9c7-85c8-43fa-8d86-4fc6950d210b",
                "indicator--560ba9c7-3bb0-44c0-9d8a-4050950d210b",
                "indicator--560ba9c7-4d60-49e9-944a-4f2e950d210b",
                "indicator--560ba9c8-6e70-496e-ab35-40d8950d210b",
                "indicator--560ba9c8-5660-42ae-9ba7-4eb0950d210b",
                "indicator--560ba9c9-2580-4069-afa9-4bcf950d210b",
                "indicator--560ba9c9-2660-4143-ad46-4836950d210b",
                "indicator--560ba9c9-0e48-4b74-a021-4cad950d210b",
                "indicator--560ba9ca-72c4-4295-aea3-4d6f950d210b",
                "indicator--560ba9ca-8794-4834-aa5d-48c1950d210b",
                "indicator--560ba9ca-a92c-4202-a0ee-4632950d210b",
                "indicator--560ba9cb-8968-4f10-9e3d-4889950d210b",
                "indicator--560ba9cb-ff50-47b6-ab0f-4336950d210b",
                "indicator--560ba9cc-868c-421c-bac6-4701950d210b",
                "indicator--560ba9cc-fb68-4875-a7e8-4a25950d210b",
                "indicator--560ba9cc-2108-47d0-9eab-4ce4950d210b",
                "indicator--560ba9cd-a9dc-4bd7-8df8-4b33950d210b",
                "indicator--560ba9cd-9620-4535-b2f0-458f950d210b",
                "indicator--560ba9ce-c54c-4cb6-9a1d-40a4950d210b",
                "indicator--560ba9ce-f0a0-4490-aa12-41c1950d210b",
                "indicator--560ba9ce-5f48-4c29-b547-40fc950d210b",
                "indicator--560ba9cf-a350-4ac2-b959-4366950d210b",
                "indicator--560ba9cf-03f0-4b8d-aeec-4699950d210b",
                "indicator--560ba9cf-ea38-4fe9-981b-4b84950d210b",
                "indicator--560ba9d0-b750-4a8b-a0bc-476a950d210b",
                "indicator--560ba9d0-ec84-487a-8ae0-4d2f950d210b",
                "indicator--560ba9d1-aadc-41b9-a700-4af3950d210b",
                "indicator--560ba9d1-1878-42b6-849e-44af950d210b",
                "indicator--560ba9d1-dc64-42f0-80cc-41a0950d210b",
                "indicator--560ba9d2-f0a4-466f-9a3c-4f93950d210b",
                "indicator--560ba9d2-5370-4c85-9cf2-464c950d210b",
                "indicator--560ba9d2-d250-4bfe-b5b8-447c950d210b",
                "indicator--560ba9d3-6ef0-4836-bf43-43a4950d210b",
                "indicator--560ba9d3-a2e8-44e7-9f26-4a4c950d210b",
                "indicator--560ba9d4-898c-4a99-a3bf-4703950d210b",
                "indicator--560ba9d4-6e9c-4866-abae-4c2b950d210b",
                "indicator--560ba9d4-3db4-4c84-81ed-4327950d210b",
                "indicator--560ba9d5-bc90-4a7b-8e94-4391950d210b",
                "indicator--560ba9d5-d340-498b-b817-452e950d210b",
                "indicator--560ba9d5-2a88-4a5d-89d3-4d2e950d210b",
                "indicator--560ba9d6-4ed8-47c6-9862-4cce950d210b",
                "indicator--560ba9d6-97a4-4899-88b2-4734950d210b",
                "indicator--560ba9d7-6ddc-4e3f-a6b5-4682950d210b",
                "indicator--560ba9d7-a7b0-406b-a0eb-4e40950d210b",
                "indicator--560ba9d7-26d0-4086-beec-4e4d950d210b",
                "indicator--560ba9d8-d540-4315-9e0f-4785950d210b",
                "indicator--560ba9d8-0888-47c3-85fa-472d950d210b",
                "indicator--560ba9d9-574c-4506-a3fc-4b8c950d210b",
                "indicator--560ba9d9-91ec-4333-82c1-4e32950d210b",
                "indicator--560ba9d9-5598-4c08-8351-4091950d210b",
                "indicator--560ba9da-01c0-4fcf-a966-4067950d210b",
                "indicator--560ba9da-6ffc-4e08-b7a7-48f0950d210b",
                "indicator--560ba9da-088c-4229-b49c-4b8b950d210b",
                "indicator--560ba9db-b57c-4727-bdac-4a39950d210b",
                "indicator--560ba9db-76e4-4234-a440-4231950d210b",
                "indicator--560ba9dc-66fc-48fe-8c2c-4078950d210b",
                "indicator--560ba9dc-f698-4b31-8664-4d35950d210b",
                "indicator--560ba9dc-0df4-4136-8745-431e950d210b",
                "indicator--560ba9dd-a434-4760-8872-4c40950d210b",
                "indicator--560ba9dd-75c4-44ae-9c01-4ffb950d210b",
                "indicator--560ba9dd-4f28-4a88-a2a0-4c2c950d210b",
                "indicator--560ba9de-1034-4804-9dc1-40c3950d210b",
                "indicator--560ba9de-5cdc-4c43-b09a-47e8950d210b",
                "indicator--560ba9df-2a0c-4ec4-9676-4d08950d210b",
                "indicator--560ba9df-cd58-4882-afda-4f82950d210b",
                "indicator--560ba9df-5708-40b5-83d1-4483950d210b",
                "indicator--560ba9e0-c0a0-4733-ad91-436d950d210b",
                "indicator--560ba9e0-3b6c-44d1-bf71-475c950d210b",
                "indicator--560ba9e0-750c-48f7-bf91-4712950d210b",
                "indicator--56c67517-5b58-45b2-84be-59a0950d210f",
                "indicator--56c6751c-13d8-4453-ab67-c650950d210f",
                "indicator--56c67520-2608-4f95-b489-42ab950d210f",
                "indicator--56c67524-dc88-4077-97ca-599c950d210f",
                "indicator--56c67528-76f4-41e4-9c5c-c653950d210f",
                "indicator--56c6752c-8ab0-46ec-b8ae-599c950d210f",
                "indicator--56c67530-86f0-4f2c-900d-4647950d210f",
                "indicator--56c67535-da7c-401e-ab8d-59a1950d210f",
                "indicator--56c67539-78ac-418f-8593-480b950d210f",
                "indicator--56c6753d-56f0-48cd-8d26-c654950d210f",
                "indicator--56c67541-4378-4475-8d9d-59a1950d210f",
                "indicator--56c67545-6e20-40f3-84b0-40a3950d210f",
                "indicator--56c67549-64f0-453d-9be0-599e950d210f",
                "indicator--56c6754e-3ca8-4829-8af2-c654950d210f",
                "indicator--56c67552-7e34-460b-9720-5f51950d210f",
                "indicator--56c67556-cc90-407a-85c2-599e950d210f",
                "indicator--56c6755b-8608-4233-b7b4-5ca1950d210f",
                "indicator--56c6755f-2408-4482-9b22-59a3950d210f",
                "indicator--56c67563-ee90-4bb9-8260-c650950d210f",
                "indicator--56c67567-cf7c-4cdb-b249-c651950d210f",
                "indicator--56c6756b-442c-4a25-a523-599d950d210f",
                "indicator--56c67570-94b8-459c-9078-c652950d210f",
                "indicator--56c67574-1ac8-4101-8496-5ca1950d210f",
                "indicator--56c67578-e214-45e1-b51e-c650950d210f",
                "indicator--56c6757d-a424-4737-b457-59a3950d210f",
                "indicator--56c67581-036c-487c-8fa7-59a1950d210f",
                "indicator--56c67585-fa20-4fad-b7da-46ca950d210f",
                "indicator--56c67589-b604-47f5-88dd-599c950d210f",
                "indicator--56c6758e-06ec-4917-9fb3-c652950d210f",
                "indicator--56c67592-3f60-4220-8858-599c950d210f",
                "indicator--56c67596-81a4-4ac1-b7d0-4fe3950d210f",
                "indicator--56c6751a-c864-4311-be1b-5f51950d210f",
                "indicator--56c6751e-fbcc-49b9-ae7a-59a0950d210f",
                "indicator--56c67522-50e4-484a-9fcd-59a2950d210f",
                "indicator--56c67526-8528-48bf-8801-4163950d210f",
                "indicator--56c6752a-c5d8-45f2-ac42-59a1950d210f",
                "indicator--56c6752e-9dc4-4bfa-ad8a-c654950d210f",
                "indicator--56c67533-5c38-4ce3-ae8f-c651950d210f",
                "indicator--56c67537-d8dc-43a6-be6e-599c950d210f",
                "indicator--56c6753b-7600-4594-9477-59a3950d210f",
                "indicator--56c6753f-65dc-489e-a977-c650950d210f",
                "indicator--56c67543-afe8-46f5-9de0-c653950d210f",
                "indicator--56c67547-533c-4316-8d5e-c652950d210f",
                "indicator--56c6754c-4eac-4ee2-bd93-599c950d210f",
                "indicator--56c67550-5344-4dd2-8b51-4251950d210f",
                "indicator--56c67554-cdac-4cb0-9a92-c653950d210f",
                "indicator--56c67558-f350-424c-8fd1-c651950d210f",
                "indicator--56c6755d-c5f4-4e2d-ac4d-c654950d210f",
                "indicator--56c67561-e0bc-4c47-bf66-4740950d210f",
                "indicator--56c67565-3658-4337-8902-c654950d210f",
                "indicator--56c67569-079c-4ba6-a867-599c950d210f",
                "indicator--56c6756e-5504-45a2-b02e-59a3950d210f",
                "indicator--56c67572-0fb0-4b13-94b5-599e950d210f",
                "indicator--56c67576-24f4-4057-90e4-4132950d210f",
                "indicator--56c6757a-5960-4f4c-893e-c653950d210f",
                "indicator--56c6757f-eda8-41f1-8ed9-5ca1950d210f",
                "indicator--56c67583-bd10-4c9b-bfc9-c653950d210f",
                "indicator--56c67587-a214-4675-87a5-5f51950d210f",
                "indicator--56c6758c-4418-4406-8e91-42ca950d210f",
                "indicator--56c67590-e594-47c7-953b-c653950d210f",
                "indicator--56c67594-8d6c-4a20-9742-c654950d210f",
                "indicator--56c6759b-75d0-4b6a-8a5b-c653950d210f",
                "indicator--56c6759f-bc60-4779-9311-5f51950d210f",
                "indicator--56c675a3-2a50-44d2-b902-59a0950d210f",
                "indicator--56c675a7-70bc-4950-897c-599c950d210f",
                "indicator--56c675ac-f248-486e-b941-c653950d210f",
                "indicator--56c675b0-0400-4441-981d-4ae9950d210f",
                "indicator--56c675b4-a210-4f96-a962-599e950d210f",
                "indicator--56c675b9-4dd8-4532-971a-c650950d210f",
                "indicator--56c675bd-a3e0-48c5-9b21-599e950d210f",
                "indicator--56c675c1-1ffc-4ae1-b0c4-4b2f950d210f",
                "indicator--56c675c6-2c70-4b46-959e-59a3950d210f",
                "indicator--56c675ca-ba64-4020-b7d6-c650950d210f",
                "indicator--56c675ce-b144-48a3-b49d-599e950d210f",
                "indicator--56c675d3-b764-4c8a-88e1-417d950d210f",
                "indicator--56c675d7-e954-4765-834b-599d950d210f",
                "indicator--56c675db-a78c-44fe-b234-59a3950d210f",
                "indicator--56c675e0-bb78-4c09-93c5-c651950d210f",
                "indicator--56c675e4-1a44-412b-ba20-c654950d210f",
                "indicator--56c675e9-1bb0-4218-8fe8-409a950d210f",
                "indicator--56c675ed-7b14-4e59-9d5c-599c950d210f",
                "indicator--56c675f1-6274-48b1-b675-59a0950d210f",
                "indicator--56c675f6-748c-4de7-95a6-599d950d210f",
                "indicator--56c675fa-534c-4910-b53b-4004950d210f",
                "indicator--56c675ff-565c-4bbb-895a-402d950d210f",
                "indicator--56c67603-8274-4241-8afa-4f90950d210f",
                "indicator--56c67608-47a4-4ca5-b39c-422d950d210f",
                "indicator--56c6760c-64a0-482a-8623-599e950d210f",
                "indicator--56c67611-e7ac-47f7-9fb5-c652950d210f",
                "indicator--56c67615-acd0-45ef-91d8-599d950d210f",
                "indicator--56c6761a-dc88-4d58-9cfb-c654950d210f",
                "indicator--56c67598-2e0c-4859-8e69-59a2950d210f",
                "indicator--56c6759d-6058-451a-8d5d-59a3950d210f",
                "indicator--56c675a1-ae88-4c03-9900-4025950d210f",
                "indicator--56c675a5-5e74-4e1e-bf79-c652950d210f",
                "indicator--56c675aa-3440-42bf-ba33-4d82950d210f",
                "indicator--56c675ae-6090-4eb8-aecd-5ca1950d210f",
                "indicator--56c675b2-35ec-4599-b4b8-c654950d210f",
                "indicator--56c675b6-4dd8-4836-b275-4068950d210f",
                "indicator--56c675bb-20b8-43bb-8f1b-599f950d210f",
                "indicator--56c675bf-c6a8-4a46-9252-599d950d210f",
                "indicator--56c675c3-b928-4738-990c-c653950d210f",
                "indicator--56c675c8-5b90-4076-be27-599f950d210f",
                "indicator--56c675cc-6fd4-4bbb-8aab-59a1950d210f",
                "indicator--56c675d0-2040-46a6-a7d0-c651950d210f",
                "indicator--56c675d5-4184-4912-b02a-59a0950d210f",
                "indicator--56c675d9-2cf8-407b-9dbe-599e950d210f",
                "indicator--56c675de-d144-4ca1-b242-5ca1950d210f",
                "indicator--56c675e2-c500-432c-b0ad-599c950d210f",
                "indicator--56c675e6-2550-4553-a8b5-59a3950d210f",
                "indicator--56c675eb-33a4-433c-b31c-599d950d210f",
                "indicator--56c675ef-7544-49da-b9d0-c650950d210f",
                "indicator--56c675f4-b0f4-409c-8af5-c654950d210f",
                "indicator--56c675f8-c0a4-4b9d-a7b1-5f51950d210f",
                "indicator--56c675fc-9b80-4699-ae42-c651950d210f",
                "indicator--56c67601-81b8-447f-bbbd-c654950d210f",
                "indicator--56c67605-5b10-4580-8caa-5ca1950d210f",
                "indicator--56c6760a-7d94-4201-9fe3-599d950d210f",
                "indicator--56c6760e-a4c4-422d-b234-5f51950d210f",
                "indicator--56c67613-9194-4b2f-9643-59a1950d210f",
                "indicator--56c67617-a648-4551-8c78-599c950d210f",
                "indicator--56c6761c-6630-472e-8fc5-59a0950d210f",
                "indicator--56c6761e-089c-4fdb-a103-599c950d210f",
                "indicator--56c67623-1570-4a50-bc95-59a3950d210f",
                "indicator--56c67627-0fbc-4c82-9980-5ca1950d210f",
                "indicator--56c6762c-7748-4ccd-b3ee-59a3950d210f",
                "indicator--56c67631-2b9c-4496-94aa-4c73950d210f",
                "indicator--56c67635-e1a4-432f-80d2-5f51950d210f",
                "indicator--56c6763a-eaac-45ef-9cc3-43d4950d210f",
                "indicator--56c6763e-a9a4-4f8a-8442-59a0950d210f",
                "indicator--56c67643-6128-4810-920c-5ca1950d210f",
                "indicator--56c67648-431c-4f9a-a3cf-c652950d210f",
                "indicator--56c6764c-8f88-449b-a3f8-599e950d210f",
                "indicator--56c67651-0b08-4c5c-89ef-4edc950d210f",
                "indicator--56c67656-2c1c-4c3f-91c6-c653950d210f",
                "indicator--56c6765a-9740-4919-87e5-5f51950d210f",
                "indicator--56c67660-fba8-4292-b3a7-c653950d210f",
                "indicator--56c67664-2398-40a5-adb5-4ad9950d210f",
                "indicator--56c67669-1dbc-43f4-bb9d-5f51950d210f",
                "indicator--56c6766f-dd34-459a-95a8-599e950d210f",
                "indicator--56c67673-7048-463d-a734-4a05950d210f",
                "indicator--56c67678-85b0-495f-b704-c653950d210f",
                "indicator--56c6767d-0b98-44fc-bbea-599f950d210f",
                "indicator--56c67681-54c4-43b5-b447-41f8950d210f",
                "indicator--56c67686-f9e0-4af1-b9ce-41ff950d210f",
                "indicator--56c6768b-b610-4ab1-b392-c652950d210f",
                "indicator--56c67690-1118-428b-992e-c654950d210f",
                "indicator--56c67695-c568-45d2-b1d3-59a2950d210f",
                "indicator--56c67699-4bc4-49f0-a66e-451c950d210f",
                "indicator--56c6769e-cea4-4a7e-b34f-599e950d210f",
                "indicator--56c676a3-0364-4f44-a26a-5f51950d210f",
                "indicator--56c676a8-6bf4-4915-a646-4688950d210f",
                "indicator--56c676ad-ce1c-4306-9cc1-59a4950d210f",
                "indicator--56c676b1-a2e0-43e4-8504-5f51950d210f",
                "indicator--56c676b6-cef0-4ad7-b0eb-59a4950d210f",
                "indicator--56c676bb-1644-4ff6-b8db-599c950d210f",
                "indicator--56c676c0-652c-4649-9db9-c652950d210f",
                "indicator--56c676c5-38c8-4cbe-b808-5f51950d210f",
                "indicator--56c676ca-8614-4336-a516-599e950d210f",
                "indicator--56c676ce-2c28-49be-afe0-c650950d210f",
                "indicator--56c676d3-77f0-4e6d-9e05-599c950d210f",
                "indicator--56c676d8-2384-47e9-b492-c653950d210f",
                "indicator--56c676dd-99b8-4ee8-8a16-5f51950d210f",
                "indicator--56c676e2-b584-4bc5-a2b4-44ac950d210f",
                "indicator--56c676e7-63c8-48b7-8ed5-59a1950d210f",
                "indicator--56c676ec-f410-4100-8b07-59a0950d210f",
                "indicator--56c676f1-4cb4-48ee-b274-4fa8950d210f",
                "indicator--56c676f6-0404-4d75-9b7c-5f51950d210f",
                "indicator--56c676fb-bf40-47c3-b1b1-48fe950d210f",
                "indicator--56c67700-94c8-4010-b036-59a4950d210f",
                "indicator--56c67705-c6bc-4705-bfd5-c654950d210f",
                "indicator--56c6770a-578c-4170-8306-4a57950d210f",
                "indicator--56c6770f-6e0c-4851-9b48-c651950d210f",
                "indicator--56c67714-b8c4-4c83-a01c-599e950d210f",
                "indicator--56c67719-0e44-4fcb-9e21-47e4950d210f",
                "indicator--56c6771e-2914-48ba-90ee-59a2950d210f",
                "indicator--56c67724-18ac-499f-a12d-c652950d210f",
                "indicator--56c67729-ab30-4de0-9602-59a3950d210f",
                "indicator--56c6772e-104c-4102-9995-599d950d210f",
                "indicator--56c67733-f9f0-4692-8e60-c651950d210f",
                "indicator--56c67738-0fa0-42c1-93eb-4f12950d210f",
                "indicator--56c6773d-4a14-4930-9507-c651950d210f",
                "indicator--56c67741-dc54-43dc-8e8e-5ca1950d210f",
                "indicator--56c67746-c148-4b6c-8642-59a0950d210f",
                "indicator--56c6774b-4914-4000-887a-4f21950d210f",
                "indicator--56c67750-f6a0-4fc0-8100-c652950d210f",
                "indicator--56c67755-f1d4-443c-bb63-59a0950d210f",
                "indicator--56c6775a-d448-4976-b3d3-c652950d210f",
                "indicator--56c6775e-221c-431c-9aeb-c653950d210f",
                "indicator--56c67764-78e4-4790-988d-c650950d210f",
                "indicator--56c67769-7fd0-49ce-9052-47f9950d210f",
                "indicator--56c6776f-d9dc-4fa3-aaef-5ca1950d210f",
                "indicator--56c67774-0e48-43e5-a0c3-c654950d210f",
                "indicator--56c67779-d8d8-45e9-8b69-599e950d210f",
                "indicator--56c6777f-5da8-4ec7-95ba-599c950d210f",
                "indicator--56c67784-3934-4f09-93f9-59a1950d210f",
                "indicator--56c6778a-bec0-4509-a4e4-4580950d210f",
                "indicator--56c6778f-a994-45e6-90de-5ca1950d210f",
                "indicator--56c67794-82cc-485e-a132-c653950d210f",
                "indicator--56c6779a-03ac-4061-862f-59a0950d210f",
                "indicator--56c6779f-3128-4d12-890b-402a950d210f",
                "indicator--56c677a5-7be4-426c-8e60-c652950d210f",
                "indicator--56c677ab-3b04-4c89-9af2-c650950d210f",
                "indicator--56c677b1-7ce8-45ed-a6ff-c654950d210f",
                "indicator--56c677b6-78a8-436b-941c-599c950d210f",
                "indicator--56c677bc-e760-4372-bc25-c651950d210f",
                "indicator--56c677c2-fac4-4088-a9a5-59a3950d210f",
                "indicator--56c677c8-e67c-4efc-9915-59a0950d210f",
                "indicator--56c677ce-1b08-4625-aadc-c651950d210f",
                "indicator--56c677d4-515c-4b21-927d-599e950d210f",
                "indicator--56c677d9-497c-403a-8ecf-599c950d210f",
                "indicator--56c677df-8acc-4b7d-8e20-481e950d210f",
                "indicator--56c677e5-b864-4381-a03f-59a4950d210f",
                "indicator--56c677eb-b4e8-4ee5-afec-59a1950d210f",
                "indicator--56c677f1-6744-4726-a9ef-c650950d210f",
                "indicator--56c677f7-df94-4ce2-8522-c652950d210f",
                "indicator--56c677fd-51a4-40d5-85dd-424d950d210f",
                "indicator--56c67803-7510-4563-97f8-599d950d210f",
                "indicator--56c67809-5564-4632-9f17-c651950d210f",
                "indicator--56c6780f-f234-4796-b354-59a4950d210f",
                "indicator--56c67815-1ed8-471b-9e75-5f51950d210f",
                "indicator--56c6781b-4980-4a5b-873b-4d36950d210f",
                "indicator--56c67821-4b54-4852-9c88-59a3950d210f",
                "indicator--56c67827-7f64-4b2d-ac93-c653950d210f",
                "indicator--56c6782d-d070-488b-b444-59a0950d210f",
                "indicator--56c67833-4c90-407d-bf44-599c950d210f",
                "indicator--56c67839-8170-4052-bac7-4019950d210f",
                "indicator--56c6783f-711c-4a20-ba82-5ca1950d210f",
                "indicator--56c67845-95b4-403b-81a3-599e950d210f",
                "indicator--56c6784b-91f4-4fd4-acec-c653950d210f",
                "indicator--56c67851-72c4-469f-b75c-59a2950d210f",
                "indicator--56c67857-4d00-4059-860c-4b5e950d210f",
                "indicator--56c6785d-6f9c-4f16-b791-5f51950d210f",
                "indicator--56c67863-ba90-4c01-b631-4a43950d210f",
                "indicator--56c67869-1010-48c1-8ce0-59a0950d210f",
                "indicator--56c6786f-75f4-4bd3-b746-c650950d210f",
                "indicator--56c67875-3aa8-48e6-acae-59a3950d210f",
                "indicator--56c6787b-6740-48ee-a0c9-42d3950d210f",
                "indicator--56c67881-afd0-418a-9a2c-49f9950d210f",
                "indicator--56c67887-7e40-4a43-a811-59a1950d210f",
                "indicator--56c6788d-046c-4a8e-a826-59a0950d210f",
                "indicator--56c67894-a46c-45a9-9084-c650950d210f",
                "indicator--56c6789a-5304-4198-85fa-4195950d210f",
                "indicator--56c678a0-8d70-4f80-aaa9-5f51950d210f",
                "indicator--56c678a6-8e14-4c36-8986-4e7f950d210f",
                "indicator--56c678ac-3e2c-4437-9588-c652950d210f",
                "indicator--56c678b2-72b8-4c1d-bd3f-c653950d210f",
                "indicator--56c678b9-3e64-4d5d-bc2d-59a2950d210f",
                "indicator--56c678c0-3f94-4fe6-836a-59a3950d210f",
                "indicator--56c678c7-0364-4b2a-96cd-59a2950d210f",
                "indicator--56c678ce-e45c-45c4-b261-5ca1950d210f",
                "indicator--56c678d5-502c-4fef-82f7-44cc950d210f",
                "indicator--56c678dc-fb74-4aa7-ac21-59a0950d210f",
                "indicator--56c678e2-0c20-4a16-980a-4837950d210f",
                "indicator--56c678e9-6e54-47ec-aa42-59a0950d210f",
                "indicator--56c678ef-f924-4aa4-862d-599d950d210f",
                "indicator--56c678f5-1ab4-4367-917e-5f51950d210f",
                "indicator--56c678fc-bbbc-464a-a899-c654950d210f",
                "indicator--56c67903-b4cc-4375-9f9a-408c950d210f",
                "indicator--56c67909-322c-4158-815c-c652950d210f",
                "indicator--56c67910-73a0-4d40-8afe-435f950d210f",
                "indicator--56c67916-9a64-4f11-b5a1-59a3950d210f",
                "indicator--56c6791d-fb8c-496d-bf03-599f950d210f",
                "indicator--56c67924-58c4-4477-b892-c650950d210f",
                "indicator--56c6792a-70bc-400d-a301-4cda950d210f",
                "indicator--56c67930-f074-41f1-ba15-4352950d210f",
                "indicator--56c67937-dbf8-4729-a18b-c650950d210f",
                "indicator--56c6793e-2f48-4bf4-b399-59a0950d210f",
                "indicator--56c67944-5efc-461b-8b87-599f950d210f",
                "indicator--56c6794b-c854-4927-a7a6-42a0950d210f",
                "indicator--56c67952-35fc-45c5-b1fc-59a4950d210f",
                "indicator--56c67959-6168-43a4-bcd5-49b4950d210f",
                "indicator--56c6795f-10b0-4288-abaa-599d950d210f",
                "indicator--56c67966-1d0c-414c-9d3e-c653950d210f",
                "indicator--56c6796c-8c80-4dfa-bd2e-5f51950d210f",
                "indicator--56c67973-00c4-4eb0-95ed-c651950d210f",
                "indicator--56c6797a-abd0-4827-aab1-59a2950d210f",
                "indicator--56c67981-3e70-451f-96ed-c651950d210f",
                "indicator--56c67987-4cf4-4004-a700-c653950d210f",
                "indicator--56c6798e-a8d8-4c69-abc5-599d950d210f",
                "indicator--56c67995-fc1c-429d-a3c7-4fe9950d210f",
                "indicator--56c6799c-57cc-4cbe-93c8-497a950d210f",
                "indicator--56c679a3-bf28-4ccf-8317-599f950d210f",
                "indicator--56c679ab-2084-484a-bbfb-59a1950d210f",
                "indicator--56c679b3-fe64-4872-9c6c-c653950d210f",
                "indicator--56c679ba-a6f8-4a4a-b42c-59a3950d210f",
                "indicator--56c679c0-df04-4d5b-ba91-59a2950d210f",
                "indicator--56c679c7-c744-484a-a293-49d2950d210f",
                "indicator--56c679ce-3174-4fc0-a827-599e950d210f",
                "indicator--56c679d5-9c10-45ba-ba9e-59a1950d210f",
                "indicator--56c679dc-a0c4-45f6-8ef7-4e2b950d210f",
                "indicator--56c679e3-873c-46d0-83dc-5f51950d210f",
                "indicator--56c679e9-2edc-4ba2-ba0b-59a4950d210f",
                "indicator--56c679f1-dd00-4374-901d-c653950d210f",
                "indicator--56c679f8-a1c8-4acd-9491-599e950d210f",
                "indicator--56c679ff-1f98-4db3-b8dc-59a3950d210f",
                "indicator--56c67a06-da50-4368-ab90-59a4950d210f",
                "indicator--56c67a0e-fda4-4a65-a185-c652950d210f",
                "indicator--56c67a15-4648-4e8a-9934-59a2950d210f",
                "indicator--56c67a1c-2d88-4810-83af-59a4950d210f",
                "indicator--56c67a23-8bd4-42b4-a1b3-c654950d210f",
                "indicator--56c67a2a-74b4-4c0f-9fcc-59a4950d210f",
                "indicator--56c67a31-2360-4697-b35c-59a3950d210f",
                "indicator--56c67a38-ec38-4806-a110-c650950d210f",
                "indicator--56c67a3f-4a3c-42bd-ae12-5ca1950d210f",
                "indicator--56c67a46-ef48-4dd1-af33-59a4950d210f",
                "indicator--56c67a4d-8ac8-4615-8897-59a3950d210f",
                "indicator--56c67a54-f880-45e8-9f72-48b8950d210f",
                "indicator--56c67a5b-d414-4e5a-bb78-4c16950d210f",
                "indicator--56c67a62-2b48-4b7f-a61f-59a1950d210f",
                "indicator--56c67a68-9c54-4918-a233-4a36950d210f",
                "indicator--56c67a6f-ddcc-4cc7-a01f-c653950d210f",
                "indicator--56c67a76-4ce8-48f0-9f0b-4897950d210f",
                "indicator--56c67a7c-c440-4889-a23c-c654950d210f",
                "indicator--56c67a83-17fc-425c-a5e8-c654950d210f",
                "indicator--56c67a8b-34dc-485f-98c7-c652950d210f",
                "indicator--56c67a92-4400-4e0a-adde-59a0950d210f",
                "indicator--56c67a99-ffd8-4910-88df-c652950d210f",
                "indicator--56c67aa0-5150-4dec-a20f-c653950d210f",
                "indicator--56c67aa7-50fc-4213-8a0e-59a3950d210f",
                "indicator--56c67aae-2124-4e45-a393-45a0950d210f",
                "indicator--56c67ab6-d4d4-4ee7-ac06-59a3950d210f",
                "indicator--56c67abd-b4f4-40d2-b1fd-48c2950d210f",
                "indicator--56c67ac4-4bb0-4327-976d-5ca1950d210f",
                "indicator--56c67acb-9d70-4f04-9559-5ca1950d210f",
                "indicator--56c67ad1-d028-4ced-98e9-599c950d210f",
                "indicator--56c67ad8-83e0-4b7e-a716-59a3950d210f",
                "indicator--56c67adf-91b4-405b-9e27-c651950d210f",
                "indicator--56c67ae6-fd68-4b3d-b6ff-42c0950d210f",
                "indicator--56c67aed-57f0-4373-8c32-59a2950d210f",
                "indicator--56c67af4-76f4-4f57-9752-44f9950d210f",
                "indicator--56c67afb-4464-4339-9683-59a1950d210f",
                "indicator--56c67b02-c5dc-4641-9b16-599c950d210f",
                "indicator--56c67b09-4134-4f95-9b08-599d950d210f",
                "indicator--56c67b10-2784-4f3f-9844-599f950d210f",
                "indicator--56c67b18-72d0-47b3-9bed-59a1950d210f",
                "indicator--56c67b1f-6040-4571-afd0-5f51950d210f",
                "indicator--56c67b25-9954-42b3-a2d1-59a1950d210f",
                "indicator--56c67b2d-d1b8-45ee-86ad-c651950d210f",
                "indicator--56c67b34-f16c-43e4-b4e1-599d950d210f",
                "indicator--56c67b3b-102c-42dd-b76a-c650950d210f",
                "indicator--56c67b44-72dc-4027-ad8d-599e950d210f",
                "indicator--56c67b4b-9fc4-474b-81f6-59a3950d210f",
                "indicator--56c67b53-ba80-43fb-9f96-5ca1950d210f",
                "indicator--56c67b5a-25a8-469f-b971-c653950d210f",
                "indicator--56c67b62-9820-4469-bed2-4afb950d210f",
                "indicator--56c67b69-4b00-43e4-a166-c651950d210f",
                "indicator--56c67b70-0ae4-44da-9258-c650950d210f",
                "indicator--56c67b77-eaf8-4731-91d7-4344950d210f",
                "indicator--56c67b7f-df64-4029-b2a9-599d950d210f",
                "indicator--56c67b86-0614-41ce-8837-c652950d210f",
                "indicator--56c67b8e-47f8-402c-a32a-c651950d210f",
                "indicator--56c67b95-5550-4824-9888-c654950d210f",
                "indicator--56c67b9c-e9cc-4e55-af32-c652950d210f",
                "indicator--56c67ba3-3bbc-4830-b702-4431950d210f",
                "indicator--56c67baa-f88c-4d84-84e8-c653950d210f",
                "indicator--56c67bb2-9e98-4418-bc25-599c950d210f",
                "indicator--56c67bba-dd74-4c48-8d0b-59a0950d210f",
                "indicator--56c67bc1-ac40-4ea1-bd97-59a2950d210f",
                "indicator--56c67bc9-ca98-4a34-bc06-c652950d210f",
                "indicator--56c67bd1-ebc0-43bc-87a3-5ca1950d210f",
                "indicator--56c67bd8-e3d8-417b-89b0-41a9950d210f",
                "indicator--56c67bdf-38fc-4b6b-92dc-599f950d210f",
                "indicator--56c67be6-5228-45ed-8374-4980950d210f",
                "indicator--56c67bed-fff0-436e-926d-c651950d210f",
                "indicator--56c67bf4-a740-418a-b26f-599f950d210f",
                "indicator--56c67bfb-8938-4796-9a1b-59a3950d210f",
                "indicator--56c67c03-a7f4-4ed4-bff8-47a3950d210f",
                "indicator--56c67c0a-c064-419f-9476-5f51950d210f",
                "indicator--56c67c12-23dc-41da-94d5-5ca1950d210f",
                "indicator--56c67c1a-34bc-467e-88b8-599d950d210f",
                "indicator--56c67c23-ab48-437e-82a7-c650950d210f",
                "indicator--56c67c2b-1da4-4008-a2cf-c652950d210f",
                "indicator--56c67c33-e7a0-4268-93c3-599e950d210f",
                "indicator--56c67c3b-5acc-4c28-8370-599c950d210f",
                "indicator--56c67c43-ea5c-4c2d-a668-c652950d210f",
                "indicator--56c67c4a-f368-4eb8-acf4-59a3950d210f",
                "indicator--56c67c52-4bdc-4a16-be4f-5ca1950d210f",
                "indicator--56c67c5a-7c24-4f52-bb9c-c651950d210f",
                "indicator--56c67c62-ffb0-45a5-a4ce-c650950d210f",
                "indicator--56c67c6a-c49c-4fb8-b3a4-4446950d210f",
                "indicator--56c67c73-ca68-421d-b6b3-59a0950d210f",
                "indicator--56c67c7c-9778-40d5-b35f-59a3950d210f",
                "indicator--56c67c84-d1fc-4d2b-aa1a-c653950d210f",
                "indicator--56c67c8b-16b8-4f41-adaa-59a1950d210f",
                "indicator--56c67c93-7f50-4ac1-bb97-5ca1950d210f",
                "indicator--56c67c9b-ec5c-4497-9252-c650950d210f",
                "indicator--56c67ca3-12f4-4bca-8ef9-599d950d210f",
                "indicator--56c67cab-4004-4ef7-944a-599c950d210f",
                "indicator--56c67cb3-9e9c-408f-8374-599d950d210f",
                "indicator--56c67cbb-5570-405f-ad49-599e950d210f",
                "indicator--56c67cc3-5a34-419c-8bcc-c652950d210f",
                "indicator--56c67ccb-9d90-4a4a-b5af-c650950d210f",
                "indicator--56c67cd3-0b30-4dd5-857a-5ca1950d210f",
                "indicator--56c67cdb-0340-47a3-8200-4b71950d210f",
                "indicator--56c67ce2-5658-4cec-a853-5f51950d210f",
                "indicator--56c67cea-f738-4e79-86a8-46b9950d210f",
                "indicator--56c67cf2-6a64-43c8-8c12-c653950d210f",
                "indicator--56c67cfa-7628-42c9-9d85-59a3950d210f",
                "indicator--56c67d02-4e24-4bb2-9efa-4e4b950d210f",
                "indicator--56c67d0a-dc84-4af2-89f8-c651950d210f",
                "indicator--56c67d11-0e4c-46e3-8bcd-59a3950d210f",
                "indicator--56c67d19-c368-4baf-9ca6-c650950d210f",
                "indicator--56c67d21-ae64-43a3-bb00-c653950d210f",
                "indicator--56c67d29-83a4-4e25-8e7a-59a3950d210f",
                "indicator--56c67d31-5924-4f8f-84e4-c651950d210f",
                "indicator--56c67d39-7438-4044-852b-5ca1950d210f",
                "indicator--56c67d40-0390-4816-9600-59a1950d210f",
                "indicator--56c67d48-adb0-49a8-942e-4244950d210f",
                "indicator--56c67d50-b4fc-42b6-9b00-599f950d210f",
                "indicator--56c67d58-5010-47ea-b8c2-5f51950d210f",
                "indicator--56c67d5f-928c-45da-98c2-c654950d210f",
                "indicator--56c67d67-bf7c-4676-b474-c651950d210f",
                "indicator--56c67d6e-833c-4ada-a9ac-59a4950d210f",
                "indicator--56c67d76-0948-494d-a3e7-59a4950d210f",
                "indicator--56c67d7e-693c-4fb2-903d-4527950d210f",
                "indicator--56c67d86-7d18-4375-81b0-599d950d210f",
                "indicator--56c67d8e-66b4-4d9a-ae53-599f950d210f",
                "indicator--56c67d95-78a4-4c76-9f12-c654950d210f",
                "indicator--56c67d9e-bc04-4eec-bc61-c651950d210f",
                "indicator--56c67da7-3578-4fd5-b7ef-599c950d210f",
                "indicator--56c67db0-8424-422a-9423-599e950d210f",
                "indicator--56c67db9-b39c-4ecc-aea2-c651950d210f",
                "indicator--56c67dc0-61a4-406d-8256-599e950d210f",
                "indicator--56c67dc8-3174-478c-975c-59a4950d210f",
                "indicator--56c67dd1-c750-4dc7-9346-c650950d210f",
                "indicator--56c67dd9-6834-43a1-b2d4-599f950d210f",
                "indicator--56c67de0-66b8-4961-8fe5-599e950d210f",
                "indicator--56c67de8-cce4-4ae1-9130-44e1950d210f",
                "indicator--56c67df0-e030-4682-a8eb-599c950d210f",
                "indicator--56c67df8-1a54-4d57-872e-41d1950d210f",
                "indicator--56c67e00-c568-4017-a6b3-599e950d210f",
                "indicator--56c67e09-268c-45ba-b6dc-59a4950d210f",
                "indicator--56c67e11-2cac-44e0-b517-c651950d210f",
                "indicator--56c67e1a-c87c-4f5e-813d-4b9a950d210f",
                "indicator--56c67e22-c5b8-4300-8f93-4ebf950d210f",
                "indicator--56c67e2a-970c-4bcf-b99e-c650950d210f",
                "indicator--56c67e32-fbbc-4cbe-8ebc-599c950d210f",
                "indicator--56c67e3a-e2c8-4285-87e4-c650950d210f",
                "indicator--56c67e42-266c-4b01-b9a2-c654950d210f",
                "indicator--56c67e4a-68dc-46fa-ae2c-59a3950d210f",
                "indicator--56c67e53-4988-4bd3-a931-c651950d210f",
                "indicator--56c67e5b-7704-4c8b-9c27-4440950d210f",
                "indicator--56c67e62-d110-451d-904f-59a3950d210f",
                "indicator--56c67e6a-e6b8-4e78-b02a-59a1950d210f",
                "indicator--56c67e71-0334-4875-b161-59a3950d210f",
                "indicator--56c67e79-856c-49da-8b17-59a4950d210f",
                "indicator--56c67e81-98f4-4b00-9df2-59a3950d210f",
                "indicator--56c67e89-a844-4af8-b207-c652950d210f",
                "indicator--56c67e92-2f00-4cdb-bc0a-59a1950d210f",
                "indicator--56c67e99-9290-4ed8-abfe-599c950d210f",
                "indicator--56c67ea1-87ec-4e9f-8409-c652950d210f",
                "indicator--56c67ea9-a098-4d06-baeb-49a5950d210f",
                "indicator--56c67eb1-fa78-4069-b5d3-c653950d210f",
                "indicator--56c67eb8-b880-4467-9f85-599f950d210f",
                "indicator--56c67ec0-3670-4b3d-8892-4d64950d210f",
                "indicator--56c67ec8-7544-4a94-853d-59a2950d210f",
                "indicator--56c67ed0-fc64-4005-8c5e-59a3950d210f",
                "indicator--56c67ed8-d39c-47f1-a696-c653950d210f",
                "indicator--56c67ee1-aa10-45ab-bc41-599d950d210f",
                "indicator--56c67ee9-10a4-4b6f-8390-4e6e950d210f",
                "indicator--56c67ef2-13e4-47dc-8bdc-4a47950d210f",
                "indicator--56c67efa-800c-4c58-9474-59a1950d210f",
                "indicator--56c67f02-a08c-4282-a23b-599c950d210f",
                "indicator--56c67f0a-f560-48f0-9443-59a0950d210f",
                "indicator--56c67f12-f494-4269-8d38-599d950d210f",
                "indicator--56c67f1a-2630-446c-9dad-599f950d210f",
                "indicator--56c67f22-7e60-4010-9ea8-4f71950d210f",
                "indicator--56c67f2a-a578-42d5-81d0-599c950d210f",
                "indicator--56c67f32-7430-4152-8bce-5ca1950d210f",
                "indicator--56c67f3a-74c0-4c3f-ad6a-c653950d210f",
                "indicator--56c67f42-01ac-4405-8a4a-5f51950d210f",
                "indicator--56c67f4a-62c4-4f14-9697-c653950d210f",
                "indicator--56c67f52-413c-458a-907c-c653950d210f",
                "indicator--56c67f5a-52c0-45e4-9d1e-c654950d210f",
                "indicator--56c67f62-985c-4ecd-9001-c652950d210f",
                "indicator--56c67f6b-57e0-42ad-8825-c652950d210f",
                "indicator--56c67f73-0d40-43f9-935b-59a0950d210f",
                "indicator--56c67f7b-06b4-4f41-922d-59a0950d210f",
                "indicator--56c67f84-f288-4794-9f94-5ca1950d210f",
                "indicator--56c67f8c-b330-4f6b-8e5c-599e950d210f",
                "indicator--56c67f95-8c90-4649-90bd-4e80950d210f",
                "indicator--56c67f9d-88b0-4364-addc-c654950d210f",
                "indicator--56c67fa5-ca70-4638-a75b-5ca1950d210f",
                "indicator--56c67fad-2bb8-4f48-a5f4-c653950d210f",
                "indicator--56c67fb5-46b8-4250-aa03-59a0950d210f",
                "indicator--56c67fbd-1288-4917-8d42-4b35950d210f",
                "indicator--56c67fc5-02a0-4f3c-8ded-599f950d210f",
                "indicator--56c67fcd-e1bc-440f-bbd0-49c6950d210f",
                "indicator--56c67fd5-ecd4-4fdb-8aa9-4eb4950d210f",
                "indicator--56c67fde-ee50-487f-b9c3-59a1950d210f",
                "indicator--56c67fe6-38b0-42e5-871f-47a9950d210f",
                "indicator--56c67fee-2350-4f6c-8f3f-c652950d210f",
                "indicator--56c67ff6-4918-43d1-8503-5f51950d210f",
                "indicator--56c67ffe-163c-48c3-af44-59a4950d210f",
                "indicator--56c68006-bc2c-46fb-a4fb-c654950d210f",
                "indicator--56c6800f-91e0-4838-be45-c654950d210f",
                "indicator--56c68018-8478-4d7e-a458-4530950d210f",
                "indicator--56c68021-0ee4-4809-a811-c651950d210f",
                "indicator--56c68029-0c70-4146-8235-59a2950d210f",
                "indicator--56c68032-0a70-4be9-abc5-5ca1950d210f",
                "indicator--56c6803a-08b0-438b-b47a-421a950d210f",
                "indicator--56c68042-57dc-4d5a-91a7-c654950d210f",
                "indicator--56c6804b-9a54-4dbd-be5c-5f51950d210f",
                "indicator--56c68053-9790-45c1-901b-470f950d210f",
                "indicator--56c6805b-e0c4-4002-8d4f-59a2950d210f",
                "indicator--56c68064-73c8-4e37-8457-59a3950d210f",
                "indicator--56c6806c-c220-46b9-a258-c651950d210f",
                "indicator--56c68074-46d8-4362-aff5-4b77950d210f",
                "indicator--56c6807d-4a54-4d26-ba86-c650950d210f",
                "indicator--56c68086-df94-4c4e-b681-c653950d210f",
                "indicator--56c6808e-e4d0-4844-89ad-59a4950d210f",
                "indicator--56c68097-7510-4a65-a2fc-5f51950d210f",
                "indicator--56c6809f-9cac-4b0c-82ab-5ca1950d210f",
                "indicator--56c680a7-ce44-4853-8b95-599c950d210f",
                "indicator--56c680af-6c1c-418d-814a-599f950d210f",
                "indicator--56c680b8-ed88-483e-bc99-c652950d210f",
                "indicator--56c680c1-d5ec-476b-8147-c650950d210f",
                "indicator--56c680cb-76d8-43b8-82ec-c651950d210f",
                "indicator--56c680d4-bacc-459d-873a-5f51950d210f",
                "indicator--56c680dd-7398-4875-8364-4526950d210f",
                "indicator--56c680e6-a310-4b95-9977-407d950d210f",
                "indicator--56c680f0-aabc-4eea-8cf0-599d950d210f",
                "indicator--56c680fa-0100-4fe4-b427-4ded950d210f",
                "indicator--56c68104-d1a4-45cd-abb1-59a0950d210f",
                "indicator--56c6810d-63bc-48fd-8d87-599f950d210f",
                "indicator--56c68117-4584-4548-bf8b-42e2950d210f",
                "indicator--56c6811f-3c08-4af8-abfc-599e950d210f",
                "indicator--56c68128-889c-4311-8df4-c650950d210f",
                "indicator--56c68130-0fb8-4ab7-ba76-c652950d210f",
                "indicator--56c6813a-2e70-4df6-bac2-c650950d210f",
                "indicator--56c68144-2b98-479a-a6f7-c654950d210f",
                "indicator--56c6814e-544c-4037-9fb1-c652950d210f",
                "indicator--56c68158-9244-40ad-ad54-5f51950d210f",
                "indicator--56c68163-1d40-4278-aa3f-59a4950d210f",
                "indicator--56c6816d-faf0-4131-84e9-59a2950d210f",
                "indicator--56c68176-f464-421f-8330-59a3950d210f",
                "indicator--56c68180-7624-4a05-9fa2-c652950d210f",
                "indicator--56c68189-c504-43f2-a46a-599f950d210f",
                "indicator--56c68193-1b18-45f8-bef3-c650950d210f",
                "indicator--56c6819c-cc30-4450-b5ad-4aab950d210f",
                "indicator--56c681a6-3ed0-45d1-a102-c652950d210f",
                "indicator--56c681b0-0c8c-4a2e-b462-59a3950d210f",
                "indicator--56c681b9-98d4-4454-964e-49e0950d210f",
                "indicator--56c681c2-53f0-445a-863b-59a3950d210f",
                "indicator--56c681cc-c4c0-4f19-b1f0-599f950d210f",
                "indicator--56c681d6-f760-4ec7-8cfa-c652950d210f",
                "indicator--56c681df-3ab8-4c67-b755-4280950d210f",
                "indicator--56c681e9-d978-4561-af92-40a2950d210f",
                "indicator--56c681f3-0c3c-4c8c-9d9a-5ca1950d210f",
                "indicator--56c681fc-0f90-4152-b13b-c651950d210f",
                "indicator--56c68206-5518-4572-a535-59a3950d210f",
                "indicator--56c68210-a54c-4ea8-9951-59a2950d210f",
                "indicator--56c6821a-5260-47d7-803c-59a4950d210f",
                "indicator--56c68223-6020-460a-9e0d-599f950d210f",
                "indicator--56c6822d-4f94-4bd0-8eb1-4b90950d210f",
                "indicator--56c68236-2564-4b9f-9d17-4926950d210f",
                "indicator--56c68240-8620-44c1-8274-4090950d210f",
                "indicator--56c6824a-ccf4-49d8-9a9c-59a2950d210f",
                "indicator--56c68254-a784-456f-a81e-599d950d210f",
                "indicator--56c6825e-0f38-4f46-999b-599e950d210f",
                "indicator--56c68268-e864-4c13-89bb-5ca1950d210f",
                "indicator--56c68271-1df0-4417-8ee0-4244950d210f",
                "indicator--56c6827c-7100-414a-8179-5ca1950d210f",
                "indicator--56c68288-edd4-4645-86d9-599f950d210f",
                "indicator--56c68292-a674-4da0-a6af-454d950d210f",
                "indicator--56c6829c-2a44-4c29-860c-c650950d210f",
                "indicator--56c682a6-0f70-45de-b8ed-c654950d210f",
                "indicator--56c682b0-6418-4e2f-b6b9-59a4950d210f",
                "indicator--56c682ba-61d0-41ff-85f0-c651950d210f",
                "indicator--56c682c4-cdf8-4b5e-8237-4377950d210f",
                "indicator--56c682ce-08c0-4b2e-a59f-5f51950d210f",
                "indicator--56c682d8-5bfc-4412-8198-c653950d210f",
                "indicator--56c682e1-e940-47f4-b48c-4b4b950d210f",
                "indicator--56c682eb-64e4-4d5d-87e0-47ee950d210f",
                "indicator--56c682f4-9a70-4b77-98fb-42d3950d210f",
                "indicator--56c682fe-8788-4cd3-9f75-4741950d210f",
                "indicator--56c68306-287c-4933-b2a3-c652950d210f",
                "indicator--56c6830f-3890-4bbf-b593-c651950d210f",
                "indicator--56c68318-9f8c-4bd8-a727-5ca1950d210f",
                "indicator--56c68321-a4f4-484e-8a02-5ca1950d210f",
                "indicator--56c6832a-feec-4f8b-9988-48f0950d210f",
                "indicator--56c68333-6a14-42de-b1b7-4234950d210f",
                "indicator--56c6833b-fe20-437b-aa57-c654950d210f",
                "indicator--56c68344-9570-43c4-8daa-599f950d210f",
                "indicator--56c6834f-8c68-468b-8f0b-59a3950d210f",
                "indicator--56c68359-2590-4053-bd33-4134950d210f",
                "indicator--56c68364-fd78-423f-833e-5ca1950d210f",
                "indicator--56c6836f-78dc-4ce8-9c7e-4e32950d210f",
                "indicator--56c68379-63f4-497a-9cde-599e950d210f",
                "indicator--56c68382-6618-4f51-9739-c653950d210f",
                "indicator--56c6838b-a858-4a7e-895f-c654950d210f",
                "indicator--56c68394-b5e4-4a13-ae99-494e950d210f",
                "indicator--56c6839f-d4e4-4550-9790-59a2950d210f",
                "indicator--56c683a9-55f4-42c7-a897-c651950d210f",
                "indicator--56c683b3-2d4c-4fa8-a1d2-c654950d210f",
                "indicator--56c683be-ac3c-4f5d-be23-480b950d210f",
                "indicator--56c683c9-3b70-4dde-83a9-59a4950d210f",
                "indicator--56c683d3-322c-42a9-9425-4487950d210f",
                "indicator--56c683dc-f660-4299-9dc0-59a2950d210f",
                "indicator--56c683e5-dd98-4185-9ef4-c652950d210f",
                "indicator--56c683ee-f9c0-4bc6-a877-c650950d210f",
                "indicator--56c683f7-eaf0-4fd9-9e1c-59a2950d210f",
                "indicator--56c68400-1200-4f33-a4af-4254950d210f",
                "indicator--56c68409-b5b8-49ca-b958-c654950d210f",
                "indicator--56c68412-ed8c-4858-adc9-599d950d210f",
                "indicator--56c6841c-bb98-4ce0-a218-c651950d210f",
                "indicator--56c68425-d3d8-4045-a851-c650950d210f",
                "indicator--56c6842e-9d8c-44b7-afad-59a3950d210f",
                "indicator--56c68437-21c4-417b-93dd-599e950d210f",
                "indicator--56c68440-9ebc-47f2-a79f-c651950d210f",
                "indicator--56c6844a-1608-467a-b08a-59a0950d210f",
                "indicator--56c68453-3564-4939-8e74-4f16950d210f",
                "indicator--56c6845c-76ec-403d-a37e-59a0950d210f",
                "indicator--56c68465-c224-419c-bfbd-c654950d210f",
                "indicator--56c6846e-fa00-4edd-b8f0-599c950d210f",
                "indicator--56c68478-b0e4-4f38-b3b9-59a0950d210f",
                "indicator--56c68482-4594-4f81-b74e-59a4950d210f",
                "indicator--56c6848c-5f84-43fc-8a7a-c653950d210f",
                "indicator--56c68495-6c0c-4b4d-94f5-59a1950d210f",
                "indicator--56c6849f-af50-40e0-a914-599c950d210f",
                "indicator--56c684a8-f4a4-4ab5-8b0e-c654950d210f",
                "indicator--56c684b1-574c-4b8b-b45f-59a0950d210f",
                "indicator--56c684bb-79f8-4b1a-b159-c654950d210f",
                "indicator--56c684c5-1c34-4ae5-8c6c-4627950d210f",
                "indicator--56c684cf-0490-461e-bce1-c652950d210f",
                "indicator--56c684d9-e9d4-4696-bf4e-599e950d210f",
                "indicator--56c684e3-efd4-477c-b115-c652950d210f",
                "indicator--56c684ed-41a0-49ba-aa77-59a1950d210f",
                "indicator--56c684f8-2200-460b-a5f9-4224950d210f",
                "indicator--56c68501-29e0-4c68-976c-599f950d210f",
                "indicator--56c6850a-2128-49cb-b25e-5f51950d210f",
                "indicator--56c68514-e4e0-4518-9158-401f950d210f",
                "indicator--56c6851d-cf8c-4d59-a738-59a3950d210f",
                "indicator--56c68528-9bb4-4283-8f56-599e950d210f",
                "indicator--56c68531-d47c-48a8-945f-45ec950d210f",
                "indicator--56c6853b-8af4-401f-a581-c650950d210f",
                "indicator--56c68545-688c-40ed-83d6-5f51950d210f",
                "indicator--56c6854f-e678-4312-a153-599e950d210f",
                "indicator--56c68559-b238-46c9-909f-4d95950d210f",
                "indicator--56c68563-6b94-48f7-8b42-c651950d210f",
                "indicator--56c6856e-6fd8-4776-901e-599d950d210f",
                "indicator--56c68579-1e74-4606-93f9-4a7b950d210f",
                "indicator--56c68583-2924-4bb9-b86e-59a0950d210f",
                "indicator--56c6858d-3ab0-4a83-b251-4d19950d210f",
                "indicator--56c68597-7804-407d-b906-c652950d210f",
                "indicator--56c685a1-bd18-4150-951a-599d950d210f",
                "indicator--56c685ac-e228-4de0-80bd-599c950d210f",
                "indicator--56c685b6-29f4-4a6f-af5c-4cb6950d210f",
                "indicator--56c685c0-50d0-43a8-be00-59a4950d210f",
                "indicator--56c685c9-e948-4246-82bf-59a1950d210f",
                "indicator--56c685d4-c750-4254-ae20-45e0950d210f",
                "indicator--56c685df-2d44-47b5-bb64-47f0950d210f",
                "indicator--56c685e9-7248-40dd-8120-4092950d210f",
                "indicator--56c685f2-c374-4cd2-9e6e-4734950d210f",
                "indicator--56c685fd-32a8-4816-a275-59a3950d210f",
                "indicator--56c68606-6d98-4480-8f1e-c652950d210f",
                "indicator--56c68611-24bc-445b-bb17-5f51950d210f",
                "indicator--56c6861c-e814-4db4-89a5-59a3950d210f",
                "indicator--56c68626-11c0-490c-974d-c652950d210f",
                "indicator--56c68630-4c98-4169-9ad5-478a950d210f",
                "indicator--56c6863b-d788-40b9-970f-59a2950d210f",
                "indicator--56c68647-27b8-4b23-bf96-599e950d210f",
                "indicator--56c68652-187c-4300-b029-44fb950d210f",
                "indicator--56c6865d-e128-433f-a319-c654950d210f",
                "indicator--56c68667-bcf8-43bc-9002-c654950d210f",
                "indicator--56c68671-a6f4-45f5-bd5f-c651950d210f",
                "indicator--56c6867b-a5ac-4fe8-873f-458f950d210f",
                "indicator--56c68686-b25c-49c3-9ec3-4388950d210f",
                "indicator--56c68691-03b4-4ec6-b4e1-c654950d210f",
                "indicator--56c6869c-4038-4700-bd22-c654950d210f",
                "indicator--56c686a7-4b10-4d01-a222-c654950d210f",
                "indicator--56c686b2-8a00-4556-a36d-599e950d210f",
                "indicator--56c686bc-30ac-462e-bbf5-49de950d210f",
                "indicator--56c686c7-a89c-4203-b9e8-4872950d210f",
                "indicator--56c686d3-2574-4f35-862e-4c20950d210f",
                "indicator--56c686de-2200-4358-8537-44b7950d210f",
                "indicator--56c686ea-3fcc-4b71-b6b8-c653950d210f",
                "indicator--56c686f5-ca2c-4c88-8d99-59a0950d210f",
                "indicator--56c68700-17e8-4b81-925d-4c51950d210f",
                "indicator--56c6870b-89a4-40ed-a054-c654950d210f",
                "indicator--56c68716-1344-4f43-a5a1-c650950d210f",
                "indicator--56c68721-b6c0-474c-9eb0-5ca1950d210f",
                "indicator--56c6872c-888c-4d6e-b263-599f950d210f",
                "indicator--56c68738-4520-4699-a476-c652950d210f",
                "indicator--56c68743-8514-438a-b8b4-42b5950d210f",
                "indicator--56c6874e-3500-4971-896f-44c7950d210f",
                "indicator--56c68758-3e90-4568-8b64-599e950d210f",
                "indicator--56c68763-4890-4e1d-833f-599f950d210f",
                "indicator--56c6876d-d258-4152-86f3-44b7950d210f",
                "indicator--56c68777-204c-4979-a964-59a0950d210f",
                "indicator--56c68781-5410-42ff-b1a4-59a4950d210f",
                "indicator--56c6878a-4d98-4855-9b91-c653950d210f",
                "indicator--56c68794-06f4-4765-b37e-59a3950d210f",
                "indicator--56c6879e-0784-4e26-8ce8-59a2950d210f",
                "indicator--56c687a8-5550-4a5f-93da-5ca1950d210f",
                "indicator--56c687b1-7388-4440-9c53-599f950d210f",
                "indicator--56c687bb-fe44-43a7-b738-4105950d210f",
                "indicator--56c687c5-ee6c-4591-a25f-46e6950d210f",
                "indicator--56c687cf-5c10-48f0-b0d7-59a4950d210f",
                "indicator--56c687d9-6e90-430a-9627-599f950d210f",
                "indicator--56c687e2-fc34-4c05-9660-4edc950d210f",
                "indicator--56c687ec-f208-4ddb-b2de-5f51950d210f",
                "indicator--56c687f6-36d0-45ca-8a54-c652950d210f",
                "indicator--56c68800-17ec-4ec9-a1a5-59a2950d210f",
                "indicator--56c6880b-a61c-4961-87ca-c652950d210f",
                "indicator--56c68816-4560-4c4b-8afe-c651950d210f",
                "indicator--56c68820-3820-426c-88da-5f51950d210f",
                "indicator--56c6882a-ff70-4346-81a6-4963950d210f",
                "indicator--56c68833-cea4-4b7c-b815-488c950d210f",
                "indicator--56c6883e-ad10-4a7e-9621-599d950d210f",
                "indicator--56c68848-8380-46ee-9006-59a0950d210f",
                "indicator--56c68852-5afc-4991-80f9-599f950d210f",
                "indicator--56c6885d-1464-40cc-8987-599f950d210f",
                "indicator--56c68866-efb8-41e6-94c7-c651950d210f",
                "indicator--56c68870-5ef8-4b08-a5a8-4ad8950d210f",
                "indicator--56c6887a-bdc8-498b-8034-59a3950d210f",
                "indicator--56c68884-b4a0-4b59-9d1c-5f51950d210f",
                "indicator--56c6888e-6a1c-4cb8-8c5a-59a2950d210f",
                "indicator--56c68898-b340-4255-bc9f-4285950d210f",
                "indicator--56c688a2-20c4-434a-ab3f-599e950d210f",
                "indicator--56c688ac-9b68-4f4c-8b01-59a2950d210f",
                "indicator--56c688b6-f830-4936-a542-4b45950d210f",
                "indicator--56c688c0-abf0-42a5-9045-599d950d210f",
                "indicator--56c688ca-46ec-4ca0-a2a0-59a0950d210f",
                "indicator--56c688d4-cbf8-4fa6-bad8-4d70950d210f",
                "indicator--56c688de-7d70-44a7-837a-59a0950d210f",
                "indicator--56c688e8-26b8-40d4-97bc-5ca1950d210f",
                "indicator--56c688f2-1ba0-4496-8bac-c650950d210f",
                "indicator--56c688fc-6478-439b-a385-599f950d210f",
                "indicator--56c68906-2920-4d12-9e03-476d950d210f",
                "indicator--56c68910-7280-4404-92f0-c654950d210f",
                "indicator--56c6891a-262c-43fd-9a33-48bf950d210f",
                "indicator--56c68924-df80-4dba-bac7-599e950d210f",
                "indicator--56c6892e-16c4-46bc-b7b3-40c7950d210f",
                "indicator--56c68938-3d50-4222-a819-599d950d210f",
                "indicator--56c68942-e1c8-40c7-bf3d-c650950d210f",
                "indicator--56c6894d-2b64-4165-8e86-599c950d210f",
                "indicator--56c68957-a924-4f74-86bd-4674950d210f",
                "indicator--56c68961-7a20-4819-9987-479c950d210f",
                "indicator--56c6896b-3108-4d47-ba01-599e950d210f",
                "indicator--56c68976-5d28-4b7d-b13e-599c950d210f",
                "indicator--56c68980-a6fc-41b8-9e7c-599d950d210f",
                "indicator--56c6898a-7b40-4c36-9901-5f51950d210f",
                "indicator--56c68994-60dc-4d77-91ac-c653950d210f",
                "indicator--56c6899e-e77c-4203-879b-599f950d210f",
                "indicator--56c689a8-bec4-40e9-bbb1-59a2950d210f",
                "indicator--56c689b3-3804-4eba-b9d3-59a0950d210f",
                "indicator--56c689be-49f0-4237-9337-59a2950d210f",
                "indicator--56c689cb-de0c-429a-ae90-5ca1950d210f",
                "indicator--56c689d7-39ac-42b9-97ef-c654950d210f",
                "indicator--56c689e2-9b28-422f-ae0c-59a4950d210f",
                "indicator--56c689ec-0428-4625-9d46-5f51950d210f",
                "indicator--56c689f7-1714-4cd5-8624-459f950d210f",
                "indicator--56c68a01-5764-4790-b64a-59a1950d210f",
                "indicator--56c68a0c-b86c-4091-be28-4fc3950d210f",
                "indicator--56c68a18-0268-4c87-b5eb-c651950d210f",
                "indicator--56c68a24-16d4-42c8-9718-59a3950d210f",
                "indicator--56c68a2f-f5e4-4b50-a3b5-599e950d210f",
                "indicator--56c68a3b-608c-4529-8a98-5ca1950d210f",
                "indicator--56c68a47-c3d0-40f5-bd11-c653950d210f",
                "indicator--56c68a52-aa64-4a5e-aba9-4599950d210f",
                "indicator--56c68a5e-01f0-4d6e-a26c-4cc7950d210f",
                "indicator--56c68a6a-bf84-4b39-8e42-4eb8950d210f",
                "indicator--56c68a75-6ac4-45f9-92f8-599d950d210f",
                "indicator--56c68a81-d868-4439-95c5-4bc0950d210f",
                "indicator--56c68a8d-48bc-4a54-b9fe-c650950d210f",
                "indicator--56c68a98-9aec-43f7-9b9b-c654950d210f",
                "indicator--56c68aa4-6570-4a0a-97be-5ca1950d210f",
                "indicator--56c68ab1-92ec-42fb-8877-4c1a950d210f",
                "indicator--56c68abd-0634-47f6-9caa-c650950d210f",
                "indicator--56c68aca-f9e8-437f-b35e-5ca1950d210f",
                "indicator--56c68ad6-9930-4143-86e2-c652950d210f",
                "indicator--56c68ae2-3c0c-4fb0-8037-5f51950d210f",
                "indicator--56c68aee-7078-4272-92b9-45ea950d210f",
                "indicator--56c68afa-e178-4dbd-a2c8-5ca1950d210f",
                "indicator--56c68b06-9d14-48a5-b55e-599d950d210f",
                "indicator--56c68b11-7790-4c43-8777-c652950d210f",
                "indicator--56c68b1d-deac-4ff8-8799-5ca1950d210f",
                "indicator--56c68b29-d414-4e3e-8355-59a3950d210f",
                "indicator--56c68b35-ba00-49fa-ab1b-599e950d210f",
                "indicator--56c68b41-6858-4adc-8304-457f950d210f",
                "indicator--56c68b4c-03b0-4f72-b486-4c79950d210f",
                "indicator--56c68b57-4c0c-40f6-815d-599e950d210f",
                "indicator--56c68b62-af18-42eb-9d00-4d2f950d210f",
                "indicator--56c68b6d-b204-43cb-bf31-5f51950d210f",
                "indicator--56c68b77-de28-4e68-94f6-59a0950d210f",
                "indicator--56c68b82-7474-4a4b-ab5e-4876950d210f",
                "indicator--56c68b8d-9b90-41ba-9e61-c653950d210f",
                "indicator--56c68b97-ff10-48a9-88eb-59a1950d210f",
                "indicator--56c68ba2-8de8-4834-a8fd-5f51950d210f",
                "indicator--56c68bad-0598-491c-a4ee-599d950d210f",
                "indicator--56c68bb8-7f44-44cb-8cab-c654950d210f",
                "indicator--56c68bc2-8384-44fa-bad1-5ca1950d210f",
                "indicator--56c68bcd-26ec-46aa-a503-59a0950d210f",
                "indicator--56c68bd8-97f4-4e55-8233-5ca1950d210f",
                "indicator--56c68be3-68ac-4436-94c1-599c950d210f",
                "indicator--56c68bed-bba4-4a6c-8a31-c653950d210f",
                "indicator--56c68bf8-a5c4-4c38-b781-c650950d210f",
                "indicator--56c68c02-f5f0-4bca-8fc9-5ca1950d210f",
                "indicator--56c68c0c-6df4-4191-bf1f-458e950d210f",
                "indicator--56c68c17-01ac-4b3e-982a-59a2950d210f",
                "indicator--56c68c21-e558-43e8-8c01-5ca1950d210f",
                "indicator--56c68c2c-cf88-4b5a-986c-59a2950d210f",
                "indicator--56c68c38-9b48-4eea-9205-59a4950d210f",
                "indicator--56c68c45-0a18-4650-afb6-59a1950d210f",
                "indicator--56c68c50-4758-4b0b-b390-5ca1950d210f",
                "indicator--56c68c5d-9050-4df0-bba9-5f51950d210f",
                "indicator--56c68c68-2e74-4823-82ad-c651950d210f",
                "indicator--56c68c74-1c1c-41f6-99f4-59a1950d210f",
                "indicator--56c68c81-d378-40e2-9810-599c950d210f",
                "indicator--56c68c8d-c3e0-4d71-ad84-c650950d210f",
                "indicator--56c68c99-6b78-4ce8-a9a6-59a1950d210f",
                "indicator--56c68ca5-1fa8-40f1-9e37-599d950d210f",
                "indicator--56c68cb5-e2b8-43b2-9bb9-59a4950d210f",
                "indicator--56c68cc0-0300-41a6-91de-c650950d210f",
                "indicator--56c68ccb-82b8-4907-b366-59a3950d210f",
                "indicator--56c68cd7-1fec-4baa-a899-4434950d210f",
                "indicator--56c68ce2-e048-4af9-af7b-c652950d210f",
                "indicator--56c68ced-56b4-41b3-b700-59a3950d210f",
                "indicator--56c68cf9-1630-42a5-b15f-59a0950d210f",
                "indicator--56c68d05-af68-482c-a4b6-4e1a950d210f",
                "indicator--56c68d10-b3a8-450e-abd2-59a3950d210f",
                "indicator--56c68d1c-1290-4410-965b-5ca1950d210f",
                "indicator--56c68d28-2e64-4253-a5de-c651950d210f",
                "indicator--56c68d34-9504-4c22-b3e8-59a1950d210f",
                "indicator--56c68d40-5284-4c3a-9dd9-59a1950d210f",
                "indicator--56c68d4b-1774-4b3f-ada6-59a3950d210f",
                "indicator--56c68d56-ca5c-4c11-98f1-c653950d210f",
                "indicator--56c68d62-6b0c-431e-b5c5-42a4950d210f",
                "indicator--56c68d6d-7ea0-4be9-b1cf-599c950d210f",
                "indicator--56c68d79-3e18-4e37-a8e3-599c950d210f",
                "indicator--56c68d86-d0a0-4e67-b84f-c652950d210f",
                "indicator--56c68d92-cb14-43b8-8376-42cc950d210f",
                "indicator--56c68d9e-e270-43ca-a1d7-4e75950d210f",
                "indicator--56c68daa-cda4-4d0f-a412-c654950d210f",
                "indicator--56c68db5-433c-44b4-b0ec-c653950d210f",
                "indicator--56c68dc1-04c4-4df4-a48d-c651950d210f",
                "indicator--56c68dcd-8e68-4d51-9ef6-59a1950d210f",
                "indicator--56c68dd8-54f0-46bd-9686-59a2950d210f",
                "indicator--56c68de3-10dc-4357-8f8b-c652950d210f",
                "indicator--56c68def-e528-45f3-a724-c652950d210f",
                "indicator--56c68dfa-7ad4-457a-879c-59a1950d210f",
                "indicator--56c68e05-b738-49d1-b8a9-59a0950d210f",
                "indicator--56c68e11-8f94-4b29-9be5-c650950d210f",
                "indicator--56c68e1e-1c8c-4c39-a74e-599f950d210f",
                "indicator--56c68e29-1728-4138-86d5-59a0950d210f",
                "indicator--56c68e36-6660-4279-b5de-59a4950d210f",
                "indicator--56c68e41-85fc-4d7e-aa1e-59a3950d210f",
                "indicator--56c68e4d-140c-46ec-a444-4def950d210f",
                "indicator--56c68e58-027c-4cad-98ce-599f950d210f",
                "indicator--56c68e64-3b48-42b9-9ea2-c651950d210f",
                "indicator--56c68e71-1094-4fca-8135-59a1950d210f",
                "indicator--56c68e7c-1824-4435-96dd-c653950d210f",
                "indicator--56c68e88-0fb0-4ab1-9e60-4442950d210f",
                "indicator--56c68e94-ca54-4184-a364-599e950d210f",
                "indicator--56c68ea1-0798-4865-8681-59a3950d210f",
                "indicator--56c68ead-2ca8-477e-acd2-59a4950d210f",
                "indicator--56c68eba-10b4-4499-ae6f-59a0950d210f",
                "indicator--56c68ec6-9930-4da0-8c81-4459950d210f",
                "indicator--56c68ed3-a3ec-4626-8981-4592950d210f",
                "indicator--56c68ee0-2df4-4ef5-b062-5ca1950d210f",
                "indicator--56c68eec-6fb8-4c49-8019-4e00950d210f",
                "indicator--56c68ef7-b25c-437e-9bb9-599c950d210f",
                "indicator--56c68f03-9634-4781-bd89-59a3950d210f",
                "indicator--56c68f10-2094-4103-8d60-45d2950d210f",
                "indicator--56c68f1d-3c14-461d-bb88-599c950d210f",
                "indicator--56c68f2a-0d74-46fe-affb-c651950d210f",
                "indicator--56c68f37-afd8-4275-b82b-c650950d210f",
                "indicator--56c68f43-3db8-4368-81d6-599f950d210f",
                "indicator--56c68f4e-3630-44a3-95ab-c651950d210f",
                "indicator--56c68f5a-a25c-43b1-8490-c651950d210f",
                "indicator--56c68f68-d8e4-43ea-b4e0-59a1950d210f",
                "indicator--56c68f75-f898-4cbb-a126-599d950d210f",
                "indicator--56c68f82-3ad0-48ea-97cb-5ca1950d210f",
                "indicator--56c68f90-f0f4-4aeb-8d33-458a950d210f",
                "indicator--56c68f9d-1790-4d54-a26e-c654950d210f",
                "indicator--56c68faa-1d8c-4e08-994c-59a1950d210f",
                "indicator--56c68fb8-b85c-4f49-86f7-c654950d210f",
                "indicator--56c68fc7-ebd0-4a58-829f-425c950d210f",
                "indicator--56c68fd4-5638-4282-8b3f-599e950d210f",
                "indicator--56c68fe1-7d84-4b5f-b1ee-59a0950d210f",
                "indicator--56c68fef-cce4-4e84-be04-4628950d210f",
                "indicator--56c69001-915c-4bd4-8b59-5ca1950d210f",
                "indicator--56c6900f-3020-4710-90f3-44fa950d210f",
                "indicator--56c6901d-2b50-4753-bd20-59a1950d210f",
                "indicator--56c6902b-6f6c-4fe1-b988-59a2950d210f",
                "indicator--56c69038-69e0-4951-990f-599f950d210f",
                "indicator--56c69046-c22c-4365-b80e-59a1950d210f",
                "indicator--56c69054-7794-4911-9976-599d950d210f",
                "indicator--56c69061-709c-451c-beda-4135950d210f",
                "indicator--56c6906f-92ec-4c05-9b95-599f950d210f",
                "indicator--56c6907c-28cc-4fa2-83d2-59a2950d210f",
                "indicator--56c6908a-3738-4998-a181-599d950d210f",
                "indicator--56c69097-9a80-4a11-9665-5f51950d210f",
                "indicator--56c690a5-9e1c-4547-a117-59a0950d210f",
                "indicator--56c690b2-1f40-4ff1-8cf4-c651950d210f",
                "indicator--56c690c0-6ed0-4015-a528-59a0950d210f",
                "indicator--56c690cd-570c-4c01-a0d8-59a4950d210f",
                "indicator--56c690db-bdd0-4fd3-820e-c651950d210f",
                "indicator--56c690e8-9664-47cc-a47b-59a2950d210f",
                "indicator--56c690f4-105c-4399-a246-599f950d210f",
                "indicator--56c69101-4a9c-4a4c-bc40-41c8950d210f",
                "indicator--56c69110-f6a4-4d9b-a3de-5f51950d210f",
                "indicator--56c6911d-d544-49c9-b429-c652950d210f",
                "indicator--56c6912b-3f0c-454f-8aac-599d950d210f",
                "indicator--56c69138-d00c-4807-8957-59a4950d210f",
                "indicator--56c69146-5410-4cfb-b96c-4d43950d210f",
                "indicator--56c69153-7d7c-48d3-90da-c651950d210f",
                "indicator--56c69161-b2fc-4942-956e-c650950d210f",
                "indicator--56c6916e-f4f4-4909-b627-c653950d210f",
                "indicator--56c6917c-8754-4cdd-81f3-43a1950d210f",
                "indicator--56c6918a-d2d4-4c0b-9c49-599f950d210f",
                "indicator--56c69198-5118-4c06-9060-59a1950d210f",
                "indicator--56c691a6-91d4-4e6a-8153-45a3950d210f",
                "indicator--56c691b4-60d4-448d-8c5a-c652950d210f",
                "indicator--56c691c1-7048-42bb-9ac0-59a3950d210f",
                "indicator--56c691cf-ed80-4a93-a241-5ca1950d210f",
                "indicator--56c691dc-63ec-43ef-bdc2-c650950d210f",
                "indicator--56c691ea-8330-4fce-aa1f-4661950d210f",
                "indicator--56c691f7-5338-4cf1-b453-c650950d210f",
                "indicator--56c69205-b668-4226-b659-c652950d210f",
                "indicator--56c69214-0568-4a9d-ab0f-599f950d210f",
                "indicator--56c69220-cfd4-4bcf-9d28-599e950d210f",
                "indicator--56c6922e-9800-4cde-97dc-59a4950d210f",
                "indicator--56c6923c-2274-41e7-ad0d-5ca1950d210f",
                "indicator--56c69249-b8d4-4edd-96d3-59a0950d210f",
                "indicator--56c69257-7ebc-4c0e-8e0d-4853950d210f",
                "indicator--56c69265-d208-4975-8b06-4c4c950d210f",
                "indicator--56c69273-9410-4838-8ec5-5f51950d210f",
                "indicator--56c69280-6d28-4941-9f8c-59a2950d210f",
                "indicator--56c6928e-f6f4-4116-9259-599f950d210f",
                "indicator--56c6929b-08f4-4fea-b065-4799950d210f",
                "indicator--56c692a9-d158-4d17-9630-59a1950d210f",
                "indicator--56c692b6-644c-4152-a72e-599c950d210f",
                "indicator--56c692c4-7b78-4e0b-83cf-599d950d210f",
                "indicator--56c692d1-9548-4e43-a623-c650950d210f",
                "indicator--56c692df-2be8-4267-be08-44f5950d210f",
                "indicator--56c692ed-fc9c-45e4-8e3d-59a0950d210f",
                "indicator--56c692fa-6ce8-4b07-ba6b-599f950d210f",
                "indicator--56c69308-a830-462d-bc45-599e950d210f",
                "indicator--56c69315-dd8c-425d-834a-c653950d210f",
                "indicator--56c69323-7010-41fa-8618-c650950d210f",
                "indicator--56c69331-1ad4-413d-9125-599e950d210f",
                "indicator--56c6933f-d29c-4b65-bc95-4017950d210f",
                "indicator--56c6934b-7308-47be-be0f-59a1950d210f",
                "indicator--56c69357-3ab0-47ba-a005-599f950d210f",
                "indicator--56c69365-b31c-4f9e-81ba-599c950d210f",
                "indicator--56c69372-0a1c-4f22-be2f-441d950d210f",
                "indicator--56c69381-041c-46bb-b12d-c650950d210f",
                "indicator--56c6938f-852c-44ab-9116-599f950d210f",
                "indicator--56c6939d-d6a4-4519-9071-4450950d210f",
                "indicator--56c693ab-904c-4060-90f4-59a0950d210f",
                "indicator--56c693b9-ea00-43a7-9ad6-5ca1950d210f",
                "indicator--56c693c7-8480-49d3-abf6-599f950d210f",
                "indicator--56c693d5-4b84-4acd-b7e1-599d950d210f",
                "indicator--56c693e3-0c84-4e80-af90-599e950d210f",
                "indicator--56c693f0-86a4-4c87-b0c3-4c77950d210f",
                "indicator--56c693fe-4f58-4982-a198-5f51950d210f",
                "indicator--56c6940c-871c-4d35-b7a0-59a0950d210f",
                "indicator--56c6941a-9434-42a3-8dbf-420d950d210f",
                "indicator--56c69428-99f4-47a6-8d46-599f950d210f",
                "indicator--56c69435-6da8-4e92-bb48-4e0c950d210f",
                "indicator--56c69443-96c0-4c3a-91ea-5f51950d210f",
                "indicator--56c69451-a4a4-4f72-bde6-5ca1950d210f",
                "indicator--56c6945f-c590-41f7-a9c3-59a1950d210f",
                "indicator--56c6946e-b764-4aaa-9bbe-5f51950d210f",
                "indicator--56c6947b-c940-4d5a-8196-c652950d210f",
                "indicator--56c69489-b7dc-4ea9-8288-59a3950d210f",
                "indicator--56c69497-41e0-40fb-b89e-4655950d210f",
                "indicator--56c694a5-d4f0-45b6-a6f5-5ca1950d210f",
                "indicator--56c694b3-0c48-47f6-ad43-4eb6950d210f",
                "indicator--56c694c1-6798-49ea-8f86-4a49950d210f",
                "indicator--56c694cf-9b98-4d40-b5c2-c650950d210f",
                "indicator--56c694dd-c364-4b4e-88d2-59a1950d210f",
                "indicator--56c694ec-e07c-44a0-8fd9-59a2950d210f",
                "indicator--56c694fa-e6ec-48e3-9bf7-4ab2950d210f",
                "indicator--56c69508-7f84-4723-ab2e-4c83950d210f",
                "indicator--56c69516-6824-4011-a7fe-c650950d210f",
                "indicator--56c69523-e220-4a40-a3a2-599e950d210f",
                "indicator--56c69531-12c4-4922-a5e6-439f950d210f",
                "indicator--56c6953f-8d48-4a4d-a88d-59a4950d210f",
                "indicator--56c6954d-0fe4-44fc-9c0a-59a2950d210f",
                "indicator--56c6955b-c174-4f43-8012-c650950d210f",
                "indicator--56c69568-1070-473c-b31f-599e950d210f",
                "indicator--56c69575-31ec-4f35-bee4-419b950d210f",
                "indicator--56c69583-ae08-41ec-8302-c651950d210f",
                "indicator--56c69591-9788-42d6-acfc-59a1950d210f",
                "indicator--56c6959f-e9f8-4167-b6a5-599c950d210f",
                "indicator--56c695ab-ac5c-4f32-8803-44b9950d210f",
                "indicator--56c695b8-9654-4728-aff1-c650950d210f",
                "indicator--56c695c5-fab0-4d4d-bb42-599c950d210f",
                "indicator--56c695d4-ee3c-472b-ad63-4d68950d210f",
                "indicator--56c695e3-5918-4616-8850-599d950d210f",
                "indicator--56c695f2-3230-44e4-8a16-4d0d950d210f",
                "indicator--56c69600-8478-4841-b3c1-59a0950d210f",
                "indicator--56c6960d-d880-4078-9257-599c950d210f",
                "indicator--56c6961a-4068-4275-80cc-4ea6950d210f",
                "indicator--56c69627-f1f8-490c-b7bc-5ca1950d210f",
                "indicator--56c69633-6110-4bc4-9688-599f950d210f",
                "indicator--56c6963f-e4b4-465c-ba09-c650950d210f",
                "indicator--56c6964c-0ab8-4161-831c-c654950d210f",
                "indicator--56c69659-78e4-4fc9-a67c-59a3950d210f",
                "indicator--56c69667-30d0-4328-a1bd-599c950d210f",
                "indicator--56c69675-0fd8-4459-a51c-c653950d210f",
                "indicator--56c69684-cc1c-450e-b79d-c652950d210f",
                "indicator--56c69692-99d4-4570-8396-599d950d210f",
                "indicator--56c6969f-f408-41e0-b19f-5ca1950d210f",
                "indicator--56c696ac-ae08-42f4-9d9c-c651950d210f",
                "indicator--56c696bb-17e0-46fe-9ccb-447f950d210f",
                "indicator--56c696c8-af0c-4328-b298-4418950d210f",
                "indicator--56c696d5-f52c-496a-ab82-c650950d210f",
                "indicator--56c696e4-761c-4a08-9ae8-c651950d210f",
                "indicator--56c696f2-47c8-4fec-b561-c652950d210f",
                "indicator--56c69701-4c64-410f-b900-59a0950d210f",
                "indicator--56c6970e-8ba4-4310-8f81-599d950d210f",
                "indicator--56c6971b-7f4c-4dab-810d-c654950d210f",
                "indicator--56c69729-8fc0-4c5f-995b-5f51950d210f",
                "indicator--56c69738-1568-496d-985b-59a0950d210f",
                "indicator--56c69746-7578-4ab9-befc-5f51950d210f",
                "indicator--56c69756-52bc-43f5-92df-443f950d210f",
                "indicator--56c69763-56c8-461d-8548-c653950d210f",
                "indicator--56c69771-957c-4f1a-9bd7-59a4950d210f",
                "indicator--56c6977f-da88-4411-9df0-c650950d210f",
                "indicator--56c6978c-6b28-47d7-8227-4b8e950d210f",
                "indicator--56c6979b-54b4-4d87-ae03-5ca1950d210f",
                "indicator--56c697aa-c7fc-4782-97d9-4d04950d210f",
                "indicator--56c697b9-9c84-47e4-8e2a-599e950d210f",
                "indicator--56c697c8-bf68-4178-a2e1-5ca1950d210f",
                "indicator--56c697d6-2f7c-4b23-ae84-c654950d210f",
                "indicator--56c697e5-2310-4d34-b4f8-40f0950d210f",
                "indicator--56c697f4-9a6c-4bf0-9298-599c950d210f",
                "indicator--56c69802-c8d0-45c2-a76c-4948950d210f",
                "indicator--56c69811-d6f0-4d24-b34a-599d950d210f",
                "indicator--56c6981f-71a8-4f61-96e4-c651950d210f",
                "indicator--56c6982e-43e8-4c6c-be58-59a3950d210f",
                "indicator--56c6983c-676c-4ab8-9a7a-599d950d210f",
                "indicator--56c6984b-25ac-4398-bdd0-4ec8950d210f",
                "indicator--56c6985a-9968-42da-872f-59a0950d210f",
                "indicator--56c6986a-0e08-4203-a445-4d64950d210f",
                "indicator--56c69878-3d5c-46b3-8415-4ee1950d210f",
                "indicator--56c69887-b250-4f3f-b502-c650950d210f",
                "indicator--56c69896-947c-424b-a122-c654950d210f",
                "indicator--56c698a4-b4cc-4f7b-8da8-599c950d210f",
                "indicator--56c698b3-8568-4ec8-932e-c654950d210f",
                "indicator--56c698c1-4080-41fa-b099-59a2950d210f",
                "indicator--56c698d0-2790-4278-b2a4-4088950d210f",
                "indicator--56c698df-513c-4cac-b811-4dae950d210f",
                "indicator--56c698ed-6610-409c-a95c-4ea7950d210f",
                "indicator--56c698fb-dd6c-475d-b5e9-59a0950d210f",
                "indicator--56c6990a-bc44-4179-bd81-c652950d210f",
                "indicator--56c69918-643c-4d19-9a61-59a0950d210f",
                "indicator--56c69926-bf20-4947-ac8f-c652950d210f",
                "indicator--56c69932-836c-4258-8423-4bf6950d210f",
                "indicator--56c69940-80f8-49c2-9f8a-5f51950d210f",
                "indicator--56c6994f-deb0-49ea-af5e-59a0950d210f",
                "indicator--56c6995d-432c-4f59-9757-5f51950d210f",
                "indicator--56c6996a-4fe0-4b0c-acce-c650950d210f",
                "indicator--56c69978-9268-4546-95ee-59a2950d210f",
                "indicator--56c69984-9464-487f-8260-59a3950d210f",
                "indicator--56c69991-ce90-43a6-a61d-5f51950d210f",
                "indicator--56c6999f-8480-4d46-a9c8-c652950d210f",
                "indicator--56c699ad-0ab8-413b-9611-59a1950d210f",
                "indicator--56c699bb-1158-4e24-8099-5f51950d210f",
                "indicator--56c699c9-ded0-419f-920b-59a0950d210f",
                "indicator--56c699d7-bf9c-4485-bc94-c651950d210f",
                "indicator--56c699e4-c2e8-433c-b242-c650950d210f",
                "indicator--56c699f1-5d0c-4d96-84e7-59a3950d210f",
                "indicator--56c699fe-8628-4799-96d8-4bf4950d210f",
                "indicator--56c69a0b-f684-4657-b9dd-5ca1950d210f",
                "indicator--56c69a19-1368-4e19-9de5-599c950d210f",
                "indicator--56c69a26-99b8-4fbe-9f67-599e950d210f",
                "indicator--56c69a33-7c34-468e-8fd5-5f51950d210f",
                "indicator--56c69a41-4818-4ac0-b43f-c652950d210f",
                "indicator--56c69a4e-8a9c-4819-a127-599f950d210f",
                "indicator--56c69a5b-5bd4-419f-889d-599c950d210f",
                "indicator--56c69a68-0538-4074-b17c-c654950d210f",
                "indicator--56c69a75-4704-4e2b-8e57-48e2950d210f",
                "indicator--56c69a82-2088-4631-8c67-c654950d210f",
                "indicator--56c69a8e-3f88-4faa-84d0-59a2950d210f",
                "indicator--56c69a9b-e17c-46fb-bb95-59a2950d210f",
                "indicator--56c69aa8-549c-42bc-92e1-5ca1950d210f",
                "indicator--56c69ab4-5510-4788-bbb3-c653950d210f",
                "indicator--56c69ac2-1b60-42e3-80b4-5ca1950d210f",
                "indicator--56c69acf-01a4-4599-9165-c651950d210f",
                "indicator--56c69adc-e1f8-46e0-b6ad-599c950d210f",
                "indicator--56c69ae9-a804-4ed8-aa0f-5f51950d210f",
                "indicator--56c69af7-d640-415f-8b7d-c650950d210f",
                "indicator--56c69b06-b370-4187-b713-5f51950d210f",
                "indicator--56c69b13-e98c-4c8b-a3b9-59a2950d210f",
                "indicator--56c69b21-4ab4-4bb0-b4d6-c654950d210f",
                "indicator--56c69b30-a5b0-4a9e-8bc0-4743950d210f",
                "indicator--56c69b3d-d1b4-4349-876b-c653950d210f",
                "indicator--56c69b4a-6c14-4f39-9ce9-c652950d210f",
                "indicator--56c69b57-14e0-4d9d-b397-c654950d210f",
                "indicator--56c69b64-bb28-4c4e-8065-c652950d210f",
                "indicator--56c69b71-7afc-4afb-8cd9-c654950d210f",
                "indicator--56c69b7f-645c-435a-b018-48a2950d210f",
                "indicator--56c69b8c-eca0-4674-9dc8-c651950d210f",
                "indicator--56c69b98-0bbc-424e-8ef2-59a1950d210f",
                "indicator--56c69ba5-0378-4bf2-be94-599e950d210f",
                "indicator--56c69bb3-1ef8-42c6-a220-5f51950d210f",
                "indicator--56c69bc2-e504-4ac6-a834-c650950d210f",
                "indicator--56c69bd0-e280-4ff9-a7fb-470b950d210f",
                "indicator--56c69bdf-92c4-4773-9212-599e950d210f",
                "indicator--56c69bed-c4f8-44f3-9113-4b11950d210f",
                "indicator--56c69bfb-d034-4704-aed3-59a0950d210f",
                "indicator--56c69c08-8330-44ea-8f08-5f51950d210f",
                "indicator--56c69c16-0480-4194-a77e-4d33950d210f",
                "indicator--56c69c23-94b8-4dee-a553-4eb2950d210f",
                "indicator--56c69c30-e740-430d-ae2c-59a2950d210f",
                "indicator--56c69c3e-26f8-4f1d-be48-c650950d210f",
                "indicator--56c69c4c-7ac8-44df-ad27-59a0950d210f",
                "indicator--56c69c59-4694-42b8-8749-59a2950d210f",
                "indicator--56c69c66-3e1c-49e4-bae2-59a2950d210f",
                "indicator--56c69c75-92b4-419d-85de-59a4950d210f",
                "indicator--56c69c83-bf50-4cd7-8deb-4228950d210f",
                "indicator--56c69c90-6cc4-41c2-97d3-4e47950d210f",
                "indicator--56c69c9d-532c-4226-a29b-c650950d210f",
                "indicator--56c69caa-011c-447e-a652-5ca1950d210f",
                "indicator--56c69cb9-d628-47b6-97e9-c650950d210f",
                "indicator--56c69cc6-f524-4d1f-bf92-44a4950d210f",
                "indicator--56c69cd3-be70-4f95-bfc6-599e950d210f",
                "indicator--56c69ce0-ce84-4173-b7e1-482e950d210f",
                "indicator--56c69ced-ef74-4a7b-b720-599c950d210f",
                "indicator--56c69cfc-3fbc-4875-8a09-599e950d210f",
                "indicator--56c69d0b-d584-4915-b605-5ca1950d210f",
                "indicator--56c69d1a-b9fc-487d-aa99-59a0950d210f",
                "indicator--56c69d2a-9f94-421d-b0f3-c650950d210f",
                "indicator--56c69d3a-91d0-4f57-8afa-59a3950d210f",
                "indicator--56c69d49-780c-4d2a-b6a9-4f03950d210f",
                "indicator--56c69d56-4568-45df-93b0-c650950d210f",
                "indicator--56c69d63-554c-4327-8707-c654950d210f",
                "indicator--56c69d72-e704-4906-b0c9-5ca1950d210f",
                "indicator--56c69d81-e060-4140-8bba-59a4950d210f",
                "indicator--56c69d90-6d28-4392-aa05-c654950d210f",
                "indicator--56c69da0-3b8c-4f7d-a48a-59a3950d210f",
                "indicator--56c69daf-1ff8-465b-a20d-59a0950d210f",
                "indicator--56c69dbe-e850-4537-9018-599e950d210f",
                "indicator--56c69dcc-815c-47ed-b861-59a1950d210f",
                "indicator--56c69ddb-e3c8-46b5-892d-4d79950d210f",
                "indicator--56c69dea-759c-421c-b980-c653950d210f",
                "indicator--56c67620-0c10-4302-aeac-46ec950d210f",
                "indicator--56c67625-0e50-459c-8b6b-c654950d210f",
                "indicator--56c6762a-ffc8-4870-b3d6-c651950d210f",
                "indicator--56c6762e-3c8c-400f-908f-599e950d210f",
                "indicator--56c67633-481c-43e4-b85d-599f950d210f",
                "indicator--56c67637-eea4-4f1c-9c93-46e2950d210f",
                "indicator--56c6763c-5070-459e-a69c-59a1950d210f",
                "indicator--56c67641-dc54-4c6b-8306-c654950d210f",
                "indicator--56c67645-55ac-44af-b147-4aac950d210f",
                "indicator--56c6764a-9a04-4af8-a70c-599d950d210f",
                "indicator--56c6764e-38a8-47fb-9e6b-478d950d210f",
                "indicator--56c67653-28a8-4667-8996-59a2950d210f",
                "indicator--56c67658-00d4-4ba3-8967-c651950d210f",
                "indicator--56c6765c-fc04-40bd-baa3-4d57950d210f",
                "indicator--56c67662-bc4c-4c61-8930-599f950d210f",
                "indicator--56c67667-d798-4195-8ee3-494e950d210f",
                "indicator--56c6766c-2158-4dec-a434-5ca1950d210f",
                "indicator--56c67671-97d8-40eb-9d05-599f950d210f",
                "indicator--56c67676-3230-456c-9359-4b80950d210f",
                "indicator--56c6767a-e1d4-4edb-b2ff-49de950d210f",
                "indicator--56c6767f-6178-4990-adea-c652950d210f",
                "indicator--56c67684-5714-4c4e-a90d-599e950d210f",
                "indicator--56c67688-76c4-4b68-8be4-48c1950d210f",
                "indicator--56c6768d-4534-4de2-acc4-599c950d210f",
                "indicator--56c67692-2368-4b92-817c-599d950d210f",
                "indicator--56c67697-1b60-4527-9cd0-59a3950d210f",
                "indicator--56c6769c-3a84-48c9-a7bb-c651950d210f",
                "indicator--56c676a1-c30c-4354-82f5-4bec950d210f",
                "indicator--56c676a5-babc-43ca-a9d4-599f950d210f",
                "indicator--56c676aa-f634-4160-ba2f-59a2950d210f",
                "indicator--56c676af-91b4-48dd-8976-4564950d210f",
                "indicator--56c676b4-859c-4b19-ba1d-483c950d210f",
                "indicator--56c676b9-636c-4d36-8e0e-59a2950d210f",
                "indicator--56c676bd-2cf8-4801-ab68-4d56950d210f",
                "indicator--56c676c2-33a0-4692-90d7-c654950d210f",
                "indicator--56c676c7-f9ec-49a9-bd3d-c651950d210f",
                "indicator--56c676cc-d19c-45bd-929b-59a2950d210f",
                "indicator--56c676d1-95d0-47a9-b48c-45c3950d210f",
                "indicator--56c676d6-2038-407f-bffb-59a1950d210f",
                "indicator--56c676db-6e44-4f4a-918e-c650950d210f",
                "indicator--56c676e0-aa4c-4dac-9abd-4771950d210f",
                "indicator--56c676e5-99a8-431c-8e99-c654950d210f",
                "indicator--56c676e9-1bc4-4b47-9c5f-c650950d210f",
                "indicator--56c676ee-4a04-43b4-9bd6-5ca1950d210f",
                "indicator--56c676f3-ece0-41f3-b38d-59a3950d210f",
                "indicator--56c676f8-da48-4526-81e0-c653950d210f",
                "indicator--56c676fd-60ac-48e0-aee1-c652950d210f",
                "indicator--56c67702-0184-42cc-b508-49c1950d210f",
                "indicator--56c67707-972c-440e-bc23-599e950d210f",
                "indicator--56c6770c-8fa4-4335-b123-5ca1950d210f",
                "indicator--56c67712-2154-4961-a576-599c950d210f",
                "indicator--56c67717-c528-498a-8a64-c653950d210f",
                "indicator--56c6771c-ad7c-4b4f-a91d-5ca1950d210f",
                "indicator--56c67721-3dc4-4cfc-b527-59a3950d210f",
                "indicator--56c67726-445c-4e89-a6ac-599c950d210f",
                "indicator--56c6772b-d7e0-4c93-9213-c651950d210f",
                "indicator--56c67730-d608-47ce-bc09-59a0950d210f",
                "indicator--56c67735-2408-459b-920e-599e950d210f",
                "indicator--56c6773a-ce88-4fca-90db-59a2950d210f",
                "indicator--56c6773f-76c0-43a2-b730-432e950d210f",
                "indicator--56c67744-7b74-4061-bcca-5f51950d210f",
                "indicator--56c67749-2fc8-4fb1-8b0d-c653950d210f",
                "indicator--56c6774e-343c-43be-8e33-4512950d210f",
                "indicator--56c67752-07e8-4f2c-b21a-5ca1950d210f",
                "indicator--56c67757-334c-4326-b5ae-4752950d210f",
                "indicator--56c6775c-2e54-4836-a226-599e950d210f",
                "indicator--56c67761-fbdc-4883-88d6-59a0950d210f",
                "indicator--56c67767-1b70-465e-a7e7-599c950d210f",
                "indicator--56c6776c-ef30-40a4-865d-5f51950d210f",
                "indicator--56c67771-0260-4785-a920-59a2950d210f",
                "indicator--56c67776-e440-4d6c-9d8c-c652950d210f",
                "indicator--56c6777b-73dc-45fa-8058-59a3950d210f",
                "indicator--56c67781-8ac4-4350-b09c-4682950d210f",
                "indicator--56c67787-83bc-4056-8891-59a0950d210f",
                "indicator--56c6778c-7a04-4e74-95bf-59a2950d210f",
                "indicator--56c67792-db40-41ea-8675-59a0950d210f",
                "indicator--56c67797-f32c-4822-8145-5f51950d210f",
                "indicator--56c6779d-63d4-400d-8b80-c654950d210f",
                "indicator--56c677a2-3b84-4ddb-8d65-599e950d210f",
                "indicator--56c677a8-9d68-4035-8257-c654950d210f",
                "indicator--56c677ae-f988-429e-9779-5ca1950d210f",
                "indicator--56c677b3-b4f8-446a-a42a-5f51950d210f",
                "indicator--56c677b9-5b3c-4c7d-b369-4983950d210f",
                "indicator--56c677bf-79a0-4c12-8218-4200950d210f",
                "indicator--56c677c5-0504-45aa-a073-c652950d210f",
                "indicator--56c677cb-f0d8-4934-8bf7-5f51950d210f",
                "indicator--56c677d1-b7c8-4416-ba94-59a3950d210f",
                "indicator--56c677d6-5ba0-4958-9690-4f25950d210f",
                "indicator--56c677dc-6dec-410b-a67a-59a0950d210f",
                "indicator--56c677e2-9170-4893-85c0-599e950d210f",
                "indicator--56c677e8-3228-4741-8912-5f51950d210f",
                "indicator--56c677ee-5e90-4f70-9f41-c653950d210f",
                "indicator--56c677f4-7a94-46cf-ab33-59a4950d210f",
                "indicator--56c677fa-bb28-4be9-856c-4623950d210f",
                "indicator--56c67800-d17c-495e-a9eb-599e950d210f",
                "indicator--56c67806-4290-4bb7-8921-c650950d210f",
                "indicator--56c6780c-0d44-4976-a8cc-59a3950d210f",
                "indicator--56c67812-4d40-4997-b016-5ca1950d210f",
                "indicator--56c67818-0e0c-4656-8a99-47bd950d210f",
                "indicator--56c6781e-a0fc-4539-93ca-c651950d210f",
                "indicator--56c67824-f1f4-4770-9453-4753950d210f",
                "indicator--56c6782a-5a34-4bde-9834-447c950d210f",
                "indicator--56c67830-5730-426a-ac68-59a1950d210f",
                "indicator--56c67836-0024-4c89-ae2f-4e39950d210f",
                "indicator--56c6783c-586c-43c1-adb1-c653950d210f",
                "indicator--56c67842-0318-4d9b-817e-4487950d210f",
                "indicator--56c67848-4154-4ec5-8fb7-c652950d210f",
                "indicator--56c6784e-1ee4-444a-8f80-5f51950d210f",
                "indicator--56c67854-9384-4575-9f88-599c950d210f",
                "indicator--56c6785a-4af8-47e6-8175-c650950d210f",
                "indicator--56c67860-c050-4a67-9a37-59a1950d210f",
                "indicator--56c67866-8450-42cf-887c-49be950d210f",
                "indicator--56c6786c-c69c-4c25-b94d-c654950d210f",
                "indicator--56c67872-183c-42fd-9a81-c652950d210f",
                "indicator--56c67878-700c-4af3-9973-4c21950d210f",
                "indicator--56c6787e-900c-420d-9a29-5ca1950d210f",
                "indicator--56c67884-5878-446d-88dd-4c7e950d210f",
                "indicator--56c6788a-da60-4757-a187-c652950d210f",
                "indicator--56c67890-e7e8-40e2-9798-59a4950d210f",
                "indicator--56c67897-1838-4b18-b6b6-599e950d210f",
                "indicator--56c6789d-a1e0-4cb4-a073-599d950d210f",
                "indicator--56c678a3-27a8-40c2-bdc5-490c950d210f",
                "indicator--56c678a9-96bc-482d-8815-5ca1950d210f",
                "indicator--56c678af-3d00-48aa-9cb0-403e950d210f",
                "indicator--56c678b6-e380-4947-b2f2-599d950d210f",
                "indicator--56c678bc-6fe4-424c-917d-4c7c950d210f",
                "indicator--56c678c3-de08-4087-8bfe-c652950d210f",
                "indicator--56c678ca-1940-48c7-b559-599c950d210f",
                "indicator--56c678d1-0f00-4ec7-8c39-c653950d210f",
                "indicator--56c678d8-6cf4-4480-8bda-c650950d210f",
                "indicator--56c678df-b3cc-4e21-b7f5-599e950d210f",
                "indicator--56c678e5-cbfc-4509-8e79-43e3950d210f",
                "indicator--56c678ec-0aa0-40b7-a0da-4808950d210f",
                "indicator--56c678f2-bba0-49af-810e-59a2950d210f",
                "indicator--56c678f9-4e5c-4d32-859f-4ae9950d210f",
                "indicator--56c678ff-2d70-482f-9aab-599f950d210f",
                "indicator--56c67906-5a64-4563-805f-5f51950d210f",
                "indicator--56c6790c-39a0-40e1-9789-599e950d210f",
                "indicator--56c67913-67d4-4af2-bed0-c654950d210f",
                "indicator--56c6791a-f5bc-419f-9646-46ae950d210f",
                "indicator--56c67920-7cb0-4382-ba70-5ca1950d210f",
                "indicator--56c67927-7f1c-4ed7-8cbb-c653950d210f",
                "indicator--56c6792d-a41c-419f-afd4-599e950d210f",
                "indicator--56c67934-7c50-4ed1-a967-c653950d210f",
                "indicator--56c6793a-e644-4fba-9460-49d7950d210f",
                "indicator--56c67941-1508-4438-a066-c652950d210f",
                "indicator--56c67948-f570-4bf8-ba84-599d950d210f",
                "indicator--56c6794e-2160-4502-9223-4af8950d210f",
                "indicator--56c67955-7128-4b98-9083-599f950d210f",
                "indicator--56c6795c-146c-41d7-a4cc-c654950d210f",
                "indicator--56c67963-b008-435e-b19b-59a0950d210f",
                "indicator--56c67969-1790-4b94-84fd-4ef9950d210f",
                "indicator--56c67970-d4e4-47eb-8621-45de950d210f",
                "indicator--56c67977-a908-45e0-87b2-59a3950d210f",
                "indicator--56c6797d-7080-48d7-b9ff-c652950d210f",
                "indicator--56c67984-f6ac-4506-98be-c654950d210f",
                "indicator--56c6798b-b9c4-4384-be79-59a1950d210f",
                "indicator--56c67992-4040-4c9c-83d7-599e950d210f",
                "indicator--56c67998-ec6c-42cd-9132-5f51950d210f",
                "indicator--56c679a0-ab70-442a-be09-c652950d210f",
                "indicator--56c679a7-f978-4f64-9f6b-4ccf950d210f",
                "indicator--56c679ae-ffdc-4061-8978-4990950d210f",
                "indicator--56c679b6-2cac-4cdb-9359-4088950d210f",
                "indicator--56c679bd-8138-46a5-9b8e-c654950d210f",
                "indicator--56c679c4-86d0-49fc-8c5b-599d950d210f",
                "indicator--56c679cb-d900-41de-b10b-599c950d210f",
                "indicator--56c679d2-6a64-4986-a127-c654950d210f",
                "indicator--56c679d9-0d94-4d29-8747-c650950d210f",
                "indicator--56c679df-349c-4f90-b39f-5ca1950d210f",
                "indicator--56c679e6-4144-440d-8d3b-40ef950d210f",
                "indicator--56c679ed-7688-42bb-9897-599f950d210f",
                "indicator--56c679f4-5e98-402f-8926-c651950d210f",
                "indicator--56c679fb-af94-4366-ae6e-59a0950d210f",
                "indicator--56c67a03-d0cc-4a4b-b674-599f950d210f",
                "indicator--56c67a0a-5708-40b2-a8f1-59a3950d210f",
                "indicator--56c67a11-dc9c-49ec-afa1-599f950d210f",
                "indicator--56c67a18-bdc8-4c52-a822-599d950d210f",
                "indicator--56c67a1f-49d0-430e-804e-c651950d210f",
                "indicator--56c67a26-31a8-4829-8232-4371950d210f",
                "indicator--56c67a2e-5cc4-4656-9862-5f51950d210f",
                "indicator--56c67a35-c1e0-4d43-b8e5-c651950d210f",
                "indicator--56c67a3c-66fc-43fa-9992-47bb950d210f",
                "indicator--56c67a43-b260-49dd-99f7-4ae9950d210f",
                "indicator--56c67a4a-19d0-4e15-ace7-59a0950d210f",
                "indicator--56c67a51-dddc-4550-9a1a-4a79950d210f",
                "indicator--56c67a57-370c-465a-8510-599e950d210f",
                "indicator--56c67a5e-ce58-4159-b828-59a2950d210f",
                "indicator--56c67a65-bcfc-46c7-9f0f-59a4950d210f",
                "indicator--56c67a6b-d358-4739-98a7-c653950d210f",
                "indicator--56c67a72-6500-4523-a3a0-59a0950d210f",
                "indicator--56c67a79-08ac-482b-8c4a-599f950d210f",
                "indicator--56c67a80-afd4-47ad-b6b9-4a71950d210f",
                "indicator--56c67a87-f13c-45ea-9466-5ca1950d210f",
                "indicator--56c67a8e-b788-40b6-a5cf-c653950d210f",
                "indicator--56c67a95-9e60-421c-ad17-59a3950d210f",
                "indicator--56c67a9c-0734-4723-a9d1-4ca4950d210f",
                "indicator--56c67aa4-8aa4-4162-8619-599d950d210f",
                "indicator--56c67aab-3774-4767-832a-599e950d210f",
                "indicator--56c67ab2-2bc8-4902-b4ca-c651950d210f",
                "indicator--56c67ab9-4774-4620-8611-c650950d210f",
                "indicator--56c67ac1-ce80-4b4b-be92-45b9950d210f",
                "indicator--56c67ac8-9dc8-4699-a10c-c653950d210f",
                "indicator--56c67ace-5500-4f8c-9cb9-c652950d210f",
                "indicator--56c67ad5-2e88-4b5f-95ca-4057950d210f",
                "indicator--56c67adc-7a58-48f4-be31-c654950d210f",
                "indicator--56c67ae3-6578-46cb-8a90-599f950d210f",
                "indicator--56c67aea-1b54-4b57-86c5-5ca1950d210f",
                "indicator--56c67af1-1670-458b-9266-59a0950d210f",
                "indicator--56c67af8-e0a4-453c-abd2-c651950d210f",
                "indicator--56c67aff-1290-485b-b44c-c650950d210f",
                "indicator--56c67b06-eaa4-4381-a5c1-4691950d210f",
                "indicator--56c67b0d-e0dc-4af7-8d44-c651950d210f",
                "indicator--56c67b14-8bb8-4b9b-ba31-599c950d210f",
                "indicator--56c67b1b-3c34-4ad3-b7d4-c652950d210f",
                "indicator--56c67b22-aa74-4a15-bd49-4f25950d210f",
                "indicator--56c67b29-4cb0-4836-9237-c651950d210f",
                "indicator--56c67b30-3f9c-4074-ae62-59a2950d210f",
                "indicator--56c67b37-27f0-4a4c-bcd3-5ca1950d210f",
                "indicator--56c67b3f-2d8c-46ff-8414-41b0950d210f",
                "indicator--56c67b47-44c4-42b3-98ed-59a0950d210f",
                "indicator--56c67b4f-6b74-456e-9a75-59a2950d210f",
                "indicator--56c67b56-33bc-4a80-9cc2-59a0950d210f",
                "indicator--56c67b5e-5eb8-4496-aa0f-599e950d210f",
                "indicator--56c67b65-67b4-41ed-888b-5f51950d210f",
                "indicator--56c67b6d-b698-4e5c-9737-c653950d210f",
                "indicator--56c67b74-95cc-44b7-a58f-c652950d210f",
                "indicator--56c67b7b-b92c-4e9d-9c96-59a0950d210f",
                "indicator--56c67b82-96bc-4122-980a-59a3950d210f",
                "indicator--56c67b8a-82b8-4656-8ceb-44bb950d210f",
                "indicator--56c67b91-efc4-4a14-ae37-c653950d210f",
                "indicator--56c67b98-0800-4e68-b8a9-599e950d210f",
                "indicator--56c67b9f-5f94-4c3e-8101-599f950d210f",
                "indicator--56c67ba7-365c-4afb-ac21-4ec7950d210f",
                "indicator--56c67bae-21fc-4e51-a9aa-59a2950d210f",
                "indicator--56c67bb6-64d8-4215-9d8e-5f51950d210f",
                "indicator--56c67bbd-9a24-476b-b9eb-5ca1950d210f",
                "indicator--56c67bc5-79e0-4434-9c89-4b60950d210f",
                "indicator--56c67bcd-3130-4a96-b4ee-4eda950d210f",
                "indicator--56c67bd4-78f8-4a1e-b036-59a4950d210f",
                "indicator--56c67bdb-0320-4986-8a94-59a3950d210f",
                "indicator--56c67be3-91c0-45cd-8715-c653950d210f",
                "indicator--56c67be9-8378-4395-892e-5ca1950d210f",
                "indicator--56c67bf0-4340-4c49-8332-599d950d210f",
                "indicator--56c67bf8-8ed0-4c03-82e6-4a2c950d210f",
                "indicator--56c67bff-1b3c-49fe-8d9d-599e950d210f",
                "indicator--56c67c06-9d2c-41f1-ba41-59a2950d210f",
                "indicator--56c67c0d-f14c-4be1-a221-599c950d210f",
                "indicator--56c67c15-7410-4782-99ed-c651950d210f",
                "indicator--56c67c1e-9350-4317-84b4-59a0950d210f",
                "indicator--56c67c27-1b64-48a3-ba20-c651950d210f",
                "indicator--56c67c2f-afdc-4b81-a85b-4bd9950d210f",
                "indicator--56c67c37-a7c8-4795-9cd0-43c3950d210f",
                "indicator--56c67c3e-a25c-463c-b5ed-599f950d210f",
                "indicator--56c67c46-5740-4fb4-bc8a-c650950d210f",
                "indicator--56c67c4e-2aa8-4c03-856d-c654950d210f",
                "indicator--56c67c56-3954-4b7c-9aec-599d950d210f",
                "indicator--56c67c5e-9810-4fa7-b58a-c653950d210f",
                "indicator--56c67c65-2dac-480a-bef9-59a2950d210f",
                "indicator--56c67c6e-ca38-4169-9e8b-c654950d210f",
                "indicator--56c67c77-3b4c-44b6-9e13-c652950d210f",
                "indicator--56c67c80-a310-4a6e-9612-59a2950d210f",
                "indicator--56c67c87-ef7c-406f-aaf8-40c9950d210f",
                "indicator--56c67c8f-8024-4d33-b7d4-c654950d210f",
                "indicator--56c67c97-377c-4cc2-9747-59a0950d210f",
                "indicator--56c67c9f-73a8-4254-8c34-59a4950d210f",
                "indicator--56c67ca7-ab84-4fe9-82b9-599f950d210f",
                "indicator--56c67caf-de48-4996-8fab-421e950d210f",
                "indicator--56c67cb7-6614-46aa-94de-c653950d210f",
                "indicator--56c67cbf-2a08-40c8-9bfd-5ca1950d210f",
                "indicator--56c67cc7-98e4-4544-9ff0-45f6950d210f",
                "indicator--56c67ccf-ae88-45d7-8eb4-599c950d210f",
                "indicator--56c67cd7-db60-45cd-9793-c653950d210f",
                "indicator--56c67cde-ebb4-4de0-bcdc-c654950d210f",
                "indicator--56c67ce6-0760-4454-ba6c-59a0950d210f",
                "indicator--56c67cee-e70c-42c5-929a-c651950d210f",
                "indicator--56c67cf6-a86c-404c-a7fc-c652950d210f",
                "indicator--56c67cfe-43e0-4bfd-b4c9-599d950d210f",
                "indicator--56c67d06-05b0-4850-beb8-c652950d210f",
                "indicator--56c67d0d-d514-4543-b5ce-599f950d210f",
                "indicator--56c67d15-8abc-43c5-871f-5ca1950d210f",
                "indicator--56c67d1d-ac90-428b-a640-48b7950d210f",
                "indicator--56c67d25-8dd0-46d0-b049-4cf1950d210f",
                "indicator--56c67d2d-6078-4669-a10d-4a39950d210f",
                "indicator--56c67d35-f6c8-4006-adce-4f07950d210f",
                "indicator--56c67d3d-3a10-4b78-ab2b-c652950d210f",
                "indicator--56c67d44-c6a0-487f-96ad-599d950d210f",
                "indicator--56c67d4c-52e0-47a8-bb58-c650950d210f",
                "indicator--56c67d54-33f8-4319-b588-59a0950d210f",
                "indicator--56c67d5b-1f7c-40d6-b321-47dd950d210f",
                "indicator--56c67d63-d034-4937-82ca-59a0950d210f",
                "indicator--56c67d6a-0144-43b5-9e49-c654950d210f",
                "indicator--56c67d71-685c-449a-9938-59a1950d210f",
                "indicator--56c67d7a-d584-46f4-bc79-5ca1950d210f",
                "indicator--56c67d82-2784-414c-a9dd-45e6950d210f",
                "indicator--56c67d8a-aeb0-4d74-981b-444b950d210f",
                "indicator--56c67d91-e910-4778-b8d9-599e950d210f",
                "indicator--56c67d99-8f68-478a-afed-4ebc950d210f",
                "indicator--56c67da2-810c-4059-bbdf-410f950d210f",
                "indicator--56c67dab-8f88-4959-a110-c654950d210f",
                "indicator--56c67db4-3c78-4eb6-84d1-5ca1950d210f",
                "indicator--56c67dbd-9d48-48a8-bd78-4afe950d210f",
                "indicator--56c67dc5-c120-43bd-bec8-59a2950d210f",
                "indicator--56c67dcd-cc14-46fd-946b-4d0a950d210f",
                "indicator--56c67dd5-0afc-42a9-bc09-48d3950d210f",
                "indicator--56c67ddc-ffe0-43b8-82b8-c654950d210f",
                "indicator--56c67de4-5fd8-47e0-a3ce-5ca1950d210f",
                "indicator--56c67dec-4df8-41bb-8936-59a2950d210f",
                "indicator--56c67df3-1d2c-4564-8de5-4128950d210f",
                "indicator--56c67dfc-bfc4-4c5b-b360-59a2950d210f",
                "indicator--56c67e04-eb94-42a6-b0e1-599f950d210f",
                "indicator--56c67e0d-8e60-4869-938a-c650950d210f",
                "indicator--56c67e16-9170-41e4-aeba-59a4950d210f",
                "indicator--56c67e1d-b1e4-4ee4-8ff2-c654950d210f",
                "indicator--56c67e26-7700-4404-81de-599d950d210f",
                "indicator--56c67e2e-9584-4f11-bf24-5ca1950d210f",
                "indicator--56c67e36-af90-46b0-81ad-59a1950d210f",
                "indicator--56c67e3e-14ac-44e1-89e1-599e950d210f",
                "indicator--56c67e46-7a94-4e4f-a210-599f950d210f",
                "indicator--56c67e4e-51a8-4458-8059-4750950d210f",
                "indicator--56c67e57-3970-4d13-bdcf-59a1950d210f",
                "indicator--56c67e5e-aa0c-4ff6-8b11-59a1950d210f",
                "indicator--56c67e66-aafc-4e9a-9fe7-599d950d210f",
                "indicator--56c67e6e-d80c-404f-baff-42e6950d210f",
                "indicator--56c67e75-31bc-4f4a-9765-441b950d210f",
                "indicator--56c67e7d-51e0-4aea-9b64-59a2950d210f",
                "indicator--56c67e85-5f54-481a-9381-427f950d210f",
                "indicator--56c67e8d-6830-4bbc-b1e9-599d950d210f",
                "indicator--56c67e95-ae4c-4750-b678-599d950d210f",
                "indicator--56c67e9d-e768-42bc-8e19-5ca1950d210f",
                "indicator--56c67ea5-8f9c-4e95-a215-59a1950d210f",
                "indicator--56c67ead-efdc-4b98-81d5-59a3950d210f",
                "indicator--56c67eb5-4638-4be9-a070-4684950d210f",
                "indicator--56c67ebc-ad98-49cf-9dff-4ec8950d210f",
                "indicator--56c67ec4-ecf8-4f2a-b3b3-c651950d210f",
                "indicator--56c67ecc-60f4-43f9-899c-599c950d210f",
                "indicator--56c67ed4-5560-4594-bb64-5f51950d210f",
                "indicator--56c67edc-d294-47f8-a8ce-5f51950d210f",
                "indicator--56c67ee5-ce00-4964-b98e-599f950d210f",
                "indicator--56c67eed-abb4-46f2-8027-59a1950d210f",
                "indicator--56c67ef6-8028-46be-a403-c653950d210f",
                "indicator--56c67efe-8bec-425d-b5fa-599e950d210f",
                "indicator--56c67f06-d174-42a0-b5f9-5f51950d210f",
                "indicator--56c67f0e-c98c-48aa-852c-c650950d210f",
                "indicator--56c67f16-986c-4345-b5b7-49ff950d210f",
                "indicator--56c67f1e-8f74-4566-b11d-59a0950d210f",
                "indicator--56c67f26-d850-4858-9c6d-c652950d210f",
                "indicator--56c67f2e-5d9c-4aad-a409-c651950d210f",
                "indicator--56c67f36-be44-4a9e-a06b-459d950d210f",
                "indicator--56c67f3e-c5fc-488f-9dba-4078950d210f",
                "indicator--56c67f46-fcb0-4e46-8468-c650950d210f",
                "indicator--56c67f4e-9be8-4cdd-bbe2-5f51950d210f",
                "indicator--56c67f56-4328-4c3f-89b1-4c3e950d210f",
                "indicator--56c67f5e-244c-4a70-a9e9-59a3950d210f",
                "indicator--56c67f66-2228-46d2-bef9-59a4950d210f",
                "indicator--56c67f6f-7c40-4eda-8bee-599e950d210f",
                "indicator--56c67f77-64c8-417a-8b50-c653950d210f",
                "indicator--56c67f7f-96f4-4ba2-a88c-59a3950d210f",
                "indicator--56c67f88-4adc-442a-868d-430d950d210f",
                "indicator--56c67f91-0668-40f8-9a3a-59a0950d210f",
                "indicator--56c67f99-1974-4639-a0ac-599f950d210f",
                "indicator--56c67fa1-8ff4-477f-be33-599d950d210f",
                "indicator--56c67fa9-7c50-4e38-965e-59a1950d210f",
                "indicator--56c67fb1-49b4-4099-b330-59a4950d210f",
                "indicator--56c67fb9-b248-4a62-8a8e-c652950d210f",
                "indicator--56c67fc1-52fc-42e8-bd12-59a3950d210f",
                "indicator--56c67fc9-a570-4b47-a5af-c654950d210f",
                "indicator--56c67fd1-1cc4-470e-bda6-c654950d210f",
                "indicator--56c67fd9-b9dc-4db3-873d-c654950d210f",
                "indicator--56c67fe2-2ce4-4665-9eda-487a950d210f",
                "indicator--56c67fea-0240-472d-ab52-59a0950d210f",
                "indicator--56c67ff2-a894-4777-add3-59a4950d210f",
                "indicator--56c67ffa-a898-484b-868e-c651950d210f",
                "indicator--56c68002-52d8-4321-9a13-59a0950d210f",
                "indicator--56c6800a-5c34-47f0-93fe-c650950d210f",
                "indicator--56c68013-2b20-4f02-97ef-599c950d210f",
                "indicator--56c6801c-01fc-4845-a7a6-59a2950d210f",
                "indicator--56c68025-51bc-47af-b4b2-c650950d210f",
                "indicator--56c6802e-a774-4342-9f9c-4f77950d210f",
                "indicator--56c68036-0b9c-4fa3-989d-59a2950d210f",
                "indicator--56c6803e-eea4-4326-82bb-59a4950d210f",
                "indicator--56c68046-78b0-4964-9c8c-c651950d210f",
                "indicator--56c6804f-134c-481e-9d61-4dc6950d210f",
                "indicator--56c68057-7684-40df-82e9-41e5950d210f",
                "indicator--56c6805f-08dc-4192-8d1f-c653950d210f",
                "indicator--56c68068-0de8-4000-8a7d-c652950d210f",
                "indicator--56c68070-6834-45bd-920f-599e950d210f",
                "indicator--56c68078-0c14-4dbb-985c-45ce950d210f",
                "indicator--56c68081-7b0c-42fc-a31b-4dcd950d210f",
                "indicator--56c6808a-b96c-438f-b892-599e950d210f",
                "indicator--56c68092-b114-452b-bb5d-c654950d210f",
                "indicator--56c6809b-ad98-4668-913f-59a1950d210f",
                "indicator--56c680a3-7c30-47e9-bbfb-4069950d210f",
                "indicator--56c680ab-070c-4844-829f-5ca1950d210f",
                "indicator--56c680b4-6030-4698-8b43-599d950d210f",
                "indicator--56c680bd-d348-4beb-8074-4ce6950d210f",
                "indicator--56c680c6-eb94-4686-b521-4a6f950d210f",
                "indicator--56c680cf-8570-4c2e-8e50-599c950d210f",
                "indicator--56c680d8-03d8-498c-9499-c650950d210f",
                "indicator--56c680e2-7334-4d45-9618-5ca1950d210f",
                "indicator--56c680eb-7150-437a-b906-5f51950d210f",
                "indicator--56c680f5-e044-4d41-b07c-4e56950d210f",
                "indicator--56c680fe-7da0-43c6-ba12-599e950d210f",
                "indicator--56c68108-80f8-40cf-a765-5ca1950d210f",
                "indicator--56c68112-257c-47f7-9bf5-c651950d210f",
                "indicator--56c6811b-2b50-4844-bd5f-c654950d210f",
                "indicator--56c68124-1d7c-4309-9d97-4b5a950d210f",
                "indicator--56c6812c-e4f4-42c3-90b6-599f950d210f",
                "indicator--56c68135-2de4-4798-a169-599f950d210f",
                "indicator--56c6813e-add0-4ba1-b393-5f51950d210f",
                "indicator--56c68148-dd4c-44ec-8ce6-599d950d210f",
                "indicator--56c68153-1080-41a2-8922-4af7950d210f",
                "indicator--56c6815d-6814-4dce-a43e-599c950d210f",
                "indicator--56c68168-662c-44cd-93a8-599e950d210f",
                "indicator--56c68171-e660-4d6b-93dd-40eb950d210f",
                "indicator--56c6817b-b170-477b-a1ed-c654950d210f",
                "indicator--56c68184-d528-41e6-97be-599d950d210f",
                "indicator--56c6818e-68e0-485b-b2ef-4ced950d210f",
                "indicator--56c68197-18a4-441b-812b-c653950d210f",
                "indicator--56c681a1-d66c-48ca-9120-599e950d210f",
                "indicator--56c681ab-292c-4ece-a428-59a2950d210f",
                "indicator--56c681b4-ef40-4a02-98e5-c654950d210f",
                "indicator--56c681be-ea84-43a6-8595-599d950d210f",
                "indicator--56c681c7-e9f8-4364-80ea-4395950d210f",
                "indicator--56c681d1-c75c-4926-9e76-c653950d210f",
                "indicator--56c681da-6740-4d4e-8eb8-599c950d210f",
                "indicator--56c681e4-e298-4e27-868a-4428950d210f",
                "indicator--56c681ee-b26c-4c0f-9579-59a2950d210f",
                "indicator--56c681f8-2c9c-4d98-8065-5f51950d210f",
                "indicator--56c68201-8a78-4a5a-88ab-47d6950d210f",
                "indicator--56c6820b-7c08-47cb-9222-c650950d210f",
                "indicator--56c68215-2d5c-4eaa-8830-4187950d210f",
                "indicator--56c6821f-ffe8-437f-8f90-46e2950d210f",
                "indicator--56c68228-020c-4031-90c5-c651950d210f",
                "indicator--56c68231-3c20-4b28-b5df-59a2950d210f",
                "indicator--56c6823b-b3b0-45b9-afe0-5ca1950d210f",
                "indicator--56c68245-4f54-40a5-ba51-59a4950d210f",
                "indicator--56c6824f-bf38-4210-9228-5f51950d210f",
                "indicator--56c68258-45ac-4d05-bab5-4e17950d210f",
                "indicator--56c68263-a134-4c13-8873-c651950d210f",
                "indicator--56c6826c-0db0-455d-b71c-480c950d210f",
                "indicator--56c68276-4690-476f-b1bb-599d950d210f",
                "indicator--56c68281-e3b4-4ecd-ac7d-599c950d210f",
                "indicator--56c6828c-2de4-435a-9d6a-599e950d210f",
                "indicator--56c68297-621c-4d31-b646-c651950d210f",
                "indicator--56c682a1-1028-45d9-8e98-5ca1950d210f",
                "indicator--56c682ab-e038-41d9-aa8e-4cbf950d210f",
                "indicator--56c682b5-6b48-40df-98c6-c653950d210f",
                "indicator--56c682bf-2038-4ca4-be4d-59a2950d210f",
                "indicator--56c682c9-29ac-4b4c-b7e9-599c950d210f",
                "indicator--56c682d3-86d8-465d-8bde-59a2950d210f",
                "indicator--56c682dc-a5a8-48c4-ad6d-c652950d210f",
                "indicator--56c682e6-8f24-472f-8a2d-59a3950d210f",
                "indicator--56c682ef-76f0-4029-8f14-425f950d210f",
                "indicator--56c682f9-6f5c-4bb1-a819-599c950d210f",
                "indicator--56c68302-7f4c-41b6-8ec5-c654950d210f",
                "indicator--56c6830b-45f4-4cb5-9328-599c950d210f",
                "indicator--56c68314-3fb8-4675-8633-c653950d210f",
                "indicator--56c6831c-4bbc-4a64-a5b9-5f51950d210f",
                "indicator--56c68325-2068-4c98-97fa-c654950d210f",
                "indicator--56c6832e-7608-4ba8-98e7-59a0950d210f",
                "indicator--56c68337-02c8-47e0-8184-42ab950d210f",
                "indicator--56c68340-d330-4b7b-b83b-4341950d210f",
                "indicator--56c68349-8ba0-4f32-9b22-c654950d210f",
                "indicator--56c68354-966c-4da5-9ab0-c650950d210f",
                "indicator--56c6835e-5ab0-4457-a789-4268950d210f",
                "indicator--56c68369-5c58-4df5-8b91-c652950d210f",
                "indicator--56c68374-5a0c-4d90-b2e3-59a2950d210f",
                "indicator--56c6837e-93d4-4e37-a33f-599f950d210f",
                "indicator--56c68387-14f8-41e1-b9f6-5f51950d210f",
                "indicator--56c68390-7bb0-412e-8427-59a2950d210f",
                "indicator--56c68399-1028-4dfb-a26d-c653950d210f",
                "indicator--56c683a4-aea0-4d08-8993-5f51950d210f",
                "indicator--56c683ae-9698-4075-8c44-c653950d210f",
                "indicator--56c683b8-1f50-42b0-8d07-c652950d210f",
                "indicator--56c683c4-b210-4c52-9e36-599f950d210f",
                "indicator--56c683ce-02c4-4703-9bce-599d950d210f",
                "indicator--56c683d7-d204-449f-a3d6-4850950d210f",
                "indicator--56c683e1-410c-47e4-abd7-5f51950d210f",
                "indicator--56c683e9-ff3c-433e-b2b9-59a0950d210f",
                "indicator--56c683f3-ba64-478e-bf1c-599d950d210f",
                "indicator--56c683fb-449c-4e29-8035-c652950d210f",
                "indicator--56c68404-9950-4b38-95fb-59a0950d210f",
                "indicator--56c6840d-5cbc-4251-b867-47f8950d210f",
                "indicator--56c68417-bf70-4253-9e05-c653950d210f",
                "indicator--56c68420-dfec-4696-892b-4073950d210f",
                "indicator--56c68429-dab4-48bf-a287-4bc5950d210f",
                "indicator--56c68433-0648-476f-8452-c653950d210f",
                "indicator--56c6843c-e7cc-42d4-972e-c652950d210f",
                "indicator--56c68445-3e2c-459a-88a3-59a4950d210f",
                "indicator--56c6844e-c708-418a-b2cd-4b88950d210f",
                "indicator--56c68457-2198-4c37-a99b-c653950d210f",
                "indicator--56c68460-77c4-493f-a526-c652950d210f",
                "indicator--56c68469-9434-4e30-9b71-59a1950d210f",
                "indicator--56c68473-9014-4be6-b325-599e950d210f",
                "indicator--56c6847d-ddd4-41a0-a50e-599f950d210f",
                "indicator--56c68487-d540-48c4-95c7-4dcd950d210f",
                "indicator--56c68491-c700-4119-9d5f-46ce950d210f",
                "indicator--56c6849a-9da8-4853-8b71-59a3950d210f",
                "indicator--56c684a3-3904-4b7a-b7e1-42b3950d210f",
                "indicator--56c684ac-210c-462b-a197-4939950d210f",
                "indicator--56c684b6-ed74-4cd9-afd7-5f51950d210f",
                "indicator--56c684bf-64e8-4a90-82ac-599c950d210f",
                "indicator--56c684ca-5adc-4514-908e-59a2950d210f",
                "indicator--56c684d3-eab8-47bd-97ca-5ca1950d210f",
                "indicator--56c684dd-94a4-4567-a5b4-c654950d210f",
                "indicator--56c684e7-7e90-4e50-b2c1-599c950d210f",
                "indicator--56c684f2-84f4-4ae4-a129-59a4950d210f",
                "indicator--56c684fc-78c4-4fca-8085-c653950d210f",
                "indicator--56c68505-498c-400a-9965-c652950d210f",
                "indicator--56c6850f-1100-43f0-b634-599e950d210f",
                "indicator--56c68518-4aa0-48da-b579-c653950d210f",
                "indicator--56c68522-3054-4899-a00d-c653950d210f",
                "indicator--56c6852c-7560-4110-99d8-59a0950d210f",
                "indicator--56c68535-a574-40e7-b32f-59a2950d210f",
                "indicator--56c6853f-6794-483d-8acd-41d5950d210f",
                "indicator--56c68549-8960-4180-9c75-599f950d210f",
                "indicator--56c68554-77c0-48c1-b99d-59a2950d210f",
                "indicator--56c6855e-ebfc-41b4-8745-c653950d210f",
                "indicator--56c68568-d5d8-4724-b813-599e950d210f",
                "indicator--56c68573-2d00-4ad4-af85-59a4950d210f",
                "indicator--56c6857e-286c-4378-8bc2-c654950d210f",
                "indicator--56c68588-e50c-4c1f-8864-c651950d210f",
                "indicator--56c68592-d96c-4566-9173-c654950d210f",
                "indicator--56c6859c-ad18-4363-9975-59a2950d210f",
                "indicator--56c685a6-0ba4-4695-803f-4268950d210f",
                "indicator--56c685b0-b3d4-4281-9ddf-c653950d210f",
                "indicator--56c685ba-9ba4-4a5a-a9d4-5f51950d210f",
                "indicator--56c685c5-1f20-43c0-8ed3-c652950d210f",
                "indicator--56c685ce-6cf0-4219-9146-59a3950d210f",
                "indicator--56c685d9-4bf4-4674-8755-c651950d210f",
                "indicator--56c685e3-a16c-41a5-8813-599e950d210f",
                "indicator--56c685ed-15c0-4a6a-aea0-4c0d950d210f",
                "indicator--56c685f7-bc90-460e-b825-4931950d210f",
                "indicator--56c68601-f714-4599-b243-599e950d210f",
                "indicator--56c6860c-e3dc-44b7-8ef7-c650950d210f",
                "indicator--56c68616-a0e0-49ab-b9cb-c652950d210f",
                "indicator--56c68620-35a0-47ad-bea6-4796950d210f",
                "indicator--56c6862b-3ee4-4d90-a98a-c653950d210f",
                "indicator--56c68636-d9dc-44c0-b477-c652950d210f",
                "indicator--56c68640-411c-4567-84f6-599c950d210f",
                "indicator--56c6864d-fe2c-4477-8157-599d950d210f",
                "indicator--56c68658-2100-47c4-845d-599f950d210f",
                "indicator--56c68662-66c4-42f6-a61a-599e950d210f",
                "indicator--56c6866c-e094-43d8-8c3b-59a1950d210f",
                "indicator--56c68676-075c-470d-9039-43c1950d210f",
                "indicator--56c68680-b4f8-43a3-bead-59a0950d210f",
                "indicator--56c6868c-225c-41f0-8edd-c651950d210f",
                "indicator--56c68697-4e6c-4a1b-94d2-599c950d210f",
                "indicator--56c686a1-efa8-4d0b-a7ab-5ca1950d210f",
                "indicator--56c686ac-0710-4bea-be94-59a3950d210f",
                "indicator--56c686b7-268c-4c27-be87-599c950d210f",
                "indicator--56c686c2-f850-4bce-8b58-4364950d210f",
                "indicator--56c686cd-b7e0-44d3-ad72-c650950d210f",
                "indicator--56c686d8-7494-4c48-8115-c654950d210f",
                "indicator--56c686e4-bdbc-42a2-8c65-59a3950d210f",
                "indicator--56c686ef-c86c-4957-aa68-599e950d210f",
                "indicator--56c686fa-1794-4465-8a21-599d950d210f",
                "indicator--56c68705-3770-4227-a5dd-599c950d210f",
                "indicator--56c68710-2828-4cd4-af88-c651950d210f",
                "indicator--56c6871c-6f30-4188-83ec-c652950d210f",
                "indicator--56c68727-8758-489b-8cd4-4cec950d210f",
                "indicator--56c68732-2328-45a7-997d-c653950d210f",
                "indicator--56c6873d-4cf4-48c5-8425-599e950d210f",
                "indicator--56c68748-c86c-4f32-891e-59a4950d210f",
                "indicator--56c68753-06ec-454c-88ba-c653950d210f",
                "indicator--56c6875d-0978-4746-8c2c-c653950d210f",
                "indicator--56c68768-c8b8-422e-bf28-c653950d210f",
                "indicator--56c68772-8a54-4644-b831-599e950d210f",
                "indicator--56c6877b-6e90-423d-83c2-5ca1950d210f",
                "indicator--56c68785-df20-4530-ad9e-599e950d210f",
                "indicator--56c6878f-2b40-42dd-afd1-599e950d210f",
                "indicator--56c68799-d7e4-4c90-bfc3-4681950d210f",
                "indicator--56c687a3-fad8-4e3a-8c7e-c653950d210f",
                "indicator--56c687ac-fcdc-4529-b6b0-599e950d210f",
                "indicator--56c687b6-af48-4ec5-9015-c650950d210f",
                "indicator--56c687c0-d098-4e15-a593-599d950d210f",
                "indicator--56c687ca-957c-4cf8-9506-5f51950d210f",
                "indicator--56c687d4-3284-497b-b419-4ffe950d210f",
                "indicator--56c687dd-c8a8-4df1-acc0-c652950d210f",
                "indicator--56c687e7-d9f8-4e93-b83f-599d950d210f",
                "indicator--56c687f1-7f48-40fb-b7ad-4a29950d210f",
                "indicator--56c687fb-f9cc-4c2e-8e20-c651950d210f",
                "indicator--56c68805-1cb8-4e7d-9187-c651950d210f",
                "indicator--56c68810-2bc4-44f2-93eb-59a0950d210f",
                "indicator--56c6881b-454c-4b56-83a9-c654950d210f",
                "indicator--56c68825-b3a4-4491-8bbc-c653950d210f",
                "indicator--56c6882e-9834-416e-82ea-59a0950d210f",
                "indicator--56c68838-e0f4-4735-a110-c651950d210f",
                "indicator--56c68842-9a14-4dfe-b108-599f950d210f",
                "indicator--56c6884c-4de0-40c9-8479-5f51950d210f",
                "indicator--56c68857-981c-4c2f-adc3-59a1950d210f",
                "indicator--56c68861-07fc-43f6-bed3-5f51950d210f",
                "indicator--56c6886b-d464-48e2-a149-5ca1950d210f",
                "indicator--56c68875-4790-4903-8512-c652950d210f",
                "indicator--56c6887f-ba40-4ac7-8480-c651950d210f",
                "indicator--56c68889-6920-409a-8ec0-599e950d210f",
                "indicator--56c68893-8c50-4db9-b97c-c654950d210f",
                "indicator--56c6889c-4cf4-4790-a6c4-c650950d210f",
                "indicator--56c688a7-6c94-4f69-a8a0-599f950d210f",
                "indicator--56c688b1-2ce8-48af-b635-59a0950d210f",
                "indicator--56c688bb-2d34-44f6-a326-c650950d210f",
                "indicator--56c688c5-6790-459b-b4c7-599f950d210f",
                "indicator--56c688cf-8e20-4576-b3e1-59a1950d210f",
                "indicator--56c688d9-d820-4236-aca3-4a11950d210f",
                "indicator--56c688e3-648c-444a-8299-5f51950d210f",
                "indicator--56c688ed-7a4c-4703-a589-59a3950d210f",
                "indicator--56c688f7-7fb8-4147-80ba-4fe9950d210f",
                "indicator--56c68901-d5f0-4db8-9154-59a2950d210f",
                "indicator--56c6890b-535c-4717-9626-599d950d210f",
                "indicator--56c68915-e6a4-4ea3-9db7-c653950d210f",
                "indicator--56c6891f-000c-4680-a0cd-c651950d210f",
                "indicator--56c68929-9c30-4385-935c-457d950d210f",
                "indicator--56c68933-2520-43e4-b2a7-599c950d210f",
                "indicator--56c6893d-085c-4584-8d1b-4b8b950d210f",
                "indicator--56c68948-b470-4bd9-b8de-44da950d210f",
                "indicator--56c68952-5790-4368-9440-599d950d210f",
                "indicator--56c6895c-96c8-4945-ae91-5ca1950d210f",
                "indicator--56c68966-f368-4ddb-aee4-599f950d210f",
                "indicator--56c68970-4c84-4f41-a97e-59a4950d210f",
                "indicator--56c6897a-2378-4cb5-a3bd-5ca1950d210f",
                "indicator--56c68985-d538-4147-b09b-c650950d210f",
                "indicator--56c6898f-8da4-4435-abda-c650950d210f",
                "indicator--56c68999-bb50-40a9-a381-599d950d210f",
                "indicator--56c689a3-ef0c-48e4-8089-4e5a950d210f",
                "indicator--56c689ad-2108-4cf1-a9d7-599d950d210f",
                "indicator--56c689b8-9254-450e-8c8b-599c950d210f",
                "indicator--56c689c4-55b0-4cb2-b8e0-c650950d210f",
                "indicator--56c689d0-cb34-49d9-95f2-c652950d210f",
                "indicator--56c689dd-2b10-4765-af62-59a3950d210f",
                "indicator--56c689e7-a0cc-497e-a61f-46ca950d210f",
                "indicator--56c689f1-11a8-4135-b073-c654950d210f",
                "indicator--56c689fb-cd44-4e17-9389-c652950d210f",
                "indicator--56c68a07-d470-48f0-ade2-599f950d210f",
                "indicator--56c68a12-a8e8-4ecb-bead-c650950d210f",
                "indicator--56c68a1e-b24c-4352-8171-599c950d210f",
                "indicator--56c68a29-acc4-4a5f-b7df-599f950d210f",
                "indicator--56c68a35-6524-451c-b4ab-c654950d210f",
                "indicator--56c68a41-52e8-46f0-861c-49b3950d210f",
                "indicator--56c68a4c-99d0-4cbb-850a-599d950d210f",
                "indicator--56c68a58-19c8-43ee-9024-c652950d210f",
                "indicator--56c68a64-4b5c-4002-beee-5f51950d210f",
                "indicator--56c68a6f-0314-470d-a25a-5ca1950d210f",
                "indicator--56c68a7b-0dd8-4fe9-aaf6-c651950d210f",
                "indicator--56c68a87-d28c-4b54-b735-59a4950d210f",
                "indicator--56c68a93-61a4-466b-bbea-59a3950d210f",
                "indicator--56c68a9e-4ab8-4a97-9117-59a4950d210f",
                "indicator--56c68aaa-5c84-486a-a4ff-599e950d210f",
                "indicator--56c68ab6-a720-4c6a-a743-59a1950d210f",
                "indicator--56c68ac3-6c0c-4621-b683-599f950d210f",
                "indicator--56c68acf-5b38-43f5-8e69-599c950d210f",
                "indicator--56c68adc-5908-45b4-9515-c653950d210f",
                "indicator--56c68ae8-81a0-41e9-911b-4b98950d210f",
                "indicator--56c68af4-57e8-4ee0-89f8-41a4950d210f",
                "indicator--56c68b00-efd4-48e7-9f87-59a1950d210f",
                "indicator--56c68b0c-e748-4c53-8c13-5f51950d210f",
                "indicator--56c68b16-c6fc-49ab-8124-4df7950d210f",
                "indicator--56c68b22-92b8-496f-9b09-4aaf950d210f",
                "indicator--56c68b2f-84a0-4941-9b68-c654950d210f",
                "indicator--56c68b3b-a134-42a1-a26e-599f950d210f",
                "indicator--56c68b46-5e48-4436-9221-599f950d210f",
                "indicator--56c68b51-6218-43e3-974e-494c950d210f",
                "indicator--56c68b5c-c1e8-4dbe-86d8-599d950d210f",
                "indicator--56c68b67-6e8c-49d6-bdbd-4824950d210f",
                "indicator--56c68b72-f858-4858-9ac4-4ec6950d210f",
                "indicator--56c68b7d-3c24-4d24-9a7b-4247950d210f",
                "indicator--56c68b87-ddb4-4103-9dd8-599f950d210f",
                "indicator--56c68b92-fec4-40a8-8ca9-599e950d210f",
                "indicator--56c68b9c-4d2c-4da0-a02b-481c950d210f",
                "indicator--56c68ba7-9b54-41f8-b270-599d950d210f",
                "indicator--56c68bb3-8f38-4f87-bde9-59a2950d210f",
                "indicator--56c68bbd-1628-46d1-b611-59a0950d210f",
                "indicator--56c68bc7-a8a8-4e1e-8ea2-4a38950d210f",
                "indicator--56c68bd2-51d4-4357-af0e-c654950d210f",
                "indicator--56c68bdd-4670-4f17-8828-599e950d210f",
                "indicator--56c68be8-2048-4d8e-acac-599f950d210f",
                "indicator--56c68bf2-1e88-4c4b-97ab-59a4950d210f",
                "indicator--56c68bfd-9948-41cf-802d-c652950d210f",
                "indicator--56c68c07-decc-4c86-8524-59a0950d210f",
                "indicator--56c68c11-fc28-4a60-bf7e-599f950d210f",
                "indicator--56c68c1c-0300-413a-bcd1-c653950d210f",
                "indicator--56c68c26-0e6c-4781-98e1-599c950d210f",
                "indicator--56c68c32-9258-483b-9c35-4ada950d210f",
                "indicator--56c68c3e-5ab0-407e-8d96-599d950d210f",
                "indicator--56c68c4b-49f8-41a9-8eff-4db9950d210f",
                "indicator--56c68c56-cb9c-4718-89c7-599c950d210f",
                "indicator--56c68c63-baa4-4ad7-9104-c654950d210f",
                "indicator--56c68c6e-8510-4114-8bf8-599c950d210f",
                "indicator--56c68c7a-8784-4303-8dcd-c652950d210f",
                "indicator--56c68c86-e5d0-41c1-a0c6-4911950d210f",
                "indicator--56c68c93-4254-485a-8d6b-599e950d210f",
                "indicator--56c68c9f-2c34-4fad-a57d-599e950d210f",
                "indicator--56c68caf-1f04-4021-951f-599d950d210f",
                "indicator--56c68cba-ffd0-4355-b241-5ca1950d210f",
                "indicator--56c68cc5-9158-46bb-a431-c654950d210f",
                "indicator--56c68cd0-d4b0-4868-9a51-c650950d210f",
                "indicator--56c68cdc-f7e0-479d-b1ee-59a3950d210f",
                "indicator--56c68ce7-a6a0-4330-94b0-59a2950d210f",
                "indicator--56c68cf3-8568-49cd-a43f-599e950d210f",
                "indicator--56c68cff-10a0-46d0-baef-c651950d210f",
                "indicator--56c68d0a-96bc-4300-91d8-599f950d210f",
                "indicator--56c68d15-20d4-4dd0-adbd-4aac950d210f",
                "indicator--56c68d22-236c-4cfb-8d03-5f51950d210f",
                "indicator--56c68d2e-e718-4f5a-a07a-4974950d210f",
                "indicator--56c68d3a-70e0-4478-884f-5f51950d210f",
                "indicator--56c68d45-122c-41cd-ab2d-5ca1950d210f",
                "indicator--56c68d50-30f4-4e51-8c91-59a2950d210f",
                "indicator--56c68d5c-c268-4d43-9af7-c651950d210f",
                "indicator--56c68d67-078c-4958-9102-5ca1950d210f",
                "indicator--56c68d72-8948-4d3e-beba-4f68950d210f",
                "indicator--56c68d7f-0518-4145-baf4-59a3950d210f",
                "indicator--56c68d8b-0dc8-4756-8e84-5ca1950d210f",
                "indicator--56c68d98-5d0c-4a94-8772-599d950d210f",
                "indicator--56c68da3-8528-4b30-b24f-599c950d210f",
                "indicator--56c68db0-03dc-445e-9830-4d57950d210f",
                "indicator--56c68dbb-d810-459c-aedf-5f51950d210f",
                "indicator--56c68dc7-a678-4f73-aaab-c650950d210f",
                "indicator--56c68dd2-2094-42ac-b7e3-c650950d210f",
                "indicator--56c68dde-33c4-4f6f-846a-5f51950d210f",
                "indicator--56c68de9-6afc-4a7f-ae49-4980950d210f",
                "indicator--56c68df4-eddc-4d35-b451-4806950d210f",
                "indicator--56c68e00-a800-43b7-a383-c650950d210f",
                "indicator--56c68e0b-2c6c-476a-9c65-59a2950d210f",
                "indicator--56c68e17-4034-4720-ba9b-c652950d210f",
                "indicator--56c68e23-015c-4132-9d0c-c652950d210f",
                "indicator--56c68e2f-5074-4274-9969-59a1950d210f",
                "indicator--56c68e3b-c9d4-4b7c-98d7-4966950d210f",
                "indicator--56c68e47-becc-415e-a331-c654950d210f",
                "indicator--56c68e52-6ed8-4df9-8776-599e950d210f",
                "indicator--56c68e5e-54d0-43a6-b3e0-43fd950d210f",
                "indicator--56c68e6a-cf7c-4c9c-b412-c652950d210f",
                "indicator--56c68e77-9ef8-40be-868d-59a0950d210f",
                "indicator--56c68e82-4664-4a2b-b291-59a0950d210f",
                "indicator--56c68e8d-5d48-4841-ae8e-c650950d210f",
                "indicator--56c68e9a-f9f8-48ab-809d-59a0950d210f",
                "indicator--56c68ea7-d6d0-4ff3-8cd6-c654950d210f",
                "indicator--56c68eb3-fd18-4876-9c88-5f51950d210f",
                "indicator--56c68ec0-aba8-41bd-bf4d-59a2950d210f",
                "indicator--56c68ecd-e570-4721-a2f5-59a3950d210f",
                "indicator--56c68eda-be64-4ff6-9c6c-c652950d210f",
                "indicator--56c68ee6-bf58-41c6-a1e7-59a1950d210f",
                "indicator--56c68ef1-ed18-4cbd-a840-599d950d210f",
                "indicator--56c68efd-e350-4b8c-ba9d-59a4950d210f",
                "indicator--56c68f09-2c24-44c0-8ab0-c653950d210f",
                "indicator--56c68f17-5f78-4dd3-ab47-599f950d210f",
                "indicator--56c68f23-b7ec-43f8-aef2-414c950d210f",
                "indicator--56c68f31-8390-44c5-b6ba-4e2e950d210f",
                "indicator--56c68f3d-a048-4791-a440-c651950d210f",
                "indicator--56c68f48-6b80-4acf-9dbf-599d950d210f",
                "indicator--56c68f54-33b0-41c4-a2a1-5f51950d210f",
                "indicator--56c68f61-96a0-4c01-9d52-c653950d210f",
                "indicator--56c68f6e-7344-47cf-8569-4b1c950d210f",
                "indicator--56c68f7c-0290-4609-8de0-59a2950d210f",
                "indicator--56c68f89-d3dc-4b5a-8617-59a0950d210f",
                "indicator--56c68f96-ba4c-4ab2-aa66-4b53950d210f",
                "indicator--56c68fa4-64b8-4855-bb39-59a4950d210f",
                "indicator--56c68fb1-b8f0-4914-adc7-479b950d210f",
                "indicator--56c68fbf-2568-44d1-bd09-c651950d210f",
                "indicator--56c68fce-a494-4a7b-ba7a-599c950d210f",
                "indicator--56c68fdb-89d0-45cc-904c-599f950d210f",
                "indicator--56c68fe8-db74-4ac4-a2e5-c652950d210f",
                "indicator--56c68ffa-3c48-4b2d-bc06-4a80950d210f",
                "indicator--56c69008-0540-4e87-be85-c653950d210f",
                "indicator--56c69016-1f68-490f-abf6-4fcc950d210f",
                "indicator--56c69023-6cf4-47ab-bdd1-c651950d210f",
                "indicator--56c69031-48f4-43ef-b984-c653950d210f",
                "indicator--56c6903f-9640-48ae-82bd-5f51950d210f",
                "indicator--56c6904d-53c8-4cd1-9a7b-c650950d210f",
                "indicator--56c6905a-5ac0-4ade-aac6-c652950d210f",
                "indicator--56c69068-fffc-4116-86d8-48f3950d210f",
                "indicator--56c69075-6e80-4554-83e1-599e950d210f",
                "indicator--56c69083-6118-4b36-a5eb-c653950d210f",
                "indicator--56c69090-3c24-46b7-a414-5ca1950d210f",
                "indicator--56c6909e-4238-4a76-b9e8-c650950d210f",
                "indicator--56c690ab-8460-4406-8f95-59a2950d210f",
                "indicator--56c690b9-f724-4ce8-ac98-59a1950d210f",
                "indicator--56c690c7-daa0-4636-ab99-599f950d210f",
                "indicator--56c690d4-ffac-4f10-82a2-c652950d210f",
                "indicator--56c690e1-2f18-4b5f-97d6-c653950d210f",
                "indicator--56c690ee-9588-4eb5-9080-59a1950d210f",
                "indicator--56c690fb-a5d4-4184-ad38-599d950d210f",
                "indicator--56c69108-3e40-4e38-970a-599f950d210f",
                "indicator--56c69116-cf90-427b-8432-41e3950d210f",
                "indicator--56c69124-8158-427b-9e08-59a1950d210f",
                "indicator--56c69131-b8c4-4816-84bc-59a0950d210f",
                "indicator--56c6913f-04ec-4203-93f7-c650950d210f",
                "indicator--56c6914d-99c8-48a2-b759-4a1c950d210f",
                "indicator--56c6915a-d6e4-4b4d-be35-4ff8950d210f",
                "indicator--56c69167-c930-4208-86b2-4fc0950d210f",
                "indicator--56c69175-f1c4-4b73-a141-59a3950d210f",
                "indicator--56c69183-cbf0-4b2a-964b-599d950d210f",
                "indicator--56c69191-80d0-435d-8bdb-c650950d210f",
                "indicator--56c6919f-10dc-4a2f-b9d2-59a2950d210f",
                "indicator--56c691ad-aa00-4222-a289-59a0950d210f",
                "indicator--56c691ba-9f84-4d55-b171-c653950d210f",
                "indicator--56c691c8-b840-4f5f-85c3-599c950d210f",
                "indicator--56c691d5-8050-44ba-b9d3-c651950d210f",
                "indicator--56c691e3-7e50-4a8a-8dd5-4c2d950d210f",
                "indicator--56c691f0-e038-4118-84d1-599c950d210f",
                "indicator--56c691fe-266c-4275-aaba-42e5950d210f",
                "indicator--56c6920c-33d4-4d85-af71-599c950d210f",
                "indicator--56c6921a-0af0-4f08-9c64-59a3950d210f",
                "indicator--56c69227-5a40-44dd-8afc-5f51950d210f",
                "indicator--56c69235-b9ec-45a9-b027-599d950d210f",
                "indicator--56c69242-54b0-4492-96f6-c652950d210f",
                "indicator--56c69250-ab9c-4732-98d6-5f51950d210f",
                "indicator--56c6925e-a1f4-4b19-bf41-4964950d210f",
                "indicator--56c6926b-31dc-4b5e-8d55-599d950d210f",
                "indicator--56c6927a-8240-44b5-ac0c-c650950d210f",
                "indicator--56c69287-de04-491d-8fd8-41ec950d210f",
                "indicator--56c69295-7200-44cf-acc3-c651950d210f",
                "indicator--56c692a2-dbd4-460b-a19d-4795950d210f",
                "indicator--56c692af-e8bc-425b-965d-5f51950d210f",
                "indicator--56c692bd-8ae4-42b0-a4a6-c651950d210f",
                "indicator--56c692cb-034c-4663-9f7a-411d950d210f",
                "indicator--56c692d8-4ad8-4750-9803-c652950d210f",
                "indicator--56c692e6-8a64-4608-b7b6-5ca1950d210f",
                "indicator--56c692f3-84c4-40b1-9f66-4fe9950d210f",
                "indicator--56c69301-0244-4ed9-84ad-5ca1950d210f",
                "indicator--56c6930f-99d8-4b64-8e22-c652950d210f",
                "indicator--56c6931c-cd84-413b-a291-49a0950d210f",
                "indicator--56c6932a-5718-4b0a-9958-599c950d210f",
                "indicator--56c69338-d834-472e-bfb1-59a2950d210f",
                "indicator--56c69345-9904-4c2e-87b1-c653950d210f",
                "indicator--56c69351-ee70-4eff-97a5-47ed950d210f",
                "indicator--56c6935e-2554-4782-9d4d-59a2950d210f",
                "indicator--56c6936b-6a8c-4f9b-bece-599d950d210f",
                "indicator--56c69379-cfcc-4aca-b8c5-5f51950d210f",
                "indicator--56c69388-25b4-4f07-8374-5ca1950d210f",
                "indicator--56c69396-0738-40a9-b7fe-c654950d210f",
                "indicator--56c693a4-2e5c-41d4-979d-59a3950d210f",
                "indicator--56c693b2-f5b8-4aab-b933-599e950d210f",
                "indicator--56c693c0-0df0-4561-be42-59a3950d210f",
                "indicator--56c693ce-e4ac-49fc-8369-c654950d210f",
                "indicator--56c693db-98fc-4856-b141-59a0950d210f",
                "indicator--56c693e9-8790-4662-b942-59a2950d210f",
                "indicator--56c693f7-e448-41fe-9755-c650950d210f",
                "indicator--56c69405-f948-46c2-83ae-4d62950d210f",
                "indicator--56c69413-258c-485b-aaab-59a3950d210f",
                "indicator--56c69421-5444-4422-a54a-4b21950d210f",
                "indicator--56c6942e-7c48-45fb-a9e5-599d950d210f",
                "indicator--56c6943c-b03c-4524-8c7f-59a3950d210f",
                "indicator--56c6944a-a3c0-4117-b313-599e950d210f",
                "indicator--56c69458-0720-4b71-ae88-59a0950d210f",
                "indicator--56c69466-fce4-4fb3-b6db-c650950d210f",
                "indicator--56c69474-9540-4061-8b05-59a4950d210f",
                "indicator--56c69482-871c-42e9-a703-c651950d210f",
                "indicator--56c69490-72f0-4746-b8e8-43e4950d210f",
                "indicator--56c6949e-d918-4b70-a0e6-599c950d210f",
                "indicator--56c694ac-b914-415b-82c5-59a2950d210f",
                "indicator--56c694ba-5d8c-4389-9846-599c950d210f",
                "indicator--56c694c7-fba4-48a2-9066-4727950d210f",
                "indicator--56c694d6-fd10-410c-9665-599c950d210f",
                "indicator--56c694e4-2b10-4b83-a2c1-c652950d210f",
                "indicator--56c694f3-c2f0-452f-a7ca-48e9950d210f",
                "indicator--56c69501-ad8c-4f4e-9cf1-599f950d210f",
                "indicator--56c6950f-4d98-4ef1-a075-43ad950d210f",
                "indicator--56c6951d-ec90-45e5-a2e2-59a4950d210f",
                "indicator--56c6952a-923c-4cb2-9de4-59a1950d210f",
                "indicator--56c69538-afa4-44c2-953a-599c950d210f",
                "indicator--56c69546-c18c-48e0-a7ed-5f51950d210f",
                "indicator--56c69554-32d4-4273-8c9c-42e4950d210f",
                "indicator--56c69562-a184-45ff-b9ef-599f950d210f",
                "indicator--56c6956e-98fc-4c11-9958-59a0950d210f",
                "indicator--56c6957c-79b4-4431-b921-c654950d210f",
                "indicator--56c6958a-6f0c-4049-a875-599e950d210f",
                "indicator--56c69598-d6d0-45e7-a650-59a3950d210f",
                "indicator--56c695a5-b47c-4d3f-b42a-4251950d210f",
                "indicator--56c695b1-ebc8-4823-b8d5-59a1950d210f",
                "indicator--56c695bf-f124-445d-bd86-47b8950d210f",
                "indicator--56c695cc-6e30-497e-b72d-59a0950d210f",
                "indicator--56c695db-8e40-432f-b6bb-4477950d210f",
                "indicator--56c695ea-1410-4c3b-bea8-599f950d210f",
                "indicator--56c695f9-cff4-44e1-a5e6-59a4950d210f",
                "indicator--56c69606-6fb0-4885-bc7d-599d950d210f",
                "indicator--56c69613-e0e8-420b-8bce-59a1950d210f",
                "indicator--56c69620-0ab8-4d3b-9318-c650950d210f",
                "indicator--56c6962d-71cc-4699-8b17-49c4950d210f",
                "indicator--56c69639-8afc-40de-a512-c653950d210f",
                "indicator--56c69646-3ed8-4e51-b051-48bf950d210f",
                "indicator--56c69652-8ecc-4b51-bc0d-59a3950d210f",
                "indicator--56c69660-21b0-45e8-be73-59a2950d210f",
                "indicator--56c6966e-648c-4540-a35a-c650950d210f",
                "indicator--56c6967c-8cc4-4782-bac8-5ca1950d210f",
                "indicator--56c6968b-251c-47ed-adcf-5f51950d210f",
                "indicator--56c69699-64e4-4f3d-b22a-599e950d210f",
                "indicator--56c696a5-5d78-4ec0-8d7b-59a3950d210f",
                "indicator--56c696b3-7cc0-432b-aa98-c652950d210f",
                "indicator--56c696c2-00f4-4d83-981e-5ca1950d210f",
                "indicator--56c696ce-8278-4319-99e2-599c950d210f",
                "indicator--56c696dc-5fb4-4394-8a5b-59a3950d210f",
                "indicator--56c696ea-4de0-4966-b411-59a4950d210f",
                "indicator--56c696f9-5df0-45a4-a8e4-599c950d210f",
                "indicator--56c69708-4c78-4c88-99de-c651950d210f",
                "indicator--56c69714-bc38-4479-b5b9-c651950d210f",
                "indicator--56c69722-a604-45e3-b78a-599f950d210f",
                "indicator--56c69730-eb50-4968-87fc-c652950d210f",
                "indicator--56c6973f-2b5c-44ab-8689-c650950d210f",
                "indicator--56c6974d-ef4c-4495-a927-599c950d210f",
                "indicator--56c6975c-f91c-4119-901a-c651950d210f",
                "indicator--56c6976a-fc48-432f-8895-59a2950d210f",
                "indicator--56c69778-8628-440a-84bb-44ff950d210f",
                "indicator--56c69785-b07c-42fa-a331-599f950d210f",
                "indicator--56c69793-0ab0-4eb6-bc42-59a2950d210f",
                "indicator--56c697a2-4a54-4d75-91ea-59a0950d210f",
                "indicator--56c697b1-4e20-45d4-913f-c653950d210f",
                "indicator--56c697c0-0f7c-45f8-bde2-599f950d210f",
                "indicator--56c697cf-2898-4b26-9939-44f2950d210f",
                "indicator--56c697dd-1f78-427c-9dca-599e950d210f",
                "indicator--56c697ec-db1c-49cb-ad2f-c650950d210f",
                "indicator--56c697fa-9418-4209-8cc1-43c2950d210f",
                "indicator--56c69809-03e0-49a0-ae01-59a0950d210f",
                "indicator--56c69818-c178-4c94-bc07-48fd950d210f",
                "indicator--56c69826-b0e8-4bff-a368-43e4950d210f",
                "indicator--56c69835-a2d8-4da0-94a9-45fb950d210f",
                "indicator--56c69844-474c-44be-8f70-59a1950d210f",
                "indicator--56c69852-0cf8-42c6-8297-5ca1950d210f",
                "indicator--56c69862-adc0-4065-ac12-599d950d210f",
                "indicator--56c69871-08b8-4820-87c2-5ca1950d210f",
                "indicator--56c69880-5a7c-4ef9-b15f-5f51950d210f",
                "indicator--56c6988e-b460-4dc0-b796-59a4950d210f",
                "indicator--56c6989d-878c-4d5b-bafa-441c950d210f",
                "indicator--56c698ab-7220-43af-b7ea-4dc8950d210f",
                "indicator--56c698ba-0d08-4463-8a9e-5f51950d210f",
                "indicator--56c698c9-1544-413c-959c-59a1950d210f",
                "indicator--56c698d7-7680-46f2-8cfb-599c950d210f",
                "indicator--56c698e6-a86c-43f8-8de2-599f950d210f",
                "indicator--56c698f4-b0f0-4fa0-8f02-59a1950d210f",
                "indicator--56c69903-cba0-4bd2-baad-5ca1950d210f",
                "indicator--56c69911-b724-4616-8ab1-5f51950d210f",
                "indicator--56c69920-4eec-4575-bbde-c651950d210f",
                "indicator--56c6992c-9330-47ad-ba8b-4297950d210f",
                "indicator--56c69939-15ec-4925-8599-5ca1950d210f",
                "indicator--56c69948-cb98-40bc-9e8f-4b4b950d210f",
                "indicator--56c69956-7330-4195-8c6d-599f950d210f",
                "indicator--56c69963-fad0-4236-918d-4c01950d210f",
                "indicator--56c69971-dbe4-485f-b4d8-c654950d210f",
                "indicator--56c6997e-cb20-4800-b7af-47ab950d210f",
                "indicator--56c6998b-94e0-46d0-bc18-59a2950d210f",
                "indicator--56c69997-41dc-4f5b-ba5f-5ca1950d210f",
                "indicator--56c699a6-8850-4d08-b87c-c654950d210f",
                "indicator--56c699b4-8e8c-44d7-9fa9-c651950d210f",
                "indicator--56c699c1-396c-4a5d-a599-59a2950d210f",
                "indicator--56c699cf-2694-42e8-bd6f-59a3950d210f",
                "indicator--56c699de-a7ac-4e5a-8e6d-c652950d210f",
                "indicator--56c699ea-504c-4aa1-860d-c654950d210f",
                "indicator--56c699f8-dde0-4e77-a53a-c650950d210f",
                "indicator--56c69a04-367c-4dbe-ab0e-5ca1950d210f",
                "indicator--56c69a11-828c-45ed-9628-41ef950d210f",
                "indicator--56c69a20-3ea4-4d53-ae6f-599f950d210f",
                "indicator--56c69a2c-1784-4c98-926b-c653950d210f",
                "indicator--56c69a3a-3770-4452-9a7f-c651950d210f",
                "indicator--56c69a48-bdc4-4b85-bfd2-4377950d210f",
                "indicator--56c69a55-0b30-414c-b26b-5ca1950d210f",
                "indicator--56c69a61-069c-4763-8eb3-5ca1950d210f",
                "indicator--56c69a6e-aa14-4a3a-9a5f-4cc1950d210f",
                "indicator--56c69a7b-1494-4321-9986-59a1950d210f",
                "indicator--56c69a88-6bc8-4f8e-b956-c650950d210f",
                "indicator--56c69a94-a574-4d11-b394-c652950d210f",
                "indicator--56c69aa1-cb10-4219-9abd-5ca1950d210f",
                "indicator--56c69aae-4800-414a-9232-c652950d210f",
                "indicator--56c69aba-4c68-47bd-b9a8-4b0d950d210f",
                "indicator--56c69ac8-5c54-4149-92aa-59a0950d210f",
                "indicator--56c69ad6-1590-4f51-b3d4-599d950d210f",
                "indicator--56c69ae2-de94-4d95-acdc-59a4950d210f",
                "indicator--56c69af0-0364-44b2-b7eb-c653950d210f",
                "indicator--56c69afe-f11c-459e-ba1a-4df3950d210f",
                "indicator--56c69b0c-b638-4046-b45d-599c950d210f",
                "indicator--56c69b1a-3be8-4f05-bf37-599f950d210f",
                "indicator--56c69b28-76b8-4ea3-ba4b-c651950d210f",
                "indicator--56c69b36-bc44-42bc-8042-59a2950d210f",
                "indicator--56c69b43-00fc-432c-bb2f-4172950d210f",
                "indicator--56c69b50-f0b8-4c62-a95e-599c950d210f",
                "indicator--56c69b5d-bb50-4ea3-9ca6-59a1950d210f",
                "indicator--56c69b6b-2b48-46e7-b3f2-5f51950d210f",
                "indicator--56c69b77-fc6c-40b6-89ee-c653950d210f",
                "indicator--56c69b85-058c-47f9-8cc1-59a0950d210f",
                "indicator--56c69b92-16b0-4352-84dd-5ca1950d210f",
                "indicator--56c69b9f-4aa4-4fd7-83d3-c653950d210f",
                "indicator--56c69bac-b8d8-4ff2-8b38-c651950d210f",
                "indicator--56c69bba-a4cc-424b-91be-46de950d210f",
                "indicator--56c69bc8-15fc-4d1e-ab97-c651950d210f",
                "indicator--56c69bd7-40c8-4a2e-b4ce-4c81950d210f",
                "indicator--56c69be6-2728-4a3c-a474-59a0950d210f",
                "indicator--56c69bf4-10e8-4022-92da-599e950d210f",
                "indicator--56c69c02-8d1c-4f5b-a0cf-4b49950d210f",
                "indicator--56c69c0f-9210-4bcf-ab1f-c651950d210f",
                "indicator--56c69c1c-e8dc-4f17-bc66-5f51950d210f",
                "indicator--56c69c29-cc30-41ee-b28a-59a3950d210f",
                "indicator--56c69c37-f1d8-456c-befb-c650950d210f",
                "indicator--56c69c44-0340-4ff8-9dce-4390950d210f",
                "indicator--56c69c52-01bc-45ae-8676-c651950d210f",
                "indicator--56c69c5f-d5e0-4c6f-b4b2-599c950d210f",
                "indicator--56c69c6d-d000-421c-82ee-4f3d950d210f",
                "indicator--56c69c7c-dd0c-4f73-a3de-5f51950d210f",
                "indicator--56c69c89-c960-49a1-b3c7-c651950d210f",
                "indicator--56c69c96-f574-4ef2-8aac-59a2950d210f",
                "indicator--56c69ca3-7364-45c2-878c-599c950d210f",
                "indicator--56c69cb1-73ec-4142-a37e-599f950d210f",
                "indicator--56c69cbf-dfb0-402b-9d15-c654950d210f",
                "indicator--56c69ccc-d4d8-445f-a368-c650950d210f",
                "indicator--56c69cd9-caa4-409e-899a-599f950d210f",
                "indicator--56c69ce6-27b8-4ca4-af8d-c650950d210f",
                "indicator--56c69cf4-02c0-4483-b98d-4f46950d210f",
                "indicator--56c69d03-0164-4881-83ef-59a3950d210f",
                "indicator--56c69d12-b7f8-48c5-99d5-40df950d210f",
                "indicator--56c69d21-f2d4-410b-abb0-4789950d210f",
                "indicator--56c69d31-b6cc-4b23-99a9-4031950d210f",
                "indicator--56c69d41-3ddc-417c-a10f-59a0950d210f",
                "indicator--56c69d4f-e964-4953-940e-59a1950d210f",
                "indicator--56c69d5c-f690-4450-9ab2-599f950d210f",
                "indicator--56c69d6a-dec8-48ed-a8c5-c650950d210f",
                "indicator--56c69d79-1358-4559-9232-59a1950d210f",
                "indicator--56c69d89-3b44-4fb9-acfc-5f51950d210f",
                "indicator--56c69d98-bf3c-4eb7-a63e-498b950d210f",
                "indicator--56c69da7-1ea4-4550-8a02-599c950d210f",
                "indicator--56c69db6-3618-4882-9ccb-c650950d210f",
                "indicator--56c69dc5-f750-4bbe-846a-c652950d210f",
                "indicator--56c69dd3-a780-4fe6-a627-4f74950d210f",
                "indicator--56c69de3-d78c-44b4-9194-599d950d210f",
                "indicator--56c69df2-2fc0-4bf8-9f12-599c950d210f",
                "indicator--56cb5033-1a90-4e54-94ea-4e98950d210f",
                "indicator--56cb5058-f308-43a6-aa60-4510950d210f",
                "indicator--56cb5037-619c-4d26-b654-4974950d210f",
                "indicator--56cb505a-9bd4-46e7-8842-4c22950d210f",
                "indicator--56d61343-9684-41cc-83d2-45e6950d210f",
                "indicator--56d61353-2694-46a2-bf05-4204950d210f",
                "indicator--56d6135b-1908-47d4-8958-4c51950d210f",
                "indicator--56d61365-25d4-46ca-9dba-4201950d210f",
                "indicator--56d61372-6624-40be-8e50-4543950d210f",
                "indicator--56d61388-135c-4a16-96bd-45e6950d210f",
                "indicator--56d6138f-51a4-4a45-99ab-4843950d210f",
                "indicator--56d61398-b85c-422e-8c5a-481a950d210f",
                "indicator--56d613b5-72a0-4d4e-954d-4987950d210f",
                "indicator--56d613cb-1888-478c-adbf-4f3c950d210f",
                "indicator--56d61346-a9bc-4b52-8667-c664950d210f",
                "indicator--56d61356-ec5c-4cd0-a319-4310950d210f",
                "indicator--56d6135d-0094-452b-a011-4422950d210f",
                "indicator--56d61368-ce88-4220-81e1-407f950d210f",
                "indicator--56d61375-cd68-4f2c-95b3-421b950d210f",
                "indicator--56d6138a-15bc-42bc-bbfe-0b81950d210f",
                "indicator--56d61392-100c-471e-877a-42eb950d210f",
                "indicator--56d6139b-a7d0-494e-965b-4d31950d210f",
                "indicator--56d613b8-e1f4-4509-a3dd-0b81950d210f",
                "indicator--56d613ce-f2a8-49b6-84ba-c664950d210f"
            ],
            "labels": [
                "Threat-Report",
                "misp:tool=\"MISP-STIX-Converter\"",
                "type:OSINT"
            ],
            "object_marking_refs": [
                "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--55c90304-b238-4c61-b0d1-4296950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-08-10T20:01:08.000Z",
            "modified": "2015-08-10T20:01:08.000Z",
            "first_observed": "2015-08-10T20:01:08Z",
            "last_observed": "2015-08-10T20:01:08Z",
            "number_observed": 1,
            "object_refs": [
                "url--55c90304-b238-4c61-b0d1-4296950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--55c90304-b238-4c61-b0d1-4296950d210b",
            "value": "http://www.fidelissecurity.com/sites/default/files/FTA_1018_looking_at_the_sky_for_a_dark_comet.pdf"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--55c9a6c0-1be8-475f-9ebc-354c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-08-11T07:39:44.000Z",
            "modified": "2015-08-11T07:39:44.000Z",
            "pattern": "[rule DarkComet\r\n{\r\nmeta:\r\ndescription = \"DarkComet RAT\"\r\nauthor = \"Fidelis Cybersecurity\"\r\ndate = \"2015-07-22\"\r\nstrings:\r\n$s1 = \"#KCMDDC\"\r\n$s2 = \"DCDATA\"\r\n$s3 = \"#BOT#CloseServer\"\r\n$s4 = \"#BOT#SvrUninstall\"\r\n$s5 = \"#BOT#URLDownload\"\r\ncondition:\r\nuint16(0) == 0x5a4d and filesize < 50MB and all of ($s*)\r\n}]",
            "pattern_type": "yara",
            "pattern_version": "2.1",
            "valid_from": "2015-08-11T07:39:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Artifacts dropped"
                }
            ],
            "labels": [
                "misp:type=\"yara\"",
                "misp:category=\"Artifacts dropped\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--55c9a6d5-3a24-4763-826a-4e27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-08-11T07:40:05.000Z",
            "modified": "2015-08-11T07:40:05.000Z",
            "pattern": "[rule DarkCometDownloader\r\n{\r\nmeta:\r\ndescription = \"DarkComet RAT Downloader\"\r\nauthor = \"Fidelis Cybersecurity\"\r\ndate = \"2015-07-22\"\r\nstrings:\r\n$s1 = {6A00FF15F0304000A30D1040006A0A68261040006A00FF15F4304000A311104000FF35111040006A00FF15F8304000A315104000FF35111040006A00FF15FC304000A319104000FF3515104000FF1500314000A31D104000FF3519104000FF351D104000682C114000FF1508314000FF3515104000FF150C31400031C0682C104000682C104000FF15143140006805104000682C104000FF1510314000682C104000FF15183140006A006A00682C104000682C1140006A00FF15803040006A056A006A00682C10400068001040006A00FF15A83040006A00FF1504314000}\r\ncondition:\r\nuint16(0) == 0x5a4d and filesize < 10KB and all of them\r\n}]",
            "pattern_type": "yara",
            "pattern_version": "2.1",
            "valid_from": "2015-08-11T07:40:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Artifacts dropped"
                }
            ],
            "labels": [
                "misp:type=\"yara\"",
                "misp:category=\"Artifacts dropped\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560b9ec3-92d4-4caf-999c-41df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:35:15.000Z",
            "modified": "2015-09-30T08:35:15.000Z",
            "first_observed": "2015-09-30T08:35:15Z",
            "last_observed": "2015-09-30T08:35:15Z",
            "number_observed": 1,
            "object_refs": [
                "url--560b9ec3-92d4-4caf-999c-41df950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560b9ec3-92d4-4caf-999c-41df950d210b",
            "value": "http://www.threatgeek.com/2015/08/fidelis-threat-advisory-1018-overview-looking-at-the-sky-for-a-darkcomet.html"
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560b9ec4-e020-4211-95ef-4907950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:35:16.000Z",
            "modified": "2015-09-30T08:35:16.000Z",
            "first_observed": "2015-09-30T08:35:16Z",
            "last_observed": "2015-09-30T08:35:16Z",
            "number_observed": 1,
            "object_refs": [
                "url--560b9ec4-e020-4211-95ef-4907950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560b9ec4-e020-4211-95ef-4907950d210b",
            "value": "http://www.fidelissecurity.com/sites/default/files/FTA_1018_DarkComet_AppendixC_Live%20Dark%20Comet%20Clients.csv"
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560b9ec4-2660-47b9-9dc4-4013950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:35:16.000Z",
            "modified": "2015-09-30T08:35:16.000Z",
            "first_observed": "2015-09-30T08:35:16Z",
            "last_observed": "2015-09-30T08:35:16Z",
            "number_observed": 1,
            "object_refs": [
                "url--560b9ec4-2660-47b9-9dc4-4013950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560b9ec4-2660-47b9-9dc4-4013950d210b",
            "value": "http://www.fidelissecurity.com/sites/default/files/FTA_1018_DarkComet_AppendixD_Extracted%20DC%20Configuration.csv"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3a-00c8-4e99-850a-430b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:14.000Z",
            "modified": "2015-09-30T08:37:14.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '2.134.19.46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3a-66b8-42a6-9b5c-4035950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:14.000Z",
            "modified": "2015-09-30T08:37:14.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '2.178.156.141']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3b-3cbc-40a7-9144-456f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:15.000Z",
            "modified": "2015-09-30T08:37:15.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '2.183.168.230']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3b-0fe8-4edc-9e7a-4fee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:15.000Z",
            "modified": "2015-09-30T08:37:15.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '2.184.116.165']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3c-e47c-480d-8b20-4f8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:16.000Z",
            "modified": "2015-09-30T08:37:16.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '2.184.89.56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3c-5d30-43ac-9efa-424f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:16.000Z",
            "modified": "2015-09-30T08:37:16.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '2.235.242.26']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3c-c90c-4ef0-83f1-468d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:16.000Z",
            "modified": "2015-09-30T08:37:16.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '2.27.140.50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3d-6a10-4708-b1fc-4ba6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:17.000Z",
            "modified": "2015-09-30T08:37:17.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '2.49.207.64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3d-f648-4fe4-9884-4000950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:17.000Z",
            "modified": "2015-09-30T08:37:17.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '2.93.160.208']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3d-d288-4872-8b63-45db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:17.000Z",
            "modified": "2015-09-30T08:37:17.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '201.230.5.188']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3e-614c-4bb6-bdf8-4231950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:18.000Z",
            "modified": "2015-09-30T08:37:18.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '201.50.169.209']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3e-f884-48ce-a40d-4f0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:18.000Z",
            "modified": "2015-09-30T08:37:18.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '203.96.193.223']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3e-2fac-4fd2-9999-413d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:18.000Z",
            "modified": "2015-09-30T08:37:18.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '204.152.219.67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3f-c8a0-4c5b-befa-483a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:19.000Z",
            "modified": "2015-09-30T08:37:19.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '212.7.208.92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3f-ca70-47d0-9303-4b3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:19.000Z",
            "modified": "2015-09-30T08:37:19.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '212.83.167.112']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f3f-c49c-4210-9ce4-444b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:19.000Z",
            "modified": "2015-09-30T08:37:19.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.245.137.108']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f40-8408-4ca9-a342-4dbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:20.000Z",
            "modified": "2015-09-30T08:37:20.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '213.88.109.222']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f40-4d4c-4cb4-85c0-445b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:20.000Z",
            "modified": "2015-09-30T08:37:20.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '217.10.41.43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f41-2ab0-4f88-9ac0-45ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:20.000Z",
            "modified": "2015-09-30T08:37:20.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '217.133.7.70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f41-a344-4659-858e-46d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:21.000Z",
            "modified": "2015-09-30T08:37:21.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '218.111.218.136']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f41-f4e0-4be3-bae5-4b1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:21.000Z",
            "modified": "2015-09-30T08:37:21.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '222.101.11.224']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f42-14a0-404e-a95c-4ae6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:22.000Z",
            "modified": "2015-09-30T08:37:22.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.105.128.150']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f42-e518-4411-b5ac-4b42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:22.000Z",
            "modified": "2015-09-30T08:37:22.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.105.131.183']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f42-a904-4a89-8749-4565950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:22.000Z",
            "modified": "2015-09-30T08:37:22.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '23.105.131.209']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f43-f780-4984-a07c-4a8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:23.000Z",
            "modified": "2015-09-30T08:37:23.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '24.121.82.125']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f43-9754-4d0c-86d9-4abe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:23.000Z",
            "modified": "2015-09-30T08:37:23.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '24.158.253.153']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f43-8920-47da-ab75-48c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:23.000Z",
            "modified": "2015-09-30T08:37:23.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '31.162.149.250']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f44-bdf8-41cc-90e4-461b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:24.000Z",
            "modified": "2015-09-30T08:37:24.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '31.185.128.164']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f44-599c-47b6-991b-415d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:24.000Z",
            "modified": "2015-09-30T08:37:24.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '31.44.71.115']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f44-a858-45d8-b811-44a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:24.000Z",
            "modified": "2015-09-30T08:37:24.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '37.123.200.160']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f45-d654-41a0-a875-4e29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:25.000Z",
            "modified": "2015-09-30T08:37:25.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '37.134.22.228']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f45-2488-4499-aafa-4e33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:25.000Z",
            "modified": "2015-09-30T08:37:25.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '37.139.52.43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f45-46f8-48c5-bc5a-4aff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:25.000Z",
            "modified": "2015-09-30T08:37:25.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '37.220.83.218']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f46-adc8-407d-9b39-48d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:26.000Z",
            "modified": "2015-09-30T08:37:26.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '37.53.82.151']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f46-f524-429d-aad8-47e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:26.000Z",
            "modified": "2015-09-30T08:37:26.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '41.130.203.90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f47-4eb4-43a1-9942-4a22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:27.000Z",
            "modified": "2015-09-30T08:37:27.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '41.225.151.30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f47-6484-4d02-a64d-4682950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:27.000Z",
            "modified": "2015-09-30T08:37:27.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '41.226.164.83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f47-5e80-48c8-ad3d-40be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:27.000Z",
            "modified": "2015-09-30T08:37:27.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '41.238.222.159']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f48-3514-4310-90ba-41f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:28.000Z",
            "modified": "2015-09-30T08:37:28.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '42.61.41.210']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f48-c2e0-437e-881c-427a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:28.000Z",
            "modified": "2015-09-30T08:37:28.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '43.254.133.35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f48-feb0-4076-97fe-4a76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:28.000Z",
            "modified": "2015-09-30T08:37:28.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.103.29.132']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f49-df68-4cc2-aa06-48af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:29.000Z",
            "modified": "2015-09-30T08:37:29.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.105.250.123']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f49-5b18-46b7-8320-4b18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:29.000Z",
            "modified": "2015-09-30T08:37:29.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.117.34.6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f49-7f84-4428-b597-4dee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:29.000Z",
            "modified": "2015-09-30T08:37:29.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.12.202.150']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4a-c7fc-4da7-ab8a-429c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:30.000Z",
            "modified": "2015-09-30T08:37:30.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.160.28.242']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4a-56b8-4a82-be98-4e19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:30.000Z",
            "modified": "2015-09-30T08:37:30.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.197.247.37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4a-c2b4-4874-adb6-4870950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:30.000Z",
            "modified": "2015-09-30T08:37:30.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.2.113.99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4b-0570-403d-9d2a-45de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:31.000Z",
            "modified": "2015-09-30T08:37:31.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.20.33.108']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4b-95e8-4a59-8ee1-4b22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:31.000Z",
            "modified": "2015-09-30T08:37:31.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.242.121.217']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4b-6ee4-497a-a859-4d07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:31.000Z",
            "modified": "2015-09-30T08:37:31.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.246.10.208']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4c-ca18-42ae-8503-4e52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:32.000Z",
            "modified": "2015-09-30T08:37:32.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.246.14.172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4c-49ec-441a-8724-4010950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:32.000Z",
            "modified": "2015-09-30T08:37:32.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.246.7.149']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4d-ad84-480a-82d5-48b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:32.000Z",
            "modified": "2015-09-30T08:37:32.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '46.250.14.110']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4d-e528-4d24-a545-4b82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:33.000Z",
            "modified": "2015-09-30T08:37:33.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '47.18.6.88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4d-8268-482a-9553-4199950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:33.000Z",
            "modified": "2015-09-30T08:37:33.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.134.112.153']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4e-3514-4f8f-b681-4287950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:34.000Z",
            "modified": "2015-09-30T08:37:34.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.137.51.189']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4e-5168-4439-8b1f-40e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:34.000Z",
            "modified": "2015-09-30T08:37:34.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.233.97.154']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4e-1dbc-4d0d-a3c6-447d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:34.000Z",
            "modified": "2015-09-30T08:37:34.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.62.30.105']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4f-b6e4-4507-a03a-45cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:35.000Z",
            "modified": "2015-09-30T08:37:35.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '5.78.129.213']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4f-3bb8-494d-9f9e-4150950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:35.000Z",
            "modified": "2015-09-30T08:37:35.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.14.162.175']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f4f-38b0-4133-b4c8-4c8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:35.000Z",
            "modified": "2015-09-30T08:37:35.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '50.186.222.48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f50-8c8c-4182-89cc-47a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:36.000Z",
            "modified": "2015-09-30T08:37:36.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '52.28.183.196']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f50-5388-4a8b-9aa5-4aac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:36.000Z",
            "modified": "2015-09-30T08:37:36.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '52.8.11.195']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f50-dab4-422d-83d3-4874950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:36.000Z",
            "modified": "2015-09-30T08:37:36.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '61.97.230.7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f51-cec4-4c56-8363-484d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:37.000Z",
            "modified": "2015-09-30T08:37:37.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '62.221.79.122']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f51-67fc-4909-a6b4-439d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:37.000Z",
            "modified": "2015-09-30T08:37:37.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '62.83.58.177']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f51-a44c-4a9b-ab87-4bda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:37.000Z",
            "modified": "2015-09-30T08:37:37.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '64.188.44.24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f52-76a4-4fd5-922b-4e34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:38.000Z",
            "modified": "2015-09-30T08:37:38.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '67.215.4.66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f52-ba90-4317-8784-41bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:38.000Z",
            "modified": "2015-09-30T08:37:38.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '68.238.165.147']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f53-7da4-4761-b19e-4a79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:38.000Z",
            "modified": "2015-09-30T08:37:38.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '68.4.72.134']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f53-7d54-4216-aa30-4aed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:39.000Z",
            "modified": "2015-09-30T08:37:39.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '68.70.251.241']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f53-39b8-414b-957c-4b0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:39.000Z",
            "modified": "2015-09-30T08:37:39.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.113.13.114']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f54-7314-431c-91c5-496c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:40.000Z",
            "modified": "2015-09-30T08:37:40.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '69.141.118.152']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f54-b8b4-40eb-bdb7-46d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:40.000Z",
            "modified": "2015-09-30T08:37:40.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '70.160.62.82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f54-24ec-4081-bda6-4d50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:40.000Z",
            "modified": "2015-09-30T08:37:40.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '70.177.121.101']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f55-06a8-470f-abfa-49b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:41.000Z",
            "modified": "2015-09-30T08:37:41.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '70.71.46.245']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f55-53f4-4f66-a554-4508950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:41.000Z",
            "modified": "2015-09-30T08:37:41.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '72.216.63.175']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f55-fc40-4c15-94be-48da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:41.000Z",
            "modified": "2015-09-30T08:37:41.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '72.252.182.33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f56-696c-4de3-8a07-4455950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:42.000Z",
            "modified": "2015-09-30T08:37:42.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '72.77.207.205']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f56-3a88-49e1-ab32-4459950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:42.000Z",
            "modified": "2015-09-30T08:37:42.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '73.187.82.251']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f56-3010-4642-a521-45ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:42.000Z",
            "modified": "2015-09-30T08:37:42.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '73.201.171.218']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f57-1f64-47bb-ac6b-4e6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:43.000Z",
            "modified": "2015-09-30T08:37:43.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '73.213.182.38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f57-b074-4a22-ad4f-477e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:43.000Z",
            "modified": "2015-09-30T08:37:43.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '74.108.59.203']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f57-e07c-4f56-afd9-4a2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:43.000Z",
            "modified": "2015-09-30T08:37:43.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '76.71.112.7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f58-d098-471c-b3f6-4cd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:44.000Z",
            "modified": "2015-09-30T08:37:44.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.108.221.231']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f58-60b4-4ffc-8b5a-4b0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:44.000Z",
            "modified": "2015-09-30T08:37:44.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.120.108.189']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f58-52d4-4ae6-81ce-4041950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:44.000Z",
            "modified": "2015-09-30T08:37:44.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.128.46.253']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f59-9340-47b4-847b-4014950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:45.000Z",
            "modified": "2015-09-30T08:37:45.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.149.193.243']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f59-e780-4754-a72d-4358950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:45.000Z",
            "modified": "2015-09-30T08:37:45.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.20.200.174']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5a-b6b4-4d8c-97c8-4128950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:46.000Z",
            "modified": "2015-09-30T08:37:46.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '77.234.9.172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5a-8c84-4dcf-9247-4bf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:46.000Z",
            "modified": "2015-09-30T08:37:46.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.109.51.145']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5a-5890-489e-9798-4a18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:46.000Z",
            "modified": "2015-09-30T08:37:46.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.125.160.94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5b-e96c-439b-86a0-444b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:47.000Z",
            "modified": "2015-09-30T08:37:47.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.126.199.21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5b-61c8-4fb8-ac86-4a03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:47.000Z",
            "modified": "2015-09-30T08:37:47.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.15.43.196']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5b-731c-4c07-9f6d-4a1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:47.000Z",
            "modified": "2015-09-30T08:37:47.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.165.62.80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5c-33c4-4287-af9a-424f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:48.000Z",
            "modified": "2015-09-30T08:37:48.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.176.197.65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5c-2a98-426d-ad19-4db1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:48.000Z",
            "modified": "2015-09-30T08:37:48.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.182.77.59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5c-b054-48b9-b360-45ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:48.000Z",
            "modified": "2015-09-30T08:37:48.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.190.173.1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5d-ccdc-494c-b24f-412d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:49.000Z",
            "modified": "2015-09-30T08:37:49.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.232.233.130']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5d-029c-4101-b1ad-4cd4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:49.000Z",
            "modified": "2015-09-30T08:37:49.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.233.208.131']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5d-0c24-4d35-a34e-4f5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:49.000Z",
            "modified": "2015-09-30T08:37:49.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '78.87.142.251']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5e-ff30-4732-adaa-407e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:50.000Z",
            "modified": "2015-09-30T08:37:50.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '79.118.118.120']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5e-82e8-42e6-9da8-4dec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:50.000Z",
            "modified": "2015-09-30T08:37:50.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '79.118.170.253']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5e-6018-45c1-982f-496e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:50.000Z",
            "modified": "2015-09-30T08:37:50.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '79.181.142.53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5f-014c-4035-b7d8-41e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:51.000Z",
            "modified": "2015-09-30T08:37:51.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '79.196.216.238']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f5f-3e38-408d-b988-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:51.000Z",
            "modified": "2015-09-30T08:37:51.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '79.86.36.103']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f60-b3a0-4a85-87be-4472950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:52.000Z",
            "modified": "2015-09-30T08:37:52.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '80.69.53.247']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f60-9878-4707-b80a-4f73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:52.000Z",
            "modified": "2015-09-30T08:37:52.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.163.119.40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f60-bec4-487d-998b-46ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:52.000Z",
            "modified": "2015-09-30T08:37:52.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.169.138.52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f61-ec80-495b-9fdc-4bfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:53.000Z",
            "modified": "2015-09-30T08:37:53.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '81.65.130.169']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f61-d16c-46c8-beeb-478f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:53.000Z",
            "modified": "2015-09-30T08:37:53.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '82.235.69.235']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f61-d678-4228-8434-4670950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:53.000Z",
            "modified": "2015-09-30T08:37:53.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '82.245.199.238']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f62-1384-4f5f-a336-46e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:54.000Z",
            "modified": "2015-09-30T08:37:54.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '82.40.196.62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f62-bfd8-4a73-acf0-4e6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:54.000Z",
            "modified": "2015-09-30T08:37:54.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '82.64.72.156']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f62-da4c-4c43-aa2a-4eb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:54.000Z",
            "modified": "2015-09-30T08:37:54.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '83.152.52.77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f63-e18c-4eba-b018-43af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:55.000Z",
            "modified": "2015-09-30T08:37:55.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '83.158.67.102']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f63-35f8-4532-9db4-475e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:55.000Z",
            "modified": "2015-09-30T08:37:55.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '83.6.215.30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f63-b49c-4166-af8f-4537950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:55.000Z",
            "modified": "2015-09-30T08:37:55.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '83.87.20.225']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f64-3854-49bd-85c1-45d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:56.000Z",
            "modified": "2015-09-30T08:37:56.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '84.109.119.66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f64-a9d4-44c4-8cf8-47d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:56.000Z",
            "modified": "2015-09-30T08:37:56.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '84.31.46.82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f64-45d4-42dc-b0e3-46c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:56.000Z",
            "modified": "2015-09-30T08:37:56.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '84.75.13.138']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f65-3a40-4eae-bd8c-4625950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:57.000Z",
            "modified": "2015-09-30T08:37:57.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '84.92.184.228']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f65-0674-4992-9b6d-4bec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:57.000Z",
            "modified": "2015-09-30T08:37:57.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '84.99.15.212']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f66-d788-40eb-91c8-425f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:58.000Z",
            "modified": "2015-09-30T08:37:58.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.103.35.12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f66-7af4-4b6c-ac1c-4253950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:58.000Z",
            "modified": "2015-09-30T08:37:58.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.11.184.17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f66-4bec-4e34-b94a-470a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:58.000Z",
            "modified": "2015-09-30T08:37:58.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.214.158.104']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f67-6af4-4d22-98eb-4027950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:59.000Z",
            "modified": "2015-09-30T08:37:59.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '85.220.82.127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f67-1570-44a6-9b16-4e9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:59.000Z",
            "modified": "2015-09-30T08:37:59.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '86.15.119.66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f67-043c-4de7-b10e-4b4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:37:59.000Z",
            "modified": "2015-09-30T08:37:59.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '86.177.132.136']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:37:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f68-9828-42cc-a561-47d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:00.000Z",
            "modified": "2015-09-30T08:38:00.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '86.219.113.235']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f68-0888-4878-ba84-4ebd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:00.000Z",
            "modified": "2015-09-30T08:38:00.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '87.118.7.231']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f68-a0c0-469b-a2ea-4191950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:00.000Z",
            "modified": "2015-09-30T08:38:00.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '87.226.111.172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f69-81e8-4c06-a05b-42cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:01.000Z",
            "modified": "2015-09-30T08:38:01.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.122.114.18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f69-b62c-4bb0-8922-44cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:01.000Z",
            "modified": "2015-09-30T08:38:01.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.122.162.15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f69-0824-450f-be4a-448f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:01.000Z",
            "modified": "2015-09-30T08:38:01.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.162.124.47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6a-d4a4-46da-b59f-4d13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:02.000Z",
            "modified": "2015-09-30T08:38:02.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.174.88.27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6a-4788-4df5-9386-442a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:02.000Z",
            "modified": "2015-09-30T08:38:02.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.180.41.171']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6a-d58c-489e-8ac0-4da5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:02.000Z",
            "modified": "2015-09-30T08:38:02.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.227.70.114']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6b-085c-4cd0-b2e1-4b82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:03.000Z",
            "modified": "2015-09-30T08:38:03.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.229.134.254']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6b-b430-49ce-a4b8-4932950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:03.000Z",
            "modified": "2015-09-30T08:38:03.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.230.226.32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6c-52f4-47d8-a1ed-4a28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:04.000Z",
            "modified": "2015-09-30T08:38:04.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.233.73.17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6c-ee84-40c9-9a09-4873950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:04.000Z",
            "modified": "2015-09-30T08:38:04.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.233.94.82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6c-5714-4bc3-bf27-4ad0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:04.000Z",
            "modified": "2015-09-30T08:38:04.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.238.36.75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6d-1770-41d4-ad88-4ed4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:05.000Z",
            "modified": "2015-09-30T08:38:05.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.243.230.9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6d-8ee0-4baa-ad32-478e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:05.000Z",
            "modified": "2015-09-30T08:38:05.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.244.3.53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6d-2724-4598-9016-43f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:05.000Z",
            "modified": "2015-09-30T08:38:05.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '88.246.52.93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6e-cc48-462a-8e30-4e9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:06.000Z",
            "modified": "2015-09-30T08:38:06.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '89.211.89.158']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6e-f880-4b12-b97a-4a71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:06.000Z",
            "modified": "2015-09-30T08:38:06.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '89.36.15.3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6e-fc0c-445d-b362-45b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:06.000Z",
            "modified": "2015-09-30T08:38:06.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '89.65.58.9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6f-2d10-474d-80ec-463c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:07.000Z",
            "modified": "2015-09-30T08:38:07.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '90.171.2.203']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6f-4418-4359-87a7-43a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:07.000Z",
            "modified": "2015-09-30T08:38:07.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '90.188.174.23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f6f-ff48-4992-bf06-40f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:07.000Z",
            "modified": "2015-09-30T08:38:07.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '90.202.19.201']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f70-7ab8-474a-bb28-4117950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:08.000Z",
            "modified": "2015-09-30T08:38:08.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '90.21.171.248']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f70-c070-4907-9193-4dc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:08.000Z",
            "modified": "2015-09-30T08:38:08.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.11.110.243']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f70-d184-4848-bb47-404b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:08.000Z",
            "modified": "2015-09-30T08:38:08.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.177.226.133']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f71-9280-4258-8462-4ef8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:09.000Z",
            "modified": "2015-09-30T08:38:09.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.228.199.164']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f71-8e2c-484e-827d-4f26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:09.000Z",
            "modified": "2015-09-30T08:38:09.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.229.20.123']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f72-e6a8-4a67-813d-48a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:10.000Z",
            "modified": "2015-09-30T08:38:10.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.39.41.6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f72-5d6c-42e9-9f24-4de1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:10.000Z",
            "modified": "2015-09-30T08:38:10.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.65.122.239']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f72-cab0-4c64-9c89-4d5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:10.000Z",
            "modified": "2015-09-30T08:38:10.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '92.115.210.155']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f73-6704-48ff-988d-4963950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:11.000Z",
            "modified": "2015-09-30T08:38:11.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '92.143.182.177']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f73-2608-4941-9eeb-4374950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:11.000Z",
            "modified": "2015-09-30T08:38:11.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '92.89.11.181']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f73-0780-46f5-a910-4588950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:11.000Z",
            "modified": "2015-09-30T08:38:11.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '92.92.109.123']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f74-03cc-487b-ab6f-4e42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:12.000Z",
            "modified": "2015-09-30T08:38:12.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.103.155.157']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f74-4b8c-495b-8968-423d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:12.000Z",
            "modified": "2015-09-30T08:38:12.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.116.177.116']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f74-bc54-4316-9cd4-4f24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:12.000Z",
            "modified": "2015-09-30T08:38:12.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.116.73.246']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f75-5174-404d-8bb7-424c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:13.000Z",
            "modified": "2015-09-30T08:38:13.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.124.53.163']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f75-90f4-4ec1-9da6-4f7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:13.000Z",
            "modified": "2015-09-30T08:38:13.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.143.203.18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f75-c3ec-4532-a687-43e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:13.000Z",
            "modified": "2015-09-30T08:38:13.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.149.148.169']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f76-6f58-4bbd-b948-4f2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:14.000Z",
            "modified": "2015-09-30T08:38:14.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.158.213.107']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f76-d3a8-4036-8a2a-46f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:14.000Z",
            "modified": "2015-09-30T08:38:14.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.170.128.234']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f77-c700-4acc-9a53-4228950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:15.000Z",
            "modified": "2015-09-30T08:38:15.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.186.200.142']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f77-aa98-4aef-9b26-43db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:15.000Z",
            "modified": "2015-09-30T08:38:15.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '93.31.233.197']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f77-48ac-4833-99ae-4722950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:15.000Z",
            "modified": "2015-09-30T08:38:15.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.102.18.172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f78-5a44-4955-9a97-41e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:16.000Z",
            "modified": "2015-09-30T08:38:16.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.102.51.152']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f78-9cc8-4490-a490-4ae4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:16.000Z",
            "modified": "2015-09-30T08:38:16.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.178.191.166']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f78-9e68-4667-90e5-4e6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:16.000Z",
            "modified": "2015-09-30T08:38:16.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.180.61.176']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f79-d2c0-4c54-84d5-45f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:17.000Z",
            "modified": "2015-09-30T08:38:17.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.180.77.197']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f79-f4b8-4545-b499-498b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:17.000Z",
            "modified": "2015-09-30T08:38:17.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.211.158.114']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f79-9414-4021-921f-4e71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:17.000Z",
            "modified": "2015-09-30T08:38:17.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.228.229.127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7a-f1bc-4acb-82e5-4601950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:18.000Z",
            "modified": "2015-09-30T08:38:18.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.23.172.135']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7a-2dd4-4aaa-b130-49a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:18.000Z",
            "modified": "2015-09-30T08:38:18.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.38.181.66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7a-a134-4a33-ab92-4607950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:18.000Z",
            "modified": "2015-09-30T08:38:18.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.39.217.171']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7b-da20-486e-935d-4ae2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:19.000Z",
            "modified": "2015-09-30T08:38:19.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '94.75.180.10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7b-a1f8-40d1-a143-4c40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:19.000Z",
            "modified": "2015-09-30T08:38:19.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.13.210.67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7b-da80-4a2d-b342-4828950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:19.000Z",
            "modified": "2015-09-30T08:38:19.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.13.89.54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7c-8af0-4fe7-8433-4ba0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:20.000Z",
            "modified": "2015-09-30T08:38:20.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.14.150.93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7c-9cc0-4b2f-9dba-44f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:20.000Z",
            "modified": "2015-09-30T08:38:20.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.140.125.125']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7d-1ffc-419e-b872-4fb5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:21.000Z",
            "modified": "2015-09-30T08:38:21.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.140.125.61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7d-6280-4d87-ae29-441b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:21.000Z",
            "modified": "2015-09-30T08:38:21.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.153.123.225']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7d-3918-4b6c-ac5a-4729950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:21.000Z",
            "modified": "2015-09-30T08:38:21.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.16.21.170']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7e-9894-41c0-8cd6-4444950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:22.000Z",
            "modified": "2015-09-30T08:38:22.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.183.29.14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7e-ba34-4c12-bc98-4d8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:22.000Z",
            "modified": "2015-09-30T08:38:22.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.34.81.152']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7e-5f44-4f43-adfa-4234950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:22.000Z",
            "modified": "2015-09-30T08:38:22.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.58.146.161']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7f-8864-4f59-bedb-4adf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:23.000Z",
            "modified": "2015-09-30T08:38:23.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.70.217.103']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7f-b558-4d63-9345-40b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:23.000Z",
            "modified": "2015-09-30T08:38:23.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '95.83.153.146']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f7f-2140-4714-adc6-4b78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:23.000Z",
            "modified": "2015-09-30T08:38:23.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '96.3.99.8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f80-1410-4ed2-beed-4062950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:24.000Z",
            "modified": "2015-09-30T08:38:24.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '97.88.169.218']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f80-0cc8-4f7c-a653-433f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:24.000Z",
            "modified": "2015-09-30T08:38:24.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '98.118.181.70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f80-c8f8-4caa-8f2a-41bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:24.000Z",
            "modified": "2015-09-30T08:38:24.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '99.46.92.188']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f81-0a40-46de-8606-40ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:25.000Z",
            "modified": "2015-09-30T08:38:25.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '100.10.73.183']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f81-bffc-42f9-b8e6-45f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:25.000Z",
            "modified": "2015-09-30T08:38:25.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.131.37.96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f82-42f4-4974-8f12-442a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:26.000Z",
            "modified": "2015-09-30T08:38:26.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.15.180.182']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f82-cb54-45a0-90a8-4390950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:26.000Z",
            "modified": "2015-09-30T08:38:26.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.217.180.12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f82-07d8-4020-a009-4e5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:26.000Z",
            "modified": "2015-09-30T08:38:26.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '104.37.186.19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f83-fb8c-40f9-930b-4651950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:27.000Z",
            "modified": "2015-09-30T08:38:27.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '105.108.32.98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f83-80ac-48d8-8a78-4858950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:27.000Z",
            "modified": "2015-09-30T08:38:27.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.20.114.169']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f83-87b8-4b8c-906d-43d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:27.000Z",
            "modified": "2015-09-30T08:38:27.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.49.121.242']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f84-acfc-4ecb-b70a-4800950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:28.000Z",
            "modified": "2015-09-30T08:38:28.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '108.81.243.28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f84-1174-48f2-8289-4044950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:28.000Z",
            "modified": "2015-09-30T08:38:28.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '109.203.209.127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f84-d5a0-4b80-90c3-4b5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:28.000Z",
            "modified": "2015-09-30T08:38:28.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '109.255.166.171']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f85-6298-4f56-a90b-4b58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:29.000Z",
            "modified": "2015-09-30T08:38:29.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '111.118.183.211']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f85-5b6c-4650-960c-4065950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:29.000Z",
            "modified": "2015-09-30T08:38:29.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '112.207.144.235']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f85-f190-4244-b912-4b8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:29.000Z",
            "modified": "2015-09-30T08:38:29.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '115.133.56.190']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f86-b6e4-4f5a-9e42-42ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:30.000Z",
            "modified": "2015-09-30T08:38:30.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '118.193.148.244']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f86-ff20-4d69-a6ac-4c5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:30.000Z",
            "modified": "2015-09-30T08:38:30.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '119.94.40.156']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f86-6bd8-4cca-8aaa-42ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:30.000Z",
            "modified": "2015-09-30T08:38:30.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '122.155.180.217']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f87-c55c-4988-8372-4c90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:31.000Z",
            "modified": "2015-09-30T08:38:31.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '125.168.156.119']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f87-ca7c-4ed0-b196-4f39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:31.000Z",
            "modified": "2015-09-30T08:38:31.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '128.204.1.244']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f88-b04c-40e2-ad91-40ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:32.000Z",
            "modified": "2015-09-30T08:38:32.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '128.73.185.33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f88-b06c-45e6-9a9d-4052950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:32.000Z",
            "modified": "2015-09-30T08:38:32.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '128.90.15.115']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f88-3804-4f21-9f9f-4935950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:32.000Z",
            "modified": "2015-09-30T08:38:32.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '148.251.64.235']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f89-5610-4f3e-a112-461e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:33.000Z",
            "modified": "2015-09-30T08:38:33.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '149.202.33.96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f89-e360-406e-b156-4867950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:33.000Z",
            "modified": "2015-09-30T08:38:33.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '151.45.86.33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f89-4f6c-48b5-a3e4-452e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:33.000Z",
            "modified": "2015-09-30T08:38:33.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '154.68.40.69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8a-c100-4bb5-85fd-4074950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:34.000Z",
            "modified": "2015-09-30T08:38:34.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '155.133.18.229']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8a-d1f8-45e7-8731-418b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:34.000Z",
            "modified": "2015-09-30T08:38:34.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '162.244.14.227']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8a-f904-413f-ae44-4c85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:34.000Z",
            "modified": "2015-09-30T08:38:34.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '162.252.11.151']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8b-ec80-43b8-ad78-4843950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:35.000Z",
            "modified": "2015-09-30T08:38:35.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '163.22.102.17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8b-b184-431f-b9b4-4269950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:35.000Z",
            "modified": "2015-09-30T08:38:35.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '173.248.176.39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8b-369c-405e-9535-4158950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:35.000Z",
            "modified": "2015-09-30T08:38:35.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '173.57.163.176']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8c-1aa8-4659-95cb-49ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:36.000Z",
            "modified": "2015-09-30T08:38:36.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '173.70.141.149']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8c-64e4-4ad8-a59b-4e9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:36.000Z",
            "modified": "2015-09-30T08:38:36.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '174.60.102.149']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8d-324c-4778-99d5-47be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:37.000Z",
            "modified": "2015-09-30T08:38:37.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '175.143.251.144']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8d-11f4-4046-a688-4974950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:37.000Z",
            "modified": "2015-09-30T08:38:37.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '175.145.229.145']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8d-ef5c-4d66-8ce9-48d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:37.000Z",
            "modified": "2015-09-30T08:38:37.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.103.232.99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8e-7d7c-4be3-a8b1-4f0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:38.000Z",
            "modified": "2015-09-30T08:38:38.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.116.169.148']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8e-4d74-456b-b948-4dc3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:38.000Z",
            "modified": "2015-09-30T08:38:38.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.124.26.42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8e-7288-42dc-9429-4849950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:38.000Z",
            "modified": "2015-09-30T08:38:38.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.189.30.63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8f-af68-4de5-abee-4663950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:39.000Z",
            "modified": "2015-09-30T08:38:39.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.193.108.217']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8f-2e14-4ae9-b889-4f56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:39.000Z",
            "modified": "2015-09-30T08:38:39.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.41.237.196']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f8f-86d4-4e6a-8a09-4488950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:39.000Z",
            "modified": "2015-09-30T08:38:39.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.49.133.62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f90-1214-4004-b7a6-4a9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:40.000Z",
            "modified": "2015-09-30T08:38:40.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.49.135.162']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f90-9d94-47e9-b1a5-4a02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:40.000Z",
            "modified": "2015-09-30T08:38:40.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.49.170.129']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f90-552c-4360-816f-48e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:40.000Z",
            "modified": "2015-09-30T08:38:40.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.61.174.123']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f91-5f88-42ab-8d71-4b8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:41.000Z",
            "modified": "2015-09-30T08:38:41.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.61.182.13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f91-8720-40ff-8be5-4c71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:41.000Z",
            "modified": "2015-09-30T08:38:41.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.9.185.214']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f91-c674-430f-a450-4d39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:41.000Z",
            "modified": "2015-09-30T08:38:41.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '176.99.238.171']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f92-5a44-45bd-879a-4197950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:42.000Z",
            "modified": "2015-09-30T08:38:42.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.158.139.156']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f92-673c-47f6-855a-4d6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:42.000Z",
            "modified": "2015-09-30T08:38:42.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '177.216.158.96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f92-3c60-428b-b362-488f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:42.000Z",
            "modified": "2015-09-30T08:38:42.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.118.159.7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f93-c704-49b2-8450-4d1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:43.000Z",
            "modified": "2015-09-30T08:38:43.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.174.148.26']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f93-6028-4ea6-8af5-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:43.000Z",
            "modified": "2015-09-30T08:38:43.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.184.180.55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f94-7d78-455f-9771-4b29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:44.000Z",
            "modified": "2015-09-30T08:38:44.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.184.192.93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f94-8d78-411f-b09d-4bca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:44.000Z",
            "modified": "2015-09-30T08:38:44.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.186.38.72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f94-adec-449a-be82-43d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:44.000Z",
            "modified": "2015-09-30T08:38:44.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.211.104.191']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f95-1810-411e-ae27-471c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:45.000Z",
            "modified": "2015-09-30T08:38:45.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.211.171.170']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f95-730c-4511-9368-4e22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:45.000Z",
            "modified": "2015-09-30T08:38:45.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.220.208.35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f95-2e5c-467a-95b3-467d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:45.000Z",
            "modified": "2015-09-30T08:38:45.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.254.28.192']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f96-cd80-402b-acac-438c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:46.000Z",
            "modified": "2015-09-30T08:38:46.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '178.44.249.167']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f96-8284-4366-b1bb-4930950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:46.000Z",
            "modified": "2015-09-30T08:38:46.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.10.181.36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f96-9bd0-4857-af7a-4568950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:46.000Z",
            "modified": "2015-09-30T08:38:46.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.17.1.195']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f97-d4a8-4f41-867f-4b5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:47.000Z",
            "modified": "2015-09-30T08:38:47.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.17.1.239']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f97-e194-45e7-a976-420f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:47.000Z",
            "modified": "2015-09-30T08:38:47.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.29.166.249']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f97-8e34-4621-9ce4-4aea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:47.000Z",
            "modified": "2015-09-30T08:38:47.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.56.80.173']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f98-cd20-4e2d-80f8-4ab1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:48.000Z",
            "modified": "2015-09-30T08:38:48.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.71.64.39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f98-9924-4271-bf32-4e33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:48.000Z",
            "modified": "2015-09-30T08:38:48.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '185.82.203.99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f98-3148-411c-bbd7-49af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:48.000Z",
            "modified": "2015-09-30T08:38:48.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '187.190.246.157']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f99-abc4-4c60-b8fe-464c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:49.000Z",
            "modified": "2015-09-30T08:38:49.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.108.88.155']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f99-add0-416a-9518-40bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:49.000Z",
            "modified": "2015-09-30T08:38:49.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.116.134.231']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9a-5ef4-4f79-ab37-4f0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:50.000Z",
            "modified": "2015-09-30T08:38:50.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.134.69.129']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9a-90ac-4c12-80d4-4ce0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:50.000Z",
            "modified": "2015-09-30T08:38:50.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.165.142.163']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9a-7f74-4a65-b5ae-4be4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:50.000Z",
            "modified": "2015-09-30T08:38:50.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.165.50.175']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9b-94b4-4468-87b2-47a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:51.000Z",
            "modified": "2015-09-30T08:38:51.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.195.71.53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9b-2130-43e3-bb3f-4565950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:51.000Z",
            "modified": "2015-09-30T08:38:51.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.213.25.49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9b-01cc-4868-9220-453d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:51.000Z",
            "modified": "2015-09-30T08:38:51.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.218.54.63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9c-65e0-4256-9443-49b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:52.000Z",
            "modified": "2015-09-30T08:38:52.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.227.234.180']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9c-1180-4be4-acb1-4a2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:52.000Z",
            "modified": "2015-09-30T08:38:52.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.64.170.222']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9c-0674-4610-8bbb-41b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:52.000Z",
            "modified": "2015-09-30T08:38:52.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '188.68.157.202']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9d-3fdc-41cb-955a-4588950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:53.000Z",
            "modified": "2015-09-30T08:38:53.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '189.251.30.219']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9d-9c80-4b20-a997-405d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:53.000Z",
            "modified": "2015-09-30T08:38:53.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '190.129.206.254']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9d-1004-45d7-8905-4d96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:53.000Z",
            "modified": "2015-09-30T08:38:53.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '190.87.169.103']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9e-974c-4692-ac4b-4771950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:54.000Z",
            "modified": "2015-09-30T08:38:54.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '191.233.97.132']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9e-d988-4dbf-8598-4759950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:54.000Z",
            "modified": "2015-09-30T08:38:54.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '191.33.94.222']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9e-34a0-423c-9b7d-4474950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:54.000Z",
            "modified": "2015-09-30T08:38:54.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.121.66.77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9f-ff64-4d1c-893b-437b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:55.000Z",
            "modified": "2015-09-30T08:38:55.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.169.234.45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9f9f-c1ac-4d10-ab15-4c18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:55.000Z",
            "modified": "2015-09-30T08:38:55.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.99.198.158']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fa0-732c-4c60-bc82-4259950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:56.000Z",
            "modified": "2015-09-30T08:38:56.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '192.99.64.250']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fa0-dfd8-41f2-a948-4f3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:56.000Z",
            "modified": "2015-09-30T08:38:56.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.0.200.143']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fa0-9fc8-4f97-8824-4360950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:56.000Z",
            "modified": "2015-09-30T08:38:56.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.0.200.187']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fa1-9fb8-43ab-9dd1-47f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:57.000Z",
            "modified": "2015-09-30T08:38:57.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '193.53.83.233']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fa1-5e2c-4955-bcce-422c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:57.000Z",
            "modified": "2015-09-30T08:38:57.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '194.63.142.172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fa1-65ac-47e9-b274-480c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:57.000Z",
            "modified": "2015-09-30T08:38:57.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '194.8.23.227']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fa2-71a8-4805-a8df-46eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:58.000Z",
            "modified": "2015-09-30T08:38:58.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '195.62.52.250']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fa2-c388-4936-8436-4309950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:58.000Z",
            "modified": "2015-09-30T08:38:58.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '195.62.52.26']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fa2-5fa0-4a8b-a09e-4335950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:38:58.000Z",
            "modified": "2015-09-30T08:38:58.000Z",
            "description": "AppendixC_Live Dark Comet Clients.csv",
            "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '197.7.81.58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:38:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"ip-dst\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fee-85e4-44bd-8eaa-4abc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:14.000Z",
            "modified": "2015-09-30T08:40:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0000875fa08e6294436a83694e083e8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fef-9e64-4935-9431-4942950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:15.000Z",
            "modified": "2015-09-30T08:40:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00042e4a6da8ecc3ba33250c2bafb94f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fef-cc10-45ee-826f-4a17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:15.000Z",
            "modified": "2015-09-30T08:40:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0011baf13e0e200347f2ffef0b4e2d32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff0-6b58-48fe-adb9-483e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:16.000Z",
            "modified": "2015-09-30T08:40:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00165d1fea12608b251c36c34040f3ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff0-ce98-4d08-94ef-4ef4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:16.000Z",
            "modified": "2015-09-30T08:40:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '001c75e16511be78bd3e66b05921a790']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff0-d160-4fe9-96e4-413b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:16.000Z",
            "modified": "2015-09-30T08:40:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '001cc4911d49e1c0f40fe0affaa1041f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff1-ad18-4e59-8caf-4115950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:17.000Z",
            "modified": "2015-09-30T08:40:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00214149b276159d241bba961dd88817']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff1-92f4-416c-81ed-47fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:17.000Z",
            "modified": "2015-09-30T08:40:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00260ac9f02bbeafa934ae95fd04e1ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff2-d250-4957-b0cd-4512950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:18.000Z",
            "modified": "2015-09-30T08:40:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '002e07444674d98b05192db1bdc89d64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff2-6118-4efa-81bb-48b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:18.000Z",
            "modified": "2015-09-30T08:40:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '002e1371d5e6db1d847c323eea08f8eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff2-4f48-469a-b3fe-4b75950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:18.000Z",
            "modified": "2015-09-30T08:40:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '003bd75cf15ef3afd94ef906503ffd7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff3-038c-4fe6-aad4-4173950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:19.000Z",
            "modified": "2015-09-30T08:40:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0056dc7fd5039fe3093c1b1b967ba0e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff3-5908-43ec-95ed-4a32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:19.000Z",
            "modified": "2015-09-30T08:40:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '005cfff1840a0281479ad45277739217']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff3-958c-4032-8325-4bcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:19.000Z",
            "modified": "2015-09-30T08:40:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0066c6e2ca6c0b2fe1afdd28ca7f2177']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff4-c908-4356-8122-4a39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:20.000Z",
            "modified": "2015-09-30T08:40:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '006a78b9379ee91870ce45d6b7dfa9ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff4-9780-49c1-bb90-472e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:20.000Z",
            "modified": "2015-09-30T08:40:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '006f54ee87e90fb00bbefc1e1dcf7190']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff4-d25c-474f-916b-4134950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:20.000Z",
            "modified": "2015-09-30T08:40:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '007084f153e5272e9283a343ee4bb256']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff5-f6e4-4b04-a3af-4408950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:21.000Z",
            "modified": "2015-09-30T08:40:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00758890f47fd6ff81b25db2cdaaefb0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff5-dc9c-4147-b007-4a71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:21.000Z",
            "modified": "2015-09-30T08:40:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00763a6f6270980f704acc55a54ecdd5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff5-085c-4d8d-a925-4810950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:21.000Z",
            "modified": "2015-09-30T08:40:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '007a86e82960d17aa21fb339cd57b59c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff6-8f08-40a0-b85b-49bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:22.000Z",
            "modified": "2015-09-30T08:40:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0089a6b44cf349ebeb6ae24e4aecce92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff6-52b4-4668-9ff6-40f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:22.000Z",
            "modified": "2015-09-30T08:40:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '008bf838ac82b4e2adebe16e94e3c615']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff7-5558-4e3f-9e2f-4a77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:23.000Z",
            "modified": "2015-09-30T08:40:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '008f537696190e14126a9353425954e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff7-c520-4ff2-8e41-4988950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:23.000Z",
            "modified": "2015-09-30T08:40:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00a36d295770705cb28d218a44dac18b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff7-d240-4baa-9be3-4354950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:23.000Z",
            "modified": "2015-09-30T08:40:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00a71af4255736fe9d4cc33bac8132cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff8-b2c4-4f1f-920f-4807950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:24.000Z",
            "modified": "2015-09-30T08:40:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00af39b462c2f465725866dc7cea198e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff8-ed8c-4fd1-8ec2-4494950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:24.000Z",
            "modified": "2015-09-30T08:40:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00b53279725d357d9ba7dc466e3eb915']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff8-9fc4-4858-b3b7-4905950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:24.000Z",
            "modified": "2015-09-30T08:40:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00b94aec1dcadd52c7232f5783575083']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff9-e308-4ab4-a4e9-473b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:25.000Z",
            "modified": "2015-09-30T08:40:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00bba76e0a5d347b7d288dcaa43fd854']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff9-f2e8-4be5-9022-49fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:25.000Z",
            "modified": "2015-09-30T08:40:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00d7f67ed122fe9e4da0d38b137ce1ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ff9-92cc-4d8c-8dd9-44be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:25.000Z",
            "modified": "2015-09-30T08:40:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00e5c245e863f92b16476d28c99f5e7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffa-231c-4f46-8d16-4877950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:26.000Z",
            "modified": "2015-09-30T08:40:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '00f74c904e16000f4780cfb6545c1b44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffa-b928-4f09-a47e-402b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:26.000Z",
            "modified": "2015-09-30T08:40:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0101c892d6c7678ffb313c3ebeda0cd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffa-1c00-4b8c-a517-4dc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:26.000Z",
            "modified": "2015-09-30T08:40:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '010ccbc06bcdff93b073dd8091072f9e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffb-04b4-4d74-a78f-44f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:27.000Z",
            "modified": "2015-09-30T08:40:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '011107487b3a2b02086d91b918f136db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffb-ee60-4783-b6a4-4d19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:27.000Z",
            "modified": "2015-09-30T08:40:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01112a0eeebe0d20a9a75fa97c96588e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffb-1324-4aac-aa90-4b17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:27.000Z",
            "modified": "2015-09-30T08:40:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '011de387d0fa15e918e928f8a49cfdde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffc-c7cc-42e2-9fcb-49c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:28.000Z",
            "modified": "2015-09-30T08:40:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '012878f4948a71756e1c053a3e3658e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffc-dcf0-4a80-bf15-4959950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:28.000Z",
            "modified": "2015-09-30T08:40:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '013889384b5a7037ff28465f8f9eedf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffc-ca94-43d6-8554-4dc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:28.000Z",
            "modified": "2015-09-30T08:40:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '014d520022b34ca6bf1b2bcddad0e1ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffd-6894-4be5-8d69-4594950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:29.000Z",
            "modified": "2015-09-30T08:40:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '014ea65e97e19856a1e99664b01691eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffd-451c-46d4-b78b-4e39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:29.000Z",
            "modified": "2015-09-30T08:40:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01518a2b80c7b953d95f5f209201104c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffd-f12c-4539-b119-45da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:29.000Z",
            "modified": "2015-09-30T08:40:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01518f007494a62d95a65fb004fbb584']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffe-fde4-4ff2-94ff-4fc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:30.000Z",
            "modified": "2015-09-30T08:40:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01672a7e0d3f2e9b5d96be9981458757']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9ffe-1f88-4886-888f-4bf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:30.000Z",
            "modified": "2015-09-30T08:40:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0171ae90a21e32b137adbdf3a58cea25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fff-9788-41a7-a9f2-4379950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:31.000Z",
            "modified": "2015-09-30T08:40:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '017d9a9e557ce49bdcace57bbd89b8ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fff-0a04-4533-8cfd-4588950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:31.000Z",
            "modified": "2015-09-30T08:40:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '017deecbb141e4c04f6ab839b596e199']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560b9fff-f21c-4dc2-b633-4548950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:31.000Z",
            "modified": "2015-09-30T08:40:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01824e020c854826bedd9ebb09f7a5db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba000-7c0c-44cb-a345-4818950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:32.000Z",
            "modified": "2015-09-30T08:40:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '018fa17a1752a7fe7e6a41df1c9b935e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba000-eff8-4d03-a105-46d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:32.000Z",
            "modified": "2015-09-30T08:40:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0191314d384d70304e62fc18c0d086a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba000-6284-4a0a-9378-4aae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:32.000Z",
            "modified": "2015-09-30T08:40:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01998586ae27e0e04ca5c3301de66f66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba001-5e44-419c-ada7-46e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:33.000Z",
            "modified": "2015-09-30T08:40:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '019b469a87e59a2fc58c2af53307d48d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba001-3f08-4f36-9d33-4980950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:33.000Z",
            "modified": "2015-09-30T08:40:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01b30a5d3ab696c341d8eb27701905d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba001-13a4-44c1-b27d-4429950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:33.000Z",
            "modified": "2015-09-30T08:40:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01c5449f1ff2ea9f44165a1d436a9be5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba002-2ed4-4d67-8113-490d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:34.000Z",
            "modified": "2015-09-30T08:40:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01c6e6b40285890ac99fc0065ab6022a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba002-70ec-4212-8e31-411d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:34.000Z",
            "modified": "2015-09-30T08:40:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01cba24c43175b8e108b1f9828b7640b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba002-dd00-42fa-bbae-4bac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:34.000Z",
            "modified": "2015-09-30T08:40:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01ce79a822a60dd11b835a18aa400c01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba003-2fd0-4d60-803d-4ac6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:35.000Z",
            "modified": "2015-09-30T08:40:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01d1ddad2ff5b2d9a1ad8ef01c73c500']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba003-17bc-411c-84ff-4a9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:35.000Z",
            "modified": "2015-09-30T08:40:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01e14644b02bf305a60d54cd1a9470a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba004-e948-4cd6-8051-4d47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:36.000Z",
            "modified": "2015-09-30T08:40:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01f21242441315cc7843be46659f9488']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba004-1720-4340-8035-42df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:36.000Z",
            "modified": "2015-09-30T08:40:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01f6adbe1f0ec5d4d29235ca83472ee7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba004-86e4-41eb-9dd1-4212950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:36.000Z",
            "modified": "2015-09-30T08:40:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '01fd19e3cb4b754d35b23420481967b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba005-2dc0-4149-909b-43af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:37.000Z",
            "modified": "2015-09-30T08:40:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0203cdaf4c7490bb2ca2ee1517b33180']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba005-f804-4e88-af38-4f88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:37.000Z",
            "modified": "2015-09-30T08:40:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0227c27cc237d9ebbf7a549b620274f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba005-b5ec-408e-8068-4a09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:37.000Z",
            "modified": "2015-09-30T08:40:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0235ef6bb96ec04f38c46df5d8684446']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba006-bec8-47e4-8c1e-4453950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:38.000Z",
            "modified": "2015-09-30T08:40:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '024f3666ac2fb82e1735d2af0392e878']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba006-2364-4ec1-8c78-47a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:38.000Z",
            "modified": "2015-09-30T08:40:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0250a60d696889ef894f23737a0b8cd1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba007-7618-4778-8a43-4919950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:39.000Z",
            "modified": "2015-09-30T08:40:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0261a34ca8a26eb5f653e11ff82cd6dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba007-8d64-4bcb-a1a8-49b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:39.000Z",
            "modified": "2015-09-30T08:40:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '027060d73ee95c04939a9483b194e646']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba007-aca4-4da8-8d19-4738950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:39.000Z",
            "modified": "2015-09-30T08:40:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02784921deaad0e5905539583a7e5250']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba008-4784-489f-84aa-458c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:40.000Z",
            "modified": "2015-09-30T08:40:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0288793781361420addc35248606cd4d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba008-3d68-4df4-8d4e-4595950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:40.000Z",
            "modified": "2015-09-30T08:40:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0293ef6e6c74a76c59c2b6560344f840']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba008-c3c4-4d6c-983f-4551950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:40.000Z",
            "modified": "2015-09-30T08:40:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02aec9e5454e7246526ffc3c3fec12ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba009-f424-4399-99c9-4d47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:41.000Z",
            "modified": "2015-09-30T08:40:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02c373ab200bcd13d75d6f8e4a8d2523']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba009-6eb4-46b6-83e2-455b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:41.000Z",
            "modified": "2015-09-30T08:40:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02c8d0e1a15bd950422fa25c692b5b7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba009-8ac0-4e5b-ac8b-443d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:41.000Z",
            "modified": "2015-09-30T08:40:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02e1639593d78e81424cf4addb15eb44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00a-b410-46ca-a423-4137950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:42.000Z",
            "modified": "2015-09-30T08:40:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02e860e8f03aecbc02e61bcf06286aeb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00a-37b8-4e98-987e-43cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:42.000Z",
            "modified": "2015-09-30T08:40:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02f240575737df0b6a3cade7734eb258']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00a-2940-485f-8370-4471950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:42.000Z",
            "modified": "2015-09-30T08:40:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02f54d8da29f8bb79844bbdc882c1e93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00b-4890-49e1-b0e6-4d75950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:43.000Z",
            "modified": "2015-09-30T08:40:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02fc2b7128eaf301b7d9880a3a8803f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00b-ad14-4fc2-b2f8-4193950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:43.000Z",
            "modified": "2015-09-30T08:40:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '02ffda03734d2101e57103b07daacfa1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00b-8de4-4096-b656-4ad5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:43.000Z",
            "modified": "2015-09-30T08:40:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0306bd7a2423aed567bd188d86901a35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00c-c5b0-461b-8f7f-4e27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:44.000Z",
            "modified": "2015-09-30T08:40:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03102d5611443b560e682ffe2b0342e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00c-aaac-4710-9212-4147950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:44.000Z",
            "modified": "2015-09-30T08:40:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0312676d112cf1cf32859a42e9ed28d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00d-8538-44db-b997-4486950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:45.000Z",
            "modified": "2015-09-30T08:40:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0319eca6ec81cd18fa5d6325e3656e44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00d-20e0-4deb-ada7-45cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:45.000Z",
            "modified": "2015-09-30T08:40:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '031bf8a057686d5ea3b92c0be315b947']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00d-9d84-4371-a7d4-4816950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:45.000Z",
            "modified": "2015-09-30T08:40:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '031d0e8f85a74a3eba5c6c97e28d13b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00e-a218-4cb6-9b6f-4b27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:46.000Z",
            "modified": "2015-09-30T08:40:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '031da919af4364fa407585cf7e547b9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00e-720c-4ec5-87cf-42d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:46.000Z",
            "modified": "2015-09-30T08:40:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '032234517d6f7f5bad7cb691a01a8c35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00e-5230-426d-a498-4f30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:46.000Z",
            "modified": "2015-09-30T08:40:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03362a4dff1a54ef515b26ed79cf67fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00f-8eac-4a42-84bc-4006950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:47.000Z",
            "modified": "2015-09-30T08:40:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0336d0633181f9dfcb93d4b7aec4c1a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00f-9050-41cd-9f29-4e7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:47.000Z",
            "modified": "2015-09-30T08:40:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '033e33088fac746f736e077179378b5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba00f-9234-44a2-ae52-45f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:47.000Z",
            "modified": "2015-09-30T08:40:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '034b8c2862a5cf997e655ade36a781cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba010-13a8-438a-b22c-4dc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:48.000Z",
            "modified": "2015-09-30T08:40:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0356dbf97cc88122932f6ab7f09abbdb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba010-12ac-41b9-9003-4f44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:48.000Z",
            "modified": "2015-09-30T08:40:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0359edc4a92e04efd867004b33a1b1f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba010-8918-487c-9e21-4ad9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:48.000Z",
            "modified": "2015-09-30T08:40:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '035c7822d83ac4a0ea891a6271e5da10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba011-3c8c-414a-915f-4b53950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:49.000Z",
            "modified": "2015-09-30T08:40:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '036370871395886c24b4b74c87613c7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba011-7200-44eb-8c03-4ee6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:49.000Z",
            "modified": "2015-09-30T08:40:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '036dd0746a8b7f838159de68b6988824']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba011-f810-47ea-8a0a-4ed2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:49.000Z",
            "modified": "2015-09-30T08:40:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '037c231b3a263992fcdd5b58b34127e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba012-4b28-4807-bc48-4839950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:50.000Z",
            "modified": "2015-09-30T08:40:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '037ed8ab2a4cd555983d7315b393489b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba012-908c-448f-bd92-4236950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:50.000Z",
            "modified": "2015-09-30T08:40:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '037f39c664a9e8772483a1b26d975879']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba012-5a60-406e-a747-4f46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:50.000Z",
            "modified": "2015-09-30T08:40:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0388111dc6cf5835a6f2c654b1dcbb4d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba013-19ec-4fb4-9c00-4ad4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:51.000Z",
            "modified": "2015-09-30T08:40:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '038b55782cf88cfeeeed81535f577a3c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba013-f5b8-4749-9213-4e22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:51.000Z",
            "modified": "2015-09-30T08:40:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03a04449e2c03bfdb27955a6d4b67e0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba014-8b0c-4595-b7cc-499e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:52.000Z",
            "modified": "2015-09-30T08:40:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03a90bdf3c81fb071a2d064798ea68d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba014-e928-4f63-a642-4d9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:52.000Z",
            "modified": "2015-09-30T08:40:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03b4e960ca5ce6cff15ee3babb08cc6b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba014-884c-47a1-9818-4c64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:52.000Z",
            "modified": "2015-09-30T08:40:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03c0cf0e2d26477f5aeea44dbce9b9ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba015-f2c4-4eaa-aa96-4f0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:53.000Z",
            "modified": "2015-09-30T08:40:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03c3322d1f8af283f753d9e10f93aa98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba015-814c-41e6-b9c7-4260950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:53.000Z",
            "modified": "2015-09-30T08:40:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03d13b01c3a4ce5902e61b49394f7025']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba015-d9b8-4d5f-9da5-4188950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:53.000Z",
            "modified": "2015-09-30T08:40:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03d5ec5c916d3ba5a855e71da0c177c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba016-a43c-4ba7-a9a2-4fa0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:54.000Z",
            "modified": "2015-09-30T08:40:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03db7f724aa5fa4483e82343702b99cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba016-0cd4-4661-a390-4afa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:54.000Z",
            "modified": "2015-09-30T08:40:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03dd1fbd34fe5a46d83b5489d93f5a5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba016-1b9c-49d4-b429-4064950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:54.000Z",
            "modified": "2015-09-30T08:40:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03dff22a618bfd87f604d9a45aab168d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba017-d0c8-4da3-83ca-4671950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:55.000Z",
            "modified": "2015-09-30T08:40:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03ed5be0144534a86a483427f7f9dc7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba017-64d0-4eb5-9223-4c39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:55.000Z",
            "modified": "2015-09-30T08:40:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03f4045b4059302b32802ac387a67d55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba017-38f4-418d-a7eb-475a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:55.000Z",
            "modified": "2015-09-30T08:40:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03f93fe127056670cbf4297ff9836993']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba018-43f8-4d40-85cf-4da3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:56.000Z",
            "modified": "2015-09-30T08:40:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '03fd869f67ab7e88714e23e9560431a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba018-0aec-44d5-a5ee-4269950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:56.000Z",
            "modified": "2015-09-30T08:40:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '040dfcb189ed529e04f9db1424a12082']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba018-3720-4a24-91d2-4e19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:56.000Z",
            "modified": "2015-09-30T08:40:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '041417b61667e4f499c3c198083d76b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba019-306c-4e78-8e88-4483950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:57.000Z",
            "modified": "2015-09-30T08:40:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '041b49125f00b8075aa9f005e3381822']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba019-b6bc-4c00-bc39-4470950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:57.000Z",
            "modified": "2015-09-30T08:40:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '042157ae7ba393ca99487db679a433a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01a-bcf4-422e-97f0-40d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:58.000Z",
            "modified": "2015-09-30T08:40:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '042d09fb4591b3854bc4546c68b0bc91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01a-5f08-4a1a-8469-4182950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:58.000Z",
            "modified": "2015-09-30T08:40:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0432f9b35219574dc52dc0d1f80f1317']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01a-ca94-4343-a67c-4965950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:58.000Z",
            "modified": "2015-09-30T08:40:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0433af60395411433b7d71d3b6d888ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01b-8c44-4ee6-84cb-442c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:59.000Z",
            "modified": "2015-09-30T08:40:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04475a481ef3af894f43cf3e1818d4ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01b-bf44-4624-abac-456b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:59.000Z",
            "modified": "2015-09-30T08:40:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '046fd6892546ed78d57f444bb167174d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01b-b5f4-4f5a-befb-4edd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:40:59.000Z",
            "modified": "2015-09-30T08:40:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04747d397a58f16617e02ae0aae654f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:40:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01c-95b8-489f-89bd-4802950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:00.000Z",
            "modified": "2015-09-30T08:41:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0499b577a1719e61914cd1720864506e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01c-8ce0-4ba9-b648-4ff5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:00.000Z",
            "modified": "2015-09-30T08:41:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '049f45af73f0a7e2af7c0de3ffa6c057']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01c-1d48-4aa2-a968-42a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:00.000Z",
            "modified": "2015-09-30T08:41:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04b563241dd7ca8b4d521dd89fba4e32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01d-1e88-40af-b0ab-4568950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:01.000Z",
            "modified": "2015-09-30T08:41:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04baef8b1db3ea9e18c880e1e2fe3954']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01d-96a0-40db-96ce-438f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:01.000Z",
            "modified": "2015-09-30T08:41:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04d1d624a21c4fff269ade0f37e4b143']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01d-a5e0-467a-8e67-4160950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:01.000Z",
            "modified": "2015-09-30T08:41:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04deb73636f1564f2d9d3c5394d48822']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01e-23b8-4a8e-a7a2-47ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:02.000Z",
            "modified": "2015-09-30T08:41:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04e03e25bc6104c484751ef7670eed21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01e-8d14-489e-8205-46f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:02.000Z",
            "modified": "2015-09-30T08:41:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04ec8fea22fc59b9fa8ced54e24e73c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01e-b3cc-4b38-84bd-44c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:02.000Z",
            "modified": "2015-09-30T08:41:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04f1074c403311b523661fe52d82c0c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01f-29dc-45a7-8182-49fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:03.000Z",
            "modified": "2015-09-30T08:41:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '04f595161bfe5c3ac14085a643c2bb31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01f-d794-46ef-8b4a-47f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:03.000Z",
            "modified": "2015-09-30T08:41:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0506bcf97a6e74d6f1573ed3d4df926f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba01f-0c98-4a8b-ab1a-44d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:03.000Z",
            "modified": "2015-09-30T08:41:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0508d6cc10a19edb3b8e842e5c7a5d6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba020-695c-4177-b5d9-4343950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:04.000Z",
            "modified": "2015-09-30T08:41:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0509357d1eaf2de5e36bc22ce87c2d52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba020-36d4-40cf-95f9-4d84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:04.000Z",
            "modified": "2015-09-30T08:41:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '050a55d14d27a5e212b4686bdd4bb64a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba021-e400-4f47-b34f-42bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:05.000Z",
            "modified": "2015-09-30T08:41:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '051e280cc3d9844ddd73be4e6891e2dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba021-41d4-4476-b23f-4c00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:05.000Z",
            "modified": "2015-09-30T08:41:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05267a3f85f3fe98dfaa34398b3d0fcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba021-8258-4976-99f2-47f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:05.000Z",
            "modified": "2015-09-30T08:41:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '052ae9b1c92dcefdc11d20ef0ec8af0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba022-01c4-466c-bd07-41bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:06.000Z",
            "modified": "2015-09-30T08:41:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '052c98a6b23b623aebdfd9eca8a0081b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba022-99a0-4212-b35f-4dc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:06.000Z",
            "modified": "2015-09-30T08:41:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '052de419a41559f6430f81fdeaf018d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba022-2f28-4b23-8c47-4c1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:06.000Z",
            "modified": "2015-09-30T08:41:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05304acc27a4bd0ba4867089d58d97f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba023-c0e0-4adc-9635-4dcb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:07.000Z",
            "modified": "2015-09-30T08:41:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '054026636c4132b61da1fd0275a16ee0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba023-d9a4-41bb-8ba3-4ceb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:07.000Z",
            "modified": "2015-09-30T08:41:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '054bc2aa886e0572c985d49397f0d8d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba023-45a8-4a48-be75-4539950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:07.000Z",
            "modified": "2015-09-30T08:41:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0552402f456faaa1a7413dbefeef6b53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba024-2970-44e5-aed5-44c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:08.000Z",
            "modified": "2015-09-30T08:41:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0552657ae959d67ba9ca5a8d9db4dde4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba024-4ba0-4720-a675-4364950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:08.000Z",
            "modified": "2015-09-30T08:41:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '055df03908ffeef422658452dd69b416']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba024-5a7c-4a2b-b9e4-4939950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:08.000Z",
            "modified": "2015-09-30T08:41:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05608ee9a1e8e84ea9f9d2f0ddc11ebc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba025-1b54-478c-8d61-4e70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:09.000Z",
            "modified": "2015-09-30T08:41:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0574132d779425aa46d965d7513fa532']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba025-bd74-4838-b0a7-492e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:09.000Z",
            "modified": "2015-09-30T08:41:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '057646aca624e545d7f4b227c543cc19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba025-0f6c-4a23-91f7-4b34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:09.000Z",
            "modified": "2015-09-30T08:41:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '058f4e7f6fd72d3e1348938a6bcca984']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba026-79dc-4f0d-a786-43fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:10.000Z",
            "modified": "2015-09-30T08:41:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '059a502b4e4e4e4eebce1b7a5b67d3cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba026-5300-4d68-ab83-4541950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:10.000Z",
            "modified": "2015-09-30T08:41:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '059f1b3b294bbad5d80295bb1b9f5563']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba026-1848-4ad2-9fcf-4f5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:10.000Z",
            "modified": "2015-09-30T08:41:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '059f59f2d4733f59930f58ee4a2a0781']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba027-55e0-4d52-9f37-48f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:11.000Z",
            "modified": "2015-09-30T08:41:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05a416ae495223f321aa4801cd1315f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba027-cc78-4106-969f-4aec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:11.000Z",
            "modified": "2015-09-30T08:41:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05b31f6c8cec2982ea891536e9ab1fa0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba028-9bcc-4065-80e3-44ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:12.000Z",
            "modified": "2015-09-30T08:41:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05be0dd64d27d73dd4c3609fd7dbeb14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba028-2f20-4b74-843e-4b00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:12.000Z",
            "modified": "2015-09-30T08:41:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05c9db20fa377cf2158508840a6c87a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba028-77d4-456f-a96c-4cc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:12.000Z",
            "modified": "2015-09-30T08:41:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05cb1f049bae272dc821f509ef1756f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba029-4878-4e24-b769-4795950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:13.000Z",
            "modified": "2015-09-30T08:41:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05cd5f2b94375130f13034939a810199']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba029-fa1c-4649-a3f4-4bab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:13.000Z",
            "modified": "2015-09-30T08:41:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05d1f3dde050b4cfee0bff41531ec411']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba029-8320-4439-8603-4c11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:13.000Z",
            "modified": "2015-09-30T08:41:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05e3c69ae03989320fe3241c75101ac7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02a-7810-46e5-937a-4e6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:14.000Z",
            "modified": "2015-09-30T08:41:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '05e6ea473181799e76a7ba3a29471b7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02a-1a0c-4ced-a778-432b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:14.000Z",
            "modified": "2015-09-30T08:41:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0601e48a59b21a0164390320bda35b3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02a-054c-480b-a34d-4a4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:14.000Z",
            "modified": "2015-09-30T08:41:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0605f771df999854b33d42e5a7930869']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02b-1f88-48b0-8b88-48ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:15.000Z",
            "modified": "2015-09-30T08:41:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0608ed94673f71d47a9084c593e6f523']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02b-f174-4e41-9d19-48a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:15.000Z",
            "modified": "2015-09-30T08:41:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0618a831f5af9a7da215d3053bbea004']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02b-a85c-4f15-9583-4d50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:15.000Z",
            "modified": "2015-09-30T08:41:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0620850ef6c2fb455ac38491b3050bbd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02c-a91c-4bec-ad0c-4e34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:16.000Z",
            "modified": "2015-09-30T08:41:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0625ce7cc727aa575b0c915279a5771c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02c-4a58-4904-849a-45d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:16.000Z",
            "modified": "2015-09-30T08:41:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0627b29daa0f875fb21f7695886ddb13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02c-b488-4694-9d8d-495b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:16.000Z",
            "modified": "2015-09-30T08:41:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0644bae3db976a88992bc21f6704d3ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02d-6f6c-4ddb-b33f-4fbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:17.000Z",
            "modified": "2015-09-30T08:41:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '064f5cf33d8f33442a65360e44524758']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02d-b40c-4af3-a118-46d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:17.000Z",
            "modified": "2015-09-30T08:41:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '066783887d29891c064ed4be7b737f06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02e-d124-42ee-97ab-40fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:18.000Z",
            "modified": "2015-09-30T08:41:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0669362ff1e2271a29cdf920559955cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02e-3578-4d08-a1d4-410c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:18.000Z",
            "modified": "2015-09-30T08:41:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '066a90e735478b89c42c007af86f64d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02e-5ec0-4c6d-8ce9-4598950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:18.000Z",
            "modified": "2015-09-30T08:41:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '066fd7aa2793d166d387f9efa4f7ac9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02f-f7b8-4d72-94da-4832950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:19.000Z",
            "modified": "2015-09-30T08:41:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0670300a272a1040bd0f3b3ed3eed6fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02f-19dc-4fe9-bb48-4ad7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:19.000Z",
            "modified": "2015-09-30T08:41:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '067c249ccbbb09202f7aadcb610fd03b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba02f-43d8-465a-a04f-4420950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:19.000Z",
            "modified": "2015-09-30T08:41:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '068647ff9c2e22669bf1965c7abdc471']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba030-32a0-467a-99b8-4cf6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:20.000Z",
            "modified": "2015-09-30T08:41:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06952ffb3ed2b940621eef9f8a3ff5a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba030-ff88-4b7d-a349-400a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:20.000Z",
            "modified": "2015-09-30T08:41:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06abc1ffda2ddff3635a2dd08ea0a4cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba030-1e14-474a-8e80-4667950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:20.000Z",
            "modified": "2015-09-30T08:41:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06c79380f549c94af7dce6e6cc2f1127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba031-1448-4b65-8442-4e3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:21.000Z",
            "modified": "2015-09-30T08:41:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06c83efc0f807d7198542b2712e266e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba031-ebd4-40a1-8c3f-4ede950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:21.000Z",
            "modified": "2015-09-30T08:41:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06d19bd3cb161671865eaa9b9bf899d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba031-371c-4b91-8105-4772950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:21.000Z",
            "modified": "2015-09-30T08:41:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06dcdd37f97d0f4810787903dc754854']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba032-c2b8-4de3-bf37-45ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:22.000Z",
            "modified": "2015-09-30T08:41:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06dffd5c6c686e134ef571ab2658f32e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba032-2164-4bfa-92b3-4cf6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:22.000Z",
            "modified": "2015-09-30T08:41:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06e09ec5fbf7d1c2a0363f512c69bba9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba032-6690-4ae6-9a3b-4962950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:22.000Z",
            "modified": "2015-09-30T08:41:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06e6b045698b1b00d43d89d6bbb33142']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba033-100c-4eb2-8135-4078950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:23.000Z",
            "modified": "2015-09-30T08:41:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06e9c03c5094405f1dcbd3048c49bae0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba033-2bf0-41d9-b69f-4db7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:23.000Z",
            "modified": "2015-09-30T08:41:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06f10e9e0048f46fed9ca11c71d336d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba033-bd24-4585-97ff-45c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:23.000Z",
            "modified": "2015-09-30T08:41:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06f6cb5d2f738d91683b1fe6eaa89907']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba034-a824-4784-8b79-4b37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:24.000Z",
            "modified": "2015-09-30T08:41:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06f8c92cde79a590b132fa58572a07d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba034-f340-48e4-951d-4d54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:24.000Z",
            "modified": "2015-09-30T08:41:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '06ff343e633b97411562efb5c12c4d96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba035-a6ec-4275-ad6e-4f37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:25.000Z",
            "modified": "2015-09-30T08:41:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0718be7f9363f5922b3f727e5b054f7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba035-23c0-4591-97e3-49d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:25.000Z",
            "modified": "2015-09-30T08:41:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07238d3459a12ad2cdd8cc323026896f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba035-9524-4fb3-8f7e-46a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:25.000Z",
            "modified": "2015-09-30T08:41:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0728b4bf63563bb7d39055317196dae0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba036-e83c-4d96-a25a-4611950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:26.000Z",
            "modified": "2015-09-30T08:41:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '072b1d487ef595517079f1362241a0de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba036-a9e8-42aa-926b-451f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:26.000Z",
            "modified": "2015-09-30T08:41:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0737fb3e674629e983b6da18f07e39e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba036-4f3c-46fb-98fa-44a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:26.000Z",
            "modified": "2015-09-30T08:41:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0748530a5002d0c2dde94c98771c7f35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba037-151c-4d6f-aefe-4a2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:27.000Z",
            "modified": "2015-09-30T08:41:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '074add03f746bb8fcdc51106321fde6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba037-ef48-4209-82de-46bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:27.000Z",
            "modified": "2015-09-30T08:41:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '075a7e2d72e52561158c74eeab1b09a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba037-9cf0-4951-afa3-4b3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:27.000Z",
            "modified": "2015-09-30T08:41:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '075d362259fd317b25a72c59634fba53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba038-00cc-42ae-b813-4dcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:28.000Z",
            "modified": "2015-09-30T08:41:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '076b3088f53111156b25f6dc5a8d1461']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba038-c898-40c0-b8a7-4948950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:28.000Z",
            "modified": "2015-09-30T08:41:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '076bee84c0ffc2e1617af57851f6a1d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba038-ca0c-441d-9b51-470f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:28.000Z",
            "modified": "2015-09-30T08:41:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '077c827187ff6780d7be5252a070ed20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba039-2058-41b9-be2d-4cfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:29.000Z",
            "modified": "2015-09-30T08:41:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0789fae92132f9a0bb8816ed9ba6a1e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba039-36f8-439f-9a4c-4ebf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:29.000Z",
            "modified": "2015-09-30T08:41:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '078a4175d700dddf82c139f6703bc952']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03a-e36c-424f-b377-4b8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:30.000Z",
            "modified": "2015-09-30T08:41:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '079dbe4f045665018e4727980c235660']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03a-e378-4a57-ab16-409b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:30.000Z",
            "modified": "2015-09-30T08:41:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07aa243e9af8c2aee1e90c701b5b4e07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03a-4f08-4bb4-aae9-4511950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:30.000Z",
            "modified": "2015-09-30T08:41:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07b31ab46f825aec601167001a05598e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03b-4230-4fa2-8563-4b75950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:31.000Z",
            "modified": "2015-09-30T08:41:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07b7be95cc9024d2a130f148bfd35f8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03b-b550-423f-8e1f-4fff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:31.000Z",
            "modified": "2015-09-30T08:41:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07bc9dedaee46bae35f1af647129b9c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03b-9c34-4ad0-93f9-490e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:31.000Z",
            "modified": "2015-09-30T08:41:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07c4ef918e252e019bb451b81e021643']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03c-2280-4501-b5c0-4bce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:32.000Z",
            "modified": "2015-09-30T08:41:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07e4cfd5f4157d94a70fdbe34a15d141']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03c-fb90-42c0-bb59-4930950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:32.000Z",
            "modified": "2015-09-30T08:41:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07ebcd767c1c08c72340c215076e6dc4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03c-4744-4e25-b0f2-4e5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:32.000Z",
            "modified": "2015-09-30T08:41:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07ef50af5eb8e9b986c7e36ae4346a40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03d-6ab8-4d03-b835-4479950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:33.000Z",
            "modified": "2015-09-30T08:41:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07f1766d7f5ae7a53afae1c7976f5031']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03d-5ab4-4364-998e-495c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:33.000Z",
            "modified": "2015-09-30T08:41:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07f84e79f9f0df06bd4c7dd9b6d316d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03d-3d4c-4143-aa2a-4365950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:33.000Z",
            "modified": "2015-09-30T08:41:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07fa004707e9f18e5bbae9f276c298e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03e-22f4-435f-8005-402e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:34.000Z",
            "modified": "2015-09-30T08:41:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '07fb383356c37e35466e15feb09391a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03e-9728-4d70-bd98-4586950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:34.000Z",
            "modified": "2015-09-30T08:41:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '080c75a66fa107cc443cbfe2a00245ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03f-e6e4-49a4-9552-413f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:35.000Z",
            "modified": "2015-09-30T08:41:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '082c240c43331a176240bc972cf383d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03f-e1a4-4179-a292-49d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:35.000Z",
            "modified": "2015-09-30T08:41:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08332c4fc47996c2ba82ea4ee724c2ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba03f-e7c8-4e24-bee6-44f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:35.000Z",
            "modified": "2015-09-30T08:41:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08479231d2370a60c1a27476d71fec1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba040-ce5c-4a09-8b3d-4b54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:36.000Z",
            "modified": "2015-09-30T08:41:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08479f748ec254757960a071831052fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba040-6370-43e6-96ad-43b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:36.000Z",
            "modified": "2015-09-30T08:41:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '085043b09c9ab9b5fa9b89b4d6df221a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba040-12e4-40fb-aa0a-418d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:36.000Z",
            "modified": "2015-09-30T08:41:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '085121dffccf42d26703d2ef50d69850']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba041-5d58-4a4c-b290-4bef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:37.000Z",
            "modified": "2015-09-30T08:41:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '085770f651970189059731e15ec493af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba041-0a24-4eed-be91-44c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:37.000Z",
            "modified": "2015-09-30T08:41:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '085a84b2e7d1e107613a6ad624840d9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba041-e604-41c6-bf2b-488c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:37.000Z",
            "modified": "2015-09-30T08:41:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '085fc7c72df175ec3044b0ae82b0bd14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba042-24a8-4871-89e0-414c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:38.000Z",
            "modified": "2015-09-30T08:41:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0860569d8105ea52d6ee2dd8df4ba6ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba042-5414-4203-8a5e-44bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:38.000Z",
            "modified": "2015-09-30T08:41:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0860febe1e50a9f8efd38a40d3fc2262']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba042-c04c-421f-b0a6-4882950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:38.000Z",
            "modified": "2015-09-30T08:41:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '086a96c6fb910ee12d9781653e88b5ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba043-c368-4ca0-b83d-4884950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:39.000Z",
            "modified": "2015-09-30T08:41:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '086d87c1d8dfa4c41734bd1f6c21d6cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba043-b3f0-46c6-abb8-4623950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:39.000Z",
            "modified": "2015-09-30T08:41:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '086f0eb7ae92000c86567b197b387c4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba043-b49c-4590-87d7-452f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:39.000Z",
            "modified": "2015-09-30T08:41:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0879a414f41490b3f5c44875fbceffbc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba044-f748-4aa2-b11b-4d30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:40.000Z",
            "modified": "2015-09-30T08:41:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '087b2e79b47c71816c1f17bfa4e0fb5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba044-6098-4f30-91b7-4eeb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:40.000Z",
            "modified": "2015-09-30T08:41:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08860bbb020c590030e7f996dc12d814']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba045-4ca8-43e7-a0c4-4e69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:41.000Z",
            "modified": "2015-09-30T08:41:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0888e82503bde7d9ec7c28f83af0d073']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba045-0b20-40aa-8618-4a37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:41.000Z",
            "modified": "2015-09-30T08:41:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '088af9b9ea658f266dba1256a9e94cde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba045-0cd8-4b5d-a7ff-49c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:41.000Z",
            "modified": "2015-09-30T08:41:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '089412725b9c1f2799d1057aed79a99c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba046-1b6c-43c7-85c0-45dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:42.000Z",
            "modified": "2015-09-30T08:41:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '089491a43d87c87b89749c653cf7cce7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba046-a2f0-4f81-ae1b-4e15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:42.000Z",
            "modified": "2015-09-30T08:41:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0898b1684ba866e32e240f2973c64e8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba046-43b8-4b0d-91e8-48e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:42.000Z",
            "modified": "2015-09-30T08:41:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0898ff04b78f29ba0e23f88b47034776']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba047-0168-4a6a-a3cc-4a7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:43.000Z",
            "modified": "2015-09-30T08:41:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '089e37cef570f296b79c53a4c9009b2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba047-5800-46d3-905e-42cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:43.000Z",
            "modified": "2015-09-30T08:41:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08acb0d53d8f274110012f03e27b07ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba047-a7bc-43d5-a575-4bed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:43.000Z",
            "modified": "2015-09-30T08:41:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08b1c9fd5966129e3a61992ccc35bc34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba048-278c-467b-a72e-4f95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:44.000Z",
            "modified": "2015-09-30T08:41:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08b463e4c7c933d30240b363ea26722c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba048-de30-4fb8-aa6e-4707950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:44.000Z",
            "modified": "2015-09-30T08:41:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08b87ee9497fe0b3313e339b8fac4aaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba048-ab80-4f79-8725-4a00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:44.000Z",
            "modified": "2015-09-30T08:41:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08d1647af46fbe1c8dfb68c3eeabeac6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba049-d760-4c33-a05a-4655950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:45.000Z",
            "modified": "2015-09-30T08:41:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08d41f5a9633d3cd4f8734cdd286b033']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba049-fec8-44bf-a9ea-4d92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:45.000Z",
            "modified": "2015-09-30T08:41:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08e61c5f064c0fdb4d0dd0204730c82b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04a-590c-4b16-b9ba-4b09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:46.000Z",
            "modified": "2015-09-30T08:41:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08e98238a42c604592167b55c3f3751c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04a-f590-4bf1-8e0d-4d9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:46.000Z",
            "modified": "2015-09-30T08:41:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08ef778c39dbcf349c978d454b70d872']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04a-5168-4caa-a5d0-4fc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:46.000Z",
            "modified": "2015-09-30T08:41:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08f6511e6cfae85e554bb5b12b720cf1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04b-1168-4874-8a43-4b81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:47.000Z",
            "modified": "2015-09-30T08:41:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '08f8ff32e420d6fc99fb5430ea0ea6eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04b-8a6c-46a7-9c7f-44b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:47.000Z",
            "modified": "2015-09-30T08:41:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0917a12554ba1abf4e2c53cb98dd4806']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04b-6458-4ff4-a127-4b64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:47.000Z",
            "modified": "2015-09-30T08:41:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '091c51a6f3953c05af87178360c3a8de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04c-fbac-4f48-b59f-48fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:48.000Z",
            "modified": "2015-09-30T08:41:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '091f35437ed4b846a099e931afea880a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04c-0e8c-41d9-8188-4abe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:48.000Z",
            "modified": "2015-09-30T08:41:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '092919e495cef3c27fc5929c51921b7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04c-c9f0-4129-a224-4788950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:48.000Z",
            "modified": "2015-09-30T08:41:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '093aed99ba6d3bc84bdda29bc2d32db8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04d-2588-4b54-8ac9-4bf0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:49.000Z",
            "modified": "2015-09-30T08:41:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '093c08e2a47815c39629ab6f881fdd08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04d-6074-4010-b90d-4e98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:49.000Z",
            "modified": "2015-09-30T08:41:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '093fc242ca29e6a51967f9156dec9924']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04d-38c4-4a45-8b55-46bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:49.000Z",
            "modified": "2015-09-30T08:41:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09464792b0e45d2d2e150b0509165525']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04e-0e44-47d4-8170-4323950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:50.000Z",
            "modified": "2015-09-30T08:41:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '095411ce6b4b23b9ff283085acdd9e0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04e-c868-42b8-b791-4fc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:50.000Z",
            "modified": "2015-09-30T08:41:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0957eb3e3da74d483fd05a98e828280d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04e-df60-4736-891a-47f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:50.000Z",
            "modified": "2015-09-30T08:41:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0958ce962505fd9b3bc7508ce06efbb0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04f-fa3c-43c1-974e-4b0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:51.000Z",
            "modified": "2015-09-30T08:41:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0965261ae22fefe5042df89aa607a972']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba04f-cd30-43b0-96af-4a79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:51.000Z",
            "modified": "2015-09-30T08:41:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '096e66accbbbcd0cffd581204f541cf1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba050-5344-41e8-9c81-46be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:52.000Z",
            "modified": "2015-09-30T08:41:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09716f1dc85aebb141140f0278653e33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba050-cd28-46ad-8b95-4fa2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:52.000Z",
            "modified": "2015-09-30T08:41:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0972d9691d14b7f607a2f90fb8813391']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba050-9408-4d87-8c4e-471b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:52.000Z",
            "modified": "2015-09-30T08:41:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0975742242ecae182635f793a5e09a51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba051-a744-4f24-b1ca-4ab5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:53.000Z",
            "modified": "2015-09-30T08:41:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '097c12b03409023d672705d6a5d8bd63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba051-c6c8-4193-906b-46f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:53.000Z",
            "modified": "2015-09-30T08:41:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '098375eef0d67f688c40aa3747f4ca46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba051-a288-4100-b5cc-403a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:53.000Z",
            "modified": "2015-09-30T08:41:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09923af480078e3fe7bac2de85902c25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba052-6ab0-475b-98b7-4348950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:54.000Z",
            "modified": "2015-09-30T08:41:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09942dd84db6c39a10d44045b288fa31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba052-7450-4f6f-9b9f-414b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:54.000Z",
            "modified": "2015-09-30T08:41:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09943fab9080274bbe860b509174faec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba052-9944-482a-9d4f-49c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:54.000Z",
            "modified": "2015-09-30T08:41:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09952f96ab56f3c187e71e72b36ca821']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba053-2e90-4477-98d1-48e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:55.000Z",
            "modified": "2015-09-30T08:41:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09a26c5c39ac3e50c0cbc698217aa36d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba053-f038-404d-823a-492f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:55.000Z",
            "modified": "2015-09-30T08:41:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09a6005213762e13a857b5c4ed50559d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba053-ff78-425b-939e-4c78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:55.000Z",
            "modified": "2015-09-30T08:41:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09a695d589f0abcb5449cf34f0a07030']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba054-ba20-4be4-acdb-4caf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:56.000Z",
            "modified": "2015-09-30T08:41:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09a8ddf3568c89e2ae7ee4c6d4ce595c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba054-d180-4963-b76a-4915950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:56.000Z",
            "modified": "2015-09-30T08:41:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09a904318fd287857df9652b4b07cc19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba054-fd64-495a-b1d2-4bd4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:56.000Z",
            "modified": "2015-09-30T08:41:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09aa7dd4b33d71510c1352ee5fb8bfbc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba055-4a80-4887-ab8f-4313950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:57.000Z",
            "modified": "2015-09-30T08:41:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09bc601755d260ee7695392c98f235f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba055-fa94-41e9-a85e-4c45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:57.000Z",
            "modified": "2015-09-30T08:41:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09bccf1e225fb69a39c05fe79421fe0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba056-38a4-4baf-836e-41a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:58.000Z",
            "modified": "2015-09-30T08:41:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09bf837e43631cb4f1ee63cdef41945b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba056-a874-424a-b2a8-4181950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:58.000Z",
            "modified": "2015-09-30T08:41:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09c0f42f607c13a3ddd1ba63ab957e70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba056-d118-4a67-80a0-49fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:58.000Z",
            "modified": "2015-09-30T08:41:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09c249d67d231e1b51797bd5e80061d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba057-dfac-4ba6-8913-47eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:59.000Z",
            "modified": "2015-09-30T08:41:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09c72e175d25a3a5d4c00b63523f7b0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba057-e898-458d-92fe-46aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:59.000Z",
            "modified": "2015-09-30T08:41:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09cdf1ecf5f5c7bad05e22ad389c3864']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba057-4f4c-4965-a742-4e99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:41:59.000Z",
            "modified": "2015-09-30T08:41:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09d0bb3ba6716a3a4713a1026a9fb18f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:41:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba058-5c2c-4bac-aa21-4d91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:00.000Z",
            "modified": "2015-09-30T08:42:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09d1a145f1f4426b4b9bc54c78b869db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba058-8140-487d-aedc-4ecb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:00.000Z",
            "modified": "2015-09-30T08:42:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09d276d9f1bc7e4de19160c3f5d5f31c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba058-d914-4f88-8d9d-4ad5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:00.000Z",
            "modified": "2015-09-30T08:42:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09e5a12cc303a073b529ca1a2c0eb17f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba059-a4b4-4a2b-aefd-4b60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:01.000Z",
            "modified": "2015-09-30T08:42:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '09f5420cd73fad52a868c7f831b9fed0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba059-737c-4e0d-8153-4e04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:01.000Z",
            "modified": "2015-09-30T08:42:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a0be2ee42eb72cf62583c452047386e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba059-bcdc-4096-a719-4893950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:01.000Z",
            "modified": "2015-09-30T08:42:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a16be06c9611d37791714a51432c99b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05a-f8d8-4019-bcd0-4ab0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:02.000Z",
            "modified": "2015-09-30T08:42:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a2c9c5c03aa1ab0eaa1add906f3f07c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05a-c318-4846-901c-4c92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:02.000Z",
            "modified": "2015-09-30T08:42:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a4033da2a6554dc4144d6adfaec3f6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05a-6478-42f6-b0f2-43d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:02.000Z",
            "modified": "2015-09-30T08:42:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a440d0d5dca5d92fdb36f92e824dba5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05b-3e94-405b-af60-4a29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:03.000Z",
            "modified": "2015-09-30T08:42:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a5172c3490692c85a89524bd9533e13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05b-2180-44f4-85c9-4e10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:03.000Z",
            "modified": "2015-09-30T08:42:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a579fed67665565f35d9d93d311bc2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05b-3ef0-4182-8ff2-4ac8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:03.000Z",
            "modified": "2015-09-30T08:42:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a58c79f337667994770f3d12b8474cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05c-264c-48f9-86a1-424d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:04.000Z",
            "modified": "2015-09-30T08:42:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a5a30fe9593e50ca232a54c5e23832a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05c-387c-414c-9d90-42c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:04.000Z",
            "modified": "2015-09-30T08:42:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a62c52a09e53540b29583f56cfda877']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05d-01a8-41b7-aa3b-4690950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:05.000Z",
            "modified": "2015-09-30T08:42:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a7a2c81e46160d312703d6291ea82e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05d-b07c-4d0f-932e-4a17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:05.000Z",
            "modified": "2015-09-30T08:42:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a81f312bc61da131075a132937ca2ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05d-b158-4514-981f-49af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:05.000Z",
            "modified": "2015-09-30T08:42:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a834a7698f9a17fbb74781bb7636792']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05e-6658-4860-939a-4b4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:06.000Z",
            "modified": "2015-09-30T08:42:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a88e299708aa1dd9043025bba74457b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05e-8e70-4ce2-9791-479b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:06.000Z",
            "modified": "2015-09-30T08:42:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a91700737e51c57d5a0cd0f9046519c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05e-3844-4eff-bce7-46a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:06.000Z",
            "modified": "2015-09-30T08:42:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0a9b32881cf433451a307a594c362fd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05f-e9e0-4257-83e3-4818950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:07.000Z",
            "modified": "2015-09-30T08:42:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0aa6fea9e41ac9a0b1de40a76eed86b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05f-6438-4376-95c8-4892950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:07.000Z",
            "modified": "2015-09-30T08:42:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0aa8aa43fd1ad4b6da911fcc5ff687fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba05f-df64-402b-be89-4497950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:07.000Z",
            "modified": "2015-09-30T08:42:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0aafb378e77b194b45afedd3bd07b1c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba060-b364-4ba5-9629-447e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:08.000Z",
            "modified": "2015-09-30T08:42:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0abb8b0beca3923794e86a3fc5e4047d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba060-485c-46bd-865f-4385950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:08.000Z",
            "modified": "2015-09-30T08:42:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0abcd598e880569b37c0d10d9670d4e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba060-fd8c-44d6-a470-4a5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:08.000Z",
            "modified": "2015-09-30T08:42:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ac06cccd2a9af233b6406a72507eb9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba061-c1dc-4fbc-b1b1-4256950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:09.000Z",
            "modified": "2015-09-30T08:42:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ac52a88b85b5543e0bb4e444780ce5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba061-95a0-423c-a9ef-47f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:09.000Z",
            "modified": "2015-09-30T08:42:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ac57e7fbd0d625447ec1d943ab5f523']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba061-577c-4fb8-8a13-4aa1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:09.000Z",
            "modified": "2015-09-30T08:42:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ace1314e5ce452d61920065a38818c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba062-4574-44f2-b387-412c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:10.000Z",
            "modified": "2015-09-30T08:42:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ad898f2d840008c2ca7c2506e3287c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba062-e8a0-47de-8043-4352950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:10.000Z",
            "modified": "2015-09-30T08:42:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0adeefaa5daf10b1cd1aa3a19d239a02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba063-7eb0-4756-80f1-4fe5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:11.000Z",
            "modified": "2015-09-30T08:42:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0aefe78fe2b1acc765765b065656d1e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba063-f70c-4e8e-ab90-4ae2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:11.000Z",
            "modified": "2015-09-30T08:42:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0aeff2ca05c8b947fc81c843c0fae3fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba063-b298-49a8-a071-41e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:11.000Z",
            "modified": "2015-09-30T08:42:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0af151515922e1198a4574df17c8789a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba064-5c28-4336-beb9-4b28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:12.000Z",
            "modified": "2015-09-30T08:42:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0af662beb2cc5797b1fd155dfe92b7a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba064-a9f8-4da6-b6d0-476a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:12.000Z",
            "modified": "2015-09-30T08:42:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b01cec405cd48fbb617fdf4632317f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba064-f968-489c-a588-48c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:12.000Z",
            "modified": "2015-09-30T08:42:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b035ad3a6618cb2fb8829797e172ef7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba065-273c-402d-80d0-4e20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:13.000Z",
            "modified": "2015-09-30T08:42:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b0409f909b17404c2600c4cc13b7792']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba065-b38c-47df-aa23-4fc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:13.000Z",
            "modified": "2015-09-30T08:42:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b05720b3aab6f3b2c4c6f1d47983838']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba065-4234-4534-ad19-49dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:13.000Z",
            "modified": "2015-09-30T08:42:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b12b8349724ce1bc92f6cde61b2383c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba066-ddf8-4463-a2f1-4cee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:14.000Z",
            "modified": "2015-09-30T08:42:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b2c35f2b22e5ecebcbb7dabad47764e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba066-6a88-43de-95a8-49a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:14.000Z",
            "modified": "2015-09-30T08:42:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b32aa3f78ca323129290600b8f80395']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba066-42a8-473b-acd7-44ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:14.000Z",
            "modified": "2015-09-30T08:42:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b3794883a932207811e11a04eae9eba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba067-640c-40d5-95bc-49e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:15.000Z",
            "modified": "2015-09-30T08:42:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b3ce0129cad00d13bc01c06065427dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba067-7404-449b-a242-42de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:15.000Z",
            "modified": "2015-09-30T08:42:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b5b1ca96649d4d4881e5ad0cdc15911']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba067-8034-4929-b8f1-46d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:15.000Z",
            "modified": "2015-09-30T08:42:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b6d2e02ed8d8dd5049bd7d7fdb0e7f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba068-dcb0-497c-9061-4764950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:16.000Z",
            "modified": "2015-09-30T08:42:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b720b93b2d3bf3208ab04db58bf5b47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba068-acf0-4984-b56a-4fb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:16.000Z",
            "modified": "2015-09-30T08:42:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b77f13619d12f8aeecccf450f6c101d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba068-ef50-4244-8b70-4c9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:16.000Z",
            "modified": "2015-09-30T08:42:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b84b03dd4a242cb32853fffab5b2127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba069-b97c-42d2-a5b8-4726950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:17.000Z",
            "modified": "2015-09-30T08:42:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b88038fd2bf3a359ca3013cd1eb2fe7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba069-cabc-4130-aa3a-45ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:17.000Z",
            "modified": "2015-09-30T08:42:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b8cff908ccce357ec5489595ef2f234']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06a-7230-4fef-b5b8-410e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:18.000Z",
            "modified": "2015-09-30T08:42:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0b9667ea73daac40a863864813408ad4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06a-b8f4-4ab9-8cfc-4da4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:18.000Z",
            "modified": "2015-09-30T08:42:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ba34a65a89c05f96d03a21bc5a93363']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06a-a570-4e98-85b4-4b50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:18.000Z",
            "modified": "2015-09-30T08:42:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ba5a712e19c0826cc62aab137ced04a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06b-d038-4c99-9215-4f7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:19.000Z",
            "modified": "2015-09-30T08:42:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bb10851727383237afb9f74bdb2e2f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06b-a4e8-4d75-bb80-4954950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:19.000Z",
            "modified": "2015-09-30T08:42:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bb35aa5d002e8573c98dd66033d0ac1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06b-2650-40f9-b02a-4456950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:19.000Z",
            "modified": "2015-09-30T08:42:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bc89e02f57fddd13feca58d8f080f7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06c-7668-4fd6-b2aa-4224950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:20.000Z",
            "modified": "2015-09-30T08:42:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bd1116741bc0514d9b98ef86f75d1ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06c-1c64-473a-982f-4235950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:20.000Z",
            "modified": "2015-09-30T08:42:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bd192bc2b3c95a5e25cbb0272b8eafd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06c-2b10-4fcb-aba2-4a9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:20.000Z",
            "modified": "2015-09-30T08:42:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bd3f236b0a23bfbe8353d1340086639']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06d-8134-4bd1-abdb-49bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:21.000Z",
            "modified": "2015-09-30T08:42:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bd8cc9706c2ff34ccdce6ff1f4535f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06d-0588-43d9-827c-4672950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:21.000Z",
            "modified": "2015-09-30T08:42:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bdde666e36114a7f6477cf463340122']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06d-e2d0-4a02-b2ee-40a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:21.000Z",
            "modified": "2015-09-30T08:42:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0beacb48dc08a7252e40edc898eb1e7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06e-5dd0-4865-a404-4573950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:22.000Z",
            "modified": "2015-09-30T08:42:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0beba531c89ed108d0110a964c8043c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06e-c0cc-43cc-bddd-4da0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:22.000Z",
            "modified": "2015-09-30T08:42:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bef0707853f595560e3d205f1a9d00c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06e-1628-4fcc-886b-459f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:22.000Z",
            "modified": "2015-09-30T08:42:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bf161384bac6a3d13fc67dc6d47e7a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06f-d7f0-4723-acee-439f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:23.000Z",
            "modified": "2015-09-30T08:42:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0bf5d4d6969923f0e81e4463495f1ab1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba06f-6410-4426-9981-4e38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:23.000Z",
            "modified": "2015-09-30T08:42:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c1c4a8174b9e21be98bc48f3e25ab7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba070-3864-4acb-bdbb-4539950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:24.000Z",
            "modified": "2015-09-30T08:42:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c23300289713d59af839f36db64131d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba070-1e20-412d-8ec2-4ca8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:24.000Z",
            "modified": "2015-09-30T08:42:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c2d90a4ea3e4cd203070a3b684fb4f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba070-4c58-4fcb-b636-4732950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:24.000Z",
            "modified": "2015-09-30T08:42:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c396da286a0c206ec380c76121e3660']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba071-e494-45a0-a6bf-4f6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:25.000Z",
            "modified": "2015-09-30T08:42:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c4212467c3c787648891c716c37a84e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba071-31d4-4cb3-9292-471d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:25.000Z",
            "modified": "2015-09-30T08:42:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c4223221fad0261732bea4e32782f8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba071-c034-4bcb-bfc6-44e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:25.000Z",
            "modified": "2015-09-30T08:42:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c495ef37861520298f76ea3aa1b69c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba072-fe48-445c-afd4-4f71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:26.000Z",
            "modified": "2015-09-30T08:42:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c612dea5c8f6f5dccaa7bef356701c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba072-cbcc-423d-bb26-4a89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:26.000Z",
            "modified": "2015-09-30T08:42:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c73e8962ac710c527b85aa5b5885ea6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba073-3a14-4079-95e0-4586950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:27.000Z",
            "modified": "2015-09-30T08:42:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c827784c1b9b127dc6d1ebc849be929']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba073-eeb4-415d-b73a-4edf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:27.000Z",
            "modified": "2015-09-30T08:42:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c82d247353520ca63f1037b4cdb7d78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba073-9a6c-45b4-9fff-407f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:27.000Z",
            "modified": "2015-09-30T08:42:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c86aee63226274f40075b73f9b01c79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba074-30f0-4ff9-8c61-4d00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:28.000Z",
            "modified": "2015-09-30T08:42:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c9013162b2df6edde93611d55c0d882']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba074-7cd4-493f-9664-43c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:28.000Z",
            "modified": "2015-09-30T08:42:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0c9087aaae2814bf73022b5e66345e5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba074-b4b0-46be-8d44-4258950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:28.000Z",
            "modified": "2015-09-30T08:42:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ca9c2e05448a7bd5adbb4ec3972e4d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba075-c13c-450b-b873-4eef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:29.000Z",
            "modified": "2015-09-30T08:42:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0cae87774b12a6bbb973fd08861346cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba075-a9f8-4090-8d25-417b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:29.000Z",
            "modified": "2015-09-30T08:42:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0caef97b3a7d9a2cdeac75decf8cdb78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba075-2644-4443-a210-4148950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:29.000Z",
            "modified": "2015-09-30T08:42:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0cb6872a5c40fd0b87af80647320347b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba076-5fac-4286-9e94-4d93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:30.000Z",
            "modified": "2015-09-30T08:42:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0cb6fcd554020160c790c8c8c635fa2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba076-f718-4cb0-8307-49db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:30.000Z",
            "modified": "2015-09-30T08:42:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0cc4b01e4beacb9652fa3e65a7816331']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba076-5d90-4e3e-84a0-4969950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:30.000Z",
            "modified": "2015-09-30T08:42:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ccb75866b742d5f925a80a41601fd61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba077-13dc-40dc-859a-42fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:31.000Z",
            "modified": "2015-09-30T08:42:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ccf5ed934edb354b6a6bfd170321455']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba077-51b0-4875-9a88-4c8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:31.000Z",
            "modified": "2015-09-30T08:42:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0cd7795cf60aa9e78d5e1e4332c2ee44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba077-3538-46ea-ba4f-4c85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:31.000Z",
            "modified": "2015-09-30T08:42:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ce14da4ebf33edaca4ef39493f43414']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba078-7854-4825-9402-4370950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:32.000Z",
            "modified": "2015-09-30T08:42:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0cebd5b4b4ec195ab8d7e2dda5541d7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba078-1ecc-4f33-b5f7-43f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:32.000Z",
            "modified": "2015-09-30T08:42:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0cfb483646b67bd8e9e0a59fa4db59d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba079-19d8-4521-a736-478a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:33.000Z",
            "modified": "2015-09-30T08:42:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d03bf5eb7ffa5acd0c5b0067ddaa209']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba079-ee10-419b-987a-48cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:33.000Z",
            "modified": "2015-09-30T08:42:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '007vlad.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba079-9480-4912-96c8-4309950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:33.000Z",
            "modified": "2015-09-30T08:42:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d045fe1667615c56a5948f3d6cb008b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba079-ba78-4988-8d69-4c73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:33.000Z",
            "modified": "2015-09-30T08:42:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '01001101.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba079-53a8-4d7f-b7ed-46ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:33.000Z",
            "modified": "2015-09-30T08:42:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d0eb356b71b94304c03d10630c205dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba079-aba4-451a-b05f-4fba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:33.000Z",
            "modified": "2015-09-30T08:42:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '01007849003.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07a-73dc-4f73-b4e5-4d35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:34.000Z",
            "modified": "2015-09-30T08:42:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d16a4aea2f77f8ba5f054012a061586']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07a-34cc-4788-a85f-40d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:34.000Z",
            "modified": "2015-09-30T08:42:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '0123456789.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07a-0978-461c-be56-4ef3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:34.000Z",
            "modified": "2015-09-30T08:42:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d1783fbd8a315ff4787dba725b2b39d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07a-f07c-4e6a-a0ef-41c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:34.000Z",
            "modified": "2015-09-30T08:42:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '0gf4q8sdg4trzh6rg4.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07a-9860-46f0-b252-4647950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:34.000Z",
            "modified": "2015-09-30T08:42:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d1a8c9c469810fe5dd89a1648251c6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07a-bce0-4a45-a359-4195950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:34.000Z",
            "modified": "2015-09-30T08:42:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '0verload.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07b-5394-4352-bc55-45b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:35.000Z",
            "modified": "2015-09-30T08:42:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d1c96d77e0eb343e38b951b928d0529']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07b-af94-4cea-b805-4da7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:35.000Z",
            "modified": "2015-09-30T08:42:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '0x0002.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07b-7c1c-48fa-93e2-48c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:35.000Z",
            "modified": "2015-09-30T08:42:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d218b4cb6bdcb04bd0262358659b42e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07b-8794-4dd6-967e-412c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:35.000Z",
            "modified": "2015-09-30T08:42:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123122tvtdm.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07b-40cc-4059-8851-4424950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:35.000Z",
            "modified": "2015-09-30T08:42:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d222f131c47cc5738b5ec130308ce65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07b-8494-452c-a8f2-44e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:35.000Z",
            "modified": "2015-09-30T08:42:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07c-ef4c-41fe-8912-4d20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:36.000Z",
            "modified": "2015-09-30T08:42:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d30d2bce6ddb920adab479402b08905']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07c-42c0-4344-8858-4d83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:36.000Z",
            "modified": "2015-09-30T08:42:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123123321.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07c-3d48-487f-991d-40da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:36.000Z",
            "modified": "2015-09-30T08:42:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d39334dd9986c9566bbab9f9f815acb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07c-d8f4-43d0-87ed-4dd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:36.000Z",
            "modified": "2015-09-30T08:42:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123321name.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07c-3c08-46ad-9ee1-442f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:36.000Z",
            "modified": "2015-09-30T08:42:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d3f119936a6abc83fd1c76b862e787b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07c-ca54-41cc-8991-43ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:36.000Z",
            "modified": "2015-09-30T08:42:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123aqstsqr.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07d-c2fc-4978-86f0-4388950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:37.000Z",
            "modified": "2015-09-30T08:42:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d40b68cea3cacf08e60c4652b7d2821']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07d-cff4-4b35-b45a-413e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:37.000Z",
            "modified": "2015-09-30T08:42:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123ar.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07d-e8cc-43c1-9287-4b3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:37.000Z",
            "modified": "2015-09-30T08:42:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d4953e58c26353abbe165ee6b565c5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07d-f304-4b89-904f-4f29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:37.000Z",
            "modified": "2015-09-30T08:42:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123ddf.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07d-ad48-454e-9563-4c32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:37.000Z",
            "modified": "2015-09-30T08:42:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d5866b767bca133cec001f82b4961e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07e-51e4-416f-8105-4172950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:38.000Z",
            "modified": "2015-09-30T08:42:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123golub.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07e-8f3c-46b0-a902-4ae6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:38.000Z",
            "modified": "2015-09-30T08:42:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d5c5d824cb4f4e808a4e6d1b7088f3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07e-6b40-47f1-9cc9-4b78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:38.000Z",
            "modified": "2015-09-30T08:42:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123test123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07e-46b4-4ff9-abaf-4f22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:38.000Z",
            "modified": "2015-09-30T08:42:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d67b2ff6f4862e4e1993c12f6c80010']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07e-59f8-4d59-9d8a-4c71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:38.000Z",
            "modified": "2015-09-30T08:42:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '123twerq.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07e-ea28-4f78-9061-4bb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:38.000Z",
            "modified": "2015-09-30T08:42:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d6aff41b67fb79d3d91da6dfb62f452']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07f-47cc-49ad-87f5-4354950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:39.000Z",
            "modified": "2015-09-30T08:42:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '131313illlililil.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07f-8200-43ac-9258-432e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:39.000Z",
            "modified": "2015-09-30T08:42:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d7d9078585876ca10d85e71ddab07ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07f-0f3c-4430-ae9a-4f8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:39.000Z",
            "modified": "2015-09-30T08:42:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '1337cahya.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07f-f8d0-44bd-9ac6-458b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:39.000Z",
            "modified": "2015-09-30T08:42:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d801bdc6ba5c8ed10cea00c32be4267']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07f-5e30-45f7-bdd5-4134950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:39.000Z",
            "modified": "2015-09-30T08:42:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '1337easyx33.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba07f-2ad0-43ae-b69f-485a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:39.000Z",
            "modified": "2015-09-30T08:42:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d815322ad28d2ee4f915a49287c74fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba080-f064-4dd4-91cd-48b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:40.000Z",
            "modified": "2015-09-30T08:42:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '14587.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba080-9418-4361-a8d6-4c9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:40.000Z",
            "modified": "2015-09-30T08:42:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d821c92c9ce6db82217aaf8449218dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba080-93b8-42f5-a794-42e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:40.000Z",
            "modified": "2015-09-30T08:42:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '14998721502.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba080-a6a0-45a7-a5bb-47fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:40.000Z",
            "modified": "2015-09-30T08:42:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d89969a1d24a4f180b18b4aedcaa0e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba080-7584-48a9-84a6-46aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:40.000Z",
            "modified": "2015-09-30T08:42:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '151148.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba080-be90-48bf-9dd2-42be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:40.000Z",
            "modified": "2015-09-30T08:42:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d95ba821026bae734cb73b8c9584450']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba081-2c84-4651-901c-45e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:41.000Z",
            "modified": "2015-09-30T08:42:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '159.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba081-7188-4da4-9030-4a7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:41.000Z",
            "modified": "2015-09-30T08:42:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d97d61230fc41899cdd00cc939ab6bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba081-0ca4-4f6b-8583-48af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:41.000Z",
            "modified": "2015-09-30T08:42:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '1605.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba081-b368-4064-8b24-4f51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:41.000Z",
            "modified": "2015-09-30T08:42:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d99515a6f419c1852fa4a74c14845f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba081-c93c-4aeb-9156-4882950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:41.000Z",
            "modified": "2015-09-30T08:42:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '192.168.203.1scorpion160.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba082-8a2c-4486-96c0-4e8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:42.000Z",
            "modified": "2015-09-30T08:42:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0d9c60ba5715503dd2929aeb89a1737f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba082-ff54-463e-a27e-4b65950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:42.000Z",
            "modified": "2015-09-30T08:42:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '19serv84.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba082-7bc0-4ed6-9909-45b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:42.000Z",
            "modified": "2015-09-30T08:42:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0db33c870819ebbc16dbcca09e023761']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba082-3104-4106-8f7a-4ffc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:42.000Z",
            "modified": "2015-09-30T08:42:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '1nurrun1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba082-c8e0-437e-a2e5-4378950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:42.000Z",
            "modified": "2015-09-30T08:42:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0db43b9e9855308969be581dcc3a4a69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba082-ee44-497e-ac9c-4196950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:42.000Z",
            "modified": "2015-09-30T08:42:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '2001sergiy.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba083-0870-41fd-921d-438e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:43.000Z",
            "modified": "2015-09-30T08:42:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0dba8fa4562034e392471f21f80efc69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba083-1078-4e87-84f5-4e56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:43.000Z",
            "modified": "2015-09-30T08:42:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '2169.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba083-d9f0-4d53-b532-41c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:43.000Z",
            "modified": "2015-09-30T08:42:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0dc380b108f88b42f99f66e3a2759220']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba083-4bb0-4b5d-95fd-4ee4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:43.000Z",
            "modified": "2015-09-30T08:42:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '2354454.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba083-930c-40e2-ada0-43ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:43.000Z",
            "modified": "2015-09-30T08:42:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0dce0e2c4843f2a709cf46687f1601c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba084-b38c-4e80-8a0f-476f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:43.000Z",
            "modified": "2015-09-30T08:42:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '241175dimas.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba084-c924-482c-ac64-4097950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:44.000Z",
            "modified": "2015-09-30T08:42:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0dcff6eb43010534311679b9007cd248']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba084-d8d8-4c04-a5b2-4666950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:44.000Z",
            "modified": "2015-09-30T08:42:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '27111996.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba084-74f4-4325-ac0f-4d82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:44.000Z",
            "modified": "2015-09-30T08:42:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0dda0e40b1e5d06aade0d35c72688329']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba084-4900-4561-aeb6-4f82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:44.000Z",
            "modified": "2015-09-30T08:42:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '2727.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba084-4204-4b32-9523-41ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:44.000Z",
            "modified": "2015-09-30T08:42:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0de014ac3e5a774659eb1f186b44b5a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba085-3c44-45bf-874d-4490950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:45.000Z",
            "modified": "2015-09-30T08:42:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '286711.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba085-d764-4919-aca2-45bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:45.000Z",
            "modified": "2015-09-30T08:42:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0de554766a497f6aa6873a5eeba08290']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba085-a1ac-48e3-9464-4f21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:45.000Z",
            "modified": "2015-09-30T08:42:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '2pac22.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba085-40e0-4615-9537-4619950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:45.000Z",
            "modified": "2015-09-30T08:42:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0de75aa51662aa30ec009c1a758d1cab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba085-fbb4-4a78-8900-435d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:45.000Z",
            "modified": "2015-09-30T08:42:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '309012.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba085-26a8-4323-bfec-46dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:45.000Z",
            "modified": "2015-09-30T08:42:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0deee4b6d89dba71761390be114c0911']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba086-31ac-4fa3-8740-4c51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:46.000Z",
            "modified": "2015-09-30T08:42:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '309012s.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba086-5910-4dcc-b11f-4e49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:46.000Z",
            "modified": "2015-09-30T08:42:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e01a7f346f40fc4e1d84547d61d3222']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba086-a2d4-41f6-94e9-4195950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:46.000Z",
            "modified": "2015-09-30T08:42:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '32.servebeer.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba086-9db8-4b4c-b33b-43ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:46.000Z",
            "modified": "2015-09-30T08:42:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e02d76084be4bafd3a93e83a043c96d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba086-b388-421a-bc5c-4009950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:46.000Z",
            "modified": "2015-09-30T08:42:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '40028922123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba086-583c-4473-9910-4965950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:46.000Z",
            "modified": "2015-09-30T08:42:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e0e30635fc3eca12a3f19a8372ecfaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba087-5ac4-4639-b102-4ce9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:47.000Z",
            "modified": "2015-09-30T08:42:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '438735990032.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba087-4454-4b3a-bb23-41a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:47.000Z",
            "modified": "2015-09-30T08:42:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e19eaddad5face00da3ab4ef2d184ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba087-fba4-4c76-9e6c-4415950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:47.000Z",
            "modified": "2015-09-30T08:42:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '4asute6bez10.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba087-4e00-4dd9-aec2-4be3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:47.000Z",
            "modified": "2015-09-30T08:42:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e1cd6c051079577f5032a17d658e423']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba087-8398-47d5-bb49-4fb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:47.000Z",
            "modified": "2015-09-30T08:42:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '4everlegend.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba087-7d74-4304-a67d-46cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:47.000Z",
            "modified": "2015-09-30T08:42:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e2923e5b533a95d3f339ba9cdb3f528']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba088-93a8-4cf3-9c40-4e2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:48.000Z",
            "modified": "2015-09-30T08:42:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '4everlegend.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba088-8058-4e9c-9958-42c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:48.000Z",
            "modified": "2015-09-30T08:42:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e2e08839e1ea1ae22e70bad3f116e3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba088-3cbc-4a17-b333-40b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:48.000Z",
            "modified": "2015-09-30T08:42:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '4lailaizhen.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba088-1dd8-44ee-93cf-400b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:48.000Z",
            "modified": "2015-09-30T08:42:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e42c6bd1c354add43bc5789a40cea52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba088-e088-4b96-aa44-44ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:48.000Z",
            "modified": "2015-09-30T08:42:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '4uka4ka.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba089-43b8-4bab-82bd-4b4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:49.000Z",
            "modified": "2015-09-30T08:42:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e46f208ae35ea0f71a8d5c30693abea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba089-42cc-43c4-87a0-406c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:49.000Z",
            "modified": "2015-09-30T08:42:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '523698.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba089-ab34-4da3-b2d5-4682950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:49.000Z",
            "modified": "2015-09-30T08:42:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e605c205ae9b4ac6edb4187f0e160d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba089-9824-49aa-a449-4207950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:49.000Z",
            "modified": "2015-09-30T08:42:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '5347.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba089-0ad8-4401-a745-48db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:49.000Z",
            "modified": "2015-09-30T08:42:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e60d6faac1e80f21db48235cc7a3b53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba089-fbdc-4216-8c60-423b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:49.000Z",
            "modified": "2015-09-30T08:42:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '54468464-25.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08a-2f8c-4c96-b25c-439f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:50.000Z",
            "modified": "2015-09-30T08:42:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e69e9e2fd6e5a38c6cf5c7f711aaaf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08a-79ec-4170-89aa-4140950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:50.000Z",
            "modified": "2015-09-30T08:42:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '545r59.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08a-fefc-4d1d-8781-4c0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:50.000Z",
            "modified": "2015-09-30T08:42:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e6e53b02a1640d65bf67b6ca789aa9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08a-7408-453d-9604-4be3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:50.000Z",
            "modified": "2015-09-30T08:42:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '557furkan.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08a-a0f4-4e1d-9253-4889950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:50.000Z",
            "modified": "2015-09-30T08:42:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e72c746b8a3c9695d0b2491a47f731f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08b-a748-410f-970a-4229950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:51.000Z",
            "modified": "2015-09-30T08:42:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '6460martin6460.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08b-2efc-48ee-95ba-47b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:51.000Z",
            "modified": "2015-09-30T08:42:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e7f4fa9db20afe4bdd9ed4b48f4597e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08b-8e28-4b30-a488-4374950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:51.000Z",
            "modified": "2015-09-30T08:42:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '7sesh.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08b-d764-4e7b-b7d0-46f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:51.000Z",
            "modified": "2015-09-30T08:42:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e86f2225abee9aaf0c42aa834abdcb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08b-2f1c-4ac5-bf16-4477950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:51.000Z",
            "modified": "2015-09-30T08:42:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '847876276374678.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08b-e218-43e7-87d8-412d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:51.000Z",
            "modified": "2015-09-30T08:42:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e8942fe4de1f46c586b1d4b21541104']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08c-63ac-44a5-afd0-455b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:52.000Z",
            "modified": "2015-09-30T08:42:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '895623.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08c-5bf0-4762-afcb-4b33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:52.000Z",
            "modified": "2015-09-30T08:42:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e8e129fccb1793564df6a71557e3dca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08c-7acc-48f0-a761-4c1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:52.000Z",
            "modified": "2015-09-30T08:42:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '89614511846.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08c-eddc-4f95-9270-410a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:52.000Z",
            "modified": "2015-09-30T08:42:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0e96157798b3f5c45a9df4d5fe478a97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08c-d27c-4e00-9519-4e88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:52.000Z",
            "modified": "2015-09-30T08:42:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '90.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08c-b8ac-4267-ba99-42e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:52.000Z",
            "modified": "2015-09-30T08:42:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ea58b8810f48696f92245a74737aee1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08d-6190-47b8-a0b9-4de8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:53.000Z",
            "modified": "2015-09-30T08:42:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '9000x.ignorelist.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08d-14b8-492c-bac7-4e98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:53.000Z",
            "modified": "2015-09-30T08:42:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0eaa4d327e20ec7e6d20dff71ab531f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08d-784c-4c49-9b02-4d72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:53.000Z",
            "modified": "2015-09-30T08:42:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '92140102.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08d-f848-4c45-923c-4fa5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:53.000Z",
            "modified": "2015-09-30T08:42:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0eae3af0fc8f7f1c066264d903ac0e8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08d-1ad8-46a5-8a99-4c94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:53.000Z",
            "modified": "2015-09-30T08:42:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '95es2015.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08d-7b74-40dd-bdda-448b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:53.000Z",
            "modified": "2015-09-30T08:42:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0eb5026819febe6f173d29417939cb81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08e-8cb4-41fc-b573-46a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:54.000Z",
            "modified": "2015-09-30T08:42:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '96789476248.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08e-4d78-4b70-9b51-4a48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:54.000Z",
            "modified": "2015-09-30T08:42:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0eb57eedac6c1db1c12a7788ef3184c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08e-8f84-4577-8969-4dd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:54.000Z",
            "modified": "2015-09-30T08:42:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '98143897.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08e-24d0-4084-9944-427f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:54.000Z",
            "modified": "2015-09-30T08:42:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0eb5ba21ab800a271a1223d5f83c5ed9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08e-d794-4f6d-b4fb-47e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:54.000Z",
            "modified": "2015-09-30T08:42:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = '99sharkanvoid99.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08e-792c-4b00-9832-42f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:54.000Z",
            "modified": "2015-09-30T08:42:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ec22927352df35f90c1e442639c11e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08f-0aa0-4b9f-a1a2-4bf8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:55.000Z",
            "modified": "2015-09-30T08:42:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'a0522884401.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08f-2728-43b2-ade4-4be9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:55.000Z",
            "modified": "2015-09-30T08:42:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ec5e62882217315861ab8359e256994']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08f-cb10-463a-a909-4df4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:55.000Z",
            "modified": "2015-09-30T08:42:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'a19.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08f-7004-480b-b598-442d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:55.000Z",
            "modified": "2015-09-30T08:42:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ec69529c2b9354232ace064feb666e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba08f-f2fc-42e3-8cf0-4175950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:55.000Z",
            "modified": "2015-09-30T08:42:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'a4hacker.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba090-aef0-45a7-be68-4a94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:56.000Z",
            "modified": "2015-09-30T08:42:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ec698beee975bbe49e5f47a770752c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba090-fd00-45c4-8edd-4590950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:56.000Z",
            "modified": "2015-09-30T08:42:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'a858vloiqy1n89.gotdns.ch']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba090-1e94-4bc3-befe-4e86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:56.000Z",
            "modified": "2015-09-30T08:42:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ec6ea4221159f386ea5367e20489679']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba090-22b0-4d3f-a1c2-4160950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:56.000Z",
            "modified": "2015-09-30T08:42:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'a89-no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba090-f41c-4f2b-acf6-475b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:56.000Z",
            "modified": "2015-09-30T08:42:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ed3dcf05e79bb21c24e992aef6750d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba090-6f9c-4e95-a5aa-4027950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:56.000Z",
            "modified": "2015-09-30T08:42:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'a89.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba091-cf2c-487b-ac32-44cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:57.000Z",
            "modified": "2015-09-30T08:42:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0edc2c7d49a8727a532724ec60c8994a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba091-c3ac-4e0d-9511-4285950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:57.000Z",
            "modified": "2015-09-30T08:42:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aaselderov.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba091-ea28-42b9-b454-4ac5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:57.000Z",
            "modified": "2015-09-30T08:42:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0eef874d7ba8663a87ce7d2b66144674']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba091-d2e0-4c4f-94bd-4f59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:57.000Z",
            "modified": "2015-09-30T08:42:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aasilkan123.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba091-16d4-414f-85b0-4c77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:57.000Z",
            "modified": "2015-09-30T08:42:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ef9f9ff485585f1e202004ff1e261a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba092-84d4-4e07-a385-47a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:58.000Z",
            "modified": "2015-09-30T08:42:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aasilkan123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba092-4b18-42fd-8657-4be4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:58.000Z",
            "modified": "2015-09-30T08:42:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f13cdfe15d28f385c760f0ebfb02909']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba092-cea0-453d-a795-4a4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:58.000Z",
            "modified": "2015-09-30T08:42:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aatcoho.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba092-a680-4ac8-9285-4d0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:58.000Z",
            "modified": "2015-09-30T08:42:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f1baee51fdd57fc5a70d4d898b0ae6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba092-0e7c-4bff-bf9d-49c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:58.000Z",
            "modified": "2015-09-30T08:42:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aaz.servehttp.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba092-c2a8-4c4d-9a10-424a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:58.000Z",
            "modified": "2015-09-30T08:42:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f1e4f8c53dce0e96cd233139d8e59fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba093-b0d0-411a-a71f-45aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:59.000Z",
            "modified": "2015-09-30T08:42:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'abaoudd.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba093-8668-4d75-b38f-400c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:59.000Z",
            "modified": "2015-09-30T08:42:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f2686ec0bbfb0a61fffbaeec4f522bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba093-d568-4e8e-84c5-47c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:59.000Z",
            "modified": "2015-09-30T08:42:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'abcd123456789.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba093-6604-4459-9b19-4cb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:59.000Z",
            "modified": "2015-09-30T08:42:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f31c5ba5fd4ba70b8a0e6c4ff799e6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba093-aec8-4c4a-ac73-4619950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:59.000Z",
            "modified": "2015-09-30T08:42:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'abdulbasit.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba093-8930-4474-8370-45c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:42:59.000Z",
            "modified": "2015-09-30T08:42:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f33ae285d9861c1d1f36b204ec69efe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:42:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba094-4efc-48ce-a11e-4c2f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:00.000Z",
            "modified": "2015-09-30T08:43:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'abdullahsahibzada.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba094-0aa8-4952-8de6-4851950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:00.000Z",
            "modified": "2015-09-30T08:43:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f406f5782ace790c86756b0768c25ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba094-1918-41f1-8905-4b92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:00.000Z",
            "modified": "2015-09-30T08:43:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'abed-2015.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba094-0754-41f7-81f3-4b24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:00.000Z",
            "modified": "2015-09-30T08:43:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f4e9a125b892cd18ace422ec75f693e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba094-8edc-4f3f-8980-427a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:00.000Z",
            "modified": "2015-09-30T08:43:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'abgho.dyndns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba094-d6b4-4532-bb7f-43b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:00.000Z",
            "modified": "2015-09-30T08:43:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f4ff92a48a5739aa66070095a7b31d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba095-20e4-49b3-ac11-4e48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:01.000Z",
            "modified": "2015-09-30T08:43:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ablackhole.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba095-3f54-4b66-9ba3-4f1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:01.000Z",
            "modified": "2015-09-30T08:43:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f5da87929045348085db26a2c20c905']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba095-8208-4f75-9944-4247950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:01.000Z",
            "modified": "2015-09-30T08:43:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aboodsyr1984.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba095-1d58-4cfe-97f6-484e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:01.000Z",
            "modified": "2015-09-30T08:43:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f6d18a19a1325917c9675fa5d2c93d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba095-f108-455d-b3c9-4a01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:01.000Z",
            "modified": "2015-09-30T08:43:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aboodya.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba095-2b48-4ae6-a5bb-4012950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:01.000Z",
            "modified": "2015-09-30T08:43:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f6fdd5d06c3369639cd28ebc7afcc15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba096-090c-4345-8bc4-4c36950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:02.000Z",
            "modified": "2015-09-30T08:43:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aboodzain.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba096-6aa4-4523-bf1d-4c89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:02.000Z",
            "modified": "2015-09-30T08:43:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f7b0f6c81e3ce19e19ba7ec461f2db6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba096-0338-4df2-9f9c-47bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:02.000Z",
            "modified": "2015-09-30T08:43:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'acodemixpcw1337.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba096-74e8-4eac-9a55-4c59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:02.000Z",
            "modified": "2015-09-30T08:43:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f7dbb6e58702dafe47f385bfea232bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba096-5e60-4b04-bd14-466c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:02.000Z",
            "modified": "2015-09-30T08:43:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'activenetworkdns.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba097-a86c-4561-8bd2-4a04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:03.000Z",
            "modified": "2015-09-30T08:43:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f8282e015d1e651b6fbc7a7ec89dd31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba097-18e4-4d3c-b82a-41fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:03.000Z",
            "modified": "2015-09-30T08:43:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aculllox.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba097-d3b8-4e5c-b4ae-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:03.000Z",
            "modified": "2015-09-30T08:43:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f859e67b279a3619a6e2522d9d2a072']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba097-b258-4431-92a8-4f4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:03.000Z",
            "modified": "2015-09-30T08:43:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adamchik.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba097-db94-41fb-bb09-4236950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:03.000Z",
            "modified": "2015-09-30T08:43:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f8689cf80cd34fc62fd36b6439abfb6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba098-1998-455a-8192-431a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:04.000Z",
            "modified": "2015-09-30T08:43:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adarkcommet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba098-b30c-4c97-9f9f-4538950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:04.000Z",
            "modified": "2015-09-30T08:43:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0f9dfa91fd461d96f68fdef11f3780f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba098-3540-4733-ab79-4583950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:04.000Z",
            "modified": "2015-09-30T08:43:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'add1111.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba098-49a4-4a2b-8633-4d0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:04.000Z",
            "modified": "2015-09-30T08:43:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0fabc1a3ebb3c294c505483b63ebf9e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba098-1518-4b33-a524-4b9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:04.000Z",
            "modified": "2015-09-30T08:43:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'addrat1.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba098-fa94-44ab-ad63-4e69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:04.000Z",
            "modified": "2015-09-30T08:43:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0fb934652c6605932fecb33ffe6dc8fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba099-e018-4e72-930d-4844950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:05.000Z",
            "modified": "2015-09-30T08:43:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adem123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba099-57f4-44f6-8902-457d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:05.000Z",
            "modified": "2015-09-30T08:43:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0fb9559b9876ba4828520c0ca3806854']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba099-8770-4596-ba6a-4a0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:05.000Z",
            "modified": "2015-09-30T08:43:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adem7272.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba099-c10c-4ee3-ace5-4457950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:05.000Z",
            "modified": "2015-09-30T08:43:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0fbc4232811601e97cca069450ecac19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba099-77b0-4157-a6a8-4359950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:05.000Z",
            "modified": "2015-09-30T08:43:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adfgdfs.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba099-a2d8-446a-97b2-4e96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:05.000Z",
            "modified": "2015-09-30T08:43:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0fd5cc2a1db42096bf381296ad1276b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09a-9fc4-4f97-8eda-4683950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:06.000Z",
            "modified": "2015-09-30T08:43:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adibmiral.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09a-c988-4015-964f-4cc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:06.000Z",
            "modified": "2015-09-30T08:43:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0fe29f03e8a07f37dcc6a71682050fd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09a-5f3c-4d19-bfe9-489e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:06.000Z",
            "modified": "2015-09-30T08:43:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adigoldinnnn.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09a-c0e4-4280-b151-43e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:06.000Z",
            "modified": "2015-09-30T08:43:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0fe9f9827417a65a62d3e33e71774936']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09a-5c08-44c6-8672-4000950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:06.000Z",
            "modified": "2015-09-30T08:43:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adikinzor.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09a-efe0-4838-b686-422a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:06.000Z",
            "modified": "2015-09-30T08:43:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0fec733f48e0e80dc2e0801992843b72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09b-9150-4afe-87f7-4fb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:07.000Z",
            "modified": "2015-09-30T08:43:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adminhostingman.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09b-4adc-491e-b11d-4705950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:07.000Z",
            "modified": "2015-09-30T08:43:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ff04ff87f78ae28632a78b2841c1ee5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09b-3208-4dfd-a211-4328950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:07.000Z",
            "modified": "2015-09-30T08:43:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adobob.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09b-3434-4f03-9de4-48da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:07.000Z",
            "modified": "2015-09-30T08:43:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ff214e9a0c6fb76146361dfd88dd271']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09b-0440-400d-bd04-4cf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:07.000Z",
            "modified": "2015-09-30T08:43:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adsonmax1999.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09c-40b4-41b1-95f3-44bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:08.000Z",
            "modified": "2015-09-30T08:43:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '0ff725213b4539973e830a8529908c34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09c-c160-494f-8556-44ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:08.000Z",
            "modified": "2015-09-30T08:43:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'adv1232.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09c-ada8-49e8-a242-4de3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:08.000Z",
            "modified": "2015-09-30T08:43:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1011470b2deef30c1cded5b2144e4227']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09c-981c-4e75-8e8a-487e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:08.000Z",
            "modified": "2015-09-30T08:43:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'advertizer09.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09c-42b4-4971-af0a-4214950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:08.000Z",
            "modified": "2015-09-30T08:43:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '101d428c1dc243bbefca84246a5437b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09c-5454-4fe6-be33-44bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:08.000Z",
            "modified": "2015-09-30T08:43:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aemafik321.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09d-6d78-4096-b28d-42b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:09.000Z",
            "modified": "2015-09-30T08:43:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1022b2fda549028aa4c756913e29d24e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09d-1eb8-45a7-a692-4994950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:09.000Z",
            "modified": "2015-09-30T08:43:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'afsfersder132.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09d-2234-4d87-bbf1-4192950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:09.000Z",
            "modified": "2015-09-30T08:43:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '102a845fceedbdc67fa86301c378375a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09d-6c60-46a7-ae59-421c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:09.000Z",
            "modified": "2015-09-30T08:43:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'againvlad.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09d-d618-4d6d-bcbb-4d3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:09.000Z",
            "modified": "2015-09-30T08:43:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '102a92f7eed769627d35dd979ce87f1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09e-8c78-4ba7-b3b4-4ca3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:10.000Z",
            "modified": "2015-09-30T08:43:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ago1337.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09e-a040-452e-b8ce-46b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:10.000Z",
            "modified": "2015-09-30T08:43:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10330c189375a4493f4110d1014517a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09e-d1f4-43b4-a1f3-41a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:10.000Z",
            "modified": "2015-09-30T08:43:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'agresiv111.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09e-ef98-4841-b48e-41e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:10.000Z",
            "modified": "2015-09-30T08:43:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '103845254d9edceec19971976e8165ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09e-029c-4030-bebf-4727950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:10.000Z",
            "modified": "2015-09-30T08:43:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'agrmods.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09e-5498-475f-a126-4386950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:10.000Z",
            "modified": "2015-09-30T08:43:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1039142a7cc38b819dc7288c70da1124']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09f-b44c-4043-aea9-42e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:11.000Z",
            "modified": "2015-09-30T08:43:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ahmedezzat119.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09f-3470-4ef0-b21e-4f0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:11.000Z",
            "modified": "2015-09-30T08:43:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '104051e87a226513133a111cd21fae2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09f-7cd4-482e-ab83-4ada950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:11.000Z",
            "modified": "2015-09-30T08:43:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ahmethonor.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09f-8bdc-463b-bb84-4987950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:11.000Z",
            "modified": "2015-09-30T08:43:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10463a8c4e0dc17dd618ddc3b9e2840a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09f-7c5c-4451-8862-47de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:11.000Z",
            "modified": "2015-09-30T08:43:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ahmetkaya55.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba09f-0ec8-4826-a60b-4bba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:11.000Z",
            "modified": "2015-09-30T08:43:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '104769deac84abcfdc798f1915d21a61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a0-22c0-4ee3-b37c-4b23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:12.000Z",
            "modified": "2015-09-30T08:43:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aidin-korekhar.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a0-e624-4db7-8f09-49f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:12.000Z",
            "modified": "2015-09-30T08:43:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '104f0a6f350651bc64350d2f01e91b00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a0-5598-4885-acf5-439e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:12.000Z",
            "modified": "2015-09-30T08:43:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ailoaosi35.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a0-c210-4798-aea2-4623950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:12.000Z",
            "modified": "2015-09-30T08:43:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1058b68bf7efd26cc45beb17db343fda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a0-a514-4fba-9eac-4817950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:12.000Z",
            "modified": "2015-09-30T08:43:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aim.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a1-68b8-43b4-924a-4c5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:13.000Z",
            "modified": "2015-09-30T08:43:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1059a3a85915136a3d6cc87c87edf6ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a1-04f4-42f9-a9ad-4693950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:13.000Z",
            "modified": "2015-09-30T08:43:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aimseries.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a1-3910-4e2a-b744-4844950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:13.000Z",
            "modified": "2015-09-30T08:43:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '107119606c8ebc807661925aacc995f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a1-b024-4960-abd7-429e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:13.000Z",
            "modified": "2015-09-30T08:43:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aimz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a1-bddc-4a08-b8c2-425d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:13.000Z",
            "modified": "2015-09-30T08:43:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '107936c99efebfeab44cc1fec20ca45e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a2-fb44-4b6a-a469-4f89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:14.000Z",
            "modified": "2015-09-30T08:43:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aizen.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a2-e0e0-406b-b6c0-4ec0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:14.000Z",
            "modified": "2015-09-30T08:43:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '108157a5d7d20404c9ab80cf9b7ade77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a2-5b90-44a8-843e-46e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:14.000Z",
            "modified": "2015-09-30T08:43:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ajanlar25.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a2-04f8-4dec-a05a-4532950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:14.000Z",
            "modified": "2015-09-30T08:43:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '108f04ea17dbbe0cd8030eed06a3fe3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a2-aa5c-4d03-bd23-4b28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:14.000Z",
            "modified": "2015-09-30T08:43:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'akapoulko.ignorelist.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a2-890c-44dd-8295-419b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:14.000Z",
            "modified": "2015-09-30T08:43:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1094165653112f496e2d6c5df77c78f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a3-8ae8-44ee-ba69-48cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:15.000Z",
            "modified": "2015-09-30T08:43:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'akerdebola.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a3-f550-46fb-bf18-4341950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:15.000Z",
            "modified": "2015-09-30T08:43:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10a251fd5c9aca3aef67acf9b6670803']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a3-1f08-46c0-af38-4e9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:15.000Z",
            "modified": "2015-09-30T08:43:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'akerebola.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a3-6eec-499e-b2a6-42de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:15.000Z",
            "modified": "2015-09-30T08:43:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10a60cd34f7678186092f8a37da5a749']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a3-4e08-40c2-91ae-4f8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:15.000Z",
            "modified": "2015-09-30T08:43:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'akjfnkl.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a3-568c-4c38-b831-4e26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:15.000Z",
            "modified": "2015-09-30T08:43:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10c34043cf4dce528d824daab5b022d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a4-35fc-4d79-bd05-4990950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:16.000Z",
            "modified": "2015-09-30T08:43:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'akpakoltd.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a4-5b88-46ab-b9bb-4417950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:16.000Z",
            "modified": "2015-09-30T08:43:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10c71ce4533562a004c3f881ddc27e17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a4-0ab0-4575-824e-4ee7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:16.000Z",
            "modified": "2015-09-30T08:43:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aksiyon111.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a4-8e6c-4e51-94d3-418d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:16.000Z",
            "modified": "2015-09-30T08:43:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10d7f6530dc2d72ecb8f5d4ed0ef79c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a4-09b4-4352-8a29-4270950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:16.000Z",
            "modified": "2015-09-30T08:43:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aladain10.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a4-e55c-4b7a-8b2d-4e89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:16.000Z",
            "modified": "2015-09-30T08:43:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10e5cb4c43f90baa7bd2133eb7d57eaf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a5-05c8-4140-954a-4cc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:17.000Z",
            "modified": "2015-09-30T08:43:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alankpot9900.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a5-edb0-4cb4-bd9d-47e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:17.000Z",
            "modified": "2015-09-30T08:43:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10ed1862b172b617533f06c7e6314c2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a5-35ac-4e3e-9e1b-41c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:17.000Z",
            "modified": "2015-09-30T08:43:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alanwake2634.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a5-fdf0-49a3-8a2d-43ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:17.000Z",
            "modified": "2015-09-30T08:43:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10ff215f47386db111f190f646684a44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a5-5680-4cd2-963d-480c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:17.000Z",
            "modified": "2015-09-30T08:43:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alawi19991212.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a6-2f68-4e78-b0dd-4c85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:18.000Z",
            "modified": "2015-09-30T08:43:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '10ff68c7246a8e5cc615814160221a8d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a6-f4dc-43ab-910a-4e86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:18.000Z",
            "modified": "2015-09-30T08:43:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'albiert07.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a6-12a8-456a-951e-4097950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:18.000Z",
            "modified": "2015-09-30T08:43:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1100a5a8888310601d723d605ac43f41']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a6-4ab4-4ed6-8a9a-4fef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:18.000Z",
            "modified": "2015-09-30T08:43:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alekseygo1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a6-72f4-41c9-833b-4668950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:18.000Z",
            "modified": "2015-09-30T08:43:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '110f011a8a87607f85ddd483df7eeef7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a6-1610-40a5-8847-4cb8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:18.000Z",
            "modified": "2015-09-30T08:43:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alertdarkangel1.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a7-06d4-4ea8-b103-4d30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:19.000Z",
            "modified": "2015-09-30T08:43:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1114243fa80ad1e49dac1f5470db9525']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a7-4dc4-42f9-8d9e-4b8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:19.000Z",
            "modified": "2015-09-30T08:43:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aleshahasker228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a7-8690-4c21-8e12-4f7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:19.000Z",
            "modified": "2015-09-30T08:43:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '111449f0611950b2f965c53730d43fa0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a7-e448-4449-9acc-407d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:19.000Z",
            "modified": "2015-09-30T08:43:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aleshkadvad.ddns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a7-ff60-4c6c-957a-4866950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:19.000Z",
            "modified": "2015-09-30T08:43:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '111615858ee05a4ec87112c02bb136d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a8-2a10-4372-b2f8-4ebd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:20.000Z",
            "modified": "2015-09-30T08:43:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alex2729.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a8-6b04-46a5-a57f-4538950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:20.000Z",
            "modified": "2015-09-30T08:43:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '111d4d3f717132b689f316ca1c00c356']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a8-42cc-46b3-9f1a-4d2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:20.000Z",
            "modified": "2015-09-30T08:43:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alex2829.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a8-b678-4ca0-b000-4378950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:20.000Z",
            "modified": "2015-09-30T08:43:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1128299cd130aa4559022455ad162d7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a8-2894-4caa-975c-4eba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:20.000Z",
            "modified": "2015-09-30T08:43:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alex911345345.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a8-365c-45ff-958f-4ffb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:20.000Z",
            "modified": "2015-09-30T08:43:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11446a77b28aeda3699393a953475995']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a9-f010-414a-921d-49c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:21.000Z",
            "modified": "2015-09-30T08:43:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alexeyme.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a9-c5e0-40bc-ac08-4509950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:21.000Z",
            "modified": "2015-09-30T08:43:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '114b46bb340bd8a8659da35a4e2ec9a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a9-4ac0-431c-8489-468a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:21.000Z",
            "modified": "2015-09-30T08:43:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alexfromm.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a9-6e34-44c3-8b2e-4b3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:21.000Z",
            "modified": "2015-09-30T08:43:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '114ea56b18e032cac371c1fa0dcc19d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a9-3cd8-44a3-a7d7-4f41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:21.000Z",
            "modified": "2015-09-30T08:43:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alexs86.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0a9-41b0-4302-9a94-4599950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:21.000Z",
            "modified": "2015-09-30T08:43:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '115f0938798ac4cce3bcf96a5353bccb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0aa-be3c-48b1-beb9-40aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:22.000Z",
            "modified": "2015-09-30T08:43:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alexthegod.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0aa-cc20-4f97-9c24-42fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:22.000Z",
            "modified": "2015-09-30T08:43:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11678939ce1925e3e53dfe496f6f0a8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0aa-561c-4565-978a-4fb5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:22.000Z",
            "modified": "2015-09-30T08:43:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alexxxx890.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0aa-06e4-4231-acaf-4612950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:22.000Z",
            "modified": "2015-09-30T08:43:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '116b07143abdb2efcac1fe7b368275cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0aa-4550-401e-960d-4fd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:22.000Z",
            "modified": "2015-09-30T08:43:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alger.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ab-06dc-4a82-8e6a-45f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:23.000Z",
            "modified": "2015-09-30T08:43:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '116c17f1a07bca892c37d120255db161']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ab-cb4c-42b2-a6a4-4581950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:23.000Z",
            "modified": "2015-09-30T08:43:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ali1380.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ab-3474-476e-8ed7-48e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:23.000Z",
            "modified": "2015-09-30T08:43:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1170cc36d0d4a6b5d35e380eeaddaaee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ab-9004-4581-b658-4b23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:23.000Z",
            "modified": "2015-09-30T08:43:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aliaytan.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ab-4de8-434f-b175-4e71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:23.000Z",
            "modified": "2015-09-30T08:43:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1173aa4a118ed82d277ff67a6323b93f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ac-f49c-4327-b323-4688950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:24.000Z",
            "modified": "2015-09-30T08:43:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alicanhack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ac-19a8-453f-aeda-416d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:24.000Z",
            "modified": "2015-09-30T08:43:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '117cbfcfe9bdd225ca0ace76f39c4a65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ac-701c-42b4-824f-48d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:24.000Z",
            "modified": "2015-09-30T08:43:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alien322.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ac-ff44-4941-bf82-4b54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:24.000Z",
            "modified": "2015-09-30T08:43:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '117d8245f797736e35b58303ef8da6fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ac-8d64-404f-a148-4aa7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:24.000Z",
            "modified": "2015-09-30T08:43:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alienware123.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ac-48f8-4226-9c8f-4f45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:24.000Z",
            "modified": "2015-09-30T08:43:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '118eab39ec64f864f2a49557aa01a9b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ad-d960-4239-870c-46ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:25.000Z",
            "modified": "2015-09-30T08:43:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alienwarsceph.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ad-8ff4-43c9-878a-4e3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:25.000Z",
            "modified": "2015-09-30T08:43:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '119c1026f2b701287abec1dc977e9e39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ad-1fb8-4b4f-93c9-4e22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:25.000Z",
            "modified": "2015-09-30T08:43:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alinasser17.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ad-bcf4-4e8b-a4e2-4492950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:25.000Z",
            "modified": "2015-09-30T08:43:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11a104d825feec4054870378b8ee0261']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ad-6b6c-4279-9522-464b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:25.000Z",
            "modified": "2015-09-30T08:43:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'allah123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ad-4e18-45c2-a712-4e4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:25.000Z",
            "modified": "2015-09-30T08:43:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11a4bf8718b0e503238ad04acb09cee6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ae-75b8-4d3e-9991-4850950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:26.000Z",
            "modified": "2015-09-30T08:43:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'allahakbar.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ae-9c30-40c6-b0c7-46c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:26.000Z",
            "modified": "2015-09-30T08:43:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11a9075f71d4911b8cbb55fe22fe1f6b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ae-2590-4b78-a5fa-4425950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:26.000Z",
            "modified": "2015-09-30T08:43:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'allfiles.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ae-0304-463e-9e30-4c3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:26.000Z",
            "modified": "2015-09-30T08:43:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11ace6a609b7ca3d89c79841c5067df9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ae-8db8-422e-a7ad-4baf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:26.000Z",
            "modified": "2015-09-30T08:43:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alnahdaresort.dyndns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0af-f168-4db8-8247-46c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:27.000Z",
            "modified": "2015-09-30T08:43:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11b0ad24644c20cd5eb1db7299c9a7dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0af-fed4-4691-a9bc-4170950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:27.000Z",
            "modified": "2015-09-30T08:43:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alol32.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0af-807c-47f9-a4b2-484a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:27.000Z",
            "modified": "2015-09-30T08:43:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11b9bfad918752374af5a26f80f997ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0af-1f08-4d27-99e2-4a5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:27.000Z",
            "modified": "2015-09-30T08:43:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alpagutta.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0af-d7a0-46c5-bf77-48f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:27.000Z",
            "modified": "2015-09-30T08:43:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11c65c1f6463b5afc84356fd256c30c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0af-ad6c-4bb5-9b4b-4ed5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:27.000Z",
            "modified": "2015-09-30T08:43:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alperkutay.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b0-b3c0-45ba-8cec-4d90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:28.000Z",
            "modified": "2015-09-30T08:43:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11c8d1ca1d607846c64113f6a2757353']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b0-6888-4970-877b-4b44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:28.000Z",
            "modified": "2015-09-30T08:43:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alphabetadelta.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b0-d378-48ad-bf34-4d55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:28.000Z",
            "modified": "2015-09-30T08:43:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11ca337a09c6e0bf93cf7e400e6fe879']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b0-3e90-4ba1-b00b-4394950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:28.000Z",
            "modified": "2015-09-30T08:43:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alphabossreyiz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b0-11dc-47ca-98e7-4457950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:28.000Z",
            "modified": "2015-09-30T08:43:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11e1f3b6de4b3508e65f9eab8e906285']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b1-41c8-4a32-8d00-4be0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:29.000Z",
            "modified": "2015-09-30T08:43:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alphabossreyiz.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b1-f318-4009-9bc1-4b63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:29.000Z",
            "modified": "2015-09-30T08:43:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11e2302467fb03270b2d30037cf4fabb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b1-9c78-4ac1-bcfa-4df5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:29.000Z",
            "modified": "2015-09-30T08:43:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alufelge.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b1-45b0-4853-876e-4d5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:29.000Z",
            "modified": "2015-09-30T08:43:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11ea3c3d569686d51ec1b45f2e8797d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b1-5310-4138-be04-4510950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:29.000Z",
            "modified": "2015-09-30T08:43:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'alyan245.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b1-4d00-446a-a0e7-4e33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:29.000Z",
            "modified": "2015-09-30T08:43:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11eccca516ef790516d4fa11c98dfc24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b2-54a8-4b44-b0dd-4576950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:30.000Z",
            "modified": "2015-09-30T08:43:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'amayrevine.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b2-b418-49aa-802d-4210950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:30.000Z",
            "modified": "2015-09-30T08:43:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11f4287e5da06a9da233a22f9d08d414']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b2-0360-4701-b4ea-496a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:30.000Z",
            "modified": "2015-09-30T08:43:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aminakoyim1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b2-5854-4fdf-b20d-4e77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:30.000Z",
            "modified": "2015-09-30T08:43:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '11f7d83652baca6051dee6f8f53284e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b2-93b8-4770-af9d-4703950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:30.000Z",
            "modified": "2015-09-30T08:43:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'amine1996.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b2-a230-4835-9c88-43fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:30.000Z",
            "modified": "2015-09-30T08:43:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '121d2ef2f440345d2fdf63f400c01c5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b3-8140-41c2-b676-4cde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:31.000Z",
            "modified": "2015-09-30T08:43:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'amira87.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b3-41c4-46bf-a34b-4550950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:31.000Z",
            "modified": "2015-09-30T08:43:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1236cb72045b4d469619e1a0da813463']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b3-0154-46c7-b0c9-449e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:31.000Z",
            "modified": "2015-09-30T08:43:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ammaramame.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b3-6660-475b-a89d-474e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:31.000Z",
            "modified": "2015-09-30T08:43:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1241eaa7d4d1d8487a298c68dbecbe99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b3-0a74-412b-8fcf-4043950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:31.000Z",
            "modified": "2015-09-30T08:43:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'amokhaled.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b4-0e50-4ef8-9980-45ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:32.000Z",
            "modified": "2015-09-30T08:43:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '124e0b6b0dfea2b6a4833ed8897e60ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b4-dea0-4a2c-828a-415e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:32.000Z",
            "modified": "2015-09-30T08:43:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'amschennikov.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b4-419c-4b25-807c-4979950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:32.000Z",
            "modified": "2015-09-30T08:43:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '125872aa06074e6f6259a7c04a57d294']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b4-cdd8-4dca-9efe-4ccc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:32.000Z",
            "modified": "2015-09-30T08:43:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anaconda32.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b4-0f58-4819-8eb9-4560950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:32.000Z",
            "modified": "2015-09-30T08:43:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '125ec728774e45b2bf3fe79056810617']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b5-9654-4139-beab-4e4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:33.000Z",
            "modified": "2015-09-30T08:43:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'analnecmi.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b5-d8a4-4565-a2c5-4cfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:33.000Z",
            "modified": "2015-09-30T08:43:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '126b9ca76708c7ef0e0f0d25598c45c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b5-f480-4d0a-b252-413c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:33.000Z",
            "modified": "2015-09-30T08:43:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ananbaban.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b5-ee44-40b6-9501-4e04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:33.000Z",
            "modified": "2015-09-30T08:43:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12729e29360518f71a34ba23fc115a26']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b5-f47c-49c1-9b47-4501950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:33.000Z",
            "modified": "2015-09-30T08:43:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anansiqem.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b5-19e4-486b-a748-496e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:33.000Z",
            "modified": "2015-09-30T08:43:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '127f911afc7f42af1525fa4b1260bfb3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b6-3fd0-4238-a3d4-4368950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:34.000Z",
            "modified": "2015-09-30T08:43:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'andreasotrelos.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b6-3f30-467e-87ea-49c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:34.000Z",
            "modified": "2015-09-30T08:43:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1289a100f9247573455fa5453042d754']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b6-6258-4859-bbee-4db9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:34.000Z",
            "modified": "2015-09-30T08:43:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'andrehacker87.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b6-dc04-4318-b7e3-4718950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:34.000Z",
            "modified": "2015-09-30T08:43:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1290ee99c4be43d936712ebfe87c9dde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b6-cf24-4264-b252-47c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:34.000Z",
            "modified": "2015-09-30T08:43:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'andrifran123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b6-848c-4a70-a350-4ce0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:34.000Z",
            "modified": "2015-09-30T08:43:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1293dd44f5a47ee627cd8d6b0a55465e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b7-fde8-4492-8bb9-473d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:35.000Z",
            "modified": "2015-09-30T08:43:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'android56.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b7-303c-431d-8d50-454c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:35.000Z",
            "modified": "2015-09-30T08:43:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12a92e1a3bd200d7bc7ec2bdab9e3a5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b7-9510-4100-a25d-4754950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:35.000Z",
            "modified": "2015-09-30T08:43:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'androrat123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b7-4400-421c-a286-49dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:35.000Z",
            "modified": "2015-09-30T08:43:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12ad8b1e3ff3377084a938bc81ef2c37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b7-50c4-49bd-909c-4146950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:35.000Z",
            "modified": "2015-09-30T08:43:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'andryano.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b8-e610-40da-a9b9-4747950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:36.000Z",
            "modified": "2015-09-30T08:43:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12ad9087863ebbb5d3056b66bacae3dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b8-81a4-465a-9d0a-4b2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:36.000Z",
            "modified": "2015-09-30T08:43:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'andytheslayer.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b8-ec78-48ec-ac54-41ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:36.000Z",
            "modified": "2015-09-30T08:43:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12b0c8c6f84c1dbdf42b46c7393497f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b8-c230-42e0-9b02-4a86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:36.000Z",
            "modified": "2015-09-30T08:43:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'angel110499.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b8-dc4c-444b-b073-4c59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:36.000Z",
            "modified": "2015-09-30T08:43:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12b9d7da9264f610b05173fbfa947a68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b9-af14-4b8f-b053-4029950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:37.000Z",
            "modified": "2015-09-30T08:43:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'angelx92.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b9-b8a4-46e9-aa43-4977950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:37.000Z",
            "modified": "2015-09-30T08:43:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12baceea670cb7d612418d5f0966ba4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b9-4d10-4026-af8e-4034950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:37.000Z",
            "modified": "2015-09-30T08:43:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'angryyoungman.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b9-fd6c-4f57-8101-4c37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:37.000Z",
            "modified": "2015-09-30T08:43:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12c627eed4bcf515a42d32611f9df85f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b9-e9c4-42a0-913c-4488950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:37.000Z",
            "modified": "2015-09-30T08:43:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anhi1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0b9-6e68-49e1-a0b6-401f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:37.000Z",
            "modified": "2015-09-30T08:43:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12caee2644989fcafbc7267c7d328213']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ba-9098-4e8f-9012-407f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:38.000Z",
            "modified": "2015-09-30T08:43:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'animebro.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ba-f9e4-4728-84d5-4fc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:38.000Z",
            "modified": "2015-09-30T08:43:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12d4cd68bf25467d7860814bdbbd33d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ba-2880-4c14-97e9-4bd1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:38.000Z",
            "modified": "2015-09-30T08:43:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anmar.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ba-a0e4-4097-9952-4f9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:38.000Z",
            "modified": "2015-09-30T08:43:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12e631b484d1d9b46335a33060bc10a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ba-e924-4ce7-93b7-4830950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:38.000Z",
            "modified": "2015-09-30T08:43:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anon99.dyndns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ba-cd34-4088-a11d-48c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:38.000Z",
            "modified": "2015-09-30T08:43:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12e8655990334954b21ac221d34cfd3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bb-c424-402b-bc3d-4912950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:39.000Z",
            "modified": "2015-09-30T08:43:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonemo.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bb-f9a8-49ca-9e9a-4cdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:39.000Z",
            "modified": "2015-09-30T08:43:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12ee9eb7c827cfda693e178fbb6b3e50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bb-17a4-4077-8a05-4be8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:39.000Z",
            "modified": "2015-09-30T08:43:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonghost404.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bb-6c98-4971-9c15-4ccf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:39.000Z",
            "modified": "2015-09-30T08:43:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '12f7fe18a33036c127284fe8511c0503']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bb-c944-43d0-9cec-4602950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:39.000Z",
            "modified": "2015-09-30T08:43:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonim8989.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bc-9fc4-4bec-af6f-40b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:40.000Z",
            "modified": "2015-09-30T08:43:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '130e3df214cbf80f9a7a25f1c809c98b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bc-3f68-4352-ae19-4ff3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:40.000Z",
            "modified": "2015-09-30T08:43:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonnzz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bc-e5e4-4dbe-8830-4eeb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:40.000Z",
            "modified": "2015-09-30T08:43:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1311283951a8e409519f04f715f15ce8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bc-d7cc-4fe8-b872-456f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:40.000Z",
            "modified": "2015-09-30T08:43:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonraties.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bc-78e4-4cca-9b2e-41de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:40.000Z",
            "modified": "2015-09-30T08:43:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1316f9efd2b3ca3df3fd553b379e8c58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bc-65fc-4b20-8a81-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:40.000Z",
            "modified": "2015-09-30T08:43:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonsec1337.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bd-4c54-4c46-9660-4923950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:41.000Z",
            "modified": "2015-09-30T08:43:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '131988e42d08e601cbb148511515fed6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bd-fd44-4670-ac64-4c19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:41.000Z",
            "modified": "2015-09-30T08:43:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonv2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bd-a4a0-48d6-aebd-40ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:41.000Z",
            "modified": "2015-09-30T08:43:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1319bcf1470a4a01222abc43dcdc3e4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bd-980c-4a17-b49b-4d29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:41.000Z",
            "modified": "2015-09-30T08:43:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonworld801.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bd-fce8-4b24-8613-42c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:41.000Z",
            "modified": "2015-09-30T08:43:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1328829d1b55b8d132ba9a6dd360dec4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0be-ea0c-457a-9fdf-4d67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:42.000Z",
            "modified": "2015-09-30T08:43:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anony-hacker.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0be-0770-4aa6-916b-473d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:42.000Z",
            "modified": "2015-09-30T08:43:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '133189a55aee5e841cb5b547f77912ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0be-9d50-4af3-8987-401c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:42.000Z",
            "modified": "2015-09-30T08:43:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonyme74981.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0be-74d8-4a12-9772-4c71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:42.000Z",
            "modified": "2015-09-30T08:43:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '133580c3cd9febd92394c94de4a3458b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0be-d3b4-413a-b711-470f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:42.000Z",
            "modified": "2015-09-30T08:43:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonymous001.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0be-aaf4-4a4e-b294-4277950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:42.000Z",
            "modified": "2015-09-30T08:43:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1335ca1eba3c1b9f009af6c6f34332d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bf-998c-43b3-b215-4327950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:43.000Z",
            "modified": "2015-09-30T08:43:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonymous5513.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bf-2f48-4cbc-831b-4cf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:43.000Z",
            "modified": "2015-09-30T08:43:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '133a73ae38134bead44f13ec1a4ef981']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bf-dff8-49f7-8b54-4b8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:43.000Z",
            "modified": "2015-09-30T08:43:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonymousso.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bf-138c-420e-91f3-487d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:43.000Z",
            "modified": "2015-09-30T08:43:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '133b563a38f19d86c25b5eb582d6dbb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0bf-0680-4e72-9cef-4446950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:43.000Z",
            "modified": "2015-09-30T08:43:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonymoussoo.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c0-d8ac-4375-8198-43bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:44.000Z",
            "modified": "2015-09-30T08:43:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1349320d6c3c5026a9966de9d31cc164']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c0-5410-4ebb-a629-4f54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:44.000Z",
            "modified": "2015-09-30T08:43:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonytoyuops.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c0-070c-4f6a-886a-42f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:44.000Z",
            "modified": "2015-09-30T08:43:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '134a5fb2f9b2df05a1dcee2c680b8ea3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c0-b82c-4629-9b98-446b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:44.000Z",
            "modified": "2015-09-30T08:43:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anonyumoustest.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c0-dccc-44a5-98f7-4f9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:44.000Z",
            "modified": "2015-09-30T08:43:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1356b1861992ffce9e45329b66dfa7ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c1-ca30-49ba-b62c-40dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:45.000Z",
            "modified": "2015-09-30T08:43:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anthonin24.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c1-121c-46a4-8f81-4709950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:45.000Z",
            "modified": "2015-09-30T08:43:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13691196487229ea978ebcb627ebd387']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c1-df50-47f8-9612-457e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:45.000Z",
            "modified": "2015-09-30T08:43:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'antiddos.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c1-6fa4-426a-a1af-40cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:45.000Z",
            "modified": "2015-09-30T08:43:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13724f7dca10ad0c4cd8e41c13f15a0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c1-d694-4fe7-a95e-4f2f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:45.000Z",
            "modified": "2015-09-30T08:43:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'antihack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c1-2400-41c6-b6cb-43f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:45.000Z",
            "modified": "2015-09-30T08:43:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1374970ab2a3f36a64254cf3d78536aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c2-4920-4d99-8d17-4ed4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:46.000Z",
            "modified": "2015-09-30T08:43:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'antiyaxx.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c2-1884-4a36-b9e9-40ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:46.000Z",
            "modified": "2015-09-30T08:43:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '137c95968d81196a6566f67bef638c4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c2-6fcc-49d9-881c-481e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:46.000Z",
            "modified": "2015-09-30T08:43:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'antonraskidnoi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c2-d510-4ec2-868b-4c09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:46.000Z",
            "modified": "2015-09-30T08:43:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '137ff69ac1b853930e9e4f49733a734d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c2-57b0-453a-bbfc-4a7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:46.000Z",
            "modified": "2015-09-30T08:43:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'antp.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c3-f794-44ea-a481-41f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:47.000Z",
            "modified": "2015-09-30T08:43:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1383d5fba86acff32d394b05dc228dc2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c3-2d08-4a1e-ba94-4176950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:47.000Z",
            "modified": "2015-09-30T08:43:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'anwermner.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c3-3a64-45cb-bc4c-4578950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:47.000Z",
            "modified": "2015-09-30T08:43:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '138814329190e4bedac7d75bc0faec94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c3-32ec-4b73-a77f-4e61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:47.000Z",
            "modified": "2015-09-30T08:43:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aoaagold.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c3-069c-4e4c-8c00-45b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:47.000Z",
            "modified": "2015-09-30T08:43:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '138818b2dd759fe01e457e64aefba33d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c3-ec88-48ab-9119-406c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:47.000Z",
            "modified": "2015-09-30T08:43:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aoaagoldsocial.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c4-71d0-4f5f-b4af-4ed1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:48.000Z",
            "modified": "2015-09-30T08:43:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '138af6e9a445edfceab76775f0958a1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c4-b400-4c42-a7a5-4b1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:48.000Z",
            "modified": "2015-09-30T08:43:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'apax123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c4-2f00-47d7-9f2c-4184950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:48.000Z",
            "modified": "2015-09-30T08:43:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '138c828dd351006e993d3d42a2bc05f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c4-8b28-4968-8ebe-4cbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:48.000Z",
            "modified": "2015-09-30T08:43:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'apog4apog4.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c4-3990-4f76-b33f-4789950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:48.000Z",
            "modified": "2015-09-30T08:43:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13a32cf59a40d3ce9f82ed8b4163346f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c5-88e0-4425-9a4d-4caf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:49.000Z",
            "modified": "2015-09-30T08:43:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'appinhackers.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c5-7ac0-4b89-9698-4252950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:49.000Z",
            "modified": "2015-09-30T08:43:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13b09549bffd266dd342e0f572523741']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c5-a17c-4ecb-8a02-404a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:49.000Z",
            "modified": "2015-09-30T08:43:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'appleman.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c5-ae00-4a9b-9799-4060950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:49.000Z",
            "modified": "2015-09-30T08:43:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13b6aeecd95567d5fbdf9a061ec79916']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c5-d3b4-4dfd-9c62-4ed3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:49.000Z",
            "modified": "2015-09-30T08:43:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aptsite.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c5-eabc-4e79-a8af-4e9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:49.000Z",
            "modified": "2015-09-30T08:43:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13b6db509b0b9877bea30d30ca565dfe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c6-9970-4ba2-b1db-4f9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:50.000Z",
            "modified": "2015-09-30T08:43:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aqo.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c6-b0e0-459e-b3b2-4d76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:50.000Z",
            "modified": "2015-09-30T08:43:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13ba0d63cc54c410a3ea45a92dca0358']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c6-ca94-4e76-965c-4059950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:50.000Z",
            "modified": "2015-09-30T08:43:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aqtobe.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c6-dc74-4eb1-b5f9-41bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:50.000Z",
            "modified": "2015-09-30T08:43:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13bac490ab06825c7c75c10b18e0dd61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c6-e058-4c91-9b8a-4603950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:50.000Z",
            "modified": "2015-09-30T08:43:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aqwduc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c6-77f4-43c0-bcee-4777950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:50.000Z",
            "modified": "2015-09-30T08:43:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13d43764667995767128d540c9c07286']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c7-96a8-4aac-bcf8-46a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:51.000Z",
            "modified": "2015-09-30T08:43:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ar4h4n.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c7-4510-47c5-a1ae-4e2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:51.000Z",
            "modified": "2015-09-30T08:43:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13d644aaac3b161547ef583feb547a51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c7-3e44-4666-a279-4b62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:51.000Z",
            "modified": "2015-09-30T08:43:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'arasediz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c7-02d4-498e-8c98-409e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:51.000Z",
            "modified": "2015-09-30T08:43:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13d9e52ce76f6030f9042e9cebde4a46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c7-6494-419d-88b5-4e28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:51.000Z",
            "modified": "2015-09-30T08:43:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'arash232-2.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c8-3ce4-41a2-baf4-4799950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:52.000Z",
            "modified": "2015-09-30T08:43:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13dcfdb71c132c28cc80f6b23e06f5a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c8-1f0c-4371-b409-4d12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:52.000Z",
            "modified": "2015-09-30T08:43:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'arash232-2.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c8-afec-4661-a6ab-4120950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:52.000Z",
            "modified": "2015-09-30T08:43:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13e5657f988ede46613290234f96a36f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c8-6ef4-4f5a-a640-4299950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:52.000Z",
            "modified": "2015-09-30T08:43:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ardainallast55.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c8-cb44-46cf-9dbd-452f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:52.000Z",
            "modified": "2015-09-30T08:43:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13f86b6d597801e02a0bf33ed6dc245e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c9-d624-4135-a680-4c19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:53.000Z",
            "modified": "2015-09-30T08:43:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aresta55.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c9-6850-4cee-9ece-4c4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:53.000Z",
            "modified": "2015-09-30T08:43:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '13fb14bb145c81ce5d4c18c1a4201066']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c9-3bb8-4283-ae17-4f4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:53.000Z",
            "modified": "2015-09-30T08:43:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'arianxd.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c9-ac44-42bf-a87b-40fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:53.000Z",
            "modified": "2015-09-30T08:43:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1402d93254d563575f4f37e04d1612ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c9-e5b4-458e-997a-4a8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:53.000Z",
            "modified": "2015-09-30T08:43:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'arkaci.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0c9-8ae4-426b-9369-4e7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:53.000Z",
            "modified": "2015-09-30T08:43:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1402eb616360edb00dc13bc943de51c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ca-5bd0-4a3c-86d8-48b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:54.000Z",
            "modified": "2015-09-30T08:43:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'armyk.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ca-9698-4130-a74d-4e76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:54.000Z",
            "modified": "2015-09-30T08:43:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1413ebf8c5cd5e6c9dd8b2fe0adb1871']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ca-8634-44be-89da-49d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:54.000Z",
            "modified": "2015-09-30T08:43:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'arrivals.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ca-70cc-47fc-9b39-4a3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:54.000Z",
            "modified": "2015-09-30T08:43:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '141cfd22299ccf13da4005a2b5fae9a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ca-e2d8-4725-9ed9-423e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:54.000Z",
            "modified": "2015-09-30T08:43:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'arsenic-operations.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ca-3bec-4df7-ac9f-402e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:54.000Z",
            "modified": "2015-09-30T08:43:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '141e91362f202129a1480796d6dacaf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cb-a740-49b2-9c5b-407f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:55.000Z",
            "modified": "2015-09-30T08:43:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'artagal.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cb-8b1c-467c-90df-4e96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:55.000Z",
            "modified": "2015-09-30T08:43:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1420562c7d2d72dd8d75cbd5aab39105']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cb-3368-41a6-95d8-4c52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:55.000Z",
            "modified": "2015-09-30T08:43:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'artemriki.ddns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cb-d378-41b4-9aea-4632950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:55.000Z",
            "modified": "2015-09-30T08:43:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1420b81b17b490d2977c8bc20260bcc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cb-a5b0-4570-8344-4fae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:55.000Z",
            "modified": "2015-09-30T08:43:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'artina.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cc-4500-42d3-b2a8-4220950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:55.000Z",
            "modified": "2015-09-30T08:43:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '143da680e61b8ab7e25cc105ba9c50d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cc-4dd4-44db-9544-45f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:56.000Z",
            "modified": "2015-09-30T08:43:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'arturbik.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cc-02d8-4762-81c7-42d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:56.000Z",
            "modified": "2015-09-30T08:43:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1440a676c978d4aced4be56384a75457']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cc-a104-47a4-b604-4e1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:56.000Z",
            "modified": "2015-09-30T08:43:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'artutbik.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cc-5a00-4bf1-a120-4bc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:56.000Z",
            "modified": "2015-09-30T08:43:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14413732d4ca3546e9752ab32b041fc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cc-251c-47ef-9cfa-4baf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:56.000Z",
            "modified": "2015-09-30T08:43:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'arwynj55.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cd-88e0-4f9a-bbc4-462d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:57.000Z",
            "modified": "2015-09-30T08:43:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1444dcb42d9d13536d61e82b8d55a0de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cd-5d90-4a24-9291-40a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:57.000Z",
            "modified": "2015-09-30T08:43:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aryadanger.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cd-d718-4e9f-bd15-4371950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:57.000Z",
            "modified": "2015-09-30T08:43:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1448594b7981dbe4ac3521f898cdd870']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cd-0d28-4d47-b628-4532950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:57.000Z",
            "modified": "2015-09-30T08:43:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'asadhashmi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cd-93b8-4eeb-8286-4deb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:57.000Z",
            "modified": "2015-09-30T08:43:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '144d8bd49df681192634d250ef1ea099']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ce-6344-4768-aa6a-41cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:58.000Z",
            "modified": "2015-09-30T08:43:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'asdaaa.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ce-7864-4ba8-9d76-4172950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:58.000Z",
            "modified": "2015-09-30T08:43:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1456d685ed2ff7869a75a2464f9266e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ce-68f4-4f51-948c-4e34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:58.000Z",
            "modified": "2015-09-30T08:43:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'asdada.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ce-bf54-47d4-ade1-4e58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:58.000Z",
            "modified": "2015-09-30T08:43:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1457b6cbbbc3f959dfc1584608bfd288']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ce-a480-4fe1-a661-4105950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:58.000Z",
            "modified": "2015-09-30T08:43:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'asdasdasdsa.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ce-15b8-445c-a987-4608950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:58.000Z",
            "modified": "2015-09-30T08:43:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1463458570b93a725c4cb28900c58764']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cf-b49c-474d-89bd-400b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:59.000Z",
            "modified": "2015-09-30T08:43:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'asdsa191.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cf-5ea0-41f2-bbc8-40ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:59.000Z",
            "modified": "2015-09-30T08:43:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '146885ca82de65446d99773fd80fffae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cf-7bb8-411e-9e4e-4ef3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:59.000Z",
            "modified": "2015-09-30T08:43:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'asftp.serveftp.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cf-68fc-4c16-a8cc-40f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:59.000Z",
            "modified": "2015-09-30T08:43:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '146cbb9debfd17729da42ca9604440c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cf-1fc8-4578-97b6-42b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:59.000Z",
            "modified": "2015-09-30T08:43:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ashkantoxic.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0cf-9f98-4f61-8107-470f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:43:59.000Z",
            "modified": "2015-09-30T08:43:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '147167ac38bcbba397d3ed8736b0e6b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:43:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d0-1d38-49c3-800c-441d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:00.000Z",
            "modified": "2015-09-30T08:44:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ashran.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d0-2590-442e-abc2-4616950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:00.000Z",
            "modified": "2015-09-30T08:44:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14838817f2c4838825250b9d4c85fd67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d0-3108-4bc0-8bd8-44e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:00.000Z",
            "modified": "2015-09-30T08:44:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'asilkan123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d0-694c-4d52-9bd2-4a34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:00.000Z",
            "modified": "2015-09-30T08:44:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1487ca8db10e87ac833f9fa8f4b70813']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d0-42c0-4677-abe6-4dce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:00.000Z",
            "modified": "2015-09-30T08:44:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'asir0303.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d1-e334-4de7-a48f-4b9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:01.000Z",
            "modified": "2015-09-30T08:44:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1492c6fd432b2c8940684b780febf820']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d1-97d0-49d4-b0a1-4919950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:01.000Z",
            "modified": "2015-09-30T08:44:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'asizade3804.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d1-ac08-4476-9e9f-4c85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:01.000Z",
            "modified": "2015-09-30T08:44:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '149704a02d7058dfc1444fd3372de9b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d1-5358-4a83-aed1-436c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:01.000Z",
            "modified": "2015-09-30T08:44:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'askadro23.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d1-9748-45ac-8b2f-430a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:01.000Z",
            "modified": "2015-09-30T08:44:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14a1035cbd7e16478a7ca23ee090bbd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d2-3dc8-42ac-b25b-42da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:02.000Z",
            "modified": "2015-09-30T08:44:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aslox.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d2-c714-4e0a-8652-4a95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:02.000Z",
            "modified": "2015-09-30T08:44:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14a7230b7416fc33f18803d8260b787b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d2-3af8-408f-8ff7-46f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:02.000Z",
            "modified": "2015-09-30T08:44:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aspeaser123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d2-f5f4-4110-8cd5-41f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:02.000Z",
            "modified": "2015-09-30T08:44:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14aae1732e1ff2edfd3fd6fc3683493e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d2-851c-42de-98b8-48cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:02.000Z",
            "modified": "2015-09-30T08:44:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'assi20150625.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d2-c9c8-4af1-8ef0-44c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:02.000Z",
            "modified": "2015-09-30T08:44:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14b1360aaff35386ce56c8c4813e68ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d3-a3f4-43f4-b575-4eed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:03.000Z",
            "modified": "2015-09-30T08:44:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'assilkan123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d3-5aa8-4aad-9ccd-49a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:03.000Z",
            "modified": "2015-09-30T08:44:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14c1fdc96fe3b507f3908302faf4779c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d3-1954-458c-ad57-4de0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:03.000Z",
            "modified": "2015-09-30T08:44:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'astraldream.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d3-5c40-4a89-b1ba-4925950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:03.000Z",
            "modified": "2015-09-30T08:44:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14cc75358510898c80f28a97f3d85817']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d3-8194-409d-aaf8-4e23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:03.000Z",
            "modified": "2015-09-30T08:44:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'astrapcbilgisayar31.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d4-26fc-4fb6-8296-4df6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:04.000Z",
            "modified": "2015-09-30T08:44:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14d249c2d990645deed6788de8f944aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d4-06bc-471a-8b5b-4544950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:04.000Z",
            "modified": "2015-09-30T08:44:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'atesthostfortesting.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d4-b61c-4444-bb27-4a8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:04.000Z",
            "modified": "2015-09-30T08:44:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14ead4c5ad13d4c27d314fed283cd978']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d4-33d4-4553-86c5-4e7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:04.000Z",
            "modified": "2015-09-30T08:44:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'atifalikalwar.ddns.nat']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d4-ae40-4611-b9ff-48e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:04.000Z",
            "modified": "2015-09-30T08:44:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14f283e4d1dd1418ce546201d784b7ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d4-7188-4881-8caa-490a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:04.000Z",
            "modified": "2015-09-30T08:44:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'atifalikalwar.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d5-de3c-4a2d-bc66-42c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:05.000Z",
            "modified": "2015-09-30T08:44:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '14ff79d26cb17c50c3148940dc064b35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d5-3680-40c6-9aed-4cd4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:05.000Z",
            "modified": "2015-09-30T08:44:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'atom2002.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d5-2fb0-4368-b010-4fc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:05.000Z",
            "modified": "2015-09-30T08:44:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1505799c346f0fb2ad511ac295651f74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d5-0604-4762-af86-45a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:05.000Z",
            "modified": "2015-09-30T08:44:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'audi7099.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d5-6500-4922-a3ca-419a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:05.000Z",
            "modified": "2015-09-30T08:44:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1506f9ec228d68cd9123391b53385ccd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d6-71c8-4078-b212-446c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:06.000Z",
            "modified": "2015-09-30T08:44:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'aumzaza4.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d6-d764-402a-ace2-43eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:06.000Z",
            "modified": "2015-09-30T08:44:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '150a99be7af0bec6fb0a856a2b2444ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d6-4ba0-4558-9de8-49cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:06.000Z",
            "modified": "2015-09-30T08:44:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'austinfrenzy.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d6-fee4-4a1c-a836-4be7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:06.000Z",
            "modified": "2015-09-30T08:44:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '151439897278fb8ddefe7a4bdbb105fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d6-a424-4bad-9af7-461d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:06.000Z",
            "modified": "2015-09-30T08:44:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'autizm.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d6-c6b0-42eb-8103-495b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:06.000Z",
            "modified": "2015-09-30T08:44:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1518d658b3be1dc883eaba482371e64c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d7-9b00-45ee-afc5-45b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:07.000Z",
            "modified": "2015-09-30T08:44:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'auuvfaa.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d7-0584-4b2d-8f99-413b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:07.000Z",
            "modified": "2015-09-30T08:44:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '151eda2eb09d67fecaa1ee69d7e5a235']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d7-ebc8-4ecd-bde9-42d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:07.000Z",
            "modified": "2015-09-30T08:44:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'avast.serveminecraft.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d7-a290-4423-9549-46c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:07.000Z",
            "modified": "2015-09-30T08:44:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '151f2fc0a02f8cae7b89acdaff15dd3d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d7-8df4-42a3-88c2-4b29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:07.000Z",
            "modified": "2015-09-30T08:44:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'avgwindow.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d8-0554-4ac0-b4e3-4fb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:08.000Z",
            "modified": "2015-09-30T08:44:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15290fda5f88526345330cac919c0696']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d8-dce8-4629-b4ea-4b15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:08.000Z",
            "modified": "2015-09-30T08:44:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'avitadis.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d8-89e8-46ba-9c5a-471b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:08.000Z",
            "modified": "2015-09-30T08:44:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '152c3d58b8c5d1a9813cf7c5c99e540f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d8-4eb8-4e8f-bf23-4df0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:08.000Z",
            "modified": "2015-09-30T08:44:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'avvda56sda12s6.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d8-a060-4185-9419-46cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:08.000Z",
            "modified": "2015-09-30T08:44:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15384b9643d668d00d308abb0f9ca8e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d8-3ebc-474b-9515-4a95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:08.000Z",
            "modified": "2015-09-30T08:44:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'awdd.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d9-4a88-4ed0-8d33-4be0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:09.000Z",
            "modified": "2015-09-30T08:44:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '153889e18a50ce33ceeab4e936fe8131']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d9-1954-4a78-b474-4cea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:09.000Z",
            "modified": "2015-09-30T08:44:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'awesomeman.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d9-3fe8-42d4-b712-4399950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:09.000Z",
            "modified": "2015-09-30T08:44:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1542bce4ae2befc82c91d4f922671e70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d9-4314-4ce5-a7ed-47ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:09.000Z",
            "modified": "2015-09-30T08:44:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'awesomeman1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0d9-de80-4fb4-b251-412f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:09.000Z",
            "modified": "2015-09-30T08:44:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '154500e04cac0cdfd999eb78ab907840']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0da-9f10-44f7-8c9b-4747950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:09.000Z",
            "modified": "2015-09-30T08:44:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'axel140.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0da-76a4-484f-8f03-4fb8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:10.000Z",
            "modified": "2015-09-30T08:44:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '154a5481beaa49d360aa33ae21615d0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0da-b750-4dd1-8a2e-433b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:10.000Z",
            "modified": "2015-09-30T08:44:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ayabchraoui.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0da-70cc-4250-88b2-4a29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:10.000Z",
            "modified": "2015-09-30T08:44:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '154cd9645588dc8b9eac436e4fb53df5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0da-be84-46b8-8b99-4e50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:10.000Z",
            "modified": "2015-09-30T08:44:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ayazik237n6.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0da-b0c4-4511-8764-4839950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:10.000Z",
            "modified": "2015-09-30T08:44:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1551e41e48897b76836c3db6b947045e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0db-ceb4-4a13-8b94-4961950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:11.000Z",
            "modified": "2015-09-30T08:44:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ayoubwolf.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0db-ccf8-4f4e-b556-4791950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:11.000Z",
            "modified": "2015-09-30T08:44:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1557505559761336fc62e296775d6609']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0db-29dc-4250-8366-4f00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:11.000Z",
            "modified": "2015-09-30T08:44:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ayy.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0db-1dec-490d-9d97-4d4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:11.000Z",
            "modified": "2015-09-30T08:44:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1559eb503ab529be67bfb2801afd3e99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0db-96a8-47d7-8320-4ce6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:11.000Z",
            "modified": "2015-09-30T08:44:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ayylmao123.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0db-92a8-40b4-9515-4f67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:11.000Z",
            "modified": "2015-09-30T08:44:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15610f318c0ede3193792ea83fdd9456']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dc-ccfc-4a14-89a7-4bad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:12.000Z",
            "modified": "2015-09-30T08:44:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ayyrekt.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dc-a490-40dc-8a03-4930950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:12.000Z",
            "modified": "2015-09-30T08:44:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1576c10bd588d5ec4f22d43ed83fd2d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dc-df54-43ed-85f1-4c6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:12.000Z",
            "modified": "2015-09-30T08:44:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'azehns.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dc-b380-4a3f-ba61-4ca0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:12.000Z",
            "modified": "2015-09-30T08:44:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15932065b70ccc50bc65b06b7c80e868']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dc-5414-469e-ae90-4bdc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:12.000Z",
            "modified": "2015-09-30T08:44:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'azertyuiop.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dd-4d1c-4c9a-8b09-4009950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:13.000Z",
            "modified": "2015-09-30T08:44:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15ac1f21b82a872d747cdaa67b102db0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dd-7684-4a7e-9807-4f9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:13.000Z",
            "modified": "2015-09-30T08:44:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'b179.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dd-759c-4487-855d-495d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:13.000Z",
            "modified": "2015-09-30T08:44:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15bb1277e35d5dd2704283de3d937499']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dd-5390-4a08-9590-42d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:13.000Z",
            "modified": "2015-09-30T08:44:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'b345tguy005.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dd-4fc4-443b-b0c1-4bab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:13.000Z",
            "modified": "2015-09-30T08:44:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15bdcf68fa19caafb63d323accea4137']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0dd-c7e4-49de-8a67-4b05950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:13.000Z",
            "modified": "2015-09-30T08:44:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'babafirar.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0de-152c-4751-b63b-4959950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:14.000Z",
            "modified": "2015-09-30T08:44:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15cae8b30c28ed62789034e5d71d181c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0de-94d0-4658-acf1-4010950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:14.000Z",
            "modified": "2015-09-30T08:44:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'babuci13.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0de-48ec-478e-8f0f-47c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:14.000Z",
            "modified": "2015-09-30T08:44:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15e7aeaf4d7d2a2ff9406fa6a26cbc70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0de-d7c0-41a0-86a3-4949950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:14.000Z",
            "modified": "2015-09-30T08:44:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'backhost.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0de-f13c-4274-a989-4e75950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:14.000Z",
            "modified": "2015-09-30T08:44:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '15fef4c9ca1c969fa5321e430e1317a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0df-1bd0-4d3a-986d-4d06950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:15.000Z",
            "modified": "2015-09-30T08:44:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'backhost.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0df-6800-4638-8e80-4b93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:15.000Z",
            "modified": "2015-09-30T08:44:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '161eef26b267ce2d8bb4b94ed00d4345']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0df-2e18-4fc8-8325-462b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:15.000Z",
            "modified": "2015-09-30T08:44:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'backtrack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0df-40a0-4ae5-9762-4ccf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:15.000Z",
            "modified": "2015-09-30T08:44:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1623c0e3e298ff4a4e7b60db04dac56d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0df-eb5c-4ee2-bc88-4757950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:15.000Z",
            "modified": "2015-09-30T08:44:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'backtrack90.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0df-870c-4123-a8e0-46d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:15.000Z",
            "modified": "2015-09-30T08:44:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16294e7e7a848b1f05f0cc3da7085016']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e0-b2ec-423e-9fb4-4a90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:16.000Z",
            "modified": "2015-09-30T08:44:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'badstifler.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e0-6f08-45f4-b7f0-44d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:16.000Z",
            "modified": "2015-09-30T08:44:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '162ff00db0b87da32f69bf116d03f0cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e0-cd20-49fe-be62-41b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:16.000Z",
            "modified": "2015-09-30T08:44:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bagarian.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e0-8838-4ddc-a4ee-4563950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:16.000Z",
            "modified": "2015-09-30T08:44:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16347bbfdb957d4a2858087720779ad1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e0-9bc8-44a7-a07b-4e46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:16.000Z",
            "modified": "2015-09-30T08:44:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'baha60.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e0-0684-4d80-a14e-4464950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:16.000Z",
            "modified": "2015-09-30T08:44:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '164dc63f5ff44d943e280985df7e43ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e1-97b0-4b6e-9ac9-4bc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:17.000Z",
            "modified": "2015-09-30T08:44:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bajrak123.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e1-5ac8-40eb-9131-4ade950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:17.000Z",
            "modified": "2015-09-30T08:44:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1654ea6128edd32faf2c1515e062c35f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e1-3c0c-4229-a714-4c5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:17.000Z",
            "modified": "2015-09-30T08:44:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'baku2015.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e1-0d8c-492b-acbf-4b0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:17.000Z",
            "modified": "2015-09-30T08:44:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '165c02b96c16cf49d22439f8af2ca40c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e1-8900-42c3-8c5e-4657950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:17.000Z",
            "modified": "2015-09-30T08:44:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'balaku1990.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e2-f098-4517-aea5-427b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:18.000Z",
            "modified": "2015-09-30T08:44:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '165e7524c5002468dedaa51a0bbbbbcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e2-a5c0-42b8-b6f9-443a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:18.000Z",
            "modified": "2015-09-30T08:44:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'balaquente.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e2-645c-40a7-bde0-4089950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:18.000Z",
            "modified": "2015-09-30T08:44:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16712777f9a94fd0d83bb194daaf468d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e2-bab4-4679-81c6-4558950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:18.000Z",
            "modified": "2015-09-30T08:44:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'balaquente.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e2-c04c-4e96-a8bd-4b46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:18.000Z",
            "modified": "2015-09-30T08:44:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16722d0cc17608c5e0045718ca7b71e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e3-57bc-4047-b66b-432f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:19.000Z",
            "modified": "2015-09-30T08:44:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bananacraft.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e3-1590-488b-9ec0-4f4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:19.000Z",
            "modified": "2015-09-30T08:44:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '167346b67a7d4943c7709719cabde0de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e3-e370-44a4-a781-4172950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:19.000Z",
            "modified": "2015-09-30T08:44:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'banterpatrol.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e3-5aa8-43d6-84af-4cad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:19.000Z",
            "modified": "2015-09-30T08:44:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '167391cc9591a3140d558f52e6f19920']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e3-6874-4435-996b-41e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:19.000Z",
            "modified": "2015-09-30T08:44:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'baodijzc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e3-e974-45e0-b686-4070950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:19.000Z",
            "modified": "2015-09-30T08:44:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1675d423fa8089fc789e309512551615']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e4-dc44-4241-9881-4489950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:20.000Z",
            "modified": "2015-09-30T08:44:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'barann1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e4-6704-49cc-9913-460f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:20.000Z",
            "modified": "2015-09-30T08:44:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16776d5ec7f697bf88be4d7c840a09a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e4-80ec-4aaa-981a-4680950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:20.000Z",
            "modified": "2015-09-30T08:44:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'barbaratrad.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e4-aa74-4f15-b436-47fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:20.000Z",
            "modified": "2015-09-30T08:44:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '167cd5f2976313fab846eb0d04ce1039']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e4-188c-4bcd-b64b-4ab1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:20.000Z",
            "modified": "2015-09-30T08:44:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'barmaley09.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e4-54ac-4520-834b-444a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:20.000Z",
            "modified": "2015-09-30T08:44:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '167e48ed0d3be1d4c53fefe0b3677aa1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e5-77c0-446f-abdb-4e05950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:21.000Z",
            "modified": "2015-09-30T08:44:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'barsik2037.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e5-97bc-450a-a20c-4690950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:21.000Z",
            "modified": "2015-09-30T08:44:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1682c25ad101e865c71a844bde9e71e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e5-934c-45f4-8a5e-436f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:21.000Z",
            "modified": "2015-09-30T08:44:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'batuhanss.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e5-6b54-43b8-bf29-4265950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:21.000Z",
            "modified": "2015-09-30T08:44:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16865a0101e58b56b2911ebc542f31b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e5-e2c4-407a-9cf8-4754950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:21.000Z",
            "modified": "2015-09-30T08:44:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'baunti.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e6-f008-4e09-9524-4dd1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:22.000Z",
            "modified": "2015-09-30T08:44:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1688552ae1eee2cb1608cdb321209257']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e6-dfd8-46e1-a880-4e87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:22.000Z",
            "modified": "2015-09-30T08:44:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bayraksunucum.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e6-3080-417c-ade6-407f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:22.000Z",
            "modified": "2015-09-30T08:44:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16a150ec7d30c264e4858d12352469ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e6-5b98-4f70-bbf6-4d54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:22.000Z",
            "modified": "2015-09-30T08:44:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bbnm.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e6-3334-4f53-b376-4ad3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:22.000Z",
            "modified": "2015-09-30T08:44:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16a7b007175f712e031468e6cda24891']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e6-9d44-4297-bda3-4454950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:22.000Z",
            "modified": "2015-09-30T08:44:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bbp2014.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e7-ac8c-4384-a50c-4206950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:23.000Z",
            "modified": "2015-09-30T08:44:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16a835bf7f66dff7d21e0abf34a73b98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e7-283c-4f29-a386-4e43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:23.000Z",
            "modified": "2015-09-30T08:44:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bbwbbw.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e7-cf14-40a0-ba22-40c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:23.000Z",
            "modified": "2015-09-30T08:44:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16c1e04c45b4ea44bec461763547306d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e7-9690-40e9-8755-4bf3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:23.000Z",
            "modified": "2015-09-30T08:44:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bcrnetwork.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e7-fe18-4f3a-a78d-4865950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:23.000Z",
            "modified": "2015-09-30T08:44:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16c77de4cff276dd30f20226691e59a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e8-b848-4b01-8019-4d01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:24.000Z",
            "modified": "2015-09-30T08:44:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bcup.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e8-c0f4-47e1-9638-45f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:24.000Z",
            "modified": "2015-09-30T08:44:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16c7cc4221c18bd1390c3db072d460a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e8-342c-4e89-9841-4df7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:24.000Z",
            "modified": "2015-09-30T08:44:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'beastman.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e8-76a0-41f8-bcf2-46c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:24.000Z",
            "modified": "2015-09-30T08:44:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16cb34cc6537a816d52d37a213fa1285']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e8-df64-4435-be5d-4f34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:24.000Z",
            "modified": "2015-09-30T08:44:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'beavers.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e8-45c8-4d35-8307-49ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:24.000Z",
            "modified": "2015-09-30T08:44:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16df07b6361ed71755b054d04b1f0350']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e9-e078-4f82-b789-4da2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:25.000Z",
            "modified": "2015-09-30T08:44:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bebbe.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e9-c604-4435-a172-4fe5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:25.000Z",
            "modified": "2015-09-30T08:44:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '16ed77825d2f23089185fe1d067932f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e9-f138-473c-9d3e-427d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:25.000Z",
            "modified": "2015-09-30T08:44:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bebeaten.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e9-c7ec-4b6a-acbf-4be0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:25.000Z",
            "modified": "2015-09-30T08:44:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1705c94ec8ae57da24af5478c762ddb5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0e9-9764-40ac-87df-4fb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:25.000Z",
            "modified": "2015-09-30T08:44:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'becharapool.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ea-df00-4088-bc45-4cec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:26.000Z",
            "modified": "2015-09-30T08:44:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17060c6ea317e298901ba02b85ef073f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ea-6e94-46db-bd47-456f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:26.000Z",
            "modified": "2015-09-30T08:44:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'beeping.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ea-a750-482d-ac2e-420d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:26.000Z",
            "modified": "2015-09-30T08:44:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '170835d773493c23605910ccd7624bf7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ea-ee6c-46e7-a619-4bb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:26.000Z",
            "modified": "2015-09-30T08:44:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'beggarhost.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ea-d90c-40bb-a0e5-49e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:26.000Z",
            "modified": "2015-09-30T08:44:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1718782b5e64b8dbd8c53225f239568b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ea-0904-4926-af00-4401950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:26.000Z",
            "modified": "2015-09-30T08:44:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'beka.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0eb-11f4-471a-a8c9-4059950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:27.000Z",
            "modified": "2015-09-30T08:44:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '172c798a93c43ad1757f185273fcc0e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0eb-86a8-4364-b7d4-459b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:27.000Z",
            "modified": "2015-09-30T08:44:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'beket44.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0eb-9d24-4327-8eac-4db9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:27.000Z",
            "modified": "2015-09-30T08:44:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '172d65d3b82cd1473e19982b868398ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0eb-d4f0-451e-9c3f-43c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:27.000Z",
            "modified": "2015-09-30T08:44:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'belkolive.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0eb-4730-4555-a674-4fd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:27.000Z",
            "modified": "2015-09-30T08:44:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1733fb5cd9c9c7cf307ae60a6f7d6602']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ec-20cc-4f1f-9f29-4590950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:28.000Z",
            "modified": "2015-09-30T08:44:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'berkayk1985.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ec-1a6c-42a8-a681-421d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:28.000Z",
            "modified": "2015-09-30T08:44:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '173b3e23d4686f9afb8b5c3e27b4613a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ec-0f70-4d42-bb2e-4104950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:28.000Z",
            "modified": "2015-09-30T08:44:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'berkincomet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ec-0b70-4ff1-9df8-4313950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:28.000Z",
            "modified": "2015-09-30T08:44:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1741a0102b5e0dc0e5aa7ad0b9c566ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ec-04cc-486e-aed6-48a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:28.000Z",
            "modified": "2015-09-30T08:44:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'berkincomet2.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ec-ba18-41d0-9d1a-49ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:28.000Z",
            "modified": "2015-09-30T08:44:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1747e33ad1e2e9727ffd6b9d9b2e496f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ed-8328-4ef7-a45a-46f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:29.000Z",
            "modified": "2015-09-30T08:44:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'berkovego00.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ed-d970-44b3-93da-42f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:29.000Z",
            "modified": "2015-09-30T08:44:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1753fb95eb0c6df51ba01d84cce2c10e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ed-fb38-41f2-8b31-4036950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:29.000Z",
            "modified": "2015-09-30T08:44:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'best505.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ed-ba0c-4882-8ffe-4ed0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:29.000Z",
            "modified": "2015-09-30T08:44:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '175a86c0f42fa04a1a257aa1aef75e2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ed-6bb0-452a-a4e7-4647950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:29.000Z",
            "modified": "2015-09-30T08:44:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bestconnect123.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ed-bca8-407b-8827-432d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:29.000Z",
            "modified": "2015-09-30T08:44:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17623fd6c9493ee63c67e9f6e741fe5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ee-a9d4-41c3-9037-458b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:30.000Z",
            "modified": "2015-09-30T08:44:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'beybilgisayar38.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ee-8a2c-47f6-8cd4-43ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:30.000Z",
            "modified": "2015-09-30T08:44:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1765e91c153ca64dcf30dc3aa3ffecff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ee-5d14-49a2-a278-4a52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:30.000Z",
            "modified": "2015-09-30T08:44:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'beytullahhack52.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ee-8b70-494b-b50a-4084950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:30.000Z",
            "modified": "2015-09-30T08:44:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '176ab39efec2f2f5b77045f8d7063b0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ee-52ac-45ec-bbcd-4cf3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:30.000Z",
            "modified": "2015-09-30T08:44:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bhakops.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ef-b36c-433b-bb6b-4252950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:31.000Z",
            "modified": "2015-09-30T08:44:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '176b1e3819ba42406b8280d0a4945e78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ef-0ae4-4ae2-9bc1-4bd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:31.000Z",
            "modified": "2015-09-30T08:44:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'biatch.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ef-6db4-48d1-9460-45b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:31.000Z",
            "modified": "2015-09-30T08:44:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1773bc61706767ff5944e9730bda7242']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ef-0264-40ee-bfd7-4277950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:31.000Z",
            "modified": "2015-09-30T08:44:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'biga.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ef-8dd0-4bd9-a5fc-41e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:31.000Z",
            "modified": "2015-09-30T08:44:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17844d12ea3d411335d9a6a07358d01b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f0-affc-4b2a-ae42-4c35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:32.000Z",
            "modified": "2015-09-30T08:44:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bigf4tj3w1.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f0-1ecc-4a7a-bef1-40ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:32.000Z",
            "modified": "2015-09-30T08:44:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1786209860aae7e0612432002d7c6c94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f0-e868-474a-bd09-4798950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:32.000Z",
            "modified": "2015-09-30T08:44:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bigf4tj3w1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f0-f2d4-4f27-811c-4c55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:32.000Z",
            "modified": "2015-09-30T08:44:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1787a3e8e831886b29c5e1d7edfeabca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f0-c1f0-4261-b6d6-4ead950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:32.000Z",
            "modified": "2015-09-30T08:44:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'biggg-file.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f0-a180-4428-81da-49f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:32.000Z",
            "modified": "2015-09-30T08:44:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1787fe1710ae182d1d7b302274ec0a8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f1-9fbc-4ab0-b759-44d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:33.000Z",
            "modified": "2015-09-30T08:44:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bigminecraft2015.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f1-2a1c-4a1d-8f4a-4a86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:33.000Z",
            "modified": "2015-09-30T08:44:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '179f8dd7adf7e96c2d5832ebd8825b4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f1-c200-43e7-bbac-4951950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:33.000Z",
            "modified": "2015-09-30T08:44:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bigname336.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f1-2eb8-4932-8c3f-4ec6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:33.000Z",
            "modified": "2015-09-30T08:44:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17a57ad82499983bf70e99feb11895b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f1-58b4-4292-b116-45a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:33.000Z",
            "modified": "2015-09-30T08:44:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'biladacino.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f2-aff4-45dd-b79d-47cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:34.000Z",
            "modified": "2015-09-30T08:44:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17acb571f4304abd33f41fd1195ff496']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f2-a6a0-4f1b-91de-4cd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:34.000Z",
            "modified": "2015-09-30T08:44:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bilalzader.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f2-6e20-4c1a-b024-4ae7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:34.000Z",
            "modified": "2015-09-30T08:44:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17ae5fe3765dcb5b31e1f4d1f8e4a78d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f2-2c54-4cc3-b2a2-49ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:34.000Z",
            "modified": "2015-09-30T08:44:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bildif.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f2-a7bc-45da-99c2-4a76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:34.000Z",
            "modified": "2015-09-30T08:44:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17b2111f3067c51faf692558e0cf9bf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f2-5ca0-4d16-ae3e-4442950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:34.000Z",
            "modified": "2015-09-30T08:44:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'billscracyasshost.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f3-26a8-449c-94a2-447c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:35.000Z",
            "modified": "2015-09-30T08:44:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17be5c6d89c9239ce74467e30fb05c28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f3-8f14-4349-8a05-41fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:35.000Z",
            "modified": "2015-09-30T08:44:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bina.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f3-9b54-48ae-a274-41e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:35.000Z",
            "modified": "2015-09-30T08:44:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17bf209942a70bc1209ec1129c02c682']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f3-d388-4d75-ac3c-4e51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:35.000Z",
            "modified": "2015-09-30T08:44:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17bfde877355bcd4e6935e90320b783b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f3-b748-485a-bc7c-47c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:35.000Z",
            "modified": "2015-09-30T08:44:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bina7.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f4-4e0c-45d1-9118-472d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:36.000Z",
            "modified": "2015-09-30T08:44:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17c2f266a6a23d00b2b0a73ca49d19c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f4-edc0-4f67-90c0-41c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:36.000Z",
            "modified": "2015-09-30T08:44:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'binwel.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f4-f8d0-452d-b115-4797950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:36.000Z",
            "modified": "2015-09-30T08:44:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17c5b3d4de8625c5ced86161003b3e28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f4-1584-4e79-b61c-4685950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:36.000Z",
            "modified": "2015-09-30T08:44:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bishara.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f4-5a9c-4c13-814b-416b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:36.000Z",
            "modified": "2015-09-30T08:44:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17d0f0fc3d6aab862ae3389b3c359444']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f5-2ba0-407a-9dc7-40f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:37.000Z",
            "modified": "2015-09-30T08:44:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bizargo.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f5-c52c-4ad0-9d33-48cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:37.000Z",
            "modified": "2015-09-30T08:44:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17d73f0e2e9e558c14fc239635658d47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f5-b4bc-492d-a9c0-4e7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:37.000Z",
            "modified": "2015-09-30T08:44:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bjachi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f5-4738-4cd5-a6e3-4433950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:37.000Z",
            "modified": "2015-09-30T08:44:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17da3753d9cd66cbbb47cfb70b7dd732']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f5-0a14-4d7b-8dac-4ef9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:37.000Z",
            "modified": "2015-09-30T08:44:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blabla2.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f6-b9f8-41ea-9cd7-4f9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:38.000Z",
            "modified": "2015-09-30T08:44:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17e0d16e60c5ff2d8c6a3edcc10e1760']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f6-21f4-44a3-9c2e-4676950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:38.000Z",
            "modified": "2015-09-30T08:44:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 072b1d487ef595517079f1362241a0de",
            "pattern": "[file:hashes.SHA256 = 'f8a3992e4ecb9429975c9df7ea8102e063721ae859242f3d3f10720c88ff538f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f6-5ec4-4c28-9b19-4482950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:38.000Z",
            "modified": "2015-09-30T08:44:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blackagent.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f6-a35c-4742-ba80-4c8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:38.000Z",
            "modified": "2015-09-30T08:44:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17e2e7fefcb7167a5c1b0d98eff73b2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f6-409c-4253-b9b0-4916950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:38.000Z",
            "modified": "2015-09-30T08:44:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 072b1d487ef595517079f1362241a0de",
            "pattern": "[file:hashes.SHA1 = '0c817dadbcedde9f1ead9a87c0960cf38c0ff1c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f6-5d2c-429e-a995-4a02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:38.000Z",
            "modified": "2015-09-30T08:44:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blackbuzer.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f6-a218-4d7d-b8a1-40c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:38.000Z",
            "modified": "2015-09-30T08:44:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '17e763f5ad9bd1d459f8f9ddc99807bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba0f6-bd84-4a23-b715-4608950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:38.000Z",
            "modified": "2015-09-30T08:44:38.000Z",
            "first_observed": "2015-09-30T08:44:38Z",
            "last_observed": "2015-09-30T08:44:38Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba0f6-bd84-4a23-b715-4608950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba0f6-bd84-4a23-b715-4608950d210b",
            "value": "https://www.virustotal.com/file/f8a3992e4ecb9429975c9df7ea8102e063721ae859242f3d3f10720c88ff538f/analysis/1437672895/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f6-ce84-4379-8c01-4f7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:38.000Z",
            "modified": "2015-09-30T08:44:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blackdos.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f7-ff58-4b41-a48e-46c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:39.000Z",
            "modified": "2015-09-30T08:44:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '180e2973f2cb564aa8eea6176659abf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f7-42e0-4363-823c-4154950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:39.000Z",
            "modified": "2015-09-30T08:44:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0728b4bf63563bb7d39055317196dae0",
            "pattern": "[file:hashes.SHA256 = '5a175679fb84d6b580b14a7b398f5ddac23bc4980e9fc39c3e3ad273cba0f389']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f7-0cb0-4031-8769-4748950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:39.000Z",
            "modified": "2015-09-30T08:44:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blackfx99.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f7-4f88-4f07-bd49-43c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:39.000Z",
            "modified": "2015-09-30T08:44:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '180edcd6a135294f1cc68794f5696d25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f7-2fd8-4361-91ba-49c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:39.000Z",
            "modified": "2015-09-30T08:44:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0728b4bf63563bb7d39055317196dae0",
            "pattern": "[file:hashes.SHA1 = '6cf288972c295d127227c7279f39ef0d5052f216']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f7-3494-409e-b10f-4783950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:39.000Z",
            "modified": "2015-09-30T08:44:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blackhatnon.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f7-3124-49a7-b7fb-4270950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:39.000Z",
            "modified": "2015-09-30T08:44:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18189d9cb8b029d5b8ae60d2b76cb30f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba0f7-d9b4-4917-b8d8-49c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:39.000Z",
            "modified": "2015-09-30T08:44:39.000Z",
            "first_observed": "2015-09-30T08:44:39Z",
            "last_observed": "2015-09-30T08:44:39Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba0f7-d9b4-4917-b8d8-49c5950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba0f7-d9b4-4917-b8d8-49c5950d210b",
            "value": "https://www.virustotal.com/file/5a175679fb84d6b580b14a7b398f5ddac23bc4980e9fc39c3e3ad273cba0f389/analysis/1432920530/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f7-f11c-4f49-8475-4de9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:39.000Z",
            "modified": "2015-09-30T08:44:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blast4rr.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f8-98ac-478d-96c5-4022950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:40.000Z",
            "modified": "2015-09-30T08:44:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '182ea4bd5851501d653f9cf4de388c7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f8-5d70-4f91-9408-46be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:40.000Z",
            "modified": "2015-09-30T08:44:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 07238d3459a12ad2cdd8cc323026896f",
            "pattern": "[file:hashes.SHA256 = '1a803c3213b1455ce08bd924014046dfa8473b57015ff1968c96ae4f46351cf1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f8-414c-41e8-9044-4663950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:40.000Z",
            "modified": "2015-09-30T08:44:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blazirra1.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f8-3bd0-4e61-a4c9-417a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:40.000Z",
            "modified": "2015-09-30T08:44:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18367138f7514a8f2d7505ee5616b4d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f8-8358-4d89-91a2-411b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:40.000Z",
            "modified": "2015-09-30T08:44:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 07238d3459a12ad2cdd8cc323026896f",
            "pattern": "[file:hashes.SHA1 = 'c34430e8bed8733055c97a00393f254ff882809f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f8-546c-42c6-9f45-46ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:40.000Z",
            "modified": "2015-09-30T08:44:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blazooo.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f8-2b20-4464-aced-4f1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:40.000Z",
            "modified": "2015-09-30T08:44:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '183ee6b2d28aaad9405805e26e03ba46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba0f8-355c-4c2c-b9a3-452c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:40.000Z",
            "modified": "2015-09-30T08:44:40.000Z",
            "first_observed": "2015-09-30T08:44:40Z",
            "last_observed": "2015-09-30T08:44:40Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba0f8-355c-4c2c-b9a3-452c950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba0f8-355c-4c2c-b9a3-452c950d210b",
            "value": "https://www.virustotal.com/file/1a803c3213b1455ce08bd924014046dfa8473b57015ff1968c96ae4f46351cf1/analysis/1436738939/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f9-efec-4fe9-aeaf-4d8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:41.000Z",
            "modified": "2015-09-30T08:44:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f9-2dc8-4645-939e-4535950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:41.000Z",
            "modified": "2015-09-30T08:44:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18478516013a734a355b015644469d85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f9-4310-43b9-ba2b-44d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:41.000Z",
            "modified": "2015-09-30T08:44:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0718be7f9363f5922b3f727e5b054f7a",
            "pattern": "[file:hashes.SHA256 = '8d0c2841d0f3d4a382cd139a1d8a057036ef76e3787aff5d2f887574a1dbfc8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f9-ca48-448d-98c9-40da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:41.000Z",
            "modified": "2015-09-30T08:44:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blub1231.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f9-0e80-4fd1-9920-47ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:41.000Z",
            "modified": "2015-09-30T08:44:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '184de6f0e0a71c91ada22e1872664689']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f9-ae68-481a-b4cb-4f07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:41.000Z",
            "modified": "2015-09-30T08:44:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0718be7f9363f5922b3f727e5b054f7a",
            "pattern": "[file:hashes.SHA1 = '6df6d57d0e2d02e6fd8fdb3acaa302df8c80e307']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f9-f268-4232-9e5b-40f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:41.000Z",
            "modified": "2015-09-30T08:44:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bluejder.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0f9-5794-4afe-97f0-4580950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:41.000Z",
            "modified": "2015-09-30T08:44:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '185b38162fdcb79600f75f908001a367']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba0fa-6cf8-4ed9-ba4e-4cb8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:42.000Z",
            "modified": "2015-09-30T08:44:42.000Z",
            "first_observed": "2015-09-30T08:44:42Z",
            "last_observed": "2015-09-30T08:44:42Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba0fa-6cf8-4ed9-ba4e-4cb8950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba0fa-6cf8-4ed9-ba4e-4cb8950d210b",
            "value": "https://www.virustotal.com/file/8d0c2841d0f3d4a382cd139a1d8a057036ef76e3787aff5d2f887574a1dbfc8b/analysis/1434614188/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fa-1d28-44e8-a033-494b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:42.000Z",
            "modified": "2015-09-30T08:44:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blueskies.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fa-cf08-4c5e-bd45-4546950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:42.000Z",
            "modified": "2015-09-30T08:44:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1860fe7fa60298a152e948336d05bb73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fa-56e4-4519-8353-4c05950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:42.000Z",
            "modified": "2015-09-30T08:44:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06ff343e633b97411562efb5c12c4d96",
            "pattern": "[file:hashes.SHA256 = '1954770de206cc60922bcdc6bd395e4e4db195dff55fe52fe2b3889895c4d60c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fa-30f0-4f8c-a0ef-4652950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:42.000Z",
            "modified": "2015-09-30T08:44:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'blueteamrodk.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fa-1320-4cdf-9315-41e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:42.000Z",
            "modified": "2015-09-30T08:44:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '186b09188619576405bd5bc329033172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fa-16b4-4753-a2ed-4988950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:42.000Z",
            "modified": "2015-09-30T08:44:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06ff343e633b97411562efb5c12c4d96",
            "pattern": "[file:hashes.SHA1 = 'a268dc81d0fc305b4abb4be0c07126c378a3e1dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fa-9e20-43ac-ba3f-46e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:42.000Z",
            "modified": "2015-09-30T08:44:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bncv00.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fa-1c8c-401f-9b04-4f4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:42.000Z",
            "modified": "2015-09-30T08:44:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18783748354b299e27c65cf369f6db46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba0fb-303c-45f7-afb1-4c5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:43.000Z",
            "modified": "2015-09-30T08:44:43.000Z",
            "first_observed": "2015-09-30T08:44:43Z",
            "last_observed": "2015-09-30T08:44:43Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba0fb-303c-45f7-afb1-4c5f950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba0fb-303c-45f7-afb1-4c5f950d210b",
            "value": "https://www.virustotal.com/file/1954770de206cc60922bcdc6bd395e4e4db195dff55fe52fe2b3889895c4d60c/analysis/1433906770/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fb-c040-480f-a070-4a39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:43.000Z",
            "modified": "2015-09-30T08:44:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bndu68.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fb-26b4-413b-b0bb-45d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:43.000Z",
            "modified": "2015-09-30T08:44:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '187fdc86a7bfc038226d539c2a73a118']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fb-f7dc-4baf-be31-48df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:43.000Z",
            "modified": "2015-09-30T08:44:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06f8c92cde79a590b132fa58572a07d2",
            "pattern": "[file:hashes.SHA256 = 'e0e83d00de35879a6567d2fd8730ed7b5b32cb92ace6e3c73620bf7400267f13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fb-b340-4cc1-b62d-467c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:43.000Z",
            "modified": "2015-09-30T08:44:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bnst.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fb-baac-48b3-aeba-440e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:43.000Z",
            "modified": "2015-09-30T08:44:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1896ba92990ee85867698d6c346e34f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fb-8840-46cd-b6d6-49fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:43.000Z",
            "modified": "2015-09-30T08:44:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06f8c92cde79a590b132fa58572a07d2",
            "pattern": "[file:hashes.SHA1 = '0d62722b1c2dc2ee7dc81191f2e090e138ce3b0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fb-e970-4774-a8ec-42f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:43.000Z",
            "modified": "2015-09-30T08:44:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bobo1997koki310188.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fc-7354-4405-97e6-48b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:44.000Z",
            "modified": "2015-09-30T08:44:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1896c7398b63f695f04e63492f897138']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba0fc-8f54-41b4-8ef6-4cbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:44.000Z",
            "modified": "2015-09-30T08:44:44.000Z",
            "first_observed": "2015-09-30T08:44:44Z",
            "last_observed": "2015-09-30T08:44:44Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba0fc-8f54-41b4-8ef6-4cbe950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba0fc-8f54-41b4-8ef6-4cbe950d210b",
            "value": "https://www.virustotal.com/file/e0e83d00de35879a6567d2fd8730ed7b5b32cb92ace6e3c73620bf7400267f13/analysis/1435175886/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fc-1218-4ad0-b158-421e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:44.000Z",
            "modified": "2015-09-30T08:44:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bobr52x.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fc-cc00-47dd-a209-47cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:44.000Z",
            "modified": "2015-09-30T08:44:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18aa7c79767f803a9ac6c75bef7c9405']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fc-0704-462f-b901-49bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:44.000Z",
            "modified": "2015-09-30T08:44:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06f6cb5d2f738d91683b1fe6eaa89907",
            "pattern": "[file:hashes.SHA256 = '35614d953578ec47e0ea96eb3d766017d76da149a4b838f05fbbfb05dedbb419']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fc-94f0-4bf8-a104-44fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:44.000Z",
            "modified": "2015-09-30T08:44:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bobrasta.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fc-3fdc-4bfb-b287-4736950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:44.000Z",
            "modified": "2015-09-30T08:44:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18ad653a7664c286e56182442d35a5d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fc-9d38-4596-915b-457a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:44.000Z",
            "modified": "2015-09-30T08:44:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06f6cb5d2f738d91683b1fe6eaa89907",
            "pattern": "[file:hashes.SHA1 = '33ff25a54900cbf2cfcbeecba0aed23996c0e7e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fd-b094-4645-acac-4eef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:45.000Z",
            "modified": "2015-09-30T08:44:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bogdannr01.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fd-ffdc-4ff2-a1ed-4873950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:45.000Z",
            "modified": "2015-09-30T08:44:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18b648f0fbfde69fdebba0df5afb9c18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba0fd-e2a8-4e27-88a1-4e56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:45.000Z",
            "modified": "2015-09-30T08:44:45.000Z",
            "first_observed": "2015-09-30T08:44:45Z",
            "last_observed": "2015-09-30T08:44:45Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba0fd-e2a8-4e27-88a1-4e56950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba0fd-e2a8-4e27-88a1-4e56950d210b",
            "value": "https://www.virustotal.com/file/35614d953578ec47e0ea96eb3d766017d76da149a4b838f05fbbfb05dedbb419/analysis/1434897711/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fd-08a0-4b69-9c6f-4b46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:45.000Z",
            "modified": "2015-09-30T08:44:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bomdc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fd-60c4-4655-bb0c-4680950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:45.000Z",
            "modified": "2015-09-30T08:44:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18b84919d4554bc6a150097fe2e8612d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fd-7cac-4a21-b318-430b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:45.000Z",
            "modified": "2015-09-30T08:44:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06f10e9e0048f46fed9ca11c71d336d9",
            "pattern": "[file:hashes.SHA256 = '2fff627c3709b381710d5d2b1d6217f2e860ec834f80bc4bbc8f0d6c494274a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fd-a438-4c89-b504-40c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:45.000Z",
            "modified": "2015-09-30T08:44:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bonke.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fd-5064-4d8d-9344-4fde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:45.000Z",
            "modified": "2015-09-30T08:44:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18bef081b64054d532e00aacd17303bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fd-6c6c-4595-ab25-4322950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:45.000Z",
            "modified": "2015-09-30T08:44:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06f10e9e0048f46fed9ca11c71d336d9",
            "pattern": "[file:hashes.SHA1 = '60de8418af47bad5d9dbd737cfce7e9d606ec0f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fe-eb6c-4a91-aead-41eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:46.000Z",
            "modified": "2015-09-30T08:44:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'booboomushy.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fe-1d00-4cca-bd06-406c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:46.000Z",
            "modified": "2015-09-30T08:44:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18c6e4456ffaa0161f1a6cbc47f68c69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba0fe-4d88-4b7b-897a-4ecc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:46.000Z",
            "modified": "2015-09-30T08:44:46.000Z",
            "first_observed": "2015-09-30T08:44:46Z",
            "last_observed": "2015-09-30T08:44:46Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba0fe-4d88-4b7b-897a-4ecc950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba0fe-4d88-4b7b-897a-4ecc950d210b",
            "value": "https://www.virustotal.com/file/2fff627c3709b381710d5d2b1d6217f2e860ec834f80bc4bbc8f0d6c494274a9/analysis/1434720399/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fe-7c98-4680-9352-4686950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:46.000Z",
            "modified": "2015-09-30T08:44:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'boogeyboy.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fe-fb60-4c93-9ae8-4807950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:46.000Z",
            "modified": "2015-09-30T08:44:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18c7648e14e36b17cf9cec5f4c41c151']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fe-a4cc-41ab-9dfe-45ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:46.000Z",
            "modified": "2015-09-30T08:44:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06e9c03c5094405f1dcbd3048c49bae0",
            "pattern": "[file:hashes.SHA256 = 'ac279bef20c46c8492224a4e00383b5b4f951d3b6c88b7ae87643fcf961bf7cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fe-1f8c-43e4-ae4d-46ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:46.000Z",
            "modified": "2015-09-30T08:44:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'boomzaserver.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0fe-6558-4ee8-aefb-4c10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:46.000Z",
            "modified": "2015-09-30T08:44:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18d5c3c687b818248e4b7ee39345ad52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ff-ea30-4141-85f0-437c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:47.000Z",
            "modified": "2015-09-30T08:44:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06e9c03c5094405f1dcbd3048c49bae0",
            "pattern": "[file:hashes.SHA1 = '48d1f9f8e2cfd5d2ac9bde42d762f400153cc3f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ff-1eb4-4199-8bd7-4d3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:47.000Z",
            "modified": "2015-09-30T08:44:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bossanova.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ff-2154-49f2-ba92-4c55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:47.000Z",
            "modified": "2015-09-30T08:44:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18dd4097aeac4e7583ac7830154f912c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba0ff-a3d4-4ee5-9514-43d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:47.000Z",
            "modified": "2015-09-30T08:44:47.000Z",
            "first_observed": "2015-09-30T08:44:47Z",
            "last_observed": "2015-09-30T08:44:47Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba0ff-a3d4-4ee5-9514-43d0950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba0ff-a3d4-4ee5-9514-43d0950d210b",
            "value": "https://www.virustotal.com/file/ac279bef20c46c8492224a4e00383b5b4f951d3b6c88b7ae87643fcf961bf7cc/analysis/1436942320/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ff-3de4-4afd-9562-4b40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:47.000Z",
            "modified": "2015-09-30T08:44:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bossin4ever.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ff-8a94-4709-9a32-409a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:47.000Z",
            "modified": "2015-09-30T08:44:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '18fec20777e178b7fe53a2d2c69dc941']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ff-3774-47d4-ae4b-4c74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:47.000Z",
            "modified": "2015-09-30T08:44:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06e6b045698b1b00d43d89d6bbb33142",
            "pattern": "[file:hashes.SHA256 = 'e543bf50e3c8924daa5a376036369113cb41eab1895c8cc31f43c8c5cbd53cbd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba0ff-2cd4-46f6-8a48-416e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:47.000Z",
            "modified": "2015-09-30T08:44:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bossofficial.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba100-c97c-416f-9a52-4d47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:48.000Z",
            "modified": "2015-09-30T08:44:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '191b19518c01bbcc19b71376cebf8929']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba100-3434-4ceb-af66-447e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:48.000Z",
            "modified": "2015-09-30T08:44:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06e6b045698b1b00d43d89d6bbb33142",
            "pattern": "[file:hashes.SHA1 = '4412583ac43c17fe147eff9ef98e992c01abac58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba100-63e8-4fb3-9d4d-48f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:48.000Z",
            "modified": "2015-09-30T08:44:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'botanet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba100-2a58-43c5-aa5f-468a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:48.000Z",
            "modified": "2015-09-30T08:44:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '192051becede2abf23ce135c41b80140']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba100-ea9c-4350-8eea-4bc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:48.000Z",
            "modified": "2015-09-30T08:44:48.000Z",
            "first_observed": "2015-09-30T08:44:48Z",
            "last_observed": "2015-09-30T08:44:48Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba100-ea9c-4350-8eea-4bc5950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba100-ea9c-4350-8eea-4bc5950d210b",
            "value": "https://www.virustotal.com/file/e543bf50e3c8924daa5a376036369113cb41eab1895c8cc31f43c8c5cbd53cbd/analysis/1437198222/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba100-39c8-4562-a82b-4e08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:48.000Z",
            "modified": "2015-09-30T08:44:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'boualla.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba100-6fe8-4c96-8d71-4cfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:48.000Z",
            "modified": "2015-09-30T08:44:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19239fae237abd48ff7a09aa1156b29f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba100-79c4-4741-b954-45d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:48.000Z",
            "modified": "2015-09-30T08:44:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06e09ec5fbf7d1c2a0363f512c69bba9",
            "pattern": "[file:hashes.SHA256 = '2c5568b8033a8e346b95ebed76edb7805bef38de73cb5c48003d42f89076165c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba101-cfa8-4a3b-9ae7-4c24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:49.000Z",
            "modified": "2015-09-30T08:44:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1927f8171d596719da3101da939cb06a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba101-a080-4bcd-9a32-4a8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:49.000Z",
            "modified": "2015-09-30T08:44:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06e09ec5fbf7d1c2a0363f512c69bba9",
            "pattern": "[file:hashes.SHA1 = 'b2e359dc69b6a0c406a3017dbaab8b1461a1912b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba101-3704-43a5-8931-42cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:49.000Z",
            "modified": "2015-09-30T08:44:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'brazzers4.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba101-c740-4962-a08f-46f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:49.000Z",
            "modified": "2015-09-30T08:44:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '192930277924e3ddb837ffffd244a5e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba101-0d1c-406a-91c9-423d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:49.000Z",
            "modified": "2015-09-30T08:44:49.000Z",
            "first_observed": "2015-09-30T08:44:49Z",
            "last_observed": "2015-09-30T08:44:49Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba101-0d1c-406a-91c9-423d950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba101-0d1c-406a-91c9-423d950d210b",
            "value": "https://www.virustotal.com/file/2c5568b8033a8e346b95ebed76edb7805bef38de73cb5c48003d42f89076165c/analysis/1435435216/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba101-86ec-4d53-ac41-4500950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:49.000Z",
            "modified": "2015-09-30T08:44:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bretzky.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba101-992c-45bd-83d9-498d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:49.000Z",
            "modified": "2015-09-30T08:44:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '192e6d95b57a2d17f42ea6cd3df855d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba101-73cc-4d45-959c-4c2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:49.000Z",
            "modified": "2015-09-30T08:44:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06dffd5c6c686e134ef571ab2658f32e",
            "pattern": "[file:hashes.SHA256 = '410929603fe152a35ff2098b0c933238d5af60f2b4f29085451e74e8a64addd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba102-e354-416b-a5df-4655950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:50.000Z",
            "modified": "2015-09-30T08:44:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'briach202.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba102-e0c8-4967-b473-4de6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:50.000Z",
            "modified": "2015-09-30T08:44:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '193af420e529a2f982fb6499021933c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba102-40f0-45df-a928-417d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:50.000Z",
            "modified": "2015-09-30T08:44:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06dffd5c6c686e134ef571ab2658f32e",
            "pattern": "[file:hashes.SHA1 = '45b812a71057b76f5442832c45ff3f727078977e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba102-90e0-4610-92d9-4ef1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:50.000Z",
            "modified": "2015-09-30T08:44:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'brian.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba102-2410-4b25-94c2-470d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:50.000Z",
            "modified": "2015-09-30T08:44:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '193c228ccbce799230d409fb7bbe8cc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba102-96c0-431e-82fd-417d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:50.000Z",
            "modified": "2015-09-30T08:44:50.000Z",
            "first_observed": "2015-09-30T08:44:50Z",
            "last_observed": "2015-09-30T08:44:50Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba102-96c0-431e-82fd-417d950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba102-96c0-431e-82fd-417d950d210b",
            "value": "https://www.virustotal.com/file/410929603fe152a35ff2098b0c933238d5af60f2b4f29085451e74e8a64addd6/analysis/1436547411/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba102-f9d0-40d2-9c8a-4259950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:50.000Z",
            "modified": "2015-09-30T08:44:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bris.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba102-f830-41a7-baa4-46c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:50.000Z",
            "modified": "2015-09-30T08:44:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '194b25adcce49c936ec531d72151a0ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba102-edfc-45c9-802f-4105950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:50.000Z",
            "modified": "2015-09-30T08:44:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06dcdd37f97d0f4810787903dc754854",
            "pattern": "[file:hashes.SHA256 = 'f4f641b1f22810cfaceb665743c404f79426e9043887b794d3dc591b41ba5e63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba103-0b24-44d9-a0c3-483f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:51.000Z",
            "modified": "2015-09-30T08:44:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'briz4.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba103-8dbc-4a88-b7d8-49f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:51.000Z",
            "modified": "2015-09-30T08:44:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '194f1592f53356f2066e93814814fecd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba103-b62c-4b1a-ba75-4b8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:51.000Z",
            "modified": "2015-09-30T08:44:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06dcdd37f97d0f4810787903dc754854",
            "pattern": "[file:hashes.SHA1 = '76c278b7694c745dfe2ea88eb9d37adc6cbf1243']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba103-b020-4d8d-9ad6-449f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:51.000Z",
            "modified": "2015-09-30T08:44:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bro228host.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba103-fcac-45e8-8649-4bd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:51.000Z",
            "modified": "2015-09-30T08:44:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '195c22363e6a17a46d4225632032e575']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba103-cbc8-48f0-ae07-4fdf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:51.000Z",
            "modified": "2015-09-30T08:44:51.000Z",
            "first_observed": "2015-09-30T08:44:51Z",
            "last_observed": "2015-09-30T08:44:51Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba103-cbc8-48f0-ae07-4fdf950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba103-cbc8-48f0-ae07-4fdf950d210b",
            "value": "https://www.virustotal.com/file/f4f641b1f22810cfaceb665743c404f79426e9043887b794d3dc591b41ba5e63/analysis/1435428749/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba103-2104-472d-ba7c-4612950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:51.000Z",
            "modified": "2015-09-30T08:44:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'brock.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba103-ad70-4468-bd44-456e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:51.000Z",
            "modified": "2015-09-30T08:44:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '195f11aee70766d6de3db38ff81ee02c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba104-5dd0-4d40-9e95-4469950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:52.000Z",
            "modified": "2015-09-30T08:44:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06d19bd3cb161671865eaa9b9bf899d4",
            "pattern": "[file:hashes.SHA256 = 'c9ab4e711415c3238fa870c671674056264b355191c32075da259dd5a2da8b79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba104-6f48-49a1-904c-4068950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:52.000Z",
            "modified": "2015-09-30T08:44:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bruni.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba104-653c-468c-b96a-40b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:52.000Z",
            "modified": "2015-09-30T08:44:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '196a4a71f0673c85720e529259325508']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba104-7b0c-46e7-86ae-4609950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:52.000Z",
            "modified": "2015-09-30T08:44:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06d19bd3cb161671865eaa9b9bf899d4",
            "pattern": "[file:hashes.SHA1 = '024a23289ec6fada05b9e518855ec6e4c7a58635']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba104-fc70-4710-bf80-4522950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:52.000Z",
            "modified": "2015-09-30T08:44:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'brunicow11.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba104-5038-43af-9e22-4aae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:52.000Z",
            "modified": "2015-09-30T08:44:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '196f1be849cdc483bc8239b60af90ae1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba104-c308-42fb-af6c-4fab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:52.000Z",
            "modified": "2015-09-30T08:44:52.000Z",
            "first_observed": "2015-09-30T08:44:52Z",
            "last_observed": "2015-09-30T08:44:52Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba104-c308-42fb-af6c-4fab950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba104-c308-42fb-af6c-4fab950d210b",
            "value": "https://www.virustotal.com/file/c9ab4e711415c3238fa870c671674056264b355191c32075da259dd5a2da8b79/analysis/1432670722/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba104-b1c8-4ead-b8a8-442d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:52.000Z",
            "modified": "2015-09-30T08:44:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bryarlab.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba105-b694-4d7b-b8a0-46cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:53.000Z",
            "modified": "2015-09-30T08:44:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19795e2e4a732ba5d60bd67f2a4e071f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba105-b744-4563-92ce-47f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:53.000Z",
            "modified": "2015-09-30T08:44:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06c83efc0f807d7198542b2712e266e0",
            "pattern": "[file:hashes.SHA256 = 'cbc7152963cbe6f5903d9541de8609e72752b944dd2f50f2566142119fd6a656']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba105-a1f0-4333-893f-4426950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:53.000Z",
            "modified": "2015-09-30T08:44:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bserrektyouyo.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba105-fa54-4f85-ab26-44aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:53.000Z",
            "modified": "2015-09-30T08:44:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19804f3bd3c3dc03a97114a3423fc163']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba105-1b80-4a6c-a717-4002950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:53.000Z",
            "modified": "2015-09-30T08:44:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06c83efc0f807d7198542b2712e266e0",
            "pattern": "[file:hashes.SHA1 = 'c6f228966e4ba9ba29a69e085a54eae039e28f29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba105-448c-4e86-8e69-4dbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:53.000Z",
            "modified": "2015-09-30T08:44:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bshicrypt.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba105-292c-4603-98dc-4742950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:53.000Z",
            "modified": "2015-09-30T08:44:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1991ff09cf6c06d71fc81d2f24b367de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba105-7dc8-47a2-8e8f-4f78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:53.000Z",
            "modified": "2015-09-30T08:44:53.000Z",
            "first_observed": "2015-09-30T08:44:53Z",
            "last_observed": "2015-09-30T08:44:53Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba105-7dc8-47a2-8e8f-4f78950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba105-7dc8-47a2-8e8f-4f78950d210b",
            "value": "https://www.virustotal.com/file/cbc7152963cbe6f5903d9541de8609e72752b944dd2f50f2566142119fd6a656/analysis/1433873000/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba105-edf4-4d92-b5d4-41aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:53.000Z",
            "modified": "2015-09-30T08:44:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bucketsofsaltboiii.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba106-62dc-49d2-8957-482b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:54.000Z",
            "modified": "2015-09-30T08:44:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19aead145e57a03d57ccfda2078fb75e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba106-4c40-4ba3-973d-4e09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:54.000Z",
            "modified": "2015-09-30T08:44:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06c79380f549c94af7dce6e6cc2f1127",
            "pattern": "[file:hashes.SHA256 = '191c54c696e2aea37cb2c0c2c3c280a046f2fc6f2bbf79d1c3b7e371441c6598']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba106-3530-406d-ab69-4b88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:54.000Z",
            "modified": "2015-09-30T08:44:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'burak445.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba106-a1c0-46cf-a5c7-48be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:54.000Z",
            "modified": "2015-09-30T08:44:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19b0738686adfb38d9da874d41479adb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba106-ea94-4fd9-9dcd-4e28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:54.000Z",
            "modified": "2015-09-30T08:44:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06c79380f549c94af7dce6e6cc2f1127",
            "pattern": "[file:hashes.SHA1 = '93e05d9c57c43d50281ef9c49a7740267baa295c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba106-61d4-44b6-a4b8-49aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:54.000Z",
            "modified": "2015-09-30T08:44:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'burak68686868.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba106-23ec-446e-91d9-444f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:54.000Z",
            "modified": "2015-09-30T08:44:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19b15223585c087e63f7825ee4ed4611']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba106-ee90-4aac-92a1-4d6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:54.000Z",
            "modified": "2015-09-30T08:44:54.000Z",
            "first_observed": "2015-09-30T08:44:54Z",
            "last_observed": "2015-09-30T08:44:54Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba106-ee90-4aac-92a1-4d6a950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba106-ee90-4aac-92a1-4d6a950d210b",
            "value": "https://www.virustotal.com/file/191c54c696e2aea37cb2c0c2c3c280a046f2fc6f2bbf79d1c3b7e371441c6598/analysis/1432656314/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba107-9400-4363-adf3-422b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:55.000Z",
            "modified": "2015-09-30T08:44:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'burovic.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba107-2acc-4250-8a52-4874950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:55.000Z",
            "modified": "2015-09-30T08:44:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19b38ac6a11bbb96b00f732ae6ac2805']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba107-3188-4fed-a85b-4481950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:55.000Z",
            "modified": "2015-09-30T08:44:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06abc1ffda2ddff3635a2dd08ea0a4cc",
            "pattern": "[file:hashes.SHA256 = 'f0449b6a0142d1c20af9fc616f3a716afbe439d3b83b480c40a61d903d51100a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba107-65c4-4625-8f1e-4ca4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:55.000Z",
            "modified": "2015-09-30T08:44:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bushido28.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba107-ed24-4970-a1f3-419d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:55.000Z",
            "modified": "2015-09-30T08:44:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19c5d0ae05b1d57aa06dbad9ef7e0bb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba107-db0c-4f3e-9387-4ead950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:55.000Z",
            "modified": "2015-09-30T08:44:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06abc1ffda2ddff3635a2dd08ea0a4cc",
            "pattern": "[file:hashes.SHA1 = '40b876d0a54a08c58fb8ff61e12cacea7bb95b15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba107-b388-4816-a533-44d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:55.000Z",
            "modified": "2015-09-30T08:44:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'busonolsun.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba107-04d4-4e52-8555-4c5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:55.000Z",
            "modified": "2015-09-30T08:44:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19c7d2ee7f6782693620b8d2ea55aa91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba108-3cd0-40e3-9696-429f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:56.000Z",
            "modified": "2015-09-30T08:44:56.000Z",
            "first_observed": "2015-09-30T08:44:56Z",
            "last_observed": "2015-09-30T08:44:56Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba108-3cd0-40e3-9696-429f950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba108-3cd0-40e3-9696-429f950d210b",
            "value": "https://www.virustotal.com/file/f0449b6a0142d1c20af9fc616f3a716afbe439d3b83b480c40a61d903d51100a/analysis/1436901363/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba108-7500-485c-9651-42d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:56.000Z",
            "modified": "2015-09-30T08:44:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'butmena.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba108-463c-470d-ab2c-4f9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:56.000Z",
            "modified": "2015-09-30T08:44:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19c7e4d9f5522bd62edb6319a55f16b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba108-b92c-4bb6-be13-43df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:56.000Z",
            "modified": "2015-09-30T08:44:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06952ffb3ed2b940621eef9f8a3ff5a1",
            "pattern": "[file:hashes.SHA256 = 'de9fe96c8942fca6da5b830734efe2c6623c6fc3ba8c06af8466069ae0deeb73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba108-8c78-4b93-832a-4fa2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:56.000Z",
            "modified": "2015-09-30T08:44:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'butterfly-linux.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba108-d63c-4f8b-96a5-4b41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:56.000Z",
            "modified": "2015-09-30T08:44:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19cd150ea958c305edf97f4ff2b7af70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba108-5c18-4df0-beab-4cf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:56.000Z",
            "modified": "2015-09-30T08:44:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 06952ffb3ed2b940621eef9f8a3ff5a1",
            "pattern": "[file:hashes.SHA1 = '33ade4666a97b31755c26a72b913c52c7f283a8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba108-41c0-4f94-8490-4f3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:56.000Z",
            "modified": "2015-09-30T08:44:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'buybtc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba108-941c-4522-82f2-4662950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:56.000Z",
            "modified": "2015-09-30T08:44:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19d6bd94e1996bb5a49f2a26e7f1ae4d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba109-5cb0-4a12-89d6-4d24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:57.000Z",
            "modified": "2015-09-30T08:44:57.000Z",
            "first_observed": "2015-09-30T08:44:57Z",
            "last_observed": "2015-09-30T08:44:57Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba109-5cb0-4a12-89d6-4d24950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba109-5cb0-4a12-89d6-4d24950d210b",
            "value": "https://www.virustotal.com/file/de9fe96c8942fca6da5b830734efe2c6623c6fc3ba8c06af8466069ae0deeb73/analysis/1434788903/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba109-3ee0-4b23-971c-4338950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:57.000Z",
            "modified": "2015-09-30T08:44:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'buziszabi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba109-29c8-4d89-85cc-44d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:57.000Z",
            "modified": "2015-09-30T08:44:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19da41b166a16f06953454191510055f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba109-b8d8-4098-9a06-49ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:57.000Z",
            "modified": "2015-09-30T08:44:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 068647ff9c2e22669bf1965c7abdc471",
            "pattern": "[file:hashes.SHA256 = '41707b1cda8529bf52ff875f515514f6a876264c844950ec788292d2549202d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba109-e29c-4c07-b41f-4720950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:57.000Z",
            "modified": "2015-09-30T08:44:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bvb.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba109-605c-4e9d-82a3-4f6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:57.000Z",
            "modified": "2015-09-30T08:44:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19da6d25708b85a1afeef84eafd6fb56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba109-44d8-4d78-954c-4966950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:57.000Z",
            "modified": "2015-09-30T08:44:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 068647ff9c2e22669bf1965c7abdc471",
            "pattern": "[file:hashes.SHA1 = '6d38c333be5b2e800e798b89ff1ddd00ce26e287']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba109-c930-4737-80af-48f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:57.000Z",
            "modified": "2015-09-30T08:44:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'byberkaykorucu.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10a-20b0-44c6-8179-4ab7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:58.000Z",
            "modified": "2015-09-30T08:44:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19e11653d41b8329803a74a8b452fec0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba10a-8b6c-4365-bf33-4bae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:58.000Z",
            "modified": "2015-09-30T08:44:58.000Z",
            "first_observed": "2015-09-30T08:44:58Z",
            "last_observed": "2015-09-30T08:44:58Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba10a-8b6c-4365-bf33-4bae950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba10a-8b6c-4365-bf33-4bae950d210b",
            "value": "https://www.virustotal.com/file/41707b1cda8529bf52ff875f515514f6a876264c844950ec788292d2549202d0/analysis/1436298069/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10a-335c-426d-a08a-47f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:58.000Z",
            "modified": "2015-09-30T08:44:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'byfrkndc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10a-91b8-4495-8d63-48a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:58.000Z",
            "modified": "2015-09-30T08:44:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19e1dfa260f2950a6f4e8c056b6a243d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10a-91d8-4dfd-b42a-4f19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:58.000Z",
            "modified": "2015-09-30T08:44:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 067c249ccbbb09202f7aadcb610fd03b",
            "pattern": "[file:hashes.SHA256 = 'f4af8ac87a685374d2750b6ebb1a74084fd0b4158c8db030228c9a0cb3205c17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10a-8c40-4d2d-a063-4e72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:58.000Z",
            "modified": "2015-09-30T08:44:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'byfrkndc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10a-e914-43cb-b31e-497e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:58.000Z",
            "modified": "2015-09-30T08:44:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19f1bb4e9de759fd08bc0c62f2f79a73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10a-69fc-4d50-8d45-4f21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:58.000Z",
            "modified": "2015-09-30T08:44:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 067c249ccbbb09202f7aadcb610fd03b",
            "pattern": "[file:hashes.SHA1 = '1a054577f467f0946d626e01c05b285fea8230db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10b-7b00-4c31-b47c-487c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:59.000Z",
            "modified": "2015-09-30T08:44:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'byporc21.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10b-6730-47d3-bbe0-4c33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:59.000Z",
            "modified": "2015-09-30T08:44:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19f765e2375caaff4d82decee1bdcc99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba10b-dff8-44eb-844d-49a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:59.000Z",
            "modified": "2015-09-30T08:44:59.000Z",
            "first_observed": "2015-09-30T08:44:59Z",
            "last_observed": "2015-09-30T08:44:59Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba10b-dff8-44eb-844d-49a6950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba10b-dff8-44eb-844d-49a6950d210b",
            "value": "https://www.virustotal.com/file/f4af8ac87a685374d2750b6ebb1a74084fd0b4158c8db030228c9a0cb3205c17/analysis/1436647028/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10b-9258-4bd1-9168-46e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:59.000Z",
            "modified": "2015-09-30T08:44:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'byserious.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10b-dc00-4b9c-abaa-498f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:59.000Z",
            "modified": "2015-09-30T08:44:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19fa0cd4738e88e9a229a82d45f22acf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10b-e2bc-4a30-9be4-41d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:59.000Z",
            "modified": "2015-09-30T08:44:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0670300a272a1040bd0f3b3ed3eed6fd",
            "pattern": "[file:hashes.SHA256 = 'c19dd7b101a54f37904443e2e049e78cd3e42cae5ba853124ffc362413fe6e9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10b-b9d4-4926-9863-4e62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:59.000Z",
            "modified": "2015-09-30T08:44:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'bzithree.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10b-33a4-415c-84a8-4045950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:59.000Z",
            "modified": "2015-09-30T08:44:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '19fff2219d7f9f322cd697b87c45193f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10b-546c-4012-a531-435a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:44:59.000Z",
            "modified": "2015-09-30T08:44:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0670300a272a1040bd0f3b3ed3eed6fd",
            "pattern": "[file:hashes.SHA1 = '45c8e93ea89a383d28fb52ac6725f19c0caed649']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:44:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10c-b62c-4eb8-ab56-49d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:00.000Z",
            "modified": "2015-09-30T08:45:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'c-a020-uc0628-92.webazilla.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10c-78a4-4f54-9dc6-4279950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:00.000Z",
            "modified": "2015-09-30T08:45:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a00d5e84535e5207b283cbae0037c35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba10c-83c4-416b-8f1c-40d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:00.000Z",
            "modified": "2015-09-30T08:45:00.000Z",
            "first_observed": "2015-09-30T08:45:00Z",
            "last_observed": "2015-09-30T08:45:00Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba10c-83c4-416b-8f1c-40d7950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba10c-83c4-416b-8f1c-40d7950d210b",
            "value": "https://www.virustotal.com/file/c19dd7b101a54f37904443e2e049e78cd3e42cae5ba853124ffc362413fe6e9c/analysis/1434005048/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10c-89a0-48fd-a19e-49bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:00.000Z",
            "modified": "2015-09-30T08:45:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'c-a040-u0373-225.webazilla.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10c-b280-444f-b5ef-4db0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:00.000Z",
            "modified": "2015-09-30T08:45:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a01b16edce9bcb11a4e2c655cff8f3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10c-9ff8-46a7-98d4-41c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:00.000Z",
            "modified": "2015-09-30T08:45:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 066fd7aa2793d166d387f9efa4f7ac9d",
            "pattern": "[file:hashes.SHA256 = '64bbfd05c69be9e6f9794943f14134b5552a7b0e4050c984c01bc31dff07eab8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10c-21b0-4f03-b0fb-4e85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:00.000Z",
            "modified": "2015-09-30T08:45:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'c-a080-u0561-50.webazilla.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10c-2f94-452a-b9bc-4da6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:00.000Z",
            "modified": "2015-09-30T08:45:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a07bb54ee3d7d41ce1c791206b1ed28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10d-46d4-4c01-9869-48a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:01.000Z",
            "modified": "2015-09-30T08:45:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 066fd7aa2793d166d387f9efa4f7ac9d",
            "pattern": "[file:hashes.SHA1 = '89ce9becd304774915793090c74b1c68ca940d98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10d-9f24-4c79-a2f3-4859950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:01.000Z",
            "modified": "2015-09-30T08:45:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'c11.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10d-6ae0-491b-84b9-4ddb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:01.000Z",
            "modified": "2015-09-30T08:45:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a09fc1fb679d514b9f409647086c7d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba10d-d8f0-4a60-8d73-45d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:01.000Z",
            "modified": "2015-09-30T08:45:01.000Z",
            "first_observed": "2015-09-30T08:45:01Z",
            "last_observed": "2015-09-30T08:45:01Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba10d-d8f0-4a60-8d73-45d0950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba10d-d8f0-4a60-8d73-45d0950d210b",
            "value": "https://www.virustotal.com/file/64bbfd05c69be9e6f9794943f14134b5552a7b0e4050c984c01bc31dff07eab8/analysis/1435703458/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10d-1680-4840-9215-46a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:01.000Z",
            "modified": "2015-09-30T08:45:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'c6427.sgvps.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10d-7634-41ba-9350-4e4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:01.000Z",
            "modified": "2015-09-30T08:45:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a0a1cbc257302fa00af786cd4fd9b67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10d-27bc-4def-b2c1-400f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:01.000Z",
            "modified": "2015-09-30T08:45:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 066a90e735478b89c42c007af86f64d1",
            "pattern": "[file:hashes.SHA256 = '6b860b5c306cf87d2841762120c12286234aee27a773aae648d664fc12f45308']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10d-e3f4-4d69-b75b-4124950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:01.000Z",
            "modified": "2015-09-30T08:45:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cabacaba.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10e-7a10-4aa7-afe7-421c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:02.000Z",
            "modified": "2015-09-30T08:45:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a0f34fb70aa8fce69fad3577780e8af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10e-bf50-4bd4-a03c-455a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:02.000Z",
            "modified": "2015-09-30T08:45:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 066a90e735478b89c42c007af86f64d1",
            "pattern": "[file:hashes.SHA1 = '0b3f2543dbf9d906578121572d77dc5e1da231ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10e-35fc-48de-b725-472f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:02.000Z",
            "modified": "2015-09-30T08:45:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a0f68cee7a7196e6f66cc2315de11a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba10e-cad4-4e15-89ad-4cf9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:02.000Z",
            "modified": "2015-09-30T08:45:02.000Z",
            "first_observed": "2015-09-30T08:45:02Z",
            "last_observed": "2015-09-30T08:45:02Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba10e-cad4-4e15-89ad-4cf9950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba10e-cad4-4e15-89ad-4cf9950d210b",
            "value": "https://www.virustotal.com/file/6b860b5c306cf87d2841762120c12286234aee27a773aae648d664fc12f45308/analysis/1436739129/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10e-638c-48cc-88f9-4ab6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:02.000Z",
            "modified": "2015-09-30T08:45:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cachecache.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10e-f334-4adc-af97-4142950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:02.000Z",
            "modified": "2015-09-30T08:45:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a1a30e8bbf6a18c8c501f55c69a5c17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10e-206c-403a-a3d4-4cac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:02.000Z",
            "modified": "2015-09-30T08:45:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0669362ff1e2271a29cdf920559955cf",
            "pattern": "[file:hashes.SHA256 = '6be5ff4c00722417d1e224481e8bd69e1f41aa431f5306cb139e3e6b3b39ddbf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10e-3798-4490-8315-4d8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:02.000Z",
            "modified": "2015-09-30T08:45:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'caiunomeutrojan.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10f-c61c-4229-9ac5-4959950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:03.000Z",
            "modified": "2015-09-30T08:45:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a2ba8907e9f2fe1a888a9897f25c43b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10f-0a68-4270-ba6d-4de9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:03.000Z",
            "modified": "2015-09-30T08:45:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0669362ff1e2271a29cdf920559955cf",
            "pattern": "[file:hashes.SHA1 = 'c02544ece9a75ee754229e2efe29bcd1cebebcfa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10f-9684-48ce-8506-4bf9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:03.000Z",
            "modified": "2015-09-30T08:45:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cakeshacked.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10f-ead0-4acb-9aa6-41f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:03.000Z",
            "modified": "2015-09-30T08:45:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a53a89ef7fbb5ad718856f83bf37493']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba10f-8e50-4a28-abf5-401c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:03.000Z",
            "modified": "2015-09-30T08:45:03.000Z",
            "first_observed": "2015-09-30T08:45:03Z",
            "last_observed": "2015-09-30T08:45:03Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba10f-8e50-4a28-abf5-401c950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba10f-8e50-4a28-abf5-401c950d210b",
            "value": "https://www.virustotal.com/file/6be5ff4c00722417d1e224481e8bd69e1f41aa431f5306cb139e3e6b3b39ddbf/analysis/1423718175/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10f-fe14-4f79-ab96-478d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:03.000Z",
            "modified": "2015-09-30T08:45:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'calislovecalislife.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10f-fc98-4bb5-8e79-47bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:03.000Z",
            "modified": "2015-09-30T08:45:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a753724d4c35ddbabc22bea1c7f18c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba10f-6ab0-4904-b5a6-4e97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:03.000Z",
            "modified": "2015-09-30T08:45:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 066783887d29891c064ed4be7b737f06",
            "pattern": "[file:hashes.SHA256 = 'f371933734b959d04fc05aa6a03883220ae3dffbb742e968aab1be3a43be07a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba110-df60-4e8d-a8c3-4a26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:04.000Z",
            "modified": "2015-09-30T08:45:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cambod.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba110-1354-4697-aa0c-450a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:04.000Z",
            "modified": "2015-09-30T08:45:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a75fd31d03b39d53dabe676eeb6f39b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba110-0388-4476-9ccc-4636950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:04.000Z",
            "modified": "2015-09-30T08:45:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 066783887d29891c064ed4be7b737f06",
            "pattern": "[file:hashes.SHA1 = '1a105a28d6cc4b8c3080346e9dceb1d8f9bcc181']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba110-48d0-43c1-9f7c-4e96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:04.000Z",
            "modified": "2015-09-30T08:45:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'camohax.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba110-ea40-4199-ac96-46c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:04.000Z",
            "modified": "2015-09-30T08:45:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a783f5aad01a3dbaf2923b2bc3bbbce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba110-fb60-4d98-8743-47d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:04.000Z",
            "modified": "2015-09-30T08:45:04.000Z",
            "first_observed": "2015-09-30T08:45:04Z",
            "last_observed": "2015-09-30T08:45:04Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba110-fb60-4d98-8743-47d3950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba110-fb60-4d98-8743-47d3950d210b",
            "value": "https://www.virustotal.com/file/f371933734b959d04fc05aa6a03883220ae3dffbb742e968aab1be3a43be07a4/analysis/1433038278/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba110-c514-4539-87f6-4226950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:04.000Z",
            "modified": "2015-09-30T08:45:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cancelbuttondc.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba110-53a0-4d15-83b3-44b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:04.000Z",
            "modified": "2015-09-30T08:45:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a7d30b5524e6e7206c1dcf8830a3705']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba111-a048-4104-9fa0-4af4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:05.000Z",
            "modified": "2015-09-30T08:45:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 064f5cf33d8f33442a65360e44524758",
            "pattern": "[file:hashes.SHA256 = '5a3bac6d1b14eac45baa978c4cb9d4781f05ff648af46efc7391515d5f7d1d5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba111-95ac-4c9f-bd3a-4b5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:05.000Z",
            "modified": "2015-09-30T08:45:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cancerevil.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba111-2708-4da3-a329-4c20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:05.000Z",
            "modified": "2015-09-30T08:45:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a81c494c740958972c3169c7e2fe661']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba111-ed4c-4dc9-8613-4618950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:05.000Z",
            "modified": "2015-09-30T08:45:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 064f5cf33d8f33442a65360e44524758",
            "pattern": "[file:hashes.SHA1 = '8c1b3dd85a59100d124166e3ea7fd258e87a521d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba111-3140-472a-ab3e-496f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:05.000Z",
            "modified": "2015-09-30T08:45:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'caraiodomain.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba111-e754-4b7e-9189-4f7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:05.000Z",
            "modified": "2015-09-30T08:45:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a82bf4f6eba8ff50ced4d9676052e70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba111-d680-440d-9130-43ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:05.000Z",
            "modified": "2015-09-30T08:45:05.000Z",
            "first_observed": "2015-09-30T08:45:05Z",
            "last_observed": "2015-09-30T08:45:05Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba111-d680-440d-9130-43ea950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba111-d680-440d-9130-43ea950d210b",
            "value": "https://www.virustotal.com/file/5a3bac6d1b14eac45baa978c4cb9d4781f05ff648af46efc7391515d5f7d1d5e/analysis/1432717936/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba111-8098-4ff6-8b5d-45c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:05.000Z",
            "modified": "2015-09-30T08:45:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'casper1903.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba112-a368-4ba8-8686-4722950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:06.000Z",
            "modified": "2015-09-30T08:45:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a84447e07355931c9616e091ac4e03c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba112-93cc-4635-8f73-45cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:06.000Z",
            "modified": "2015-09-30T08:45:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0644bae3db976a88992bc21f6704d3ce",
            "pattern": "[file:hashes.SHA256 = '33ebb617656cea8bed5f84c2ff8663e1117e3e97e73b9a0811a2209b9f89aaa1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba112-7c20-4875-8aaa-413b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:06.000Z",
            "modified": "2015-09-30T08:45:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'casperakku.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba112-5884-4a8e-91a0-41e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:06.000Z",
            "modified": "2015-09-30T08:45:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a879efce83b2c1ee3910abd2145b829']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba112-2998-42f7-bc02-45ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:06.000Z",
            "modified": "2015-09-30T08:45:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0644bae3db976a88992bc21f6704d3ce",
            "pattern": "[file:hashes.SHA1 = '88279a508c3309e223b0569df1b419721e958daa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba112-51f0-491a-9456-49df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:06.000Z",
            "modified": "2015-09-30T08:45:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'casperghostjr.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba112-b85c-42ea-a7f3-4c68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:06.000Z",
            "modified": "2015-09-30T08:45:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a91a89bfc87b526e69280abeb3e528e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba113-a118-49ab-9b09-4bda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "first_observed": "2015-09-30T08:45:07Z",
            "last_observed": "2015-09-30T08:45:07Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba113-a118-49ab-9b09-4bda950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba113-a118-49ab-9b09-4bda950d210b",
            "value": "https://www.virustotal.com/file/33ebb617656cea8bed5f84c2ff8663e1117e3e97e73b9a0811a2209b9f89aaa1/analysis/1435075209/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba113-3280-4d16-801e-44ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1a98764e10b582f490505b905bfc3412']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba113-d858-4133-997f-4688950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cb7.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba113-9134-431f-b859-40bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1aaa5336b5fe60529aa97c21e5e052e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba113-bfa4-4641-9921-4e43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0627b29daa0f875fb21f7695886ddb13",
            "pattern": "[file:hashes.SHA256 = 'f0dc7cb861779e374ff1e7c441d326d2a92e3368c38bc808211a7becbd17ce3d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba113-aed0-4cec-9753-442c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ccmczx.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba113-a194-4b5b-a3cf-4375950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ceazar87.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba113-9fb0-4f98-ae4c-44bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0627b29daa0f875fb21f7695886ddb13",
            "pattern": "[file:hashes.SHA1 = '79960dd626ae600e6320a6afc45dcc833e9d9721']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba113-2028-4782-b8dc-415f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ab51d918452a06408479f848eeb9fdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba114-0e20-4013-a55f-4ae4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:08.000Z",
            "modified": "2015-09-30T08:45:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ab544d95bc02ac37220121823bb3457']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba113-246c-473f-a458-4497950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:07.000Z",
            "modified": "2015-09-30T08:45:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cellatgeldi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba114-af34-4638-85cb-4725950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:08.000Z",
            "modified": "2015-09-30T08:45:08.000Z",
            "first_observed": "2015-09-30T08:45:08Z",
            "last_observed": "2015-09-30T08:45:08Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba114-af34-4638-85cb-4725950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba114-af34-4638-85cb-4725950d210b",
            "value": "https://www.virustotal.com/file/f0dc7cb861779e374ff1e7c441d326d2a92e3368c38bc808211a7becbd17ce3d/analysis/1436699232/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba114-2edc-4fc1-af40-4b52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:08.000Z",
            "modified": "2015-09-30T08:45:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1abece1b6f2e32f4cb83c70112008a49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba114-88d0-4847-a32d-432c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:08.000Z",
            "modified": "2015-09-30T08:45:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0625ce7cc727aa575b0c915279a5771c",
            "pattern": "[file:hashes.SHA256 = 'e63ae8160531735ea52b75ab0aecefaf8a55e9c66b383ae14dd546df9d6aa528']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba114-be34-49a8-b6e8-4f89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:08.000Z",
            "modified": "2015-09-30T08:45:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'centersmall.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba114-442c-495b-9267-4602950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:08.000Z",
            "modified": "2015-09-30T08:45:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0625ce7cc727aa575b0c915279a5771c",
            "pattern": "[file:hashes.SHA1 = '6d0a9eb8112bf4b312bf9e977029034e20d874e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba114-18a4-4860-a17e-4ce5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:08.000Z",
            "modified": "2015-09-30T08:45:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ac1314a1924ec8d17fc01509d13e27d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba114-6244-48fe-81c6-4ccd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:08.000Z",
            "modified": "2015-09-30T08:45:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'centralnews.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba115-37d0-4819-8fe1-44cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ad9b6ee51b46d854ad2743d4cd0290b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba114-c084-48f1-a4d4-42d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:08.000Z",
            "modified": "2015-09-30T08:45:08.000Z",
            "first_observed": "2015-09-30T08:45:08Z",
            "last_observed": "2015-09-30T08:45:08Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba114-c084-48f1-a4d4-42d3950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba114-c084-48f1-a4d4-42d3950d210b",
            "value": "https://www.virustotal.com/file/e63ae8160531735ea52b75ab0aecefaf8a55e9c66b383ae14dd546df9d6aa528/analysis/1434873060/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba115-3690-4017-96f2-4988950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cezox.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba115-9984-4c0f-99eb-4b29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1af79530c2f72927bc7a124388d36b10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba115-3e90-46c0-992c-4840950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chalene.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba115-00b0-4bd0-90f1-459f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0620850ef6c2fb455ac38491b3050bbd",
            "pattern": "[file:hashes.SHA256 = '92b4b8da21bdc0884e584f62a133a97c905f4ea259281ddf115030d072cae089']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba115-ad24-4a87-bb90-4f1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b1508c0c26bf7ac427366f399604aed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba115-c90c-4e91-b660-4409950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0620850ef6c2fb455ac38491b3050bbd",
            "pattern": "[file:hashes.SHA1 = '0fb1678bdbbb51cd64cd46b6e1e06f417d8ea9b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba115-45d4-4248-8f45-413b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chalzz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba115-9c80-45ae-b18c-4bae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "first_observed": "2015-09-30T08:45:09Z",
            "last_observed": "2015-09-30T08:45:09Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba115-9c80-45ae-b18c-4bae950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba115-9c80-45ae-b18c-4bae950d210b",
            "value": "https://www.virustotal.com/file/92b4b8da21bdc0884e584f62a133a97c905f4ea259281ddf115030d072cae089/analysis/1436992716/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba115-72f0-49e2-b65f-40e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:09.000Z",
            "modified": "2015-09-30T08:45:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b2a8bd661b419cecaf4820fe6e463f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba116-8f84-4dba-b74a-46a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chaoraivos.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba116-efe0-4cfe-9439-45c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b40ea8d400eda59c9d034e6cebbacdb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba116-6964-46cc-9cad-4065950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0618a831f5af9a7da215d3053bbea004",
            "pattern": "[file:hashes.SHA256 = '67a4ee08368e8c32c2f8b870bf711d626823d8f5352d1a5d3f410117bc1179bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba116-72a4-42f2-9334-4b5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'charcharbink.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba116-d450-4a67-b066-4caa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b43aabca4eba8a4ed90f1b8fd1567b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba116-80b4-4d10-b06d-4bfa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b4d103767ff76942732de87ca926b1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba116-bcb4-4ee7-9ee6-4cc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0618a831f5af9a7da215d3053bbea004",
            "pattern": "[file:hashes.SHA1 = '2906cc60b3823a167dcb9768d39522b461ac9124']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba116-2a8c-4fa1-803f-499f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b517ab23a4d829b6565e9a2090bf672']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba116-9b34-4f82-8dde-44b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'charge2142.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-81c8-435b-90e4-4dd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b5242a361e1d939574273b25eb1ca25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba116-cfb8-49aa-8cd8-48a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:10.000Z",
            "modified": "2015-09-30T08:45:10.000Z",
            "first_observed": "2015-09-30T08:45:10Z",
            "last_observed": "2015-09-30T08:45:10Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba116-cfb8-49aa-8cd8-48a8950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba116-cfb8-49aa-8cd8-48a8950d210b",
            "value": "https://www.virustotal.com/file/67a4ee08368e8c32c2f8b870bf711d626823d8f5352d1a5d3f410117bc1179bd/analysis/1438104724/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-c1bc-4504-bde1-4dc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b602256187f19f2fd0ba95c790f72f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-5d1c-4fcd-9f2e-4686950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chatspam.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-3064-4221-821f-42b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b6407a6c49653e84893cf64561734a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-d464-4c99-acbc-473c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0608ed94673f71d47a9084c593e6f523",
            "pattern": "[file:hashes.SHA256 = '4e443de53c896f5a021a8c4a94414f652d78417a5241b28dbd9dc5047cb7c4b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-9c04-41b1-aaac-4d47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chavbomb-server.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-0a64-47e3-827a-4776950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b7041d33c650f1770db84576d8422e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-76c4-4454-acf2-4320950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chavbomb.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-2a9c-49cd-8d24-47ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0608ed94673f71d47a9084c593e6f523",
            "pattern": "[file:hashes.SHA1 = '2e773f27be57a5323c48b8b710c134f2e972d63b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-ae30-4eba-9872-499d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b86524353281bb64c38562dabb0d3c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba118-d48c-4575-b1df-4fe2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:12.000Z",
            "modified": "2015-09-30T08:45:12.000Z",
            "first_observed": "2015-09-30T08:45:12Z",
            "last_observed": "2015-09-30T08:45:12Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba118-d48c-4575-b1df-4fe2950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba118-d48c-4575-b1df-4fe2950d210b",
            "value": "https://www.virustotal.com/file/4e443de53c896f5a021a8c4a94414f652d78417a5241b28dbd9dc5047cb7c4b2/analysis/1432853286/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba117-4d88-447f-9a86-4ed6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:11.000Z",
            "modified": "2015-09-30T08:45:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chebb.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba118-33b8-4549-85c9-4243950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:12.000Z",
            "modified": "2015-09-30T08:45:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0605f771df999854b33d42e5a7930869",
            "pattern": "[file:hashes.SHA256 = '6007418893ffe7c0c10db30c5b978439cfd6026e3d9dd6791e706b78e551c8e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba118-4f40-4a69-b4c4-4f46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:12.000Z",
            "modified": "2015-09-30T08:45:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b8ed59d0683b339e52ba3e89f3f2926']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba118-6220-48d9-a4dc-4dea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:12.000Z",
            "modified": "2015-09-30T08:45:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0605f771df999854b33d42e5a7930869",
            "pattern": "[file:hashes.SHA1 = 'fc58d3437806f4ee21b4b1a7a3e637259b99097c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba118-0404-4236-8ea9-4481950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:12.000Z",
            "modified": "2015-09-30T08:45:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba118-02b4-44c9-8d66-4601950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:12.000Z",
            "modified": "2015-09-30T08:45:12.000Z",
            "first_observed": "2015-09-30T08:45:12Z",
            "last_observed": "2015-09-30T08:45:12Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba118-02b4-44c9-8d66-4601950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba118-02b4-44c9-8d66-4601950d210b",
            "value": "https://www.virustotal.com/file/6007418893ffe7c0c10db30c5b978439cfd6026e3d9dd6791e706b78e551c8e5/analysis/1434920250/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba118-4c08-44b3-9ba0-44cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:12.000Z",
            "modified": "2015-09-30T08:45:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1b94d90e91a8eb11f256af11222a52eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba118-16d0-43be-868f-48ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:12.000Z",
            "modified": "2015-09-30T08:45:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chimerara.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba119-c898-494e-ad44-4603950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ba7cb3895b33aadf0fdd2dbb4f6bb3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba118-5e50-4d1b-a318-4048950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:12.000Z",
            "modified": "2015-09-30T08:45:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0601e48a59b21a0164390320bda35b3a",
            "pattern": "[file:hashes.SHA256 = '4b878a856ded817dad17b0a02bae65ca6dfd9d57123a0a7e0a2430c1a88928a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba119-24e4-43da-8c60-4e04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1bb2aae35cc3b9b85cd68030fbba08a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba119-2378-481a-89f7-4375950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chino128.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba119-3a48-4075-a997-4023950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0601e48a59b21a0164390320bda35b3a",
            "pattern": "[file:hashes.SHA1 = '7c5d0644df71b9a8b05c871d1fe5421391a96491']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba119-edac-4595-be61-4782950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'choco378787.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba119-f068-484e-84f8-4b34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1bc24867d0c60b7b5898b110a4505572']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba119-e65c-4c27-bc30-477c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chokolatka.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba119-c080-42bb-8500-4c69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "first_observed": "2015-09-30T08:45:13Z",
            "last_observed": "2015-09-30T08:45:13Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba119-c080-42bb-8500-4c69950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba119-c080-42bb-8500-4c69950d210b",
            "value": "https://www.virustotal.com/file/4b878a856ded817dad17b0a02bae65ca6dfd9d57123a0a7e0a2430c1a88928a7/analysis/1433969118/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba119-50f4-49e1-a0e6-4fc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1bd2053a7b2654dcd6f93d5c07f27075']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11a-c324-476a-a058-44ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:14.000Z",
            "modified": "2015-09-30T08:45:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05e6ea473181799e76a7ba3a29471b7d",
            "pattern": "[file:hashes.SHA256 = '5e9f2e059be63baa4d8183383025616a93cf059fd06d378d1e7c3600fd5a2133']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba119-ac5c-4070-99c7-4ddb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:13.000Z",
            "modified": "2015-09-30T08:45:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chromeip.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11a-143c-42b9-8c59-4ec0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:14.000Z",
            "modified": "2015-09-30T08:45:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1bd279c4bbca636e6a41f888f0f9b11d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11a-a230-456c-97d0-4303950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:14.000Z",
            "modified": "2015-09-30T08:45:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05e6ea473181799e76a7ba3a29471b7d",
            "pattern": "[file:hashes.SHA1 = '21d28fba3e872947d44b40a5d077a8e2df998c50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11a-2550-45d9-af0e-43b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:14.000Z",
            "modified": "2015-09-30T08:45:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1bd9858cccb954c5045282f2b3b47f77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11a-cf44-452b-9720-4a6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:14.000Z",
            "modified": "2015-09-30T08:45:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chumd.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba11a-7704-41fc-af08-404e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:14.000Z",
            "modified": "2015-09-30T08:45:14.000Z",
            "first_observed": "2015-09-30T08:45:14Z",
            "last_observed": "2015-09-30T08:45:14Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba11a-7704-41fc-af08-404e950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba11a-7704-41fc-af08-404e950d210b",
            "value": "https://www.virustotal.com/file/5e9f2e059be63baa4d8183383025616a93cf059fd06d378d1e7c3600fd5a2133/analysis/1432228612/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11a-a458-442f-86d2-4698950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:14.000Z",
            "modified": "2015-09-30T08:45:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'chupazovos.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11a-36a0-40d7-9766-4469950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:14.000Z",
            "modified": "2015-09-30T08:45:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1bda90f6b08e8e21894aecf4a40e8cf1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11a-ba14-4de5-b3fa-4cc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:14.000Z",
            "modified": "2015-09-30T08:45:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05e3c69ae03989320fe3241c75101ac7",
            "pattern": "[file:hashes.SHA256 = '870e2a7d844cba3b88ba95b2d7809e829e21aedb810c3bc772df3137308d1fdd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-5da8-4d94-bc35-4050950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1be391f21ca31aaabca5c782bed63cdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-3464-4e1e-867e-46a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ciboz.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-0af0-455a-b333-4baf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05e3c69ae03989320fe3241c75101ac7",
            "pattern": "[file:hashes.SHA1 = 'aa486b2ae6cc9b99945a7749889efacb11a6971d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba11b-84f0-40dc-9bf4-45e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "first_observed": "2015-09-30T08:45:15Z",
            "last_observed": "2015-09-30T08:45:15Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba11b-84f0-40dc-9bf4-45e4950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba11b-84f0-40dc-9bf4-45e4950d210b",
            "value": "https://www.virustotal.com/file/870e2a7d844cba3b88ba95b2d7809e829e21aedb810c3bc772df3137308d1fdd/analysis/1436521650/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-9ae8-4b0e-af78-453d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1be4113c3a8e3f510f783fd5784124f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-17bc-42c4-8084-4569950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ciboz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-26bc-493f-a172-4076950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05d1f3dde050b4cfee0bff41531ec411",
            "pattern": "[file:hashes.SHA256 = 'ca90b97a627b56c2ff326cb1c8d6e272f0313dda3efe497c644498fc04f1dfb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-c7a8-4fc3-86da-47fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cjswagson.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-4ee4-45d8-8e1d-4746950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05d1f3dde050b4cfee0bff41531ec411",
            "pattern": "[file:hashes.SHA1 = '9556ecf0108c735a4507f2a92e8564b8b2e6f2ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-64f4-4487-a700-45db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1be7b46ca3c14b6764e244db635d4629']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11b-01fc-48a3-9208-4685950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:15.000Z",
            "modified": "2015-09-30T08:45:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'clandestine.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11c-386c-4802-90b1-49e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:16.000Z",
            "modified": "2015-09-30T08:45:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1befc396433c2546f2c62f57fe7d57bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba11c-7874-446e-af67-4da0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:16.000Z",
            "modified": "2015-09-30T08:45:16.000Z",
            "first_observed": "2015-09-30T08:45:16Z",
            "last_observed": "2015-09-30T08:45:16Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba11c-7874-446e-af67-4da0950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba11c-7874-446e-af67-4da0950d210b",
            "value": "https://www.virustotal.com/file/ca90b97a627b56c2ff326cb1c8d6e272f0313dda3efe497c644498fc04f1dfb9/analysis/1420017855/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11c-69d0-4c0b-852e-4e51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:16.000Z",
            "modified": "2015-09-30T08:45:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c146084810ee7372375aef1b224fdf4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11c-f6f0-450b-8603-47ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:16.000Z",
            "modified": "2015-09-30T08:45:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'clava.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11c-206c-4f6b-8b29-4089950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:16.000Z",
            "modified": "2015-09-30T08:45:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'clawd.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11c-fa9c-4ec0-a305-48cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:16.000Z",
            "modified": "2015-09-30T08:45:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05cd5f2b94375130f13034939a810199",
            "pattern": "[file:hashes.SHA256 = 'afa8337b4625c2ebf8f59ac7a08c50ac54cb4168586aa6b7fa49e4dfb98132c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11c-d5b0-4901-8c7e-40d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:16.000Z",
            "modified": "2015-09-30T08:45:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c21e844f2ed695dea3669897974ac09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11c-d18c-4acb-97b0-4f00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:16.000Z",
            "modified": "2015-09-30T08:45:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05cd5f2b94375130f13034939a810199",
            "pattern": "[file:hashes.SHA1 = 'fb992caadc6de654f69cc5148810f6cde5834ed7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11c-b2b8-4c43-a7f8-436d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:16.000Z",
            "modified": "2015-09-30T08:45:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cnhcke.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba11d-e56c-4c85-8a67-4cbb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "first_observed": "2015-09-30T08:45:17Z",
            "last_observed": "2015-09-30T08:45:17Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba11d-e56c-4c85-8a67-4cbb950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba11d-e56c-4c85-8a67-4cbb950d210b",
            "value": "https://www.virustotal.com/file/afa8337b4625c2ebf8f59ac7a08c50ac54cb4168586aa6b7fa49e4dfb98132c2/analysis/1432389021/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11d-7428-427e-9609-4f67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c2c88489942d73b1083ab8124cd30b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11d-5074-49e6-8767-4d37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05cb1f049bae272dc821f509ef1756f1",
            "pattern": "[file:hashes.SHA256 = '05839e7e933f8a0eb9c13f9efbb89d1d3fcdcc05182f868dc3cf526193ced54c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11d-ddfc-4774-84ed-4f17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cod3r.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11d-6120-41e3-948a-48b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05cb1f049bae272dc821f509ef1756f1",
            "pattern": "[file:hashes.SHA1 = '66074ba14ee4a201f0b7630658ed46668f674a33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11d-82ec-406c-b817-4268950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c38eb06bdf6b17a137ae0fe7e2a16df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11d-66d0-4b78-b071-4042950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'code187.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11d-414c-481d-8f8e-4d9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c3d88054aa402102ffc20ae1b034c5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba11d-02c0-4b66-854c-4f42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "first_observed": "2015-09-30T08:45:17Z",
            "last_observed": "2015-09-30T08:45:17Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba11d-02c0-4b66-854c-4f42950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba11d-02c0-4b66-854c-4f42950d210b",
            "value": "https://www.virustotal.com/file/05839e7e933f8a0eb9c13f9efbb89d1d3fcdcc05182f868dc3cf526193ced54c/analysis/1434323871/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11e-419c-48a5-9703-4f4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c50da15920332f850ce70efb8c3c6ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11d-ceb4-41d4-b047-4c31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:17.000Z",
            "modified": "2015-09-30T08:45:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'code32.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11e-ada0-443c-98bc-4936950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c52effcef769f0ce3e7f3b56e1a6054']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11e-4f14-443f-8f07-40c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05c9db20fa377cf2158508840a6c87a2",
            "pattern": "[file:hashes.SHA256 = '20394537354628e76da068dbf4cb12ca199907df5fbf81079699d039c2f506fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11e-dea0-4c27-9a7e-4a1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'codeeatsass.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11e-b148-4c17-8db7-4ebc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c5fb234f86a8b25aea694e3cdf38200']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11e-de18-4fea-a9b6-4bf6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c61608d5e5b17758cd4b6227f85924b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11e-1b58-4d24-ac01-4fe6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05c9db20fa377cf2158508840a6c87a2",
            "pattern": "[file:hashes.SHA1 = '334a10dd925722cae1fc716b8340a675bfeefc1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11e-23cc-423e-8acc-4dd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c720c60827fd03002ea4f9b78c0adff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11e-7204-4ce2-af22-456f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'codetexte.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba11e-d3f0-482b-946d-4454950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:18.000Z",
            "modified": "2015-09-30T08:45:18.000Z",
            "first_observed": "2015-09-30T08:45:18Z",
            "last_observed": "2015-09-30T08:45:18Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba11e-d3f0-482b-946d-4454950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba11e-d3f0-482b-946d-4454950d210b",
            "value": "https://www.virustotal.com/file/20394537354628e76da068dbf4cb12ca199907df5fbf81079699d039c2f506fa/analysis/1434472338/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-7ac0-41fa-8118-4c81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'codfreak321.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-d080-4b8c-8f78-4d1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c8a045b2d42d78d901583e070568d7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-a41c-48b3-af3d-41ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cokomatik.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-ad88-4216-b686-4b4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05be0dd64d27d73dd4c3609fd7dbeb14",
            "pattern": "[file:hashes.SHA256 = 'e0c38b13d4156b2d4c9c7cd760425f86baa06f02fb4eebfb9f5e0f60b339062d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-e7e4-4267-99fb-4e56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1c914cbf62debb5576c49286e83007da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-0594-4e5b-a7d0-4f61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ca7a230e296659be7d0afbc93fe86e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-7c24-4ba7-8412-4965950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'com1234.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-9320-4a9e-91d1-49a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05be0dd64d27d73dd4c3609fd7dbeb14",
            "pattern": "[file:hashes.SHA1 = 'c1034ad76db215c6d87d2a125d433a4e62eb5309']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-2968-4ddf-bbd7-47b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cb19d71f1e54f106018547d4bf64eed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba11f-282c-4ebb-a476-4b06950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "first_observed": "2015-09-30T08:45:19Z",
            "last_observed": "2015-09-30T08:45:19Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba11f-282c-4ebb-a476-4b06950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba11f-282c-4ebb-a476-4b06950d210b",
            "value": "https://www.virustotal.com/file/e0c38b13d4156b2d4c9c7cd760425f86baa06f02fb4eebfb9f5e0f60b339062d/analysis/1436134020/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba11f-6bf8-4829-a89d-47d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:19.000Z",
            "modified": "2015-09-30T08:45:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'comehere.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba120-ae44-457b-95de-4622950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05b31f6c8cec2982ea891536e9ab1fa0",
            "pattern": "[file:hashes.SHA256 = 'eeff25ed01003b7ca6d91bcf02ae2fb4b8d4cdd90d1a62b7d89424bc2ba7139d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba120-866c-4ec5-8360-4a51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cb5a15f4e79c5f1cf1544e6edc23887']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba120-19ec-4cf9-9ebc-4c81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'comet2351.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba120-4484-4436-9c7b-4a2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cbeab84d87c4385e7292f814254d136']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba120-22e0-4942-8b6d-4831950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05b31f6c8cec2982ea891536e9ab1fa0",
            "pattern": "[file:hashes.SHA1 = '570ad59577c74870f6eac87e2637b5e3697e418d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba120-a760-4bdc-b38f-4769950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ccc0f721c48d5e04b3ef20f6229dc71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba120-b2e4-47e0-8069-4181950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cometa.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba120-6144-41a8-af25-4a9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cometakoks1k.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba120-47c8-47b5-bd68-4eb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "first_observed": "2015-09-30T08:45:20Z",
            "last_observed": "2015-09-30T08:45:20Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba120-47c8-47b5-bd68-4eb3950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba120-47c8-47b5-bd68-4eb3950d210b",
            "value": "https://www.virustotal.com/file/eeff25ed01003b7ca6d91bcf02ae2fb4b8d4cdd90d1a62b7d89424bc2ba7139d/analysis/1435291159/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba120-7a78-437b-ab3c-4806950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:20.000Z",
            "modified": "2015-09-30T08:45:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cce05e812003c126931dfa2f2da718a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba121-1390-49a5-9444-4f4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:21.000Z",
            "modified": "2015-09-30T08:45:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05a416ae495223f321aa4801cd1315f5",
            "pattern": "[file:hashes.SHA256 = 'be931be3dca8ba2f5d64593f02e22bf21f1db9eeef5332299d61a862f01baa86']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba121-0e0c-4a66-8fd6-426c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:21.000Z",
            "modified": "2015-09-30T08:45:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cometd.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba121-b5fc-4494-9cd8-4568950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:21.000Z",
            "modified": "2015-09-30T08:45:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cometka.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba121-81f4-452e-b6b1-44ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:21.000Z",
            "modified": "2015-09-30T08:45:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cd10cc7bdc488c070bbab29f9405b9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba121-e264-4be1-9db8-4074950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:21.000Z",
            "modified": "2015-09-30T08:45:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05a416ae495223f321aa4801cd1315f5",
            "pattern": "[file:hashes.SHA1 = 'b39d5260434bd630a86742a68ac6cbb30ee2ddf6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba121-2f3c-4bcf-b1d9-4237950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:21.000Z",
            "modified": "2015-09-30T08:45:21.000Z",
            "first_observed": "2015-09-30T08:45:21Z",
            "last_observed": "2015-09-30T08:45:21Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba121-2f3c-4bcf-b1d9-4237950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba121-2f3c-4bcf-b1d9-4237950d210b",
            "value": "https://www.virustotal.com/file/be931be3dca8ba2f5d64593f02e22bf21f1db9eeef5332299d61a862f01baa86/analysis/1433979368/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba121-96fc-4aa5-9b8e-4af9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:21.000Z",
            "modified": "2015-09-30T08:45:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cd68ba9bb390d9c9b897dc2c6d6eafa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba121-df78-42f3-acc4-4a62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:21.000Z",
            "modified": "2015-09-30T08:45:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cometspace.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-cca0-4c55-af51-42f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 059f1b3b294bbad5d80295bb1b9f5563",
            "pattern": "[file:hashes.SHA256 = 'f727ebf336309b5a478a6850a17eb4e830914bf217721157b83e95aa622c5506']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-acb4-406d-b035-41bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 059f1b3b294bbad5d80295bb1b9f5563",
            "pattern": "[file:hashes.SHA1 = '39f0991f1bcadbd7b471a60c3344f110ed915f93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-148c-4aeb-9708-4e28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cdcebf6aa0f5aa2b876779bcc050708']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-e974-41e5-b3cb-46c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cometuser46.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba122-6954-4b57-80d7-4f65950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "first_observed": "2015-09-30T08:45:22Z",
            "last_observed": "2015-09-30T08:45:22Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba122-6954-4b57-80d7-4f65950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba122-6954-4b57-80d7-4f65950d210b",
            "value": "https://www.virustotal.com/file/f727ebf336309b5a478a6850a17eb4e830914bf217721157b83e95aa622c5506/analysis/1438106012/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-9f04-4a43-a6f7-4479950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 059a502b4e4e4e4eebce1b7a5b67d3cb",
            "pattern": "[file:hashes.SHA256 = '0a0ce41221d5fa1a9640755c50bc7735b21caa8b3a34ae03b63322294e96456c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-ddd0-4ea5-9043-4dfd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ce788d5d6ab28670ae6b2374d36b451']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-c294-4e22-a686-49bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'comfort12345.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-e570-4383-bbbc-4db2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 059a502b4e4e4e4eebce1b7a5b67d3cb",
            "pattern": "[file:hashes.SHA1 = 'aefa25867c200aa79d5558e2b93f4b487f4cee8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba123-4250-4c77-bcc8-4c4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "first_observed": "2015-09-30T08:45:23Z",
            "last_observed": "2015-09-30T08:45:23Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba123-4250-4c77-bcc8-4c4b950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba123-4250-4c77-bcc8-4c4b950d210b",
            "value": "https://www.virustotal.com/file/0a0ce41221d5fa1a9640755c50bc7735b21caa8b3a34ae03b63322294e96456c/analysis/1443460163/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-cdf8-4658-949c-48cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'commandopg.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba122-3a08-4d19-85d1-43c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:22.000Z",
            "modified": "2015-09-30T08:45:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cefc5adfcbd65c9c679244ac534a9c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba123-6d9c-47aa-9f6b-4179950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 058f4e7f6fd72d3e1348938a6bcca984",
            "pattern": "[file:hashes.SHA256 = '6885895cf960e65503de65611a4d9fa556448b7c5140dcabffaa5f9adb7cc3d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba123-ce78-4f77-b5b8-4bea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'companyhost.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba123-42a4-46e7-be95-43c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 058f4e7f6fd72d3e1348938a6bcca984",
            "pattern": "[file:hashes.SHA1 = 'dfdcc9026cdb9df19ea301cadb786e982c00a575']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba123-7860-4c95-9e38-4a23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cf349f19a9261237cfef636af06550f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba123-8e78-48a7-99e5-473d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'computer21.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba123-578c-492d-9ff0-4683950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'connectionwifi.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba123-4d7c-4418-a330-44e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "first_observed": "2015-09-30T08:45:23Z",
            "last_observed": "2015-09-30T08:45:23Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba123-4d7c-4418-a330-44e7950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba123-4d7c-4418-a330-44e7950d210b",
            "value": "https://www.virustotal.com/file/6885895cf960e65503de65611a4d9fa556448b7c5140dcabffaa5f9adb7cc3d8/analysis/1432279546/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba123-8f4c-4804-8eaf-423d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1cfc56dac76865f1c778ee3c905f5011']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba124-a718-4b6a-9ac0-4122950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 057646aca624e545d7f4b227c543cc19",
            "pattern": "[file:hashes.SHA256 = '2cc92ba4a2b4a164eded7870d7e6b1edb23f074b8e4aad3fd846f149d7772da1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba123-41a8-4aeb-833e-411e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:23.000Z",
            "modified": "2015-09-30T08:45:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cookiekiaule.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba124-ca30-46a9-b287-4631950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cooliwoelie.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba124-3c2c-458b-9e45-460a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d00f25237e5224417adbcff0af16a95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba124-0e24-485c-ad70-416b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 057646aca624e545d7f4b227c543cc19",
            "pattern": "[file:hashes.SHA1 = '5cae3c5ff7e0fab4ab1d218ea99b459b4c407ad4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba124-42e8-4b37-ad36-4d95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cow123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba124-9f08-40d8-8cde-47a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d0a74e4c0699d43d9dec76d1d36f20e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba124-ee6c-48a0-844d-4cbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cputy420.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba124-2ee0-4c3c-8987-429e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "first_observed": "2015-09-30T08:45:24Z",
            "last_observed": "2015-09-30T08:45:24Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba124-2ee0-4c3c-8987-429e950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba124-2ee0-4c3c-8987-429e950d210b",
            "value": "https://www.virustotal.com/file/2cc92ba4a2b4a164eded7870d7e6b1edb23f074b8e4aad3fd846f149d7772da1/analysis/1435692763/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba124-59f4-44e0-bcb9-423d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d0fd7f2acaa825bf2ed025f3f93574c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba125-3494-4657-9f3c-4558950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d2b98c94c0e08b0771c03b14ddab448']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba124-e73c-4b4d-9bf4-458d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:24.000Z",
            "modified": "2015-09-30T08:45:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cr9zz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba125-1a7c-42b5-865d-4cf7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0574132d779425aa46d965d7513fa532",
            "pattern": "[file:hashes.SHA256 = '31877dbdf320b6cf4ee8aa2d15ec1f1385e08a219eba21f8fcaac72ce515001a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba125-4840-40e8-8750-4413950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d36b1071c0576d02ca6ee2ea020c7ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba125-2f60-42c5-82ab-46c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0574132d779425aa46d965d7513fa532",
            "pattern": "[file:hashes.SHA1 = 'b267392b90bdfcbece00c01cd005d7160f076bac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba125-e3a0-4dc1-827e-4bd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'crack2.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba125-c4fc-4386-b1f7-4fd4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d43cbf012547325e443bee2d6f9110b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba125-4758-4a30-bb56-4e08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "first_observed": "2015-09-30T08:45:25Z",
            "last_observed": "2015-09-30T08:45:25Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba125-4758-4a30-bb56-4e08950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba125-4758-4a30-bb56-4e08950d210b",
            "value": "https://www.virustotal.com/file/31877dbdf320b6cf4ee8aa2d15ec1f1385e08a219eba21f8fcaac72ce515001a/analysis/1435932015/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba125-84b4-403c-9840-4ab5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d4d1a109e90bf6cfc13292d11db05ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba125-ce6c-4bad-9706-4aa8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cracky07.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba126-5d2c-4298-bdb7-44ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d62ee5c2beae19d5e5c44626ebcf3bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba125-176c-41d4-984a-474f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:25.000Z",
            "modified": "2015-09-30T08:45:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05608ee9a1e8e84ea9f9d2f0ddc11ebc",
            "pattern": "[file:hashes.SHA256 = '7b88672e5d9ffde74d8b758ad9fe5ca8d126d067767ce2cb4b2407a544d25256']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba126-9e6c-460e-9226-4744950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'craftserj.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba126-3d94-4f16-b82d-458f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05608ee9a1e8e84ea9f9d2f0ddc11ebc",
            "pattern": "[file:hashes.SHA1 = '1e6892c258d80ba2cf6d9133181a385336cf9c08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba126-ae48-4cd1-9753-42d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d79086b64bb1122fcb4179351fea3ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba126-6e74-4d51-91a1-45de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'craze-zlom.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba126-be9c-469a-9e71-4e63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d8b8a3cf2b14dc234ce70f65d397c05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba126-1470-46e6-aee5-439b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "first_observed": "2015-09-30T08:45:26Z",
            "last_observed": "2015-09-30T08:45:26Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba126-1470-46e6-aee5-439b950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba126-1470-46e6-aee5-439b950d210b",
            "value": "https://www.virustotal.com/file/7b88672e5d9ffde74d8b758ad9fe5ca8d126d067767ce2cb4b2407a544d25256/analysis/1433400480/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba126-0244-4cef-a8fa-4f83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d998294bb4889106483ef5cc0d670a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba126-c710-4794-af4e-403f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'crazyfoxy.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba126-a8e4-47dc-bc26-4841950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:26.000Z",
            "modified": "2015-09-30T08:45:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 055df03908ffeef422658452dd69b416",
            "pattern": "[file:hashes.SHA256 = '16ff5324c868bba68dd6d6926baab0da2cda245f9a8a47e2307c9da2e84a50f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba127-7e14-48e3-9e78-47a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:27.000Z",
            "modified": "2015-09-30T08:45:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'crazyrp.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba127-4624-4acb-bb95-41f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:27.000Z",
            "modified": "2015-09-30T08:45:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d9de71efd83b08fcea968b9c91c8615']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba127-9bbc-48bb-a866-45cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:27.000Z",
            "modified": "2015-09-30T08:45:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'create.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba127-bbd0-4b79-8864-4b3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:27.000Z",
            "modified": "2015-09-30T08:45:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 055df03908ffeef422658452dd69b416",
            "pattern": "[file:hashes.SHA1 = '7a03eaf6bc8d0964e17215a0cfd5558bee5812a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba127-9bbc-4282-bc80-4231950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:27.000Z",
            "modified": "2015-09-30T08:45:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1d9f24e71f6fcb69d4b707f63f0cee71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba127-ffb4-4550-9420-41a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:27.000Z",
            "modified": "2015-09-30T08:45:27.000Z",
            "first_observed": "2015-09-30T08:45:27Z",
            "last_observed": "2015-09-30T08:45:27Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba127-ffb4-4550-9420-41a0950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba127-ffb4-4550-9420-41a0950d210b",
            "value": "https://www.virustotal.com/file/16ff5324c868bba68dd6d6926baab0da2cda245f9a8a47e2307c9da2e84a50f5/analysis/1433511689/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba127-32f0-4250-a175-431b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:27.000Z",
            "modified": "2015-09-30T08:45:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'crewtok.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba127-540c-473a-a1fb-4130950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:27.000Z",
            "modified": "2015-09-30T08:45:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1dabd34917a0c03f01a6f68f8ef90eb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba128-6fb0-4050-90e0-43e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1db6c9e94048edfe97b93be06f517f15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba127-745c-4b69-9d7c-41f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:27.000Z",
            "modified": "2015-09-30T08:45:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0552657ae959d67ba9ca5a8d9db4dde4",
            "pattern": "[file:hashes.SHA256 = 'c255b238fdac277bb2837d843d855bb49f77f18e58d01b3bb66615d5edcefb22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba128-e900-4b19-8b80-4ca4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1dc2b91c8c015ea57e33523b8ce1cd8d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba128-5e1c-4b58-9032-4fe9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'crimsonscounts.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba128-a100-475e-a88c-4876950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csgo.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba128-df2c-4ad8-8cc0-4be9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0552657ae959d67ba9ca5a8d9db4dde4",
            "pattern": "[file:hashes.SHA1 = '0621df5177f84d6b21d0eb2a3906d45e6e8f9d70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba128-c1d0-4d1c-81ef-48ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1dd691cfb817b27bedb5ddae0cd90466']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba128-5fa0-4033-b67c-48cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csgo1337228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba128-1a14-4ddf-a8ff-4f08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1dd894fed107df82bef3a93dbb1e69dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba128-f1b0-48c7-9b90-45fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "first_observed": "2015-09-30T08:45:28Z",
            "last_observed": "2015-09-30T08:45:28Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba128-f1b0-48c7-9b90-45fc950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba128-f1b0-48c7-9b90-45fc950d210b",
            "value": "https://www.virustotal.com/file/c255b238fdac277bb2837d843d855bb49f77f18e58d01b3bb66615d5edcefb22/analysis/1432421578/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba129-58c8-4e20-840d-4c6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1de312cf9a5bde45b37815e8cf8edb82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba128-a41c-4b3a-8e11-4926950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:28.000Z",
            "modified": "2015-09-30T08:45:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csgoawpmaster.serveminecraft.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba129-62ec-4bb9-b8c0-484e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0552402f456faaa1a7413dbefeef6b53",
            "pattern": "[file:hashes.SHA256 = 'f4ee07ebec86ee0a27979a95a1408836084d5b3bc968c46063c1b347925c8b3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba129-fbf0-4a17-97fb-439a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0552402f456faaa1a7413dbefeef6b53",
            "pattern": "[file:hashes.SHA1 = 'fec40ceb295e538b019df57225ad56e94a098415']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba129-07ec-4c2a-bf47-4ab5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1de3bc5e63b9cd649c5a5362284b72aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba129-0788-45de-b4eb-4bb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csgodota2.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba129-447c-4bc7-ab6b-43aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1dec803b0e8ee4fbf5087e9ba0869e3d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba129-a54c-4299-b6a5-4260950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "first_observed": "2015-09-30T08:45:29Z",
            "last_observed": "2015-09-30T08:45:29Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba129-a54c-4299-b6a5-4260950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba129-a54c-4299-b6a5-4260950d210b",
            "value": "https://www.virustotal.com/file/f4ee07ebec86ee0a27979a95a1408836084d5b3bc968c46063c1b347925c8b3b/analysis/1436665823/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba129-0ca0-49c1-848e-474a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csgoever.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba129-036c-4237-957a-48af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 054bc2aa886e0572c985d49397f0d8d2",
            "pattern": "[file:hashes.SHA256 = '410303d1a99a40d7c6b467cab3397e050e49b17da927df7493b5868f624c3ddb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba129-ebf4-4db1-9cdf-4bf2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:29.000Z",
            "modified": "2015-09-30T08:45:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1df71cfd16f9129ca6bebc4a3c725cee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12a-15d4-4867-a6ba-4b7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 054bc2aa886e0572c985d49397f0d8d2",
            "pattern": "[file:hashes.SHA1 = 'ca4a29e5f2b81560f34e9b04fcb7e08f60dd101d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12a-9908-4278-a93a-43c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csgohack123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12a-61d4-4e88-9f7e-406a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e0aeebeced1aebcc2b52b909fe80557']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12a-b544-46dd-9c50-4623950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e0c2269fe5b2d98cacbe543e458f483']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba12a-5f88-414e-a480-4d2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "first_observed": "2015-09-30T08:45:30Z",
            "last_observed": "2015-09-30T08:45:30Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba12a-5f88-414e-a480-4d2d950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba12a-5f88-414e-a480-4d2d950d210b",
            "value": "https://www.virustotal.com/file/410303d1a99a40d7c6b467cab3397e050e49b17da927df7493b5868f624c3ddb/analysis/1434277022/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12a-c598-4ba1-aade-45b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e154b3ebaf45646bed4ab4a23067648']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12a-a928-4207-9b13-43d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csgohackzz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12a-8a10-40b4-9ff0-4006950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e1e9310efb0d3919c870be51d43434c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12a-886c-4d23-ab3a-4e4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 054026636c4132b61da1fd0275a16ee0",
            "pattern": "[file:hashes.SHA256 = 'cb264a3dcf9c80ac30312bd0ec8da8a616b1f09643247e132d55dc22bace406c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12b-7e58-4be6-a2eb-4f2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e21b43fa66e21b9eadb602ac091b394']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12a-6df0-4133-86a8-45c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:30.000Z",
            "modified": "2015-09-30T08:45:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csgoknife.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12b-4e10-4201-bcf5-4d90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e23af7c0907b96f72c69beb7aeb4da2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12b-7b70-4faf-9bc0-4420950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 054026636c4132b61da1fd0275a16ee0",
            "pattern": "[file:hashes.SHA1 = '0b5b09882d6247695982d11e46b9691bc7cded1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12b-7b60-494e-bd9c-48ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e29dae2b89f41958f43ddc40d232645']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12b-34ac-47d0-aec3-4af4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csgorat112.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba12b-c2f0-44b8-87fd-4283950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "first_observed": "2015-09-30T08:45:31Z",
            "last_observed": "2015-09-30T08:45:31Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba12b-c2f0-44b8-87fd-4283950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba12b-c2f0-44b8-87fd-4283950d210b",
            "value": "https://www.virustotal.com/file/cb264a3dcf9c80ac30312bd0ec8da8a616b1f09643247e132d55dc22bace406c/analysis/1433058620/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12b-2f5c-4fdf-8a12-42d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05304acc27a4bd0ba4867089d58d97f8",
            "pattern": "[file:hashes.SHA256 = '439709b26251715bf680c69dd87ec6b9ce4fd0d808b770adcab3e09e3f0f346f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12b-9cf4-43af-8078-467b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e3eb1a6a0911d3b845864169b83314d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12b-ed2c-4e4a-abcf-4231950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'csoyna.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12c-955c-4e71-8030-4bb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e419f051c095347ea50a7680d112c09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12b-3968-4d35-a530-45b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:31.000Z",
            "modified": "2015-09-30T08:45:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05304acc27a4bd0ba4867089d58d97f8",
            "pattern": "[file:hashes.SHA1 = 'a9d3f0dc8870ab8efb209f93a12f6ddfc7fcabca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12c-9440-4062-b0fe-452a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'curserx.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12c-16b4-4d3f-82a2-47b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e4313bc5dcd60d550317253a7b7e3c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12c-f9f4-4b50-a4dd-495d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cuttheshitandcrap.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba12c-f69c-428a-8d15-42e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "first_observed": "2015-09-30T08:45:32Z",
            "last_observed": "2015-09-30T08:45:32Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba12c-f69c-428a-8d15-42e7950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba12c-f69c-428a-8d15-42e7950d210b",
            "value": "https://www.virustotal.com/file/439709b26251715bf680c69dd87ec6b9ce4fd0d808b770adcab3e09e3f0f346f/analysis/1435969597/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12c-cfe8-4e42-99ae-473f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cwbiahell.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12c-0e50-4358-9c56-49cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e58bf3832b2e12fdfe72048f927b6c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12c-3fd0-4b39-8cfa-4b16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e6c022ecb638a7cd1fed8e452b3763e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12c-e9a4-4143-830c-4365950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 052de419a41559f6430f81fdeaf018d8",
            "pattern": "[file:hashes.SHA256 = '596b0a4d9ba1e92ba1dc50d019fe2b6f2c545dab993b93470658d7988e305e1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12c-2c3c-42f1-985b-407c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:32.000Z",
            "modified": "2015-09-30T08:45:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cx430cooper.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12d-ee04-480d-b093-407c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 052de419a41559f6430f81fdeaf018d8",
            "pattern": "[file:hashes.SHA1 = '7aeca9e2a497f1d735dfec57367f230044f6eaa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12d-1850-4c74-ad8a-4f96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e7418475a449b69a3237e9d6a44de7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba12d-08f4-48b5-94d0-41de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "first_observed": "2015-09-30T08:45:33Z",
            "last_observed": "2015-09-30T08:45:33Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba12d-08f4-48b5-94d0-41de950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba12d-08f4-48b5-94d0-41de950d210b",
            "value": "https://www.virustotal.com/file/596b0a4d9ba1e92ba1dc50d019fe2b6f2c545dab993b93470658d7988e305e1d/analysis/1434285595/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12d-a8d8-4f9c-b476-4519950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyber-dcom.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12d-351c-44c3-94e9-4538950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e757af1dd83a3391f0263578b176873']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12d-4084-4fde-9ee6-4db7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cybercomet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12d-fab8-44ce-ab23-4270950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 052c98a6b23b623aebdfd9eca8a0081b",
            "pattern": "[file:hashes.SHA256 = '5c295d8d6675f4de964bef6076bb29b05cd6824760eda9ca5264f1f1838205c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12d-40b4-49e1-83ab-4823950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e7ac6eaf8cd48652d391943b86b4404']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12d-022c-4441-879b-4972950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyberdynesystems.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12e-53ac-47df-8b71-4e26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cybergatenou4r.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12d-01bc-41fc-bbf7-47d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:33.000Z",
            "modified": "2015-09-30T08:45:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 052c98a6b23b623aebdfd9eca8a0081b",
            "pattern": "[file:hashes.SHA1 = 'ecac77b0559bb40329e4cedb95e8560efd0bb943']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12e-b9b4-4c30-b391-476d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e8add0b09b896d7fbcdc6adda25ee0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12e-53e4-4117-946f-4c27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyberghost3526.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12e-690c-484e-aa72-4eff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e9026a153166afdc53f43d36ec24316']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba12e-e368-4ae5-aaac-45f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "first_observed": "2015-09-30T08:45:34Z",
            "last_observed": "2015-09-30T08:45:34Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba12e-e368-4ae5-aaac-45f6950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba12e-e368-4ae5-aaac-45f6950d210b",
            "value": "https://www.virustotal.com/file/5c295d8d6675f4de964bef6076bb29b05cd6824760eda9ca5264f1f1838205c6/analysis/1436355214/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12e-afa4-4741-a138-4b8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyberizmrat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12e-b480-4128-8650-486a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05267a3f85f3fe98dfaa34398b3d0fcd",
            "pattern": "[file:hashes.SHA256 = '85578082a0286c23b4d5fd02c7562b7bf1012963bed9110167a180b7a38d8eba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12e-1b9c-4bf6-95e2-4660950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e9216b7692543e8d69361e29333e9d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12e-6378-476d-b057-48b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyberrat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12f-3a80-4d3d-8087-4042950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:35.000Z",
            "modified": "2015-09-30T08:45:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e9319510f37c9316a48e7ee529b7881']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12e-7318-4d47-bc68-4890950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:34.000Z",
            "modified": "2015-09-30T08:45:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 05267a3f85f3fe98dfaa34398b3d0fcd",
            "pattern": "[file:hashes.SHA1 = '4d1ff112c630997b9123894b1bd47c9b087a390f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12f-4f7c-4850-b0d6-474e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:35.000Z",
            "modified": "2015-09-30T08:45:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1e9e8874e9d47155860d0fa1efb55141']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12f-2e54-4fa2-b9fd-4f42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:35.000Z",
            "modified": "2015-09-30T08:45:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyberrat1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba12f-4bec-4618-9d6d-49d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:35.000Z",
            "modified": "2015-09-30T08:45:35.000Z",
            "first_observed": "2015-09-30T08:45:35Z",
            "last_observed": "2015-09-30T08:45:35Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba12f-4bec-4618-9d6d-49d0950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba12f-4bec-4618-9d6d-49d0950d210b",
            "value": "https://www.virustotal.com/file/85578082a0286c23b4d5fd02c7562b7bf1012963bed9110167a180b7a38d8eba/analysis/1434358095/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12f-41bc-4866-a063-4566950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:35.000Z",
            "modified": "2015-09-30T08:45:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyberrat2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12f-a3f4-4386-b395-44e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:35.000Z",
            "modified": "2015-09-30T08:45:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1eacc0864ebd381a3375c2f52a3033de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12f-be14-4658-964b-4ab4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:35.000Z",
            "modified": "2015-09-30T08:45:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 051e280cc3d9844ddd73be4e6891e2dc",
            "pattern": "[file:hashes.SHA256 = 'ff64a58d51f7c66d0074117e5d0160673a29c0786a935df2a9a78a1fde3bcb57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12f-c5f8-45da-81d3-479a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:35.000Z",
            "modified": "2015-09-30T08:45:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1eb430ccf58e89c22791d684bd3e2c44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba12f-c868-4c0c-818c-456a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:35.000Z",
            "modified": "2015-09-30T08:45:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyberthief.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba130-1234-4a99-9f3c-45da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:36.000Z",
            "modified": "2015-09-30T08:45:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1eb7217a83296bc751780bcaa5e63559']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba130-0d24-4b80-9422-43cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:36.000Z",
            "modified": "2015-09-30T08:45:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 051e280cc3d9844ddd73be4e6891e2dc",
            "pattern": "[file:hashes.SHA1 = '0edb23922e4f3520b3aa2d87e1775d4a3330208b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba130-e148-4842-8dbb-43ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:36.000Z",
            "modified": "2015-09-30T08:45:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyborgslime.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba130-5104-456e-8bad-45ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:36.000Z",
            "modified": "2015-09-30T08:45:36.000Z",
            "first_observed": "2015-09-30T08:45:36Z",
            "last_observed": "2015-09-30T08:45:36Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba130-5104-456e-8bad-45ac950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba130-5104-456e-8bad-45ac950d210b",
            "value": "https://www.virustotal.com/file/ff64a58d51f7c66d0074117e5d0160673a29c0786a935df2a9a78a1fde3bcb57/analysis/1434516893/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba130-8d7c-4400-bff9-4d3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:36.000Z",
            "modified": "2015-09-30T08:45:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ebd5515dbb14d03fe9d0f1ad383bce8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba130-0628-4cba-b60e-4dc2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:36.000Z",
            "modified": "2015-09-30T08:45:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ec61915678fc573d82330a90a055d32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba130-bd78-4729-800c-4898950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:36.000Z",
            "modified": "2015-09-30T08:45:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'cyinbox.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba130-48ac-4806-bad2-4051950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:36.000Z",
            "modified": "2015-09-30T08:45:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 050a55d14d27a5e212b4686bdd4bb64a",
            "pattern": "[file:hashes.SHA256 = '106ac4f9930e361edd5a3c12a9c088497381b1a85ed453d2a3c475abd1114c3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba131-0958-4336-aa05-4a9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'd23.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba130-d1b0-43ce-83b8-4106950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:36.000Z",
            "modified": "2015-09-30T08:45:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1eca88de93a278a7f36c88368edd78ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba131-4bc0-4c85-b963-4abd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'd2d3.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba131-f168-4ee2-a179-49cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 050a55d14d27a5e212b4686bdd4bb64a",
            "pattern": "[file:hashes.SHA1 = '923e8f1f0ac2cbb32c896da7c7b3c6fd47b31763']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba131-f4cc-44be-9bc7-437e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ecbef41fe5e1daa164de91c558bc409']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba131-6e84-427c-af86-4ddc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'd3server.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba131-7e18-4722-9798-49c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'd78sdf89sg.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba131-1298-47ff-bbdc-4da2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "first_observed": "2015-09-30T08:45:37Z",
            "last_observed": "2015-09-30T08:45:37Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba131-1298-47ff-bbdc-4da2950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba131-1298-47ff-bbdc-4da2950d210b",
            "value": "https://www.virustotal.com/file/106ac4f9930e361edd5a3c12a9c088497381b1a85ed453d2a3c475abd1114c3e/analysis/1411409924/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba131-da38-4578-a058-4054950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1edcca13950f4b27f6809824a23141f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba131-2048-49ff-baf7-4675950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'd999.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba132-eb20-4bf0-8272-45e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dabeastmc.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba131-8b58-4c60-bd0a-4fed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:37.000Z",
            "modified": "2015-09-30T08:45:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0509357d1eaf2de5e36bc22ce87c2d52",
            "pattern": "[file:hashes.SHA256 = '61bd83bfb15683033fde0a39fb89da66eaae49920806cfad045fd77fb5771bc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba132-0908-4f6c-9013-4c16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ee1471d613de0f38d5c7b2bbfbbaf6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba132-84ec-4593-9d89-4033950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dafaqtest.serveblog.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba132-2fe4-4a1b-b925-4c87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'damettosmodz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba132-a4a4-4273-a0ba-4089950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0509357d1eaf2de5e36bc22ce87c2d52",
            "pattern": "[file:hashes.SHA1 = 'fdf120a125ee5ef96272f19bd40a174d5f896c11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba132-d584-4f00-968b-414b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ef9ef4ae29413c0b74974482c07032c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba132-8080-41d7-b2ac-4e5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'damian8324.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba132-fe08-4537-8ab3-42e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f0067043c7882f194c10ed831e81aae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba132-b3e4-48db-ae97-4b0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "first_observed": "2015-09-30T08:45:38Z",
            "last_observed": "2015-09-30T08:45:38Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba132-b3e4-48db-ae97-4b0d950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba132-b3e4-48db-ae97-4b0d950d210b",
            "value": "https://www.virustotal.com/file/61bd83bfb15683033fde0a39fb89da66eaae49920806cfad045fd77fb5771bc9/analysis/1435679201/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba132-3bd8-4656-9e11-4606950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:38.000Z",
            "modified": "2015-09-30T08:45:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'damianbeukesrat.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba133-fa78-4772-98bd-4133950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f0fefcc9959c950a77e5d66d143d861']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba133-479c-4886-ba4d-40bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f16c78d21b3f7bbd4ace2b175b75d05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba133-6fe4-4110-add7-4863950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0508d6cc10a19edb3b8e842e5c7a5d6a",
            "pattern": "[file:hashes.SHA256 = 'ba3004a0d609f5f1981447f8d925f1c82cc2237d9c68afb3337fa1c9d59d515e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba133-c230-406a-bb6b-46f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'damn528.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba133-56b8-4b46-b3b8-4ca1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0508d6cc10a19edb3b8e842e5c7a5d6a",
            "pattern": "[file:hashes.SHA1 = '3726051d986b25cb3e54d5f4c76e185250508f87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba133-73f0-4770-a754-4157950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f1b0ce95a5afd757a6495aafdefc7c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba133-869c-428d-8cbd-424b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "first_observed": "2015-09-30T08:45:39Z",
            "last_observed": "2015-09-30T08:45:39Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba133-869c-428d-8cbd-424b950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba133-869c-428d-8cbd-424b950d210b",
            "value": "https://www.virustotal.com/file/ba3004a0d609f5f1981447f8d925f1c82cc2237d9c68afb3337fa1c9d59d515e/analysis/1436195262/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba133-6158-4a3c-bd35-4755950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dangerousdakotaz.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba133-76d4-480d-a0d2-4592950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f1c83c6c64684864d7c088f43b14502']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba134-8a78-43e5-9d72-4200950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f1ec310f701ed43c8f502a14fc4ee39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba133-b004-49f2-8a6a-47a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:39.000Z",
            "modified": "2015-09-30T08:45:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0506bcf97a6e74d6f1573ed3d4df926f",
            "pattern": "[file:hashes.SHA256 = 'b6cc2d9087e2005e7564428ac014f86638abedfebcea9d24f73c6aab1d4d6912']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba134-59bc-43d8-8a45-4303950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'danibat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba134-24e4-4944-8877-4535950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0506bcf97a6e74d6f1573ed3d4df926f",
            "pattern": "[file:hashes.SHA1 = 'f7e8b41f902ebdc83989962a724db8ab25d5ed87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba134-c158-4114-b913-4f45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f2984d77ed2894b5d7c92b2f9629651']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba134-aa88-4836-b4c4-4437950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "first_observed": "2015-09-30T08:45:40Z",
            "last_observed": "2015-09-30T08:45:40Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba134-aa88-4836-b4c4-4437950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba134-aa88-4836-b4c4-4437950d210b",
            "value": "https://www.virustotal.com/file/b6cc2d9087e2005e7564428ac014f86638abedfebcea9d24f73c6aab1d4d6912/analysis/1432366829/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba134-d02c-49a2-95de-4874950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'daniilzadrot.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba134-08a8-461a-89c5-4a52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f2c104616c06897e6d09800ecd4fcbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba134-ff30-4493-a4d8-4df2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'danik160699.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba134-2708-4347-8a70-4b49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04f595161bfe5c3ac14085a643c2bb31",
            "pattern": "[file:hashes.SHA256 = '7c99ec69c2f9b31c99e4e8b6186c4546f17119b941bea25b914031e3871ab99f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba134-469c-418b-a693-4461950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:40.000Z",
            "modified": "2015-09-30T08:45:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f3b27984492a7bd5404c10c8b4f1a87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba135-df0c-44da-ac83-4756950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:41.000Z",
            "modified": "2015-09-30T08:45:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'danny6421.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba135-9524-4286-8e3c-49dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:41.000Z",
            "modified": "2015-09-30T08:45:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'danshacks.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba135-a304-4499-a650-42ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:41.000Z",
            "modified": "2015-09-30T08:45:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04f595161bfe5c3ac14085a643c2bb31",
            "pattern": "[file:hashes.SHA1 = '58cea05faf6d4e2fb891e320ee2b67e94f27c194']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba135-5100-4a7e-8c5c-4053950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:41.000Z",
            "modified": "2015-09-30T08:45:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f517e02034b3ea8a837959b2f7e55c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba135-452c-41aa-a89c-4892950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:41.000Z",
            "modified": "2015-09-30T08:45:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dantelfer.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba135-6fa0-4820-8941-4c94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:41.000Z",
            "modified": "2015-09-30T08:45:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darccommet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba135-4158-41b4-8e0b-4db4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:41.000Z",
            "modified": "2015-09-30T08:45:41.000Z",
            "first_observed": "2015-09-30T08:45:41Z",
            "last_observed": "2015-09-30T08:45:41Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba135-4158-41b4-8e0b-4db4950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba135-4158-41b4-8e0b-4db4950d210b",
            "value": "https://www.virustotal.com/file/7c99ec69c2f9b31c99e4e8b6186c4546f17119b941bea25b914031e3871ab99f/analysis/1433096432/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba135-e024-41eb-ba56-4378950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:41.000Z",
            "modified": "2015-09-30T08:45:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f518dfcf4ee545bc25f2d80b5a541b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba135-2ddc-4002-8c3b-4329950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:41.000Z",
            "modified": "2015-09-30T08:45:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darck.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-6404-448c-a002-4be1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f5a4cc9adc2f09f2323bad3e30a07d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-6df0-4690-9d44-4177950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04ec8fea22fc59b9fa8ced54e24e73c6",
            "pattern": "[file:hashes.SHA256 = '735519b1704acfcd0a191624c15053e893325e07aa92a847065e82bcdd1512d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-d02c-476f-8958-4861950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darckom.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-640c-410c-b8dc-4ca0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04ec8fea22fc59b9fa8ced54e24e73c6",
            "pattern": "[file:hashes.SHA1 = 'b71e7df56851f7b1e071f23378999cb0140a1125']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-bebc-4dc1-bce5-417b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f5f5df6ad1f9ffeefbdde03284d45be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba136-c418-41b4-88d5-4e34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "first_observed": "2015-09-30T08:45:42Z",
            "last_observed": "2015-09-30T08:45:42Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba136-c418-41b4-88d5-4e34950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba136-c418-41b4-88d5-4e34950d210b",
            "value": "https://www.virustotal.com/file/735519b1704acfcd0a191624c15053e893325e07aa92a847065e82bcdd1512d6/analysis/1412889081/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-7a38-4c96-9756-43a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darco01.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-ff50-4e92-9f28-48fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f6b50687f3e1754825d889d749bae6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-82d8-4863-ac49-491a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darcomet35.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-9eec-4ad2-8a97-453c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04e03e25bc6104c484751ef7670eed21",
            "pattern": "[file:hashes.SHA256 = '9350b89c770cbbe0a52dbb3b05323dcb95c944dd82c30b0ce4fa83855675d6da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba136-2b64-4185-89b1-4cc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:42.000Z",
            "modified": "2015-09-30T08:45:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f7752897c79a7a0428c64957bd33c8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba137-3110-498f-81b0-45d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:43.000Z",
            "modified": "2015-09-30T08:45:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dark-comet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba137-b9f0-41a1-b9b4-4c95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:43.000Z",
            "modified": "2015-09-30T08:45:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dark0.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba137-8a98-46fc-a7b6-449f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:43.000Z",
            "modified": "2015-09-30T08:45:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04e03e25bc6104c484751ef7670eed21",
            "pattern": "[file:hashes.SHA1 = '6aa855e2e94f1ac4f5a65c594ca18186bfdcb86e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba137-7d4c-4177-ac1e-4d28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:43.000Z",
            "modified": "2015-09-30T08:45:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f7a53600bd2604ba88a0487a5a16cad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba137-3450-4a3d-86b3-4526950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:43.000Z",
            "modified": "2015-09-30T08:45:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dark0.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba137-e968-4d12-a434-46be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:43.000Z",
            "modified": "2015-09-30T08:45:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dark0.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba137-45a8-4508-a24f-43f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:43.000Z",
            "modified": "2015-09-30T08:45:43.000Z",
            "first_observed": "2015-09-30T08:45:43Z",
            "last_observed": "2015-09-30T08:45:43Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba137-45a8-4508-a24f-43f3950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba137-45a8-4508-a24f-43f3950d210b",
            "value": "https://www.virustotal.com/file/9350b89c770cbbe0a52dbb3b05323dcb95c944dd82c30b0ce4fa83855675d6da/analysis/1434598201/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba137-f5c4-4ec4-ac3d-4c45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:43.000Z",
            "modified": "2015-09-30T08:45:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f85ba4dea86607994037c85c0652e23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba137-ea14-4413-9757-4fca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:43.000Z",
            "modified": "2015-09-30T08:45:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dark109309.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-21b0-4ad0-a6ea-4c4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dark1515.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-f3f0-4277-b211-4065950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04deb73636f1564f2d9d3c5394d48822",
            "pattern": "[file:hashes.SHA256 = 'd0dbdb9bb7b0f5b6bd9301e0c6e3e43d55ad243a2eaa8ac2b5c098e63b345a9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-5840-48d1-8818-48b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f8bfaf85027469266bf777356a5d5c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-bf24-455c-b33f-4737950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dark4.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-2530-46d4-af77-46ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dark588.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-3b4c-42f4-9497-4d54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04deb73636f1564f2d9d3c5394d48822",
            "pattern": "[file:hashes.SHA1 = '1c123ecd7de953f63ab980cb6d15026bb0091066']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-709c-414b-85c5-4076950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f9b956ff5c24736234012b6ffc556e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-70d8-446f-9b2c-4019950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dark760.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-90dc-4008-8f27-40cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkadm30.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba138-bc48-4d43-a2a6-484a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "first_observed": "2015-09-30T08:45:44Z",
            "last_observed": "2015-09-30T08:45:44Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba138-bc48-4d43-a2a6-484a950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba138-bc48-4d43-a2a6-484a950d210b",
            "value": "https://www.virustotal.com/file/d0dbdb9bb7b0f5b6bd9301e0c6e3e43d55ad243a2eaa8ac2b5c098e63b345a9c/analysis/1437201548/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba139-98f4-4f95-bf2f-435f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:45.000Z",
            "modified": "2015-09-30T08:45:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcimi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba138-9fb0-4f28-ae6d-4e1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:44.000Z",
            "modified": "2015-09-30T08:45:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f9c13b65d1ff6e962c603e12d79e939']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba139-4c70-44ce-b0eb-439b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:45.000Z",
            "modified": "2015-09-30T08:45:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1f9cedbf88ded5b958e9e49bc4cf83e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba139-6994-4c77-8fea-4b1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:45.000Z",
            "modified": "2015-09-30T08:45:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04d1d624a21c4fff269ade0f37e4b143",
            "pattern": "[file:hashes.SHA256 = 'c8e7037d63e4065101558d29c424b539048274e0ff8d4f480e4e049093a8e9df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba139-4484-487d-8d74-4200950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:45.000Z",
            "modified": "2015-09-30T08:45:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomanet.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba139-6a00-4767-8432-41dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:45.000Z",
            "modified": "2015-09-30T08:45:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04d1d624a21c4fff269ade0f37e4b143",
            "pattern": "[file:hashes.SHA1 = 'f0bbf8634adb5cd6683208c51d66425b7885b78e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba139-c87c-4bcf-93a0-4f7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:45.000Z",
            "modified": "2015-09-30T08:45:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fa2e969ffef74abd2e61b417b613f8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba139-9be8-4cc9-bd0c-49e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:45.000Z",
            "modified": "2015-09-30T08:45:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcome1host15.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba139-dc90-4d95-b7d2-4943950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:45.000Z",
            "modified": "2015-09-30T08:45:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fa830502cad6869c3870afbec6e6577']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba139-bcc4-4575-b6c3-4346950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:45.000Z",
            "modified": "2015-09-30T08:45:45.000Z",
            "first_observed": "2015-09-30T08:45:45Z",
            "last_observed": "2015-09-30T08:45:45Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba139-bcc4-4575-b6c3-4346950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba139-bcc4-4575-b6c3-4346950d210b",
            "value": "https://www.virustotal.com/file/c8e7037d63e4065101558d29c424b539048274e0ff8d4f480e4e049093a8e9df/analysis/1437671754/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13a-5cc4-4250-805a-4a7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcoment.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13a-dccc-4505-a282-4ed4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomentlol.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13a-fe80-4959-b786-4dd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04baef8b1db3ea9e18c880e1e2fe3954",
            "pattern": "[file:hashes.SHA256 = '59eb361dd40948fada7d1a5e813adc2efa7074bbd90d5045d8e837319498d0c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13a-34bc-4a1a-a230-423f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fb3d792a10727089af5fc52baf33279']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13a-9d44-4fd0-99f2-4380950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomentmcn.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13a-34ac-4f45-a1a7-46f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fc2a5228aa420e2ee76c4dc86570f85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13a-00d0-46e0-b0d9-4ab4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04baef8b1db3ea9e18c880e1e2fe3954",
            "pattern": "[file:hashes.SHA1 = '46a13485f1a642d0cea416a2527d21af05111c7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13a-5834-4c5c-9c34-4f5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fc432a410716c4f072bbaee9c2724fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13a-9198-415c-90b6-4a1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomerat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba13a-db60-4f62-9be2-4641950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:46.000Z",
            "modified": "2015-09-30T08:45:46.000Z",
            "first_observed": "2015-09-30T08:45:46Z",
            "last_observed": "2015-09-30T08:45:46Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba13a-db60-4f62-9be2-4641950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba13a-db60-4f62-9be2-4641950d210b",
            "value": "https://www.virustotal.com/file/59eb361dd40948fada7d1a5e813adc2efa7074bbd90d5045d8e837319498d0c6/analysis/1443453933/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13b-a5b8-4e87-94a0-4371950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:47.000Z",
            "modified": "2015-09-30T08:45:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet-56.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13b-90a4-4af4-b0d3-4de1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:47.000Z",
            "modified": "2015-09-30T08:45:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fc6af763249967525673e529b3f79d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13b-b424-49b2-bf2a-4095950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:47.000Z",
            "modified": "2015-09-30T08:45:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04b563241dd7ca8b4d521dd89fba4e32",
            "pattern": "[file:hashes.SHA256 = '958d6a27a3d5769f1fe8f3f37cb7b61a8d8177bce3c44487f17b8c81c3d7dae9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13b-f504-4680-bf62-4cbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:47.000Z",
            "modified": "2015-09-30T08:45:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet-diabolito.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13b-1cbc-40ab-ba36-4498950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:47.000Z",
            "modified": "2015-09-30T08:45:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fd9bb76a730c3ac00e89cf5bcfc5a24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13b-d578-4506-8e63-48a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:47.000Z",
            "modified": "2015-09-30T08:45:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04b563241dd7ca8b4d521dd89fba4e32",
            "pattern": "[file:hashes.SHA1 = 'c695fb66476195000216eaa8f703196a0c33b027']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13b-7344-444f-8b5d-4540950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:47.000Z",
            "modified": "2015-09-30T08:45:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13b-0310-4097-9be2-4f91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:47.000Z",
            "modified": "2015-09-30T08:45:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fdf46bb6f968ed992a62f1c94fc7828']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba13b-b188-4e7a-8a5a-4b0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:47.000Z",
            "modified": "2015-09-30T08:45:47.000Z",
            "first_observed": "2015-09-30T08:45:47Z",
            "last_observed": "2015-09-30T08:45:47Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba13b-b188-4e7a-8a5a-4b0f950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba13b-b188-4e7a-8a5a-4b0f950d210b",
            "value": "https://www.virustotal.com/file/958d6a27a3d5769f1fe8f3f37cb7b61a8d8177bce3c44487f17b8c81c3d7dae9/analysis/1436662085/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13c-dacc-4851-8d93-45ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:48.000Z",
            "modified": "2015-09-30T08:45:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet049.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13c-3e08-4988-9b6b-4ff0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:48.000Z",
            "modified": "2015-09-30T08:45:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fe7bc821db5a9dffb5867dc6f1b9146']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13c-69b0-4b85-9129-4a38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:48.000Z",
            "modified": "2015-09-30T08:45:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 049f45af73f0a7e2af7c0de3ffa6c057",
            "pattern": "[file:hashes.SHA256 = '00857d42080ca1550f5f0189bb2bc20d7e655b56823e7cf3e64b209302a9b001']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13c-d3a0-41c7-ab2a-49d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:48.000Z",
            "modified": "2015-09-30T08:45:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet06.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13c-6820-496b-8a28-4877950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:48.000Z",
            "modified": "2015-09-30T08:45:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1fef1297e6723d9e4888bfb4fba1c682']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13c-6db4-4b8f-aa71-4e97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:48.000Z",
            "modified": "2015-09-30T08:45:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 049f45af73f0a7e2af7c0de3ffa6c057",
            "pattern": "[file:hashes.SHA1 = '18a8103d12779379f4004bb6bfbe47bdec0a4377']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13c-6118-469e-a0f6-4ee8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:48.000Z",
            "modified": "2015-09-30T08:45:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet0909.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13c-53d0-4b3c-a359-4708950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:48.000Z",
            "modified": "2015-09-30T08:45:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ff2fe60ced447f77b651cc4cac25254']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba13c-6760-4bea-89a1-45a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:48.000Z",
            "modified": "2015-09-30T08:45:48.000Z",
            "first_observed": "2015-09-30T08:45:48Z",
            "last_observed": "2015-09-30T08:45:48Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba13c-6760-4bea-89a1-45a3950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba13c-6760-4bea-89a1-45a3950d210b",
            "value": "https://www.virustotal.com/file/00857d42080ca1550f5f0189bb2bc20d7e655b56823e7cf3e64b209302a9b001/analysis/1433503645/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13d-0808-4211-8c71-4b53950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:49.000Z",
            "modified": "2015-09-30T08:45:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13d-f91c-43f7-8659-4164950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:49.000Z",
            "modified": "2015-09-30T08:45:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '1ffbd8e89c2efcdaed7c0c19c012244e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13d-f990-4104-8176-4b9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:49.000Z",
            "modified": "2015-09-30T08:45:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0499b577a1719e61914cd1720864506e",
            "pattern": "[file:hashes.SHA256 = '23c82e880c3015f68395948fbd92685f51cb04c7535782941eef58ca5305dd82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13d-cb60-4125-94c2-40d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:49.000Z",
            "modified": "2015-09-30T08:45:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet11.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13d-9478-4da7-a2e5-43e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:49.000Z",
            "modified": "2015-09-30T08:45:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20052913b6c05c38daa32eb8898b3a56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13d-59c0-45d8-9f6a-4654950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:49.000Z",
            "modified": "2015-09-30T08:45:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0499b577a1719e61914cd1720864506e",
            "pattern": "[file:hashes.SHA1 = 'c91f20bbeb6aa3760b5c7ffa03d90e8e71cd85fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13d-7d0c-4bac-9223-4636950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:49.000Z",
            "modified": "2015-09-30T08:45:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet1232323.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13d-ac38-4e9e-a2be-49ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:49.000Z",
            "modified": "2015-09-30T08:45:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '200945991b161054c5c4ef1887c013b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba13e-7ee4-4ca8-9288-4e26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:50.000Z",
            "modified": "2015-09-30T08:45:50.000Z",
            "first_observed": "2015-09-30T08:45:50Z",
            "last_observed": "2015-09-30T08:45:50Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba13e-7ee4-4ca8-9288-4e26950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba13e-7ee4-4ca8-9288-4e26950d210b",
            "value": "https://www.virustotal.com/file/23c82e880c3015f68395948fbd92685f51cb04c7535782941eef58ca5305dd82/analysis/1436244917/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13e-089c-499b-b59b-4368950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:50.000Z",
            "modified": "2015-09-30T08:45:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet123seek.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13e-16cc-4b7d-8c4c-4e66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:50.000Z",
            "modified": "2015-09-30T08:45:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2012642d57433d08bd8879ef61b11623']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13e-e6e8-4cb3-aea9-4bea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:50.000Z",
            "modified": "2015-09-30T08:45:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04747d397a58f16617e02ae0aae654f3",
            "pattern": "[file:hashes.SHA256 = '346d048200e97797fd09d38b587824a9b465dddf3f716716e51a10bb9e7a1b63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13e-f494-4c98-8355-4723950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:50.000Z",
            "modified": "2015-09-30T08:45:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet18.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13e-9868-4c93-b1d7-48db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:50.000Z",
            "modified": "2015-09-30T08:45:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20137892adcd87cd5abe7bc15c76e226']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13e-6d84-47d4-8eb1-47ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:50.000Z",
            "modified": "2015-09-30T08:45:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04747d397a58f16617e02ae0aae654f3",
            "pattern": "[file:hashes.SHA1 = '9b4550c384e9a025a5e9f3dcd6b05a28e0120121']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13e-30b4-46f0-9dd5-447a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:50.000Z",
            "modified": "2015-09-30T08:45:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet1990.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13f-c6c0-447f-b959-44d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:51.000Z",
            "modified": "2015-09-30T08:45:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20159698df74719832e5ccddadd9fdec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba13f-46d8-4d25-b59f-40ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:51.000Z",
            "modified": "2015-09-30T08:45:51.000Z",
            "first_observed": "2015-09-30T08:45:51Z",
            "last_observed": "2015-09-30T08:45:51Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba13f-46d8-4d25-b59f-40ae950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba13f-46d8-4d25-b59f-40ae950d210b",
            "value": "https://www.virustotal.com/file/346d048200e97797fd09d38b587824a9b465dddf3f716716e51a10bb9e7a1b63/analysis/1438104364/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13f-9bf0-4d01-9010-4e8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:51.000Z",
            "modified": "2015-09-30T08:45:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13f-76d8-48bc-ae03-464c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:51.000Z",
            "modified": "2015-09-30T08:45:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '202ac3c2241d3f0f2487765f5131b3e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13f-a768-4d81-852d-4a35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:51.000Z",
            "modified": "2015-09-30T08:45:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 046fd6892546ed78d57f444bb167174d",
            "pattern": "[file:hashes.SHA256 = 'feccf01bb2fbf29fa6ffc33f8eccd39bafc2e3e6f1a5f1541d1b32eb6e3d76c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13f-16a0-4421-be9e-4930950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:51.000Z",
            "modified": "2015-09-30T08:45:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet21.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13f-1998-499b-8362-4808950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:51.000Z",
            "modified": "2015-09-30T08:45:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '202b56db6f05a7c837f15b03173cf9d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba13f-5a8c-429a-a051-4821950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:51.000Z",
            "modified": "2015-09-30T08:45:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 046fd6892546ed78d57f444bb167174d",
            "pattern": "[file:hashes.SHA1 = '253c7903934865830cc09d05d4a8bd79913df94b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba140-0fc4-4203-8917-4295950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:52.000Z",
            "modified": "2015-09-30T08:45:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet2255.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba140-e584-4d54-bfc9-4993950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:52.000Z",
            "modified": "2015-09-30T08:45:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '203ae4d9c9fd48aee03c6f4055ecfd65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba140-9438-4a6f-bbe1-468f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:52.000Z",
            "modified": "2015-09-30T08:45:52.000Z",
            "first_observed": "2015-09-30T08:45:52Z",
            "last_observed": "2015-09-30T08:45:52Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba140-9438-4a6f-bbe1-468f950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba140-9438-4a6f-bbe1-468f950d210b",
            "value": "https://www.virustotal.com/file/feccf01bb2fbf29fa6ffc33f8eccd39bafc2e3e6f1a5f1541d1b32eb6e3d76c0/analysis/1434482014/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba140-d4bc-463a-8c38-460e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:52.000Z",
            "modified": "2015-09-30T08:45:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba140-2220-4d1a-841a-4274950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:52.000Z",
            "modified": "2015-09-30T08:45:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2044f94a00772b44f8b882569511d403']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba140-6d08-4d57-9255-485b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:52.000Z",
            "modified": "2015-09-30T08:45:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04475a481ef3af894f43cf3e1818d4ac",
            "pattern": "[file:hashes.SHA256 = '4521d809bd1e26a86fe97a229d609f2fa3b5eefddc2bed6c1bb1fe5c079e3af1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba140-8250-4aba-a67c-4773950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:52.000Z",
            "modified": "2015-09-30T08:45:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet321456.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba140-fc60-4d7b-b53b-4e59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:52.000Z",
            "modified": "2015-09-30T08:45:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2056db30e502695c8bdc447d27f31741']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba140-cb04-461d-bda8-4fc3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:52.000Z",
            "modified": "2015-09-30T08:45:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 04475a481ef3af894f43cf3e1818d4ac",
            "pattern": "[file:hashes.SHA1 = '4ae3f4ee5387ec14c38b26521ceb4fb78906c6b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba141-d108-427e-af00-43d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:53.000Z",
            "modified": "2015-09-30T08:45:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet38.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba141-c948-4574-a795-406a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:53.000Z",
            "modified": "2015-09-30T08:45:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2067cac5fdf3b9e89277ca1829f354b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba141-f430-4fec-9356-472b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:53.000Z",
            "modified": "2015-09-30T08:45:53.000Z",
            "first_observed": "2015-09-30T08:45:53Z",
            "last_observed": "2015-09-30T08:45:53Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba141-f430-4fec-9356-472b950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba141-f430-4fec-9356-472b950d210b",
            "value": "https://www.virustotal.com/file/4521d809bd1e26a86fe97a229d609f2fa3b5eefddc2bed6c1bb1fe5c079e3af1/analysis/1435176286/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba141-3f04-4bba-8c23-4789950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:53.000Z",
            "modified": "2015-09-30T08:45:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet51.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba141-5248-46cb-a59f-4866950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:53.000Z",
            "modified": "2015-09-30T08:45:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '208e8205cf9def415b8ea83896e5b22f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba141-d788-4da7-8f06-4d13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:53.000Z",
            "modified": "2015-09-30T08:45:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0433af60395411433b7d71d3b6d888ee",
            "pattern": "[file:hashes.SHA256 = 'f63caf9e5e6ee791d886e7360e1e2c6ee3341cb96c05888c132caf7d39483ef0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba141-7550-4774-b50f-41e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:53.000Z",
            "modified": "2015-09-30T08:45:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet818.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba141-8b08-40bd-8666-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:53.000Z",
            "modified": "2015-09-30T08:45:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '208fcea4fc1a134bce8e6e891cc73c5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba142-20c0-4643-8695-4a8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:54.000Z",
            "modified": "2015-09-30T08:45:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0433af60395411433b7d71d3b6d888ee",
            "pattern": "[file:hashes.SHA1 = '4eaac4f1b0020313cc37ffbff61ab1d7932dcaa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba142-a2e8-4093-bf43-45b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:54.000Z",
            "modified": "2015-09-30T08:45:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomet999.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba142-dd3c-4495-bf95-433c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:54.000Z",
            "modified": "2015-09-30T08:45:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '209216aa38bb3a1e8a97c7291e96b9b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba142-54bc-4260-ad2c-4fb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:54.000Z",
            "modified": "2015-09-30T08:45:54.000Z",
            "first_observed": "2015-09-30T08:45:54Z",
            "last_observed": "2015-09-30T08:45:54Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba142-54bc-4260-ad2c-4fb0950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba142-54bc-4260-ad2c-4fb0950d210b",
            "value": "https://www.virustotal.com/file/f63caf9e5e6ee791d886e7360e1e2c6ee3341cb96c05888c132caf7d39483ef0/analysis/1433080027/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba142-5270-4bdb-8ac3-4bdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:54.000Z",
            "modified": "2015-09-30T08:45:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometa21.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba142-3028-40d6-bbc6-4bf6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:54.000Z",
            "modified": "2015-09-30T08:45:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20a931f5b8f614917fbb85bcb8f3f06e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba142-cd18-4c7c-93e4-4e1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:54.000Z",
            "modified": "2015-09-30T08:45:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0432f9b35219574dc52dc0d1f80f1317",
            "pattern": "[file:hashes.SHA256 = '66e1ed29eed61bf22ee27482a59ace50495089d22bb60dc74150e74ff7c47f35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba142-9180-4d4f-a068-4327950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:54.000Z",
            "modified": "2015-09-30T08:45:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometaser.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba143-70ec-475d-a9e7-4b68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:55.000Z",
            "modified": "2015-09-30T08:45:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20b01b61db68c089219dccab4e206e2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba143-4478-4a9e-9264-4765950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:55.000Z",
            "modified": "2015-09-30T08:45:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0432f9b35219574dc52dc0d1f80f1317",
            "pattern": "[file:hashes.SHA1 = '4bade8f764b30ae1f48243fe72015a8dade5204e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba143-1db0-42bc-9c28-4a78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:55.000Z",
            "modified": "2015-09-30T08:45:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometbofrost.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba143-0f2c-4561-9023-4e08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:55.000Z",
            "modified": "2015-09-30T08:45:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20b73242a7dd3a672ba9fca237add0ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba143-1a70-4ff1-8f75-45a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:55.000Z",
            "modified": "2015-09-30T08:45:55.000Z",
            "first_observed": "2015-09-30T08:45:55Z",
            "last_observed": "2015-09-30T08:45:55Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba143-1a70-4ff1-8f75-45a6950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba143-1a70-4ff1-8f75-45a6950d210b",
            "value": "https://www.virustotal.com/file/66e1ed29eed61bf22ee27482a59ace50495089d22bb60dc74150e74ff7c47f35/analysis/1434634258/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba143-3dcc-44f9-803a-4e91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:55.000Z",
            "modified": "2015-09-30T08:45:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometdt.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba143-6348-4487-a6e7-4ae5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:55.000Z",
            "modified": "2015-09-30T08:45:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20c1f416747b13d5e14e5424dd4df512']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba143-9680-48ff-8426-4453950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:55.000Z",
            "modified": "2015-09-30T08:45:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 042d09fb4591b3854bc4546c68b0bc91",
            "pattern": "[file:hashes.SHA256 = 'd2c68f3aed1425af655d7ff60cc44f3e2bf117201d0e234e07c21c1167b9c93c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba144-a5fc-40e1-bc53-4895950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:56.000Z",
            "modified": "2015-09-30T08:45:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometfun.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba144-2c18-4370-9824-4436950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:56.000Z",
            "modified": "2015-09-30T08:45:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20c9db19aad19771b94ca92bfa94071c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba144-c8f8-46b2-a2fd-4132950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:56.000Z",
            "modified": "2015-09-30T08:45:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 042d09fb4591b3854bc4546c68b0bc91",
            "pattern": "[file:hashes.SHA1 = '2732c6657ec671ec9f2410d4af370d540d12f798']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba144-a324-4fb1-8860-4df5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:56.000Z",
            "modified": "2015-09-30T08:45:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometgeno.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba144-c134-439e-ba56-4a95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:56.000Z",
            "modified": "2015-09-30T08:45:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20d342c84024e46ad2a09419730d4f71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba144-f388-4e93-b73b-40fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:56.000Z",
            "modified": "2015-09-30T08:45:56.000Z",
            "first_observed": "2015-09-30T08:45:56Z",
            "last_observed": "2015-09-30T08:45:56Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba144-f388-4e93-b73b-40fa950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba144-f388-4e93-b73b-40fa950d210b",
            "value": "https://www.virustotal.com/file/d2c68f3aed1425af655d7ff60cc44f3e2bf117201d0e234e07c21c1167b9c93c/analysis/1433258201/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba144-2a38-4b15-bdcc-4bf3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:56.000Z",
            "modified": "2015-09-30T08:45:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometgoko.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba144-a83c-4bf0-bbdb-481f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:56.000Z",
            "modified": "2015-09-30T08:45:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20e0e8bf3e92bd701da2dae5f38565bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba144-ff80-4408-b63e-4569950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:56.000Z",
            "modified": "2015-09-30T08:45:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 042157ae7ba393ca99487db679a433a4",
            "pattern": "[file:hashes.SHA256 = 'a6d70da991b13da5adda7a99e9dc366ee088b7eeb6b893a9d32ec672effd0dd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba145-8ea4-49f8-9e7f-4190950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:57.000Z",
            "modified": "2015-09-30T08:45:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometgoteem.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba145-3c88-463a-9d81-4563950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:57.000Z",
            "modified": "2015-09-30T08:45:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20e11f08cfc8786ff52d8c22ef046073']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba145-84ec-464b-a0d5-49b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:57.000Z",
            "modified": "2015-09-30T08:45:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 042157ae7ba393ca99487db679a433a4",
            "pattern": "[file:hashes.SHA1 = '1946bcc4f3920ee5a940fa2f84e80b8f56f486ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba145-aad4-4ced-832d-47ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:57.000Z",
            "modified": "2015-09-30T08:45:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomethappyrat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba145-933c-4e3c-9164-4bd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:57.000Z",
            "modified": "2015-09-30T08:45:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20e29ee0b7eda70d6d2b47d891baea4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba145-9fe4-492c-a213-48b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:57.000Z",
            "modified": "2015-09-30T08:45:57.000Z",
            "first_observed": "2015-09-30T08:45:57Z",
            "last_observed": "2015-09-30T08:45:57Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba145-9fe4-492c-a213-48b7950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba145-9fe4-492c-a213-48b7950d210b",
            "value": "https://www.virustotal.com/file/a6d70da991b13da5adda7a99e9dc366ee088b7eeb6b893a9d32ec672effd0dd8/analysis/1433286732/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba145-7768-4fa1-97bb-454c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:57.000Z",
            "modified": "2015-09-30T08:45:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometicin.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba145-df78-4057-82f6-4b66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:57.000Z",
            "modified": "2015-09-30T08:45:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20e5e806e177be9529d6b0fe95db9e0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba146-ad04-43d0-abed-475d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:58.000Z",
            "modified": "2015-09-30T08:45:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 041b49125f00b8075aa9f005e3381822",
            "pattern": "[file:hashes.SHA256 = '10de51491a750bea92a91a5e8fde2af33afcce11bf5a203a55b3e3232fb3ac6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba146-e7e4-491c-8d31-4a21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:58.000Z",
            "modified": "2015-09-30T08:45:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometop.serveblog.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba146-6b7c-4e67-93ff-42be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:58.000Z",
            "modified": "2015-09-30T08:45:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20e9270681ef22d747b1754046243ce5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba146-93e8-4145-956e-4630950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:58.000Z",
            "modified": "2015-09-30T08:45:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 041b49125f00b8075aa9f005e3381822",
            "pattern": "[file:hashes.SHA1 = '6e09216dc4046a1322a7ef624e283bf4b0461caa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba146-3704-445a-8bce-4396950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:58.000Z",
            "modified": "2015-09-30T08:45:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometrat12.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba146-8ea4-40f6-b47b-4860950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:58.000Z",
            "modified": "2015-09-30T08:45:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20eae6526c968614c76040ce0ad9397b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba146-56e8-4a9e-b202-47ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:58.000Z",
            "modified": "2015-09-30T08:45:58.000Z",
            "first_observed": "2015-09-30T08:45:58Z",
            "last_observed": "2015-09-30T08:45:58Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba146-56e8-4a9e-b202-47ac950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba146-56e8-4a9e-b202-47ac950d210b",
            "value": "https://www.virustotal.com/file/10de51491a750bea92a91a5e8fde2af33afcce11bf5a203a55b3e3232fb3ac6d/analysis/1434570076/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba146-c15c-4b37-8710-49d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:58.000Z",
            "modified": "2015-09-30T08:45:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometrat241.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba147-ff68-4bbc-9d61-4bb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:59.000Z",
            "modified": "2015-09-30T08:45:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20f0056a8ed853c11bb1a0e2394e0318']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba147-03d8-427f-8937-46a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:59.000Z",
            "modified": "2015-09-30T08:45:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 041417b61667e4f499c3c198083d76b2",
            "pattern": "[file:hashes.SHA256 = '544fb849b63241c51aeef7ffb7476b8d7fca00939e95a26dd4178781b363f5d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba147-5430-4f28-9fd4-487c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:59.000Z",
            "modified": "2015-09-30T08:45:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometstux.sytes.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba147-a000-470b-93dd-4637950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:59.000Z",
            "modified": "2015-09-30T08:45:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '20ffc698e15750210b603bc7db0527e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba147-4c98-4ed7-81f1-4574950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:59.000Z",
            "modified": "2015-09-30T08:45:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 041417b61667e4f499c3c198083d76b2",
            "pattern": "[file:hashes.SHA1 = 'c9e09ffb1682011e5dc0d0b2aeffaf8e23e81eb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba147-8ca4-4183-b642-4f4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:59.000Z",
            "modified": "2015-09-30T08:45:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomettes.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba147-7c64-4995-bbeb-4fef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:59.000Z",
            "modified": "2015-09-30T08:45:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2103587f4237ef5f325148f7740a4177']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:45:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba147-43c8-49b4-8856-4620950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:45:59.000Z",
            "modified": "2015-09-30T08:45:59.000Z",
            "first_observed": "2015-09-30T08:45:59Z",
            "last_observed": "2015-09-30T08:45:59Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba147-43c8-49b4-8856-4620950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba147-43c8-49b4-8856-4620950d210b",
            "value": "https://www.virustotal.com/file/544fb849b63241c51aeef7ffb7476b8d7fca00939e95a26dd4178781b363f5d2/analysis/1436690751/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba148-ff6c-44a4-8332-478e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:00.000Z",
            "modified": "2015-09-30T08:46:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomettt.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba148-a078-4b4f-b6cb-4781950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:00.000Z",
            "modified": "2015-09-30T08:46:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21067ffa6e2b01fc4ce0e645436441ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba148-cc4c-48e3-a9ef-4b91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:00.000Z",
            "modified": "2015-09-30T08:46:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 040dfcb189ed529e04f9db1424a12082",
            "pattern": "[file:hashes.SHA256 = 'bb2d386932047077b17117db3c769d1fd875d3b4f7581c021b332dd9287d152a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba148-5398-4026-832e-4ab9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:00.000Z",
            "modified": "2015-09-30T08:46:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcometwillie.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba148-971c-4e55-820c-4647950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:00.000Z",
            "modified": "2015-09-30T08:46:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '210bf8da4a6fe2e2a815fa2131004857']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba148-0b50-4a3b-8b68-49b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:00.000Z",
            "modified": "2015-09-30T08:46:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 040dfcb189ed529e04f9db1424a12082",
            "pattern": "[file:hashes.SHA1 = '39976c3fec86f1fd9372d3ec8528599bddb8d099']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba148-6298-443a-833f-4f94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:00.000Z",
            "modified": "2015-09-30T08:46:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomhost.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba148-64f0-4605-b13b-4516950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:00.000Z",
            "modified": "2015-09-30T08:46:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2112e6f21b18b5f5d733dc7a333c5dbf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba148-7364-472c-af56-4afd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:00.000Z",
            "modified": "2015-09-30T08:46:00.000Z",
            "first_observed": "2015-09-30T08:46:00Z",
            "last_observed": "2015-09-30T08:46:00Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba148-7364-472c-af56-4afd950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba148-7364-472c-af56-4afd950d210b",
            "value": "https://www.virustotal.com/file/bb2d386932047077b17117db3c769d1fd875d3b4f7581c021b332dd9287d152a/analysis/1432988652/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba149-ad6c-4332-b5f2-4962950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:01.000Z",
            "modified": "2015-09-30T08:46:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomom.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba149-6424-4666-86fa-48c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:01.000Z",
            "modified": "2015-09-30T08:46:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '211df3f602cbb60dbdfb222646c83933']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba149-ea18-47ce-88f1-4b87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:01.000Z",
            "modified": "2015-09-30T08:46:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03fd869f67ab7e88714e23e9560431a4",
            "pattern": "[file:hashes.SHA256 = '9b434c9d9687a3748416a0080f0278d93c0225e858d6113e2cbd0d3ff0ab4d2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba149-c53c-4059-b75f-4eb8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:01.000Z",
            "modified": "2015-09-30T08:46:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkcomtttt.3utilies.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba149-09b4-4c27-99d1-4ecd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:01.000Z",
            "modified": "2015-09-30T08:46:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '212053c4e87e850d5696e51294dcd2ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba149-26a0-48f1-b3f5-4643950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:01.000Z",
            "modified": "2015-09-30T08:46:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03fd869f67ab7e88714e23e9560431a4",
            "pattern": "[file:hashes.SHA1 = 'f397f03351a15bcd2c900b40c6cf30da73a91dab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba149-1040-4a2b-a468-40bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:01.000Z",
            "modified": "2015-09-30T08:46:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darken.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba149-65e0-4d92-84bc-4d83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:01.000Z",
            "modified": "2015-09-30T08:46:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21237bc2c4b4de7d156657f16e290a46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba14a-9a04-45a6-90f8-4230950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:02.000Z",
            "modified": "2015-09-30T08:46:02.000Z",
            "first_observed": "2015-09-30T08:46:02Z",
            "last_observed": "2015-09-30T08:46:02Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba14a-9a04-45a6-90f8-4230950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba14a-9a04-45a6-90f8-4230950d210b",
            "value": "https://www.virustotal.com/file/9b434c9d9687a3748416a0080f0278d93c0225e858d6113e2cbd0d3ff0ab4d2e/analysis/1432657402/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14a-c754-44b7-ac1e-4f0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:02.000Z",
            "modified": "2015-09-30T08:46:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darker10.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14a-01a4-4b65-8c59-4e07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:02.000Z",
            "modified": "2015-09-30T08:46:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '212a1b77df10bc0c3960ef6b5ec9f4ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14a-d6dc-4ef6-8a6c-49e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:02.000Z",
            "modified": "2015-09-30T08:46:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03f93fe127056670cbf4297ff9836993",
            "pattern": "[file:hashes.SHA256 = '42ab1f6721da04bcbd2e9f04991f691e36f403c3b221e62dba9eb1b21951efeb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14a-6bb0-4405-b869-4cdc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:02.000Z",
            "modified": "2015-09-30T08:46:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkeyes.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14a-3fe8-4388-a096-4f2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:02.000Z",
            "modified": "2015-09-30T08:46:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21328e6820cf2af844213678e0719b44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14a-8778-44ca-a5c1-4ce7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:02.000Z",
            "modified": "2015-09-30T08:46:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03f93fe127056670cbf4297ff9836993",
            "pattern": "[file:hashes.SHA1 = '6113f7f902116d7926e08136d9f61cf20baf28d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14a-2cd8-4233-ba86-4115950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:02.000Z",
            "modified": "2015-09-30T08:46:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkeyes41.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14a-af6c-411d-a3bf-4c7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:02.000Z",
            "modified": "2015-09-30T08:46:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21328ecfc69bde396cf44f76b9e876dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba14b-b790-4d71-9977-444c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "first_observed": "2015-09-30T08:46:03Z",
            "last_observed": "2015-09-30T08:46:03Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba14b-b790-4d71-9977-444c950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba14b-b790-4d71-9977-444c950d210b",
            "value": "https://www.virustotal.com/file/42ab1f6721da04bcbd2e9f04991f691e36f403c3b221e62dba9eb1b21951efeb/analysis/1433919406/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14b-68a8-4883-87a8-43ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '213ad6fd9a710bff06f53e163c6e38e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14b-7700-4182-91ce-43bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkeyes41.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14b-a058-4f1f-a01e-4d90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkeyes4141.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14b-44b8-462f-94fc-44a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03f4045b4059302b32802ac387a67d55",
            "pattern": "[file:hashes.SHA256 = 'e9ba273af33259c669d3e0fe9f43ebe18f9e8d41dd41c2a06f042fe9e73b45b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14b-a9b8-48c8-b32c-4d63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '214b9a6aff6261570fcbabd7da1bcff4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14b-5408-4748-a419-4dad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkhackero.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14b-8ba0-4944-ac0d-4205950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '214f7e6fa4a3b00c32242bfe4b1b1df4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14b-1704-46e3-aff5-49f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03f4045b4059302b32802ac387a67d55",
            "pattern": "[file:hashes.SHA1 = 'c17adbae6f8c8d3d6bdd3cec17661e056d9b428f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14b-8ba0-47d4-9246-4d19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:03.000Z",
            "modified": "2015-09-30T08:46:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkhost.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba14c-a7f4-431d-8e37-4d5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "first_observed": "2015-09-30T08:46:04Z",
            "last_observed": "2015-09-30T08:46:04Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba14c-a7f4-431d-8e37-4d5c950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba14c-a7f4-431d-8e37-4d5c950d210b",
            "value": "https://www.virustotal.com/file/e9ba273af33259c669d3e0fe9f43ebe18f9e8d41dd41c2a06f042fe9e73b45b7/analysis/1435165202/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14c-e858-4bdb-9085-47c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21542b2eebdc2a3f7c8b466ce64d4360']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14c-efd4-4ac1-a17a-470b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darking.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14c-b2d0-4cc9-a4e4-4efa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '215ad030d67251a81d0587053ec0ba85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14c-6488-4059-9872-4f7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03ed5be0144534a86a483427f7f9dc7c",
            "pattern": "[file:hashes.SHA256 = 'f82afea4141640490afe07d416b74e45e4f1952c70a279579b1b0918107d2288']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14c-6e60-48af-b823-4b1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21813c3887c67c30ea85c4b1d8087ecb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14c-a8a8-472a-8d25-428d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkkcomett.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14c-f74c-4deb-a7a4-4652950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21821e51fc5dc82a4a7239810392ed79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14c-ff98-465f-b6b8-4025950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03ed5be0144534a86a483427f7f9dc7c",
            "pattern": "[file:hashes.SHA1 = '80d11c2456f06e98bd53b36eff7bcb89cb8c4fbc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14d-8738-484d-971f-4ac4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21950464993dc20e08954687103bb87f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14c-d744-4322-b457-4774950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:04.000Z",
            "modified": "2015-09-30T08:46:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkkiftele.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14d-67d8-4d40-84b8-43d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkknightisback.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba14d-ddbc-4bea-ba8a-4f30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "first_observed": "2015-09-30T08:46:05Z",
            "last_observed": "2015-09-30T08:46:05Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba14d-ddbc-4bea-ba8a-4f30950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba14d-ddbc-4bea-ba8a-4f30950d210b",
            "value": "https://www.virustotal.com/file/f82afea4141640490afe07d416b74e45e4f1952c70a279579b1b0918107d2288/analysis/1433759256/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14d-8718-4abf-b9b5-4188950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '219579136f616864632aef79cdc367da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14d-21d0-4bad-a909-44de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkkomet2101.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14d-df00-47bc-abd9-4fad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkm.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14d-ecb4-4bd4-9ec9-4b23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03dff22a618bfd87f604d9a45aab168d",
            "pattern": "[file:hashes.SHA256 = '3539c9589b3f8c46a1786de092a678cb17a5f9dad52e37e45db546fe8730ca3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14d-0610-4f06-b1df-4150950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '219853b99a642f45674350cbeedfded9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14d-c07c-49a6-b20d-4f4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkmagma.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14e-ac88-440a-ae1f-431b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:06.000Z",
            "modified": "2015-09-30T08:46:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '219894511c17c9cdbb26dc6d50c86ea4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14d-562c-4207-b916-4f95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:05.000Z",
            "modified": "2015-09-30T08:46:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03dff22a618bfd87f604d9a45aab168d",
            "pattern": "[file:hashes.SHA1 = '7be36571bd63530296d0e3f3f20e489686637d47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14e-9b70-4385-992f-4290950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:06.000Z",
            "modified": "2015-09-30T08:46:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkman.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14e-5518-4b79-bcc2-4556950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:06.000Z",
            "modified": "2015-09-30T08:46:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '219c10c004785193f188edd40ca6dfd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14e-b34c-452e-a299-4c0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:06.000Z",
            "modified": "2015-09-30T08:46:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkmen.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba14e-35dc-47b4-a358-489f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:06.000Z",
            "modified": "2015-09-30T08:46:06.000Z",
            "first_observed": "2015-09-30T08:46:06Z",
            "last_observed": "2015-09-30T08:46:06Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba14e-35dc-47b4-a358-489f950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba14e-35dc-47b4-a358-489f950d210b",
            "value": "https://www.virustotal.com/file/3539c9589b3f8c46a1786de092a678cb17a5f9dad52e37e45db546fe8730ca3e/analysis/1438427171/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14e-dae4-4d9c-ad40-463a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:06.000Z",
            "modified": "2015-09-30T08:46:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21ab9f4037511585a68f7e3e6cec65c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14e-0ebc-4151-934e-4a0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:06.000Z",
            "modified": "2015-09-30T08:46:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03dd1fbd34fe5a46d83b5489d93f5a5f",
            "pattern": "[file:hashes.SHA256 = 'ce74734dcb0cae3f71d8d3a3438ed479f7987610f8d19ea035588a43703ad0b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14e-8a0c-4d67-b0bd-46ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:06.000Z",
            "modified": "2015-09-30T08:46:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkmodding.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14f-bef0-4c2d-9fba-4487950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03dd1fbd34fe5a46d83b5489d93f5a5f",
            "pattern": "[file:hashes.SHA1 = '5ad311d06e4e241404ecee42a85ce236f4b5ee02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14e-e4d0-4e73-b222-4b9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:06.000Z",
            "modified": "2015-09-30T08:46:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21ac8df1d2eb821f61ee7bd772bf07d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14f-baf0-46ab-ac89-4b4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkphoenix1843.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14f-5088-41e1-94a0-408c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21b9920e5777648aef07df748c8088a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba14f-de08-4cc3-99da-4654950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "first_observed": "2015-09-30T08:46:07Z",
            "last_observed": "2015-09-30T08:46:07Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba14f-de08-4cc3-99da-4654950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba14f-de08-4cc3-99da-4654950d210b",
            "value": "https://www.virustotal.com/file/ce74734dcb0cae3f71d8d3a3438ed479f7987610f8d19ea035588a43703ad0b9/analysis/1434402731/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14f-4f14-49af-9b53-4f5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkrat2.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14f-2e8c-415d-873a-4c4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21cb1f3f26744f50d26813e48541e91a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14f-f670-418a-aa08-40f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkrat32.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14f-015c-46a4-8c83-4173950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03db7f724aa5fa4483e82343702b99cc",
            "pattern": "[file:hashes.SHA256 = 'e466c6b33160d0ae838dc60b34d763589303db730ad8ed5243af820343802c85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14f-1e98-4cff-bd44-4a0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21d2624d85453cc3a2a1098622dea010']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba150-ea50-4683-b9ef-48cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:08.000Z",
            "modified": "2015-09-30T08:46:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03db7f724aa5fa4483e82343702b99cc",
            "pattern": "[file:hashes.SHA1 = '6d1cf58ed26ee1cba2bb50f8b2e879a1ebcab92b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba14f-c64c-41b5-a1c4-4eef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:07.000Z",
            "modified": "2015-09-30T08:46:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darks2myh.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba150-d594-427a-80e9-4fee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:08.000Z",
            "modified": "2015-09-30T08:46:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21d2cfc8b1eeb739d74c873a1b0bd739']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba150-6418-412f-96e6-4b5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:08.000Z",
            "modified": "2015-09-30T08:46:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkskyhost.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba150-20f4-48eb-a9c4-46dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:08.000Z",
            "modified": "2015-09-30T08:46:08.000Z",
            "first_observed": "2015-09-30T08:46:08Z",
            "last_observed": "2015-09-30T08:46:08Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba150-20f4-48eb-a9c4-46dc950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba150-20f4-48eb-a9c4-46dc950d210b",
            "value": "https://www.virustotal.com/file/e466c6b33160d0ae838dc60b34d763589303db730ad8ed5243af820343802c85/analysis/1436280910/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba150-3588-4139-8f80-4e92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:08.000Z",
            "modified": "2015-09-30T08:46:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03d5ec5c916d3ba5a855e71da0c177c5",
            "pattern": "[file:hashes.SHA256 = 'f7b3304e37b1e389feabdf30f67eb58e1de2ad748b508d3eb6bc87d59a2e9da0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba150-32d4-40f4-ae69-4fda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:08.000Z",
            "modified": "2015-09-30T08:46:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21d9d6d89102f1dcded022185194d5b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba150-5038-4761-a9b2-4eaf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:08.000Z",
            "modified": "2015-09-30T08:46:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkspawn.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba150-13e8-4238-b818-4e0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:08.000Z",
            "modified": "2015-09-30T08:46:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03d5ec5c916d3ba5a855e71da0c177c5",
            "pattern": "[file:hashes.SHA1 = 'c12b97e4e8e83bf0719ffc47f2b9778812287591']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba151-91f0-4188-b25e-4554950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "first_observed": "2015-09-30T08:46:09Z",
            "last_observed": "2015-09-30T08:46:09Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba151-91f0-4188-b25e-4554950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba151-91f0-4188-b25e-4554950d210b",
            "value": "https://www.virustotal.com/file/f7b3304e37b1e389feabdf30f67eb58e1de2ad748b508d3eb6bc87d59a2e9da0/analysis/1438108997/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba150-f9a8-4d56-a34b-44ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:08.000Z",
            "modified": "2015-09-30T08:46:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21db6f76d5fdc20a97f79c2e6cec9668']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba151-3188-40f2-bc0d-49a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkstuff.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba151-0710-4ad5-905b-43d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03d13b01c3a4ce5902e61b49394f7025",
            "pattern": "[file:hashes.SHA256 = '134c4c8d06708a0583c538d2420b6a840c91188348fd35061ccd9b270c8061c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba151-7b2c-44bf-8ae0-4b38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03d13b01c3a4ce5902e61b49394f7025",
            "pattern": "[file:hashes.SHA1 = 'e05e50a5ac2db847e25057fd5e9a6e02d8933d76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba151-d344-4c8a-b760-40e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21dc35f927b86cf8afa21319d4f4b5f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba151-72b0-4546-bbec-4e72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "first_observed": "2015-09-30T08:46:09Z",
            "last_observed": "2015-09-30T08:46:09Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba151-72b0-4546-bbec-4e72950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba151-72b0-4546-bbec-4e72950d210b",
            "value": "https://www.virustotal.com/file/134c4c8d06708a0583c538d2420b6a840c91188348fd35061ccd9b270c8061c0/analysis/1437610561/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba151-b0bc-4699-b11a-43db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darkswat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba151-2074-4dbb-8475-4c92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03c3322d1f8af283f753d9e10f93aa98",
            "pattern": "[file:hashes.SHA256 = '443992f5ad64829cf0393e77427333f378469d57ab374e045d92fca5fe52a122']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba151-c210-424f-aec8-43c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21e05b78dec36da0d9a7c5a5abc74a3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba151-483c-41f6-aeff-468a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darky12345.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba151-b548-42a1-933b-4314950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:09.000Z",
            "modified": "2015-09-30T08:46:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03c3322d1f8af283f753d9e10f93aa98",
            "pattern": "[file:hashes.SHA1 = 'ac80176a8aedbf8be1a31d40a7fa3e7481105956']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba152-8208-477a-a178-4601950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dartkocomet.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba152-9d78-4475-a532-4f51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21e524d44aa99e2907c0be9ddcd4f82d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba152-7914-4613-8368-450a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "first_observed": "2015-09-30T08:46:10Z",
            "last_observed": "2015-09-30T08:46:10Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba152-7914-4613-8368-450a950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba152-7914-4613-8368-450a950d210b",
            "value": "https://www.virustotal.com/file/443992f5ad64829cf0393e77427333f378469d57ab374e045d92fca5fe52a122/analysis/1435697935/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba152-480c-402c-b3b2-4929950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'darulz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba152-2094-4b9c-a279-471d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dasgoogle.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba152-0274-48ea-977c-40ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21e5a62e27995fcf3faf59c486a52a45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba152-38c8-4046-be76-4001950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03c0cf0e2d26477f5aeea44dbce9b9ad",
            "pattern": "[file:hashes.SHA256 = '5f4f25cef4cb9b6f9b8cc40170af59a45f5fc0b20a1e545338cc6678adb996bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba152-cbd4-4c00-81bc-418b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21e97983d0bcefc30e6168ccfda9ac5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba152-5b50-44dc-8244-4bba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'daviti32.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-225c-4b04-a3bb-462a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '21f9c73006cf5f8722e57f947f4dc8f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-ed54-453d-acbd-4e85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:10.000Z",
            "modified": "2015-09-30T08:46:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03c0cf0e2d26477f5aeea44dbce9b9ad",
            "pattern": "[file:hashes.SHA1 = 'baa852534fe11bb0bc63b5938ea782b0c1276fd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-1ee4-41fd-ba9e-42c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dawid1570.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba153-ef78-4fc9-be41-47f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "first_observed": "2015-09-30T08:46:11Z",
            "last_observed": "2015-09-30T08:46:11Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba153-ef78-4fc9-be41-47f4950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba153-ef78-4fc9-be41-47f4950d210b",
            "value": "https://www.virustotal.com/file/5f4f25cef4cb9b6f9b8cc40170af59a45f5fc0b20a1e545338cc6678adb996bd/analysis/1436681227/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-decc-4b74-8137-41b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22089473bd8cabc50acfff550e3c8b77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-d158-4819-8498-4e45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'daynasmithx.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-fb34-4185-9d4e-45f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03b4e960ca5ce6cff15ee3babb08cc6b",
            "pattern": "[file:hashes.SHA256 = '36b9c29e1f6d41d2819c315b37a2efa151dd2d11ece95abf359ba365c7311005']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-f2d4-4c16-ac92-4bb8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dbnz22334.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-0c40-4f33-88e4-4861950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '220b1ce0a02caae0d6d6f44c4d2d1ea9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-ad1c-45af-9239-4e2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dc.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba153-6ca4-427c-8888-4587950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:11.000Z",
            "modified": "2015-09-30T08:46:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03b4e960ca5ce6cff15ee3babb08cc6b",
            "pattern": "[file:hashes.SHA1 = 'fca6ff99809909b57b556a8707bc509f772b36a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba154-08ac-41b4-bb9e-4915950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:12.000Z",
            "modified": "2015-09-30T08:46:12.000Z",
            "first_observed": "2015-09-30T08:46:12Z",
            "last_observed": "2015-09-30T08:46:12Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba154-08ac-41b4-bb9e-4915950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba154-08ac-41b4-bb9e-4915950d210b",
            "value": "https://www.virustotal.com/file/36b9c29e1f6d41d2819c315b37a2efa151dd2d11ece95abf359ba365c7311005/analysis/1434632342/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba154-b1f0-477e-b3ab-41c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:12.000Z",
            "modified": "2015-09-30T08:46:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2224255442cfbbc157ae09f641892a69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba154-956c-4147-82e5-4fac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:12.000Z",
            "modified": "2015-09-30T08:46:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dc36.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba154-ed20-43cc-b491-4be8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:12.000Z",
            "modified": "2015-09-30T08:46:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '222b8922fb920d091598c40be9692bfc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba154-f0a4-4696-833a-4e11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:12.000Z",
            "modified": "2015-09-30T08:46:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03a90bdf3c81fb071a2d064798ea68d2",
            "pattern": "[file:hashes.SHA256 = '7b69cf30cb6734299ff90e70a847c72f83ec4fdf6376321a3bd391c608de67a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba154-90cc-4484-98d2-4e24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:12.000Z",
            "modified": "2015-09-30T08:46:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '222b8b08d5dab97ae434535a8a03db18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba154-8048-4823-bf8f-433c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:12.000Z",
            "modified": "2015-09-30T08:46:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dc4run-htx.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba154-3234-4987-b3b9-42c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:12.000Z",
            "modified": "2015-09-30T08:46:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '222c27771edb665d5b4b1a1bb47f545b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba154-0634-4627-916b-4413950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:12.000Z",
            "modified": "2015-09-30T08:46:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03a90bdf3c81fb071a2d064798ea68d2",
            "pattern": "[file:hashes.SHA1 = 'a7abb97fa921a302f7d6325e3cde941c0c81ee6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba155-e8d8-46ad-a6d6-4939950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '222c5a30450488bff62f521720586e14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba155-c65c-4528-b6ac-4591950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dc5.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba155-89d0-4d5f-9853-45b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "first_observed": "2015-09-30T08:46:13Z",
            "last_observed": "2015-09-30T08:46:13Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba155-89d0-4d5f-9853-45b2950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba155-89d0-4d5f-9853-45b2950d210b",
            "value": "https://www.virustotal.com/file/7b69cf30cb6734299ff90e70a847c72f83ec4fdf6376321a3bd391c608de67a3/analysis/1434051065/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba155-88bc-4816-92f9-4ad4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 038b55782cf88cfeeeed81535f577a3c",
            "pattern": "[file:hashes.SHA256 = '91d4383339f82a83f46eb5cc8f4736358adba4d173f0f60008b1b703cbb8706d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba155-10b0-427c-b6c4-4d1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '222f67cfa1e3609813817e0853606170']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba155-0600-42bc-8df0-4643950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dc55.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba155-a2a0-4159-a379-41fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2238d2458b4ada32e86620dbf4f0c303']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba155-57a0-4004-9999-43d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 038b55782cf88cfeeeed81535f577a3c",
            "pattern": "[file:hashes.SHA1 = '86aa095bb6346aac951a4b9968da4fa9ceb3469c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba155-9020-438a-b5d4-4485950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2238d6385f2c232752656bccc2a81ca4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba155-78d4-484f-b264-40d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:13.000Z",
            "modified": "2015-09-30T08:46:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcarthur.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba156-4558-41df-a119-4cff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "first_observed": "2015-09-30T08:46:14Z",
            "last_observed": "2015-09-30T08:46:14Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba156-4558-41df-a119-4cff950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba156-4558-41df-a119-4cff950d210b",
            "value": "https://www.virustotal.com/file/91d4383339f82a83f46eb5cc8f4736358adba4d173f0f60008b1b703cbb8706d/analysis/1434606047/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba156-9a7c-4281-b17a-40f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0388111dc6cf5835a6f2c654b1dcbb4d",
            "pattern": "[file:hashes.SHA256 = 'b31a6b69283d833e42b13695d5969a61fd937a636d4e4f90f62928831085a1c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba156-c2fc-4807-9f6d-4f11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '223d96adbdcbf479a64ae3036ab5c9ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba156-1730-4dc1-acb9-455a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcdarkcomets.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba156-f3f4-46e7-bbce-469a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2246fe78670324a4434d178f4bb4a9b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba156-8a58-43ee-8b84-4c3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0388111dc6cf5835a6f2c654b1dcbb4d",
            "pattern": "[file:hashes.SHA1 = '364a3e8a68e530cd7ccc5faf28c3fd558233dab5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba156-1bd0-407d-9317-4793950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dchoneypot531.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba156-9958-4e1f-bed9-472d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "first_observed": "2015-09-30T08:46:14Z",
            "last_observed": "2015-09-30T08:46:14Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba156-9958-4e1f-bed9-472d950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba156-9958-4e1f-bed9-472d950d210b",
            "value": "https://www.virustotal.com/file/b31a6b69283d833e42b13695d5969a61fd937a636d4e4f90f62928831085a1c0/analysis/1434481323/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba156-7c7c-4bd0-a117-41cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22559035f3c96ddefc928ba21bce7878']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba157-9d34-4a7c-bee9-44d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22566d2240944b350aa06178135f3343']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba156-2018-405b-ab3c-4149950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:14.000Z",
            "modified": "2015-09-30T08:46:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcme.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba157-ee64-46fa-8bbf-4e4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 037f39c664a9e8772483a1b26d975879",
            "pattern": "[file:hashes.SHA256 = '47ed31de7f7de5bf868d7c926c4471c122d0208406ccb0d71d08646830795156']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba157-2b7c-4f4a-9d38-414c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '226114ef4dd05e252dbcf50c3878961a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba157-5a50-41aa-804f-4d13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 037f39c664a9e8772483a1b26d975879",
            "pattern": "[file:hashes.SHA1 = '2b73fa9cb3c087f5e8758be0f6bf2771b06fd9ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba157-f274-4697-a80e-4297950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcnoupitest.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba157-ef94-41ce-9b7e-4a8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '226719cbbadd55ea44c2cb657549a3db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba157-fccc-4a89-8abb-4639950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "first_observed": "2015-09-30T08:46:15Z",
            "last_observed": "2015-09-30T08:46:15Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba157-fccc-4a89-8abb-4639950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba157-fccc-4a89-8abb-4639950d210b",
            "value": "https://www.virustotal.com/file/47ed31de7f7de5bf868d7c926c4471c122d0208406ccb0d71d08646830795156/analysis/1437168563/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba157-61a0-40a0-b5e2-4510950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22711eac78a994b3d7e17199dc30e1c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba157-b9f8-4978-bdbc-4c4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcomet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba158-6d0c-4ae8-9de2-4ee8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2275c5615b84fa89bec2e9bde7952b12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba157-5df4-41dc-ba69-4150950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:15.000Z",
            "modified": "2015-09-30T08:46:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 037ed8ab2a4cd555983d7315b393489b",
            "pattern": "[file:hashes.SHA256 = '28e487e84fd411650ca25623c1d6b0426c2f0710bdf4f23c6883eeca4755a2de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba158-57ec-4c7d-8081-4684950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 037ed8ab2a4cd555983d7315b393489b",
            "pattern": "[file:hashes.SHA1 = 'd3867f70e12b947462032d0769e4e23c7394458b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba158-d80c-4fac-9290-44a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcop.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba158-c780-4475-b342-4ed4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '227903bec1bec1a4058333c6976367a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba158-b990-42f6-a7c1-407c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcr89.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba158-f7ac-44ef-9a55-49ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "first_observed": "2015-09-30T08:46:16Z",
            "last_observed": "2015-09-30T08:46:16Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba158-f7ac-44ef-9a55-49ba950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba158-f7ac-44ef-9a55-49ba950d210b",
            "value": "https://www.virustotal.com/file/28e487e84fd411650ca25623c1d6b0426c2f0710bdf4f23c6883eeca4755a2de/analysis/1434028186/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba158-15a0-455a-baed-4d7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcrat.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba158-f5e0-4b5c-9f0a-445a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2279c335ae1d2faadbf2733e60774737']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba158-c27c-4a39-9c88-4fdd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 037c231b3a263992fcdd5b58b34127e8",
            "pattern": "[file:hashes.SHA256 = '05fee3657f7eee1ca2a7f3a0b32e18028fe8d7b1ec31c25a170e7c78b5d6a6f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba159-4148-42af-9b70-431b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2283f0ace4fbe6aa06419173683352fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba158-8b04-40f0-ba30-4506950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:16.000Z",
            "modified": "2015-09-30T08:46:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcratweed.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba159-d314-4b54-a288-44ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22929d6a38dcf618d54b90d33a8aa5b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba159-0764-4f10-8f92-430a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 037c231b3a263992fcdd5b58b34127e8",
            "pattern": "[file:hashes.SHA1 = 'bb69e47606f6f81d69744e0016621dcf917f09a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba159-1d7c-4957-a890-4761950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "first_observed": "2015-09-30T08:46:17Z",
            "last_observed": "2015-09-30T08:46:17Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba159-1d7c-4957-a890-4761950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba159-1d7c-4957-a890-4761950d210b",
            "value": "https://www.virustotal.com/file/05fee3657f7eee1ca2a7f3a0b32e18028fe8d7b1ec31c25a170e7c78b5d6a6f8/analysis/1436494712/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba159-c950-4039-a4de-419f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcratyo.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba159-10a0-4d1c-9d8f-4f47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22a815c26a5a1a064b02dc3f322279ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba159-1e98-426b-89e9-410c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcsetupdarkcsetup.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba159-40c8-4e51-b6fa-4c98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 036dd0746a8b7f838159de68b6988824",
            "pattern": "[file:hashes.SHA256 = '6f8ddbe34dd5573cac8102628eb1684e46c75bef8b4b33966b194cd395113d45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba159-1f3c-41e8-b500-468c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22aba96c1270d2a9a04d297e1e1c944e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15a-bbb0-4dea-9214-4954950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:18.000Z",
            "modified": "2015-09-30T08:46:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 036dd0746a8b7f838159de68b6988824",
            "pattern": "[file:hashes.SHA1 = '67280aced797b66fca26ce81823be5f53720a745']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba159-d7dc-4b5f-8413-4c18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:17.000Z",
            "modified": "2015-09-30T08:46:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcskate.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15a-2878-40c6-a441-46a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:18.000Z",
            "modified": "2015-09-30T08:46:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22ad6447d8107d254ba1127fe0ba7065']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15a-81b8-4479-9cd8-4a6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:18.000Z",
            "modified": "2015-09-30T08:46:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dctony1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba15a-b28c-4f89-bf30-4744950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:18.000Z",
            "modified": "2015-09-30T08:46:18.000Z",
            "first_observed": "2015-09-30T08:46:18Z",
            "last_observed": "2015-09-30T08:46:18Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba15a-b28c-4f89-bf30-4744950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba15a-b28c-4f89-bf30-4744950d210b",
            "value": "https://www.virustotal.com/file/6f8ddbe34dd5573cac8102628eb1684e46c75bef8b4b33966b194cd395113d45/analysis/1436646385/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15a-e118-4805-8334-4c26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:18.000Z",
            "modified": "2015-09-30T08:46:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22c3a8aa5dfc75e5397af4f2b69440f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15a-6b50-4faf-abf3-4b07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:18.000Z",
            "modified": "2015-09-30T08:46:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 036370871395886c24b4b74c87613c7a",
            "pattern": "[file:hashes.SHA256 = '3420323faae9403b7bb9760908fcd0d6f9ba1da1f547defaeb1040c75c8dbdfa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15a-80a8-4fbf-b485-451e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:18.000Z",
            "modified": "2015-09-30T08:46:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcv123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15a-d20c-42c8-abdb-49c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:18.000Z",
            "modified": "2015-09-30T08:46:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '22c6c37c07455ba89e0d3598f4a7c80d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15b-c798-4107-b447-4671950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dcynfnde4.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15b-e6d8-495f-987c-4953950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 036370871395886c24b4b74c87613c7a",
            "pattern": "[file:hashes.SHA1 = '79b5c5df86da0d65baa7141186103a58d4b31720']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15b-4e7c-487b-8b4e-400d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23070f2e1d4240835d46b1825ec25c13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba15b-492c-4326-a9a7-4145950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "first_observed": "2015-09-30T08:46:19Z",
            "last_observed": "2015-09-30T08:46:19Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba15b-492c-4326-a9a7-4145950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba15b-492c-4326-a9a7-4145950d210b",
            "value": "https://www.virustotal.com/file/3420323faae9403b7bb9760908fcd0d6f9ba1da1f547defaeb1040c75c8dbdfa/analysis/1433752564/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15b-d188-42cc-9a3e-4d18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ddenis12.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15b-6634-4f58-a574-4007950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '230b1272101fc87d4b50e42dbf0c2d16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15b-e63c-43b6-a778-43f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 035c7822d83ac4a0ea891a6271e5da10",
            "pattern": "[file:hashes.SHA256 = '4cec5ede715643f65abc7f56aac5f996db9ea4d5379528603cd4063850d5bcff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15b-e3e0-4a45-865e-461a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '231c92a006a2d1945d9e0fb2229ac2cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15b-d840-4819-8194-480b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ddnsdarkcomet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15b-3094-4ffe-af75-45dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:19.000Z",
            "modified": "2015-09-30T08:46:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 035c7822d83ac4a0ea891a6271e5da10",
            "pattern": "[file:hashes.SHA1 = '350861f9a5ad1ec632e233e3540cef71cb7655e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15c-891c-4066-90f0-44fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '231cc6840d8f71cb6dc68081f84894f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15c-24d8-49a4-9ffe-4e9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2327fbb7b2a9139ccc19f8775f6651fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15c-10bc-4dae-b1d5-4b3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ddoossppuuttxx.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba15c-8640-4ff4-9e27-41f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "first_observed": "2015-09-30T08:46:20Z",
            "last_observed": "2015-09-30T08:46:20Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba15c-8640-4ff4-9e27-41f4950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba15c-8640-4ff4-9e27-41f4950d210b",
            "value": "https://www.virustotal.com/file/4cec5ede715643f65abc7f56aac5f996db9ea4d5379528603cd4063850d5bcff/analysis/1432675807/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15c-911c-4a82-a05c-4559950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '232a67239f29eb06d38e59b46e376bba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15c-a0bc-471e-9a74-444d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2338c9d6289b69bfce8975cd90ea0bfc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15c-dbd8-4cf0-9400-428f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ddos.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15c-c548-413f-a816-4a44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0359edc4a92e04efd867004b33a1b1f0",
            "pattern": "[file:hashes.SHA256 = '7f005498991393548245a2f1910b566615e3d8b2ef9f07fd86668e3c11da2d8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15c-ef98-4b04-b93f-437f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '234a2d23b44ee6a83fb1ae1b66477c38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15d-7a68-4b5b-ae7a-4186950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0359edc4a92e04efd867004b33a1b1f0",
            "pattern": "[file:hashes.SHA1 = '166c43e1c4024668300312196ce118a4d714a17a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15c-1224-4f85-b339-46f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:20.000Z",
            "modified": "2015-09-30T08:46:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dead27.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15d-0e10-48f5-b470-489a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23519fa8c7520049ec5488d1bb0cb04a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba15d-c988-4564-adf4-4051950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "first_observed": "2015-09-30T08:46:21Z",
            "last_observed": "2015-09-30T08:46:21Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba15d-c988-4564-adf4-4051950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba15d-c988-4564-adf4-4051950d210b",
            "value": "https://www.virustotal.com/file/7f005498991393548245a2f1910b566615e3d8b2ef9f07fd86668e3c11da2d8b/analysis/1434333342/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15d-381c-4413-bc86-4047950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23542a1088b12e775fbb7dfde2b21880']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15d-2978-4e16-9ace-4085950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deadshot.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15d-f564-4eb0-a92c-4e82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0356dbf97cc88122932f6ab7f09abbdb",
            "pattern": "[file:hashes.SHA256 = '1faeb9109a55267b1083f4c5aea8cefe6e60e69b07631f401cd4ce792aa9cc45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15d-3278-404f-9fd1-4d9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2355fb559a47d5bbebbb5883033b0099']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15d-c838-4ca1-b26c-40d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0356dbf97cc88122932f6ab7f09abbdb",
            "pattern": "[file:hashes.SHA1 = '8ea722af6db7c2af7a5fe1d451d2c6caaa1e5aec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15d-7690-4659-973b-45ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deagle-bg.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15d-7670-494c-b0d8-474b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:21.000Z",
            "modified": "2015-09-30T08:46:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2357a1bd51b369d27cc3f858e8d27b58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba15e-015c-4d90-b5aa-40c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "first_observed": "2015-09-30T08:46:22Z",
            "last_observed": "2015-09-30T08:46:22Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba15e-015c-4d90-b5aa-40c6950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba15e-015c-4d90-b5aa-40c6950d210b",
            "value": "https://www.virustotal.com/file/1faeb9109a55267b1083f4c5aea8cefe6e60e69b07631f401cd4ce792aa9cc45/analysis/1435995691/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-8188-4bdb-a2b6-4500950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '235dd0bdcfc7a72333e522812fd5c211']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-c058-4e97-9faf-49ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deanhack.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-7c88-4d73-b1ff-4b31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 034b8c2862a5cf997e655ade36a781cc",
            "pattern": "[file:hashes.SHA256 = '281711e019f2289ca9a9bdf124e30d6143942d5fd76e614225f300a13b406500']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-d404-431a-b184-4318950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '236d83be1cc5cbc963a7b9c7162c59de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-d118-4673-b7e1-49ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 034b8c2862a5cf997e655ade36a781cc",
            "pattern": "[file:hashes.SHA1 = '5ada6576ba4fa91439a84c03957e3bbda8f0cf45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-7074-424a-8d45-4a35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deaqle112.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-ca58-415e-9be9-43b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2376c6b2d1f18619ab378a4a4b8ec723']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba15e-c764-480f-981b-4213950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "first_observed": "2015-09-30T08:46:22Z",
            "last_observed": "2015-09-30T08:46:22Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba15e-c764-480f-981b-4213950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba15e-c764-480f-981b-4213950d210b",
            "value": "https://www.virustotal.com/file/281711e019f2289ca9a9bdf124e30d6143942d5fd76e614225f300a13b406500/analysis/1435062939/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-24fc-4de1-81ee-47d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '237fcf2d2633ed1e5fbe63827542d3ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-cfd0-41a0-a2de-460b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'death.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15e-5798-4167-a582-4179950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:22.000Z",
            "modified": "2015-09-30T08:46:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 033e33088fac746f736e077179378b5d",
            "pattern": "[file:hashes.SHA256 = '58cfabd971e64d5ac9b2d90a87b5bf803dcaba669734689e9716f188996906b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15f-438c-4764-adba-44d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:23.000Z",
            "modified": "2015-09-30T08:46:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23940e633c3105f831d3568fa6de1953']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15f-4da8-4c29-b003-443f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:23.000Z",
            "modified": "2015-09-30T08:46:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 033e33088fac746f736e077179378b5d",
            "pattern": "[file:hashes.SHA1 = '9c2e0135f05b07890a9573f2f211b09c5c365c23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15f-83d4-46e1-bb23-4ffa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:23.000Z",
            "modified": "2015-09-30T08:46:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deathly.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15f-86f8-41e8-a524-474a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:23.000Z",
            "modified": "2015-09-30T08:46:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '239f58f46e214f69de7b7a2022a4d244']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba15f-f114-4b78-bd8f-43aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:23.000Z",
            "modified": "2015-09-30T08:46:23.000Z",
            "first_observed": "2015-09-30T08:46:23Z",
            "last_observed": "2015-09-30T08:46:23Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba15f-f114-4b78-bd8f-43aa950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba15f-f114-4b78-bd8f-43aa950d210b",
            "value": "https://www.virustotal.com/file/58cfabd971e64d5ac9b2d90a87b5bf803dcaba669734689e9716f188996906b4/analysis/1435311330/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15f-f894-483b-9db0-41df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:23.000Z",
            "modified": "2015-09-30T08:46:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23a99c1fab45d0b7faed7bd8b1741474']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15f-fd88-44d3-93b7-47ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:23.000Z",
            "modified": "2015-09-30T08:46:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deathxreigns.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15f-3490-46aa-a618-4807950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:23.000Z",
            "modified": "2015-09-30T08:46:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0336d0633181f9dfcb93d4b7aec4c1a2",
            "pattern": "[file:hashes.SHA256 = '92760712baf652f0e9ed9797892997ad95a4d0f5467812c3ac1113f68af29af6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba15f-6e80-4e86-b95a-4852950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:23.000Z",
            "modified": "2015-09-30T08:46:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23aa86f5b13bf943c3f68d6dbc5a9c85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba160-79dc-4223-b3ef-4c04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23d28e59ee172c5a18e49165b4d5c8c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba160-2600-46b4-8835-4747950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dedarrbg.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba160-fe3c-4be9-a92d-4405950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0336d0633181f9dfcb93d4b7aec4c1a2",
            "pattern": "[file:hashes.SHA1 = '1e4482f037c17be4bc581464f4ac01c759cacf31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba160-ada8-43c6-afc9-49ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23daf27f4b70b70d7d28261e2ed08bbf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba160-72f0-49a1-b21a-45e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23e25737b5cea55fb00ea3b559448c35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba160-106c-4d20-95a3-4efc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dedelebg.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba160-5630-43cf-a0be-4003950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "first_observed": "2015-09-30T08:46:24Z",
            "last_observed": "2015-09-30T08:46:24Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba160-5630-43cf-a0be-4003950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba160-5630-43cf-a0be-4003950d210b",
            "value": "https://www.virustotal.com/file/92760712baf652f0e9ed9797892997ad95a4d0f5467812c3ac1113f68af29af6/analysis/1437221046/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba160-7de8-414c-a972-434c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dedenostale.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba160-42f4-4ec6-bd18-4125950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '23f16f759142f6f90973f65ffa5afc07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba161-7ddc-4585-9938-4ae9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dedomain332.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba160-f6e0-4394-90c7-4359950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:24.000Z",
            "modified": "2015-09-30T08:46:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03362a4dff1a54ef515b26ed79cf67fa",
            "pattern": "[file:hashes.SHA256 = 'a8b9e67c48185125a1a54c74e5b7a64810323c23a97b6a105de15dc783bd66c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba161-d63c-45f0-a0be-4242950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2408911c32c99e5d113093d8482bc23f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba161-c574-41ff-9034-418c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 03362a4dff1a54ef515b26ed79cf67fa",
            "pattern": "[file:hashes.SHA1 = 'c9615ba5f52b11f5f6815ec157bc98e7b9382010']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba161-5740-4d62-a5c6-4af2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dedromku.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba161-799c-4c1e-8817-46b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2409cd98d750336e298f7a5b3031e714']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba161-aea8-4df8-9afb-4adf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "first_observed": "2015-09-30T08:46:25Z",
            "last_observed": "2015-09-30T08:46:25Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba161-aea8-4df8-9afb-4adf950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba161-aea8-4df8-9afb-4adf950d210b",
            "value": "https://www.virustotal.com/file/a8b9e67c48185125a1a54c74e5b7a64810323c23a97b6a105de15dc783bd66c8/analysis/1435177427/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba161-db14-47c7-a59d-462f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 032234517d6f7f5bad7cb691a01a8c35",
            "pattern": "[file:hashes.SHA256 = 'cd0674b53ff3c279b6f87fbedb16ae964afab35955119d56500a5cb0f02de7de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba161-07a8-46bb-a015-4e41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deeli007s.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba161-60a0-4fb7-bbbd-4c22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '240a6183b00edcf893bd80dd1de414e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba161-5a9c-4102-b9e1-4eda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:25.000Z",
            "modified": "2015-09-30T08:46:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 032234517d6f7f5bad7cb691a01a8c35",
            "pattern": "[file:hashes.SHA1 = '801520be8b48ad2e06f4a805a199d3e5ca542512']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba162-fcac-41a3-8150-4dae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "first_observed": "2015-09-30T08:46:26Z",
            "last_observed": "2015-09-30T08:46:26Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba162-fcac-41a3-8150-4dae950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba162-fcac-41a3-8150-4dae950d210b",
            "value": "https://www.virustotal.com/file/cd0674b53ff3c279b6f87fbedb16ae964afab35955119d56500a5cb0f02de7de/analysis/1432231409/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba162-e188-47f3-bccb-485a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deepwebmated.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba162-bbb0-499e-8e54-4b14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24133517624e497c5c5013f0acd0c20f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba162-0fa4-4693-bf00-4d59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deepwebtr06.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba162-5fac-4c97-96bf-45e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 031da919af4364fa407585cf7e547b9b",
            "pattern": "[file:hashes.SHA256 = 'd66e38cd293db7c6f228a629db77240a832b32106c379e0cdbd0b043676ddc00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba162-b7bc-4c2c-bb7f-43da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '241443915b4ec7e86ccf0f0ed3ccd294']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba162-13e8-44a7-a3d8-401e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2418c0797632fa0ff64504c7ebd58d44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba162-7460-4442-86db-4980950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deitycometarat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba162-1e3c-46f0-9ee5-4a64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 031da919af4364fa407585cf7e547b9b",
            "pattern": "[file:hashes.SHA1 = 'b2f49dd582f80cd4e7891b116edf8ae158cd8dc0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba163-de98-42bd-a583-4f1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deliriumxi68.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba162-0210-4bb6-808b-42ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:26.000Z",
            "modified": "2015-09-30T08:46:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '241d10c453b5455a8f7064e6530dd664']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba163-0910-4841-a9d3-437b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dellnabil.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba163-04fc-4c91-8862-4377950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "first_observed": "2015-09-30T08:46:27Z",
            "last_observed": "2015-09-30T08:46:27Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba163-04fc-4c91-8862-4377950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba163-04fc-4c91-8862-4377950d210b",
            "value": "https://www.virustotal.com/file/d66e38cd293db7c6f228a629db77240a832b32106c379e0cdbd0b043676ddc00/analysis/1438097419/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba163-be30-4005-96f6-4dd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2433fecaee223a14f8f2cb24b3b05816']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba163-8744-4bc3-ab69-42db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 031d0e8f85a74a3eba5c6c97e28d13b1",
            "pattern": "[file:hashes.SHA256 = '1c1eebfed936d42398288af8501fb250dfff990dc5cb4a15420c041786218304']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba163-66a8-4d67-af04-4655950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deltakepler34.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba163-c644-41f5-9ad9-4355950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2439cd6f345432907050283c74fdc612']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba163-81a0-4fa1-a9c7-4a60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 031d0e8f85a74a3eba5c6c97e28d13b1",
            "pattern": "[file:hashes.SHA1 = '541a56a5f6c2b10f08f616452520d88b600f7975']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba163-5054-4ae3-863f-4471950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '243a74b538a05527f395fd6661c18063']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba163-a540-47fa-bb04-472c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'demba.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba163-5700-4a8f-95b0-4657950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:27.000Z",
            "modified": "2015-09-30T08:46:27.000Z",
            "first_observed": "2015-09-30T08:46:27Z",
            "last_observed": "2015-09-30T08:46:27Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba163-5700-4a8f-95b0-4657950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba163-5700-4a8f-95b0-4657950d210b",
            "value": "https://www.virustotal.com/file/1c1eebfed936d42398288af8501fb250dfff990dc5cb4a15420c041786218304/analysis/1437906545/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba164-1418-436e-ad67-4dc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:28.000Z",
            "modified": "2015-09-30T08:46:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deneme12345.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba164-d738-44b9-85bf-4fce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:28.000Z",
            "modified": "2015-09-30T08:46:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '243f1155c774c182f613d48eb78a607b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba164-dee4-4f41-83ee-4621950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:28.000Z",
            "modified": "2015-09-30T08:46:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deneme59.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba164-d12c-48ec-b78f-43a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:28.000Z",
            "modified": "2015-09-30T08:46:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '244607c4c3a3d96a33bbf6d3dca5d34e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba164-2918-4912-9d05-4fbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:28.000Z",
            "modified": "2015-09-30T08:46:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 031bf8a057686d5ea3b92c0be315b947",
            "pattern": "[file:hashes.SHA256 = '31567618841eeef5774df2c532ec8974d43a102a8983d44d3940072b302cb1d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba164-a100-4e65-949f-4c7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:28.000Z",
            "modified": "2015-09-30T08:46:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '244f01d929ff24b4675104d5824e15a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba164-d898-45e0-888f-4bf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:28.000Z",
            "modified": "2015-09-30T08:46:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'denemedark.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba164-1538-4930-a833-4c80950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:28.000Z",
            "modified": "2015-09-30T08:46:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 031bf8a057686d5ea3b92c0be315b947",
            "pattern": "[file:hashes.SHA1 = 'bf2db8b10b208d192aa27ea37a451a679d239c4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba164-5ac0-425a-9285-4d5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:28.000Z",
            "modified": "2015-09-30T08:46:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2452425d1e2d054c8d4d738b7dde7e5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba165-51e4-42a1-823e-4254950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:29.000Z",
            "modified": "2015-09-30T08:46:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '248174622d7d80c49d143787404f2fb8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba165-3514-4c81-a443-4682950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:29.000Z",
            "modified": "2015-09-30T08:46:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'denemedeyiz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba165-1cf0-4b75-917c-430c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:29.000Z",
            "modified": "2015-09-30T08:46:29.000Z",
            "first_observed": "2015-09-30T08:46:29Z",
            "last_observed": "2015-09-30T08:46:29Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba165-1cf0-4b75-917c-430c950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba165-1cf0-4b75-917c-430c950d210b",
            "value": "https://www.virustotal.com/file/31567618841eeef5774df2c532ec8974d43a102a8983d44d3940072b302cb1d9/analysis/1434027772/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba165-0b84-48ce-9238-4640950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:29.000Z",
            "modified": "2015-09-30T08:46:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'deniskayankov.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba165-095c-44e0-84b0-433c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:29.000Z",
            "modified": "2015-09-30T08:46:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24909753c2a5466433849821d338f0dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba165-16a8-4d9a-937c-4ada950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:29.000Z",
            "modified": "2015-09-30T08:46:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'denizx1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba165-1bcc-4276-bcab-45aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:29.000Z",
            "modified": "2015-09-30T08:46:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0319eca6ec81cd18fa5d6325e3656e44",
            "pattern": "[file:hashes.SHA256 = '41c73d4b979287080b61918c61223c54d990d2e0da61443b1948d5a96bdd7608']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba165-c174-4f19-890c-4624950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:29.000Z",
            "modified": "2015-09-30T08:46:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24928f8faa0ed7d38f92adfecbb91ac6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba166-c5a8-4a2c-96ec-44a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0319eca6ec81cd18fa5d6325e3656e44",
            "pattern": "[file:hashes.SHA1 = '42cc0dac9ee23070e9adea92494a3839522b786a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba165-ebe4-4413-a87d-4a06950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:29.000Z",
            "modified": "2015-09-30T08:46:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dennidondon.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba166-8cf4-411c-9bc1-46a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2493591b220386ab58f16c5b8f0af758']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba166-3550-45cc-b2f9-4006950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "first_observed": "2015-09-30T08:46:30Z",
            "last_observed": "2015-09-30T08:46:30Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba166-3550-45cc-b2f9-4006950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba166-3550-45cc-b2f9-4006950d210b",
            "value": "https://www.virustotal.com/file/41c73d4b979287080b61918c61223c54d990d2e0da61443b1948d5a96bdd7608/analysis/1435408808/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba166-d6a0-45f5-a7c2-4d4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0312676d112cf1cf32859a42e9ed28d0",
            "pattern": "[file:hashes.SHA256 = 'cb9ac0652d0edeea84e0d67e96945f27ffbe3303e4fa84a6d1faae0d86ebdcda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba166-a118-4d75-90ec-4a2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dennisehomo.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba166-5dd0-4145-aa19-4cdf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24958cf87e484d462a8dec3b9a58c45a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba166-00c0-4f1d-aa58-42bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0312676d112cf1cf32859a42e9ed28d0",
            "pattern": "[file:hashes.SHA1 = '9a10f71463d7368782e71c807e4db409abd32f2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba166-8dc4-4397-ac4f-4028950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "first_observed": "2015-09-30T08:46:30Z",
            "last_observed": "2015-09-30T08:46:30Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba166-8dc4-4397-ac4f-4028950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba166-8dc4-4397-ac4f-4028950d210b",
            "value": "https://www.virustotal.com/file/cb9ac0652d0edeea84e0d67e96945f27ffbe3303e4fa84a6d1faae0d86ebdcda/analysis/1436194624/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba166-cb4c-4b2d-b6bc-4b80950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'denntal.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba166-0ef8-4f6d-b328-4c2f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:30.000Z",
            "modified": "2015-09-30T08:46:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '249b3915a08512332f38a499f3127e95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba167-cae4-4df5-804d-4f0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0306bd7a2423aed567bd188d86901a35",
            "pattern": "[file:hashes.SHA256 = 'c4fb330f76f84e0202dfbc867334a2596e311c08d756dae3bdc677bd4145c30a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba167-0abc-457a-b86c-435d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0306bd7a2423aed567bd188d86901a35",
            "pattern": "[file:hashes.SHA1 = '6d7493187d7485fdd34b6b9529b768f81f8487e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba167-1428-488e-ab8d-453a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'densyurchikbuc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba167-39ac-4de5-b75c-4db0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '249d740640e1d1bac2e96c2ef32c53e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba167-1e98-4ce6-91b8-422d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "first_observed": "2015-09-30T08:46:31Z",
            "last_observed": "2015-09-30T08:46:31Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba167-1e98-4ce6-91b8-422d950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba167-1e98-4ce6-91b8-422d950d210b",
            "value": "https://www.virustotal.com/file/c4fb330f76f84e0202dfbc867334a2596e311c08d756dae3bdc677bd4145c30a/analysis/1437158255/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba167-d810-4585-b49e-4edc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02ffda03734d2101e57103b07daacfa1",
            "pattern": "[file:hashes.SHA256 = 'd2dcdcd821a872800304da94746206e06a639122117d6e523196541dac301838']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba167-2bb4-4ede-b4f4-445a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'derock2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba167-ca2c-49e6-80f3-4c9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24a8ccb8603e7a88c72179dc201ffb1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba167-e6d8-4266-b105-4893950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02ffda03734d2101e57103b07daacfa1",
            "pattern": "[file:hashes.SHA1 = '4ea1d194b20952f1ec69c314446871d441ffa41b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba168-93d8-4d25-b365-4f16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24ad4414c4f55419cfbd36f8c0640b31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba167-cb54-4d17-9a50-47b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:31.000Z",
            "modified": "2015-09-30T08:46:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'derzkiyrus.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba168-3770-4165-a31a-4535950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "first_observed": "2015-09-30T08:46:32Z",
            "last_observed": "2015-09-30T08:46:32Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba168-3770-4165-a31a-4535950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba168-3770-4165-a31a-4535950d210b",
            "value": "https://www.virustotal.com/file/d2dcdcd821a872800304da94746206e06a639122117d6e523196541dac301838/analysis/1435485130/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba168-ff54-44a4-b4f4-49cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'devonrat.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba168-cd38-4966-b2f5-4839950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24b117b243c420b277677cdc144fa2af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba168-abe0-4b4e-b519-407d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dewin54.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba168-a0d0-4935-8c97-45f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02fc2b7128eaf301b7d9880a3a8803f5",
            "pattern": "[file:hashes.SHA256 = '6a86c80f7eac31a341ff298b0406f2ac053f896bf51adfc9515ddf5f41a42483']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba168-07bc-4b2c-9a67-461e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dexter.myftp.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba168-ad90-401e-977f-4655950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24b34333a0be2fbd3b88962cccecc5b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba168-5458-4bd0-9541-4165950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dfsgsdfg.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba168-ac70-405e-88c3-49e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:32.000Z",
            "modified": "2015-09-30T08:46:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02fc2b7128eaf301b7d9880a3a8803f5",
            "pattern": "[file:hashes.SHA1 = 'd7b2ac4a6ea322511e5cd50a264d4410e3e6c7b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba169-96f4-4b30-adab-4ea1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24b3921bff30883ff0cfe9d19aa48e7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba169-2be0-47e0-b72f-48cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24b65475bd350a606bf458a2735c62f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba169-f684-4a6f-bb74-4eec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dhnkrc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba169-94fc-41f3-9600-4976950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "first_observed": "2015-09-30T08:46:33Z",
            "last_observed": "2015-09-30T08:46:33Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba169-94fc-41f3-9600-4976950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba169-94fc-41f3-9600-4976950d210b",
            "value": "https://www.virustotal.com/file/6a86c80f7eac31a341ff298b0406f2ac053f896bf51adfc9515ddf5f41a42483/analysis/1432671352/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba169-4720-4611-a2b7-44f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24b6659ad73fbccff4a8c1db16be2e3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba169-13d8-4c31-942e-483a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24b959b06c0d9b1141261581249e9058']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba169-9cf8-48d7-8bfb-4e0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dickdickdickdick.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba169-b3f8-46bb-8b99-45b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02f240575737df0b6a3cade7734eb258",
            "pattern": "[file:hashes.SHA256 = '0c373c02427c1e5cb7def768c55e0cab4cdfa693c7ca0a57c8394df199bdfef2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba169-96d4-4918-a3a7-47b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dickdickdickdick69.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba169-1020-4b04-a70e-4a8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:33.000Z",
            "modified": "2015-09-30T08:46:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24bcacf580c58d35113162d272842b29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16a-3e24-443b-afd5-4cbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dickh3ad.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16a-df34-4ec6-b7f7-4863950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02f240575737df0b6a3cade7734eb258",
            "pattern": "[file:hashes.SHA1 = '3fca3011ddae220f86d5c758a2c7cfe64c4ae10b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16a-ea14-46c7-aae0-41ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24d03d345d4ccdc2c91809ad4b3a1cfb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba16a-dfd0-44b3-8715-492d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "first_observed": "2015-09-30T08:46:34Z",
            "last_observed": "2015-09-30T08:46:34Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba16a-dfd0-44b3-8715-492d950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba16a-dfd0-44b3-8715-492d950d210b",
            "value": "https://www.virustotal.com/file/0c373c02427c1e5cb7def768c55e0cab4cdfa693c7ca0a57c8394df199bdfef2/analysis/1432408174/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16a-73f0-497a-b311-4f72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dieenigeekte.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16a-0d78-4a3e-b7c3-47c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24d75e3f2cff97ab624674c8b2e6534a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16a-7054-4587-ab17-4fb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02e860e8f03aecbc02e61bcf06286aeb",
            "pattern": "[file:hashes.SHA256 = '10a433f576f6efee9898228ab4f46a45baa779028a17441903ffb38bd2e2daa8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16a-ac40-4b35-a7de-4244950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '24fedcc415df252dc735f4102e0d1127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16a-5604-4c78-ad24-4746950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'diegovascpt.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16a-06c4-42f9-a20a-4d3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:34.000Z",
            "modified": "2015-09-30T08:46:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02e860e8f03aecbc02e61bcf06286aeb",
            "pattern": "[file:hashes.SHA1 = '0738475ec59d73c8fdff7572ec5ec9bfdd4b9326']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16b-e324-401d-9224-4433950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '250057adc4ae3b254e55baa283d31bde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16b-9dd8-4bda-b8b4-4d0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '25113ca01f4133d90918a8fcbc0d427d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16b-3898-4728-8ce1-44e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'digginass.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba16b-ee48-4474-b90e-4f5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "first_observed": "2015-09-30T08:46:35Z",
            "last_observed": "2015-09-30T08:46:35Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba16b-ee48-4474-b90e-4f5d950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba16b-ee48-4474-b90e-4f5d950d210b",
            "value": "https://www.virustotal.com/file/10a433f576f6efee9898228ab4f46a45baa779028a17441903ffb38bd2e2daa8/analysis/1436837105/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16b-39bc-4b91-9970-4378950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dima228308.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16b-10a4-4c13-8995-49af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2512bad3f45dcb162774f98c7c2a3b67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16b-d910-4091-b13d-441b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dimakiller55256.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16b-14ec-47b1-954b-4212950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02c8d0e1a15bd950422fa25c692b5b7f",
            "pattern": "[file:hashes.SHA256 = '10d746297894c4ced6d64b0be0f3a5fad909259ce7e6830554b9b76b16298295']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16b-c0c8-4106-b8c4-4ea3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2520b6e49018ffdba748a3b76e3aec49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16c-84c8-4f3d-99a8-40e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '25247558daabc5f919f1aba8dbdd2415']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16b-3a18-45ee-b379-4d7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:35.000Z",
            "modified": "2015-09-30T08:46:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dingodu93.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16c-ad98-401c-af93-4dbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02c8d0e1a15bd950422fa25c692b5b7f",
            "pattern": "[file:hashes.SHA1 = '210a596c7e3f6e4a3183b5174214f6ee24ed62b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16c-7a74-441b-9952-4c3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dinonegative.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16c-c72c-4e51-8558-4315950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2547723176936c18e83edce2ec4244f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16c-8354-46a8-8cd5-49c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'diocane.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba16c-5f34-4080-b15d-4a03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "first_observed": "2015-09-30T08:46:36Z",
            "last_observed": "2015-09-30T08:46:36Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba16c-5f34-4080-b15d-4a03950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba16c-5f34-4080-b15d-4a03950d210b",
            "value": "https://www.virustotal.com/file/10d746297894c4ced6d64b0be0f3a5fad909259ce7e6830554b9b76b16298295/analysis/1432486339/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16c-3e8c-4a33-bcc8-45a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '254f1a910eb36aa692d578495bcef51c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16c-6338-46f7-b721-4272950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '255f728f5874ca658194546dd8cc806f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16c-9214-4967-ae61-46f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02c373ab200bcd13d75d6f8e4a8d2523",
            "pattern": "[file:hashes.SHA256 = '78af918ecb38582e75845fb659ba7f33a67b83d3a157e8a360aa53c58edcc5b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16c-e3d0-498f-8768-42df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:36.000Z",
            "modified": "2015-09-30T08:46:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'direman00.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16d-1a7c-43f0-9ac2-42cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:37.000Z",
            "modified": "2015-09-30T08:46:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2562652efcc646037cb670f0aaaad8b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16d-0174-43c0-99bf-4548950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:37.000Z",
            "modified": "2015-09-30T08:46:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2562ed165a9f2b05ca3a79850644446a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16d-ffb4-49cf-ab4b-42fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:37.000Z",
            "modified": "2015-09-30T08:46:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02c373ab200bcd13d75d6f8e4a8d2523",
            "pattern": "[file:hashes.SHA1 = '7e0bdd308ecb5c08cc18f92a0aafd3889d9817db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16d-7240-467d-a5d6-4acb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:37.000Z",
            "modified": "2015-09-30T08:46:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'direman02.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba16d-7778-414f-a327-4e84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:37.000Z",
            "modified": "2015-09-30T08:46:37.000Z",
            "first_observed": "2015-09-30T08:46:37Z",
            "last_observed": "2015-09-30T08:46:37Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba16d-7778-414f-a327-4e84950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba16d-7778-414f-a327-4e84950d210b",
            "value": "https://www.virustotal.com/file/78af918ecb38582e75845fb659ba7f33a67b83d3a157e8a360aa53c58edcc5b3/analysis/1434792814/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16d-11b0-44c0-ae67-47fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:37.000Z",
            "modified": "2015-09-30T08:46:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2562f6e2870ef03331b1d20c4011e1f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16d-52c0-4171-be96-4d39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:37.000Z",
            "modified": "2015-09-30T08:46:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dixtory.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16d-dc84-45b0-87b7-40c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:37.000Z",
            "modified": "2015-09-30T08:46:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02aec9e5454e7246526ffc3c3fec12ff",
            "pattern": "[file:hashes.SHA256 = '8a523dedf9b6f57afaa998e4f6ee9f23d4ea6ce140c19993b6594e872505453d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-fd08-46ae-b358-4012950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02aec9e5454e7246526ffc3c3fec12ff",
            "pattern": "[file:hashes.SHA1 = '88b65aae3a9e6e2651ef7233a1bd6e9cd7e481b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16d-2ae0-41bf-a030-4a37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:37.000Z",
            "modified": "2015-09-30T08:46:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '25661c867c08f79f681f0f6862329b5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-2824-4079-89ce-46ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'djoni2611.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba16e-c088-4e78-93f4-4c70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "first_observed": "2015-09-30T08:46:38Z",
            "last_observed": "2015-09-30T08:46:38Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba16e-c088-4e78-93f4-4c70950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba16e-c088-4e78-93f4-4c70950d210b",
            "value": "https://www.virustotal.com/file/8a523dedf9b6f57afaa998e4f6ee9f23d4ea6ce140c19993b6594e872505453d/analysis/1435672130/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-d658-48c0-bce9-4d85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'djsnerf.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-336c-4352-a82d-4d08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '256b5ae9864239107338931dd36387d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-d77c-47ba-a49e-44d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0293ef6e6c74a76c59c2b6560344f840",
            "pattern": "[file:hashes.SHA256 = '22bf76d90aeaae115100dc62968a98a15201e087bb17442ac256ec80dc7056c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-ad54-4aa5-92f2-4926950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'djsweet86.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-d150-43ff-b9a1-413c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dkk123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-3fe8-4458-9e99-40d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '256d4c261f012c544eeb6c2e3a98cc33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-a0e0-4005-895e-4dd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0293ef6e6c74a76c59c2b6560344f840",
            "pattern": "[file:hashes.SHA1 = '722038171c051faf3d943d9658d526311ea3a87c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16e-a7dc-4ce1-84da-46a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:38.000Z",
            "modified": "2015-09-30T08:46:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dkk123451.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16f-a610-441e-b94b-4c7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dkonly360.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16f-7dc0-4fe1-b13d-4c78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2570006f2853d766afc6f64f9b90bb53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16f-0c54-4316-980f-4327950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dllhost.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba16f-9830-4a82-b1df-4e00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "first_observed": "2015-09-30T08:46:39Z",
            "last_observed": "2015-09-30T08:46:39Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba16f-9830-4a82-b1df-4e00950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba16f-9830-4a82-b1df-4e00950d210b",
            "value": "https://www.virustotal.com/file/22bf76d90aeaae115100dc62968a98a15201e087bb17442ac256ec80dc7056c4/analysis/1435613545/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16f-27b8-43e4-846b-497a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2575cc79a29806503875d28e981e13fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16f-1e9c-49ec-8c6a-42a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '257745bf632f860ee2175b2af01230d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16f-594c-4456-b25d-4861950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dndnksa.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16f-13e4-41c3-99f3-414a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0288793781361420addc35248606cd4d",
            "pattern": "[file:hashes.SHA256 = 'b8d605f4611fd115469adb41c19e1eaa8e5f9f4c4945d576dd1c39dfdea1180b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16f-8160-4155-8837-4f72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '257994ab23cc4bdcd64d50ecdde0db58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba170-027c-4d8c-8461-4a43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:40.000Z",
            "modified": "2015-09-30T08:46:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0288793781361420addc35248606cd4d",
            "pattern": "[file:hashes.SHA1 = 'acabc142c5bae62ef84983f53166115bb9f1ec55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba16f-d93c-42ef-a586-4c98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:39.000Z",
            "modified": "2015-09-30T08:46:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dngdong123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba170-5004-4c4c-8671-4a9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:40.000Z",
            "modified": "2015-09-30T08:46:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dnsdeneme1.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba170-d9d4-4e02-abae-4214950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:40.000Z",
            "modified": "2015-09-30T08:46:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2582eb3f4f411eb056e42dde57085f29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba170-bbd4-4892-802b-419f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:40.000Z",
            "modified": "2015-09-30T08:46:40.000Z",
            "first_observed": "2015-09-30T08:46:40Z",
            "last_observed": "2015-09-30T08:46:40Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba170-bbd4-4892-802b-419f950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba170-bbd4-4892-802b-419f950d210b",
            "value": "https://www.virustotal.com/file/b8d605f4611fd115469adb41c19e1eaa8e5f9f4c4945d576dd1c39dfdea1180b/analysis/1434373100/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba170-9040-4788-b9bb-49b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:40.000Z",
            "modified": "2015-09-30T08:46:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dnshack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba170-539c-45bc-b4cf-4bb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:40.000Z",
            "modified": "2015-09-30T08:46:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2584e595b79489d2f725bba13c61e822']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba170-6a1c-4690-8abf-4f84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:40.000Z",
            "modified": "2015-09-30T08:46:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '258ee23ee29dc7972aa5a461d84fe2f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba170-c09c-4b78-a98c-48db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:40.000Z",
            "modified": "2015-09-30T08:46:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02784921deaad0e5905539583a7e5250",
            "pattern": "[file:hashes.SHA256 = '2e34d1e8be993bb136c690b052c497166d467222138b706623c4e2f130122a64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba170-56b4-489e-9f5e-4d0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:40.000Z",
            "modified": "2015-09-30T08:46:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dnstar.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-2c88-497e-a296-4e9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2591c518a65cfd470431a4b25510549d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-5690-4f1c-ad44-4cc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '259c4942ab23f8c10f5c4c3557fd7d36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-9c54-46c0-91ee-4f19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 02784921deaad0e5905539583a7e5250",
            "pattern": "[file:hashes.SHA1 = '69a69c80d3cb3b5eb6c6e2d278d27ec83c1a7da6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-fd98-4939-af6b-4ab5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'docut.007.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-4e8c-4da5-8902-442c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '259c7da5574b182a56ec131f119d98bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-ef7c-485c-93a9-48e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '25a05619c950501950cba81ad33c3fdc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba171-6548-4867-90bc-4f1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "first_observed": "2015-09-30T08:46:41Z",
            "last_observed": "2015-09-30T08:46:41Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba171-6548-4867-90bc-4f1c950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba171-6548-4867-90bc-4f1c950d210b",
            "value": "https://www.virustotal.com/file/2e34d1e8be993bb136c690b052c497166d467222138b706623c4e2f130122a64/analysis/1433895175/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-0468-4225-a777-4be4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dodgsaf.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-b5cc-4bbd-bb41-4fa0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '25c1c59fa08b755bcb99ec9f343af327']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-3bf8-4cbc-8b98-4169950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dofuskamasunlimited.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba171-a714-46ad-90c4-417b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:41.000Z",
            "modified": "2015-09-30T08:46:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 027060d73ee95c04939a9483b194e646",
            "pattern": "[file:hashes.SHA256 = 'e9b143189706f75157fa519758b286209eeaa120385adec9fe9fc1da2c8dced8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba172-8638-495b-bafe-49bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dogecoinspeed.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba172-b3e0-4ca3-a2ee-48fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '25d4226cb1a16f69b9fcf9d3c0502b0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba172-c598-4b37-8717-4794950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '25f3443e34fd43da9a16066e42b67592']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba172-0844-4aa2-939a-463b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 027060d73ee95c04939a9483b194e646",
            "pattern": "[file:hashes.SHA1 = 'd4204de2c0d68e7e7287b339af9de498a85a1e54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba172-c598-452c-9bb0-41b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dogetroll.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba172-4b20-4c1e-9309-42cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '25f56840e5782b650cd9ac69a8abe9ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba172-82d4-49a2-b188-489f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dolidx.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba172-fa74-49e6-9b34-4822950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "first_observed": "2015-09-30T08:46:42Z",
            "last_observed": "2015-09-30T08:46:42Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba172-fa74-49e6-9b34-4822950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba172-fa74-49e6-9b34-4822950d210b",
            "value": "https://www.virustotal.com/file/e9b143189706f75157fa519758b286209eeaa120385adec9fe9fc1da2c8dced8/analysis/1435266482/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba172-82d4-4b59-996f-433d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '25ff278297feb2188fee12e551a8733f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba172-d9c4-4747-95a1-42f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:42.000Z",
            "modified": "2015-09-30T08:46:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'domates.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-8c34-4f95-a45b-48b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2601ba218ca14a1bb65e061e268c0557']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-20bc-40cb-8cb7-4708950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0261a34ca8a26eb5f653e11ff82cd6dd",
            "pattern": "[file:hashes.SHA256 = '0bf0a361a3a3779a34eebc0146d9173c67a27630d0bdcf0b766ce998c52ba5c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-c058-4a4e-b3e3-43f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26085dfd8af5bc829c253c8eb1314f0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-8c34-471f-a87c-4bc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dominate.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-ae14-4e13-a737-4b86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2608ef0e84ee73a8512d32b40940cac5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-05ac-4ba4-b800-45fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0261a34ca8a26eb5f653e11ff82cd6dd",
            "pattern": "[file:hashes.SHA1 = 'ad761ddebc12463c0794e90b490ef87b4a93f9b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-adb0-4561-b241-46b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'doneitt.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-4ce4-4ef8-bd12-4acc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2614f922a2d86abd909a66316570a0a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-b73c-42b5-9dab-489f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '261f3210b410a789771b25b7e04fd0ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba173-2e38-4058-b4b8-42d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "first_observed": "2015-09-30T08:46:43Z",
            "last_observed": "2015-09-30T08:46:43Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba173-2e38-4058-b4b8-42d1950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba173-2e38-4058-b4b8-42d1950d210b",
            "value": "https://www.virustotal.com/file/0bf0a361a3a3779a34eebc0146d9173c67a27630d0bdcf0b766ce998c52ba5c2/analysis/1435041971/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba173-ef18-4246-8cdd-4523950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:43.000Z",
            "modified": "2015-09-30T08:46:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'donhacks.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba174-6ea8-495e-acd9-4390950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:44.000Z",
            "modified": "2015-09-30T08:46:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2625e6b577f876ae3cfc9756f613e649']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba174-0708-4446-9b47-4e36950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:44.000Z",
            "modified": "2015-09-30T08:46:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '262c456591be3b94f2e3bd916ca6d1f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba174-924c-4a47-a6f1-450a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:44.000Z",
            "modified": "2015-09-30T08:46:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0250a60d696889ef894f23737a0b8cd1",
            "pattern": "[file:hashes.SHA256 = '7dc2f66e5f71c1cae3febe3d4a929892432e18b8567d71b49abbec62898bd191']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba174-0708-4d88-a0f9-4e2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:44.000Z",
            "modified": "2015-09-30T08:46:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'donotninjame.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba174-9ac4-4d92-bc98-4b91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:44.000Z",
            "modified": "2015-09-30T08:46:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '262d7f4519bb8d75e6763f7f260dfec1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba174-4088-4bca-be9e-4a99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:44.000Z",
            "modified": "2015-09-30T08:46:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dor.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba174-1bc4-4e42-b12a-4623950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:44.000Z",
            "modified": "2015-09-30T08:46:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0250a60d696889ef894f23737a0b8cd1",
            "pattern": "[file:hashes.SHA1 = '2e968631b5953df03034b470d7c1354eb19a8245']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba174-49e8-4919-9fef-471d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:44.000Z",
            "modified": "2015-09-30T08:46:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '262e58febc34ec7f89558232876bf38d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba174-7cc4-458e-a25c-4aa0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:44.000Z",
            "modified": "2015-09-30T08:46:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dorp1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba175-a098-4490-9ef4-4d18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dota.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba175-a7e4-44e8-9e7a-4c73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "first_observed": "2015-09-30T08:46:45Z",
            "last_observed": "2015-09-30T08:46:45Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba175-a7e4-44e8-9e7a-4c73950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba175-a7e4-44e8-9e7a-4c73950d210b",
            "value": "https://www.virustotal.com/file/7dc2f66e5f71c1cae3febe3d4a929892432e18b8567d71b49abbec62898bd191/analysis/1436771882/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba175-95a8-4060-9c92-4f52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '262efd75537a45205751b1fafe5ee3bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba175-bea4-4781-ac46-42b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'downclan.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba175-6050-4cbd-b258-40e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2645ac15ce6ebcb1cac53cb73e922cc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba175-2d18-401d-b1ad-4e83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 024f3666ac2fb82e1735d2af0392e878",
            "pattern": "[file:hashes.SHA256 = 'c7d61c36937eda9fcb3251f8aea512622b498bef30a87b68b2556e84bf7c4868']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba175-6564-4918-8218-4c10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'doxgod.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba175-9d14-491e-a251-4980950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2648c8fe2714ce13020674c4596b988b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-6658-41ff-9fe3-4d71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dragon2015.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba175-3538-4097-936d-4d61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 024f3666ac2fb82e1735d2af0392e878",
            "pattern": "[file:hashes.SHA1 = '63d955adce450496790e35598c2bc5745141b3e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-6658-4d32-8b0d-42b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:45.000Z",
            "modified": "2015-09-30T08:46:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '264b36f7af69a38714ae0ac2786f2593']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-4d40-49f5-af34-478e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:46.000Z",
            "modified": "2015-09-30T08:46:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dragos98.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-11b8-43d1-a8a4-4a0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:46.000Z",
            "modified": "2015-09-30T08:46:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'drajdukiya.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba176-ae10-470c-94b2-48ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:46.000Z",
            "modified": "2015-09-30T08:46:46.000Z",
            "first_observed": "2015-09-30T08:46:46Z",
            "last_observed": "2015-09-30T08:46:46Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba176-ae10-470c-94b2-48ed950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba176-ae10-470c-94b2-48ed950d210b",
            "value": "https://www.virustotal.com/file/c7d61c36937eda9fcb3251f8aea512622b498bef30a87b68b2556e84bf7c4868/analysis/1436348148/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-7428-4a36-968c-4052950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:46.000Z",
            "modified": "2015-09-30T08:46:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2654bd9949c12f3508c49c398cf6cdf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-1784-4104-98bf-420e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:46.000Z",
            "modified": "2015-09-30T08:46:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'drakehack2014.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-d328-4d5e-93ee-4abd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:46.000Z",
            "modified": "2015-09-30T08:46:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'drakehack2015.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-2e84-4902-9bbb-4f8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:46.000Z",
            "modified": "2015-09-30T08:46:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0235ef6bb96ec04f38c46df5d8684446",
            "pattern": "[file:hashes.SHA256 = '7824c7384346a63c709706e93bdbc2d143eff6dfc89172face9b599974e2d08c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-aa88-4b59-897d-4372950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:46.000Z",
            "modified": "2015-09-30T08:46:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2670008ba953f6d4b768bbd592de2c74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba176-1e3c-4234-8f51-4a0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:46.000Z",
            "modified": "2015-09-30T08:46:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'drakehack2015.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba177-2cdc-4559-9830-4b05950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'drcassbul.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba177-b6c4-499f-9f15-4e70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0235ef6bb96ec04f38c46df5d8684446",
            "pattern": "[file:hashes.SHA1 = 'ae4b5f96007b63351319fa1ae099828fe156f8a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba177-8274-4759-9f65-44cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26796980fa5a22eb49733af1892a0dad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba177-68d0-4a05-bb17-46a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dreadpirate.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba177-c714-4f74-9a38-45c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2682c34c6c688242a1506bc9530d428d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba177-18d0-4bf5-ab11-4ece950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "first_observed": "2015-09-30T08:46:47Z",
            "last_observed": "2015-09-30T08:46:47Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba177-18d0-4bf5-ab11-4ece950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba177-18d0-4bf5-ab11-4ece950d210b",
            "value": "https://www.virustotal.com/file/7824c7384346a63c709706e93bdbc2d143eff6dfc89172face9b599974e2d08c/analysis/1435709644/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba177-c714-4214-a1cb-46cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dreamworkers.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba177-76c4-4839-b0cd-4027950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0227c27cc237d9ebbf7a549b620274f0",
            "pattern": "[file:hashes.SHA256 = 'd146f8978721c0615a258694b7517e92a5009f8e16d17c35175afa2bf181af91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba177-3c58-4583-9e9f-47dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '268ba4873baec8237d0fc8b8c2523caf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba178-8510-4b0d-b987-4858950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:48.000Z",
            "modified": "2015-09-30T08:46:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0227c27cc237d9ebbf7a549b620274f0",
            "pattern": "[file:hashes.SHA1 = '4a3ce836c600f995f50845ff9d7c9b0eabd845c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba177-0c34-4ba6-ac61-41d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:47.000Z",
            "modified": "2015-09-30T08:46:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'drft5099.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba178-ea9c-45f1-96d5-4d03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:48.000Z",
            "modified": "2015-09-30T08:46:48.000Z",
            "first_observed": "2015-09-30T08:46:48Z",
            "last_observed": "2015-09-30T08:46:48Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba178-ea9c-45f1-96d5-4d03950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba178-ea9c-45f1-96d5-4d03950d210b",
            "value": "https://www.virustotal.com/file/d146f8978721c0615a258694b7517e92a5009f8e16d17c35175afa2bf181af91/analysis/1433696840/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba178-3f78-4e88-b5c0-43e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:48.000Z",
            "modified": "2015-09-30T08:46:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '268c367588c19aa69b4e2ded90c1f910']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba178-07e8-4593-b2f6-4749950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:48.000Z",
            "modified": "2015-09-30T08:46:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0203cdaf4c7490bb2ca2ee1517b33180",
            "pattern": "[file:hashes.SHA256 = '2346086323fac6f68ada8b70f88a32c636731871054329357353170790635507']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba178-4060-4ace-a91d-4a14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:48.000Z",
            "modified": "2015-09-30T08:46:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'drhackers.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba178-dab0-400e-95dd-431f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:48.000Z",
            "modified": "2015-09-30T08:46:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0203cdaf4c7490bb2ca2ee1517b33180",
            "pattern": "[file:hashes.SHA1 = '18e974d0ca6c3203f64ab6761c5ff41c9d9a7411']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba178-d7cc-4ece-aad6-4dd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:48.000Z",
            "modified": "2015-09-30T08:46:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26a2c677e83f91805f7d6023036d052c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba178-7a0c-4d4b-97fb-4f25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:48.000Z",
            "modified": "2015-09-30T08:46:48.000Z",
            "first_observed": "2015-09-30T08:46:48Z",
            "last_observed": "2015-09-30T08:46:48Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba178-7a0c-4d4b-97fb-4f25950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba178-7a0c-4d4b-97fb-4f25950d210b",
            "value": "https://www.virustotal.com/file/2346086323fac6f68ada8b70f88a32c636731871054329357353170790635507/analysis/1436519861/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba178-9324-4e72-9ecb-46a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:48.000Z",
            "modified": "2015-09-30T08:46:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dritor.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba179-adac-4133-8691-43a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01fd19e3cb4b754d35b23420481967b9",
            "pattern": "[file:hashes.SHA256 = '12a29aad6da3dc6698c6c18a007c73a4edff255f09f01754d2cff58911e8e9e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba179-315c-451a-87a5-4861950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26aae93db65be32031cb79e17c9e921b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba179-581c-42a6-aed0-49a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01fd19e3cb4b754d35b23420481967b9",
            "pattern": "[file:hashes.SHA1 = '538084d1459a6f311f78ff57732e5efc5a88f04a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba179-2760-49b7-a0eb-4218950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'drizzix.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba179-b4f4-47fb-8774-4543950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "first_observed": "2015-09-30T08:46:49Z",
            "last_observed": "2015-09-30T08:46:49Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba179-b4f4-47fb-8774-4543950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba179-b4f4-47fb-8774-4543950d210b",
            "value": "https://www.virustotal.com/file/12a29aad6da3dc6698c6c18a007c73a4edff255f09f01754d2cff58911e8e9e9/analysis/1434449140/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba179-9628-425b-8694-4da6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26ac8de8eb7f0dc66b7a8289127ccafb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba179-4410-418b-824d-40d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01f6adbe1f0ec5d4d29235ca83472ee7",
            "pattern": "[file:hashes.SHA256 = '3338ebf3a485e7bd18f60c5f162a5b05230f542b8583e98596145747adca0217']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba179-c290-4eda-abe3-4fa2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'drkcmt.myftp.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba179-1270-4c9e-9b80-4422950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01f6adbe1f0ec5d4d29235ca83472ee7",
            "pattern": "[file:hashes.SHA1 = 'a2de9c1e48a0ff09db5de4bece8313efa1b42367']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba179-c148-418e-90c2-4f4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:49.000Z",
            "modified": "2015-09-30T08:46:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26ac915c72f771c382b14b1c7e472887']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba17a-cbf8-4ccb-b739-43fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:50.000Z",
            "modified": "2015-09-30T08:46:50.000Z",
            "first_observed": "2015-09-30T08:46:50Z",
            "last_observed": "2015-09-30T08:46:50Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba17a-cbf8-4ccb-b739-43fe950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba17a-cbf8-4ccb-b739-43fe950d210b",
            "value": "https://www.virustotal.com/file/3338ebf3a485e7bd18f60c5f162a5b05230f542b8583e98596145747adca0217/analysis/1434147631/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17a-d2f4-4bab-a395-4284950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:50.000Z",
            "modified": "2015-09-30T08:46:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dronwest.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17a-dd4c-4eb0-9840-4887950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:50.000Z",
            "modified": "2015-09-30T08:46:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01f21242441315cc7843be46659f9488",
            "pattern": "[file:hashes.SHA256 = '2f903c3b32949aef3785b627616f754189cfd119a7c9a68dee8bac7533bf64dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17a-0578-4107-bec3-42bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:50.000Z",
            "modified": "2015-09-30T08:46:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26ae4de0473da665b0c9290c03f85072']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17a-ac10-4114-8d95-43db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:50.000Z",
            "modified": "2015-09-30T08:46:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01f21242441315cc7843be46659f9488",
            "pattern": "[file:hashes.SHA1 = '790257a1ccd8bcc13027e60396cd9461eb17a3ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17a-ba9c-4143-a06a-4808950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:50.000Z",
            "modified": "2015-09-30T08:46:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dtcsgo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba17a-76c8-444e-9a5a-440c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:50.000Z",
            "modified": "2015-09-30T08:46:50.000Z",
            "first_observed": "2015-09-30T08:46:50Z",
            "last_observed": "2015-09-30T08:46:50Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba17a-76c8-444e-9a5a-440c950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba17a-76c8-444e-9a5a-440c950d210b",
            "value": "https://www.virustotal.com/file/2f903c3b32949aef3785b627616f754189cfd119a7c9a68dee8bac7533bf64dc/analysis/1434826380/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17a-f50c-4eb4-b22d-408d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:50.000Z",
            "modified": "2015-09-30T08:46:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26c12c0a0c62da294b2c4f4d0b3f40eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17b-fec4-4eb7-b841-48f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01e14644b02bf305a60d54cd1a9470a0",
            "pattern": "[file:hashes.SHA256 = '05985a48ff9ad7318e2bfa09b1b8d8750f76c6085f5157b19633e5390ad6779f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17a-9df0-4a3b-bca8-48f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:50.000Z",
            "modified": "2015-09-30T08:46:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'du12.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17b-5d00-46e7-9b3b-4b19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01e14644b02bf305a60d54cd1a9470a0",
            "pattern": "[file:hashes.SHA1 = '5b0ae1f5901f37d3559e1ef8c71ced83614fe6b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17b-5b48-4b3a-a6eb-4126950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26caed2e07f2bb1eb7d478be258a92e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba17b-ab40-4edc-9302-4875950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "first_observed": "2015-09-30T08:46:51Z",
            "last_observed": "2015-09-30T08:46:51Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba17b-ab40-4edc-9302-4875950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba17b-ab40-4edc-9302-4875950d210b",
            "value": "https://www.virustotal.com/file/05985a48ff9ad7318e2bfa09b1b8d8750f76c6085f5157b19633e5390ad6779f/analysis/1434047348/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17b-faa4-43d0-8077-4a04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'duc11.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17b-e020-4388-a0d0-490b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01d1ddad2ff5b2d9a1ad8ef01c73c500",
            "pattern": "[file:hashes.SHA256 = '4d957679432dcb1b4ff226132608a4d6b12574c760e838f40482d1d191626e95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17b-40f0-4610-8b8e-4772950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26d58fb07a839915b6ab92d076c4881d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17b-0b6c-4291-89eb-4c0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01d1ddad2ff5b2d9a1ad8ef01c73c500",
            "pattern": "[file:hashes.SHA1 = '6b1e7b109494deca9e9e01a545a2c535d1da5aaf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17b-9eec-40bb-8a1c-4ca0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ducks1337.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba17c-6494-4a2f-a5a3-448a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:52.000Z",
            "modified": "2015-09-30T08:46:52.000Z",
            "first_observed": "2015-09-30T08:46:52Z",
            "last_observed": "2015-09-30T08:46:52Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba17c-6494-4a2f-a5a3-448a950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba17c-6494-4a2f-a5a3-448a950d210b",
            "value": "https://www.virustotal.com/file/4d957679432dcb1b4ff226132608a4d6b12574c760e838f40482d1d191626e95/analysis/1433827650/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17b-97d8-4508-b4fb-4895950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:51.000Z",
            "modified": "2015-09-30T08:46:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26ec356a899620ea9aee17a7e5e07ade']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17c-644c-4859-876f-4e02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:52.000Z",
            "modified": "2015-09-30T08:46:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01ce79a822a60dd11b835a18aa400c01",
            "pattern": "[file:hashes.SHA256 = '966595c8d7c63c8b790afcf1d63dcc37cf1b62952da563ba743c7e6ca501efaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17c-9644-4a1f-b853-415b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:52.000Z",
            "modified": "2015-09-30T08:46:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ducky1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17c-2924-4dc6-8c90-4f7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:52.000Z",
            "modified": "2015-09-30T08:46:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01ce79a822a60dd11b835a18aa400c01",
            "pattern": "[file:hashes.SHA1 = '97509ec458adc2d5770c60a5ee6e7e70ffa205b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17c-f71c-409c-95d5-4d84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:52.000Z",
            "modified": "2015-09-30T08:46:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26ee5365e0bd37321bca1d3642210af9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba17c-4b80-4ae5-ab20-4bcd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:52.000Z",
            "modified": "2015-09-30T08:46:52.000Z",
            "first_observed": "2015-09-30T08:46:52Z",
            "last_observed": "2015-09-30T08:46:52Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba17c-4b80-4ae5-ab20-4bcd950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba17c-4b80-4ae5-ab20-4bcd950d210b",
            "value": "https://www.virustotal.com/file/966595c8d7c63c8b790afcf1d63dcc37cf1b62952da563ba743c7e6ca501efaa/analysis/1434481628/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17c-5150-4282-be71-4c84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:52.000Z",
            "modified": "2015-09-30T08:46:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'duffycraft.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17c-6e20-4c12-9b7b-461e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:52.000Z",
            "modified": "2015-09-30T08:46:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01cba24c43175b8e108b1f9828b7640b",
            "pattern": "[file:hashes.SHA256 = '59ec03e214e983251a15280440bb90df330e78a45e4a0cdcb18ac737196c34ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17c-5424-47b6-b993-46b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:52.000Z",
            "modified": "2015-09-30T08:46:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26f209fb42ef406c5801dc4f01b77950']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17d-2d20-48f5-be59-472e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:53.000Z",
            "modified": "2015-09-30T08:46:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01cba24c43175b8e108b1f9828b7640b",
            "pattern": "[file:hashes.SHA1 = 'abbc40df9491026b2bf8f23d39bc43ecd15c5b5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17d-e25c-4e49-9ccf-4c54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:53.000Z",
            "modified": "2015-09-30T08:46:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dunplee.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba17d-d61c-47a8-9dfa-4908950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:53.000Z",
            "modified": "2015-09-30T08:46:53.000Z",
            "first_observed": "2015-09-30T08:46:53Z",
            "last_observed": "2015-09-30T08:46:53Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba17d-d61c-47a8-9dfa-4908950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba17d-d61c-47a8-9dfa-4908950d210b",
            "value": "https://www.virustotal.com/file/59ec03e214e983251a15280440bb90df330e78a45e4a0cdcb18ac737196c34ad/analysis/1438104359/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17d-f300-4538-99a8-451f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:53.000Z",
            "modified": "2015-09-30T08:46:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '26f3a5c743d84fb4ed56ab15df3c08db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17d-6608-4ff6-b1f7-4d4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:53.000Z",
            "modified": "2015-09-30T08:46:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01c6e6b40285890ac99fc0065ab6022a",
            "pattern": "[file:hashes.SHA256 = 'cf882ce31000b6c60e971207a612de1cb27685abb46e8737e9adc5db0859f3a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17d-f8d8-4977-b8cb-4460950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:53.000Z",
            "modified": "2015-09-30T08:46:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dx7943.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17d-72a0-4e9f-9585-4a98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:53.000Z",
            "modified": "2015-09-30T08:46:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01c6e6b40285890ac99fc0065ab6022a",
            "pattern": "[file:hashes.SHA1 = '5d2f35fb6a75be91c36940b993f418ed91db9aad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17d-0238-4784-80a0-49d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:53.000Z",
            "modified": "2015-09-30T08:46:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27067c4c56f00a7c3f76d1cafad15d9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba17e-5e94-4335-8901-4cf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "first_observed": "2015-09-30T08:46:54Z",
            "last_observed": "2015-09-30T08:46:54Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba17e-5e94-4335-8901-4cf4950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba17e-5e94-4335-8901-4cf4950d210b",
            "value": "https://www.virustotal.com/file/cf882ce31000b6c60e971207a612de1cb27685abb46e8737e9adc5db0859f3a1/analysis/1436735531/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17d-1aac-4cdd-929a-497d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:53.000Z",
            "modified": "2015-09-30T08:46:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dxdxdx.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17e-81a0-4446-a941-4ed9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01c5449f1ff2ea9f44165a1d436a9be5",
            "pattern": "[file:hashes.SHA256 = 'f7e3c421ee6410cfb66cea0071840ed06583b0bbb9db4271324fa57d73b73bd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17e-a7d0-412e-bb92-4535950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '270beba4ea811ce5e512a85441aa6f0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17e-b1f0-4911-ac04-4500950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01c5449f1ff2ea9f44165a1d436a9be5",
            "pattern": "[file:hashes.SHA1 = 'bc2b42a44f352e7c0d9db929beac67cf981989ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17e-74b4-484a-abd9-47a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dynamiccamviewer1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba17e-fd64-48b7-a774-45bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "first_observed": "2015-09-30T08:46:54Z",
            "last_observed": "2015-09-30T08:46:54Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba17e-fd64-48b7-a774-45bc950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba17e-fd64-48b7-a774-45bc950d210b",
            "value": "https://www.virustotal.com/file/f7e3c421ee6410cfb66cea0071840ed06583b0bbb9db4271324fa57d73b73bd6/analysis/1433704922/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17e-1eb0-4f21-b259-445e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2722916270831da68102d767967a4bc2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17e-cc9c-4dc3-a589-4cbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dyst0pia.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17e-0104-4bc8-80e8-476c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2736995d6dfa017bfa95bf9bf5d5f62b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17e-2740-4ba4-8be6-4487950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01b30a5d3ab696c341d8eb27701905d5",
            "pattern": "[file:hashes.SHA256 = '0c4e9d188f789b5de5e937380591c5abc3f1ee245ebd2cd386ff469427746fa2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17f-5818-4800-8104-41cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:55.000Z",
            "modified": "2015-09-30T08:46:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27374d824ef166726a6cedb32f09feab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17e-0104-4c4f-ae67-4075950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:54.000Z",
            "modified": "2015-09-30T08:46:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dyvdyvdyv.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17f-3fec-41f6-b1f0-464e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:55.000Z",
            "modified": "2015-09-30T08:46:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '274800422b5b2d30478873d18818682f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17f-9a14-4218-a886-425b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:55.000Z",
            "modified": "2015-09-30T08:46:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01b30a5d3ab696c341d8eb27701905d5",
            "pattern": "[file:hashes.SHA1 = '6b668d0137f1c729b52453482008bdab1deb5d49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17f-7da0-441a-a23c-4ee8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:55.000Z",
            "modified": "2015-09-30T08:46:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27574132a0c0d5f24b3e13dc16bbc764']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17f-e490-475f-ba42-4326950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:55.000Z",
            "modified": "2015-09-30T08:46:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dz0.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17f-e4a0-4aee-a529-4310950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:55.000Z",
            "modified": "2015-09-30T08:46:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27603a9f0196a67530798af6c67f8cb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba17f-90b4-4d22-8776-4889950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:55.000Z",
            "modified": "2015-09-30T08:46:55.000Z",
            "first_observed": "2015-09-30T08:46:55Z",
            "last_observed": "2015-09-30T08:46:55Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba17f-90b4-4d22-8776-4889950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba17f-90b4-4d22-8776-4889950d210b",
            "value": "https://www.virustotal.com/file/0c4e9d188f789b5de5e937380591c5abc3f1ee245ebd2cd386ff469427746fa2/analysis/1434966467/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17f-91b0-4fa4-aebe-4fbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:55.000Z",
            "modified": "2015-09-30T08:46:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2763387bac950b7b61dc421f85f92952']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba17f-ffa8-45d7-b1e4-48ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:55.000Z",
            "modified": "2015-09-30T08:46:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'dzgnersatyorcni.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba180-eac8-4901-b281-4507950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '276fb22a5f84f7dd265a1eb5765ea616']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba180-7078-45bf-972e-4ccf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 019b469a87e59a2fc58c2af53307d48d",
            "pattern": "[file:hashes.SHA256 = '7f5bb8934bd9ea997da14acb6abbbc836c4006c62503820c7f5268e8573a1818']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba180-e094-4480-a427-40ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2776c47be5049ca7e901333c9893a617']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba180-56e4-47bc-8649-47dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'e1337.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba180-3658-4139-8fee-4bf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '277d4d067dc5f5d470b3394a69e9cf0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba180-b2e8-49e0-8ee6-49ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 019b469a87e59a2fc58c2af53307d48d",
            "pattern": "[file:hashes.SHA1 = '0396a648497d0658b94ad1792628fcbbe49fd39d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba180-27d8-4037-b171-4fc2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '278f6e8b3c229a83eb151ee8d3be4c05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba180-9c3c-48e8-b028-458f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'easygames14.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba180-d32c-41f0-b501-4ed3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '279147b7ff8ea7086df197d7ef71a597']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba180-e560-4692-ba06-4d17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:56.000Z",
            "modified": "2015-09-30T08:46:56.000Z",
            "first_observed": "2015-09-30T08:46:56Z",
            "last_observed": "2015-09-30T08:46:56Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba180-e560-4692-ba06-4d17950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba180-e560-4692-ba06-4d17950d210b",
            "value": "https://www.virustotal.com/file/7f5bb8934bd9ea997da14acb6abbbc836c4006c62503820c7f5268e8573a1818/analysis/1439114627/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba181-7cf8-4d6e-8613-4fc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:57.000Z",
            "modified": "2015-09-30T08:46:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27924c6c99c65696ac3f5a23455610c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba181-c8b4-43ec-a48a-4535950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:57.000Z",
            "modified": "2015-09-30T08:46:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eckmac.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba181-6ab4-4521-bb8e-4858950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:57.000Z",
            "modified": "2015-09-30T08:46:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '279e5eb4d229ba165b0242a0c6fb2f57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba181-540c-4bd6-8e76-4e1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:57.000Z",
            "modified": "2015-09-30T08:46:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01998586ae27e0e04ca5c3301de66f66",
            "pattern": "[file:hashes.SHA256 = '330d0bc4642e2d8dca671eb50626b3208fa9784b75fdbcc8dde21a6627854582']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba181-e178-45ac-9334-49bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:57.000Z",
            "modified": "2015-09-30T08:46:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27a2555a53a3f43a98e2727bab3c774e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba181-1948-4081-b10b-40f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:57.000Z",
            "modified": "2015-09-30T08:46:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eclipsesquad.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba181-65a0-4f13-90ce-417f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:57.000Z",
            "modified": "2015-09-30T08:46:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27a777086d68904af4d26dbba5b9f8d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba181-1bc0-40dd-93be-4990950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:57.000Z",
            "modified": "2015-09-30T08:46:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01998586ae27e0e04ca5c3301de66f66",
            "pattern": "[file:hashes.SHA1 = 'bbcac05d19911d715e92815080dca3f895b391c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba182-cf14-457d-b0f3-47cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:58.000Z",
            "modified": "2015-09-30T08:46:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27a9378a823c245145dde8d628857c89']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba181-d9b8-4db7-b383-4d1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:57.000Z",
            "modified": "2015-09-30T08:46:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ecoddns.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba182-7700-4fa8-a3fe-44f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:58.000Z",
            "modified": "2015-09-30T08:46:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27adf9cb97e3ff7a1b06b129f306933e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba182-0f54-43ae-a8ee-49d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:58.000Z",
            "modified": "2015-09-30T08:46:58.000Z",
            "first_observed": "2015-09-30T08:46:58Z",
            "last_observed": "2015-09-30T08:46:58Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba182-0f54-43ae-a8ee-49d1950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba182-0f54-43ae-a8ee-49d1950d210b",
            "value": "https://www.virustotal.com/file/330d0bc4642e2d8dca671eb50626b3208fa9784b75fdbcc8dde21a6627854582/analysis/1434846883/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba182-b240-4a2f-be6b-4ccc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:58.000Z",
            "modified": "2015-09-30T08:46:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27af56508ad20ab6bd302ca6dbd333ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba182-e308-4903-869a-4051950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:58.000Z",
            "modified": "2015-09-30T08:46:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ediko14.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba182-ca38-4bc4-b73a-4c29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:58.000Z",
            "modified": "2015-09-30T08:46:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27b2cb39aab4dd6077766fc5320ceb98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba182-8228-4468-8cc3-487e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:58.000Z",
            "modified": "2015-09-30T08:46:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0191314d384d70304e62fc18c0d086a0",
            "pattern": "[file:hashes.SHA256 = 'b29ddff0315c56bf496d44be7cf4c52226e2bffbcdf36b92255190487623c7d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba182-ceac-4632-a577-4384950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:58.000Z",
            "modified": "2015-09-30T08:46:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27bb3f9ab21842ad917b8fb9d5734319']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba182-a4cc-40f6-b2b0-4c20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:58.000Z",
            "modified": "2015-09-30T08:46:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'edkupr.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba183-f890-436a-b455-42df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27c3e9ea8ec7ffa368c9abfba77b16af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba183-e930-4b5a-87a9-4cc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0191314d384d70304e62fc18c0d086a0",
            "pattern": "[file:hashes.SHA1 = 'aa6c6d8ac075c7f418166638993bc76eec060bc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba183-01dc-4521-8493-4453950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27c72ffb6271d30350e79d50577a91d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba183-bf30-49f9-8e23-4b0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eductead.serveblog.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba183-6d3c-44e8-acc8-4416950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27d880a4c4f606c9d70e524c5998ca8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba183-5ff0-4a23-b45b-495b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "first_observed": "2015-09-30T08:46:59Z",
            "last_observed": "2015-09-30T08:46:59Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba183-5ff0-4a23-b45b-495b950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba183-5ff0-4a23-b45b-495b950d210b",
            "value": "https://www.virustotal.com/file/b29ddff0315c56bf496d44be7cf4c52226e2bffbcdf36b92255190487623c7d6/analysis/1435700826/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba183-4820-49db-9e52-4d19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'efogle.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba183-f2e0-4704-8f4a-4812950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27de67b22c3784ff4b6389bd2fd11aa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-f414-4852-b92d-42cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '27f6a0ab6c78e7a8cf7fb5b1fda1506d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba183-234c-4561-9464-4b9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 018fa17a1752a7fe7e6a41df1c9b935e",
            "pattern": "[file:hashes.SHA256 = '0d609ba9b3c3d6e6fa918b93e38615db4aa8d0e9f31f4561e88538661d906fc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-fab8-4991-a4d8-4565950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:46:59.000Z",
            "modified": "2015-09-30T08:46:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'egghacks.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-6a84-4a5c-8654-4eb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:00.000Z",
            "modified": "2015-09-30T08:47:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2800132031b9efc1b747314a24cb1673']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-0e2c-4aed-b99a-4750950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:00.000Z",
            "modified": "2015-09-30T08:47:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2810eb50b0e3bda6243dc0c6fd660962']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-3bf8-4172-8918-42d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:00.000Z",
            "modified": "2015-09-30T08:47:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 018fa17a1752a7fe7e6a41df1c9b935e",
            "pattern": "[file:hashes.SHA1 = 'e77cc8ccfc876c14fac663f27d2660f68b93dc6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-0e2c-46f7-aff8-40cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:00.000Z",
            "modified": "2015-09-30T08:47:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eggswithtoast.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-3508-46cc-b7fe-4b42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:00.000Z",
            "modified": "2015-09-30T08:47:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28117c940c8dd6f76439ed89730600ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-af04-4cb2-8da0-45ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:00.000Z",
            "modified": "2015-09-30T08:47:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28131d9d42e2e83e392d63707e76f57b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba184-2b0c-4b98-951b-4347950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:00.000Z",
            "modified": "2015-09-30T08:47:00.000Z",
            "first_observed": "2015-09-30T08:47:00Z",
            "last_observed": "2015-09-30T08:47:00Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba184-2b0c-4b98-951b-4347950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba184-2b0c-4b98-951b-4347950d210b",
            "value": "https://www.virustotal.com/file/0d609ba9b3c3d6e6fa918b93e38615db4aa8d0e9f31f4561e88538661d906fc1/analysis/1430124434/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-9b18-42e7-8981-4055950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:00.000Z",
            "modified": "2015-09-30T08:47:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'egor1207012011.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba184-ac1c-4483-9e71-4d9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:00.000Z",
            "modified": "2015-09-30T08:47:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2831a406aa926d2bb02036ef2379d6c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba185-96dc-4ca6-986a-4bff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:01.000Z",
            "modified": "2015-09-30T08:47:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ehmednadirov.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba185-4a40-4b42-a0ba-4869950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:01.000Z",
            "modified": "2015-09-30T08:47:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01824e020c854826bedd9ebb09f7a5db",
            "pattern": "[file:hashes.SHA256 = '5df7fefee05bbb75e7f7bb7811d5759270e105eb2ca16a79974f6483374162ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba185-e0b0-42e9-b035-4b98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:01.000Z",
            "modified": "2015-09-30T08:47:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2834149ad9440c01c570f45b2c602639']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba185-e184-4ada-8b7b-487d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:01.000Z",
            "modified": "2015-09-30T08:47:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eighthisgod.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba185-f880-4d33-a3f7-454f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:01.000Z",
            "modified": "2015-09-30T08:47:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '283b2f9460cec90efa4610552b3ca61e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba185-5130-46bb-8ee8-40ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:01.000Z",
            "modified": "2015-09-30T08:47:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01824e020c854826bedd9ebb09f7a5db",
            "pattern": "[file:hashes.SHA1 = '4fc4f0f73c1d3ed8f7624674737e9b138524f98f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba185-fdf8-4692-8489-4dd1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:01.000Z",
            "modified": "2015-09-30T08:47:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'elasrag2015.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba185-8014-4d61-8363-434e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:01.000Z",
            "modified": "2015-09-30T08:47:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '283ee58ea6bcf40d71c9533ab3ac1509']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-4218-402d-8375-42a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'elazar123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba185-77f4-4419-a058-4c92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:01.000Z",
            "modified": "2015-09-30T08:47:01.000Z",
            "first_observed": "2015-09-30T08:47:01Z",
            "last_observed": "2015-09-30T08:47:01Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba185-77f4-4419-a058-4c92950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba185-77f4-4419-a058-4c92950d210b",
            "value": "https://www.virustotal.com/file/5df7fefee05bbb75e7f7bb7811d5759270e105eb2ca16a79974f6483374162ce/analysis/1435767095/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-5668-46c8-b483-4676950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '283f5a385af645e400a9a70118815296']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-2c60-4a08-9b61-42c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'elcapo1015.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-3b1c-4b66-8d4b-4822950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28413445a8889d2410c2de4eab6fe545']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-0358-4222-aff1-4186950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 017deecbb141e4c04f6ab839b596e199",
            "pattern": "[file:hashes.SHA256 = 'b17a177ec7a725db22d6fbd62ebbcd82db00d7d15a59b6018872806f337d8010']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-36d0-4607-bbbf-4b08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'elcapo2015.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-6dd4-40bd-aaf8-4c64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '284d53f4977e037a16b61fa581ff130f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-d0c8-4c51-a604-4328950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28506b0fc2371e56001f27ea3f700012']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-a714-441f-a020-4a1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 017deecbb141e4c04f6ab839b596e199",
            "pattern": "[file:hashes.SHA1 = '76694578cf19cf74bf2a21a4b90c4e74f12710d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba186-e644-400e-afb4-4b04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:02.000Z",
            "modified": "2015-09-30T08:47:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'electricscape.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-6aa0-4727-804a-45d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '285d428561e1f9b8608d8dcf414b2ff5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-6a38-42cb-a487-4341950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2863c3dfd348e11bbcd40c98af7e3a7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba187-a22c-4dfe-aa18-4949950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "first_observed": "2015-09-30T08:47:03Z",
            "last_observed": "2015-09-30T08:47:03Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba187-a22c-4dfe-aa18-4949950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba187-a22c-4dfe-aa18-4949950d210b",
            "value": "https://www.virustotal.com/file/b17a177ec7a725db22d6fbd62ebbcd82db00d7d15a59b6018872806f337d8010/analysis/1434466019/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-6f4c-4325-8ac1-480d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'elfinity.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-fc88-4231-9602-4534950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2879e506a972e86ed0911ade35714c08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-d688-48b2-bf44-4709950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '287b82357a1a9e3d67674d124a1f2f77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-3a60-46c5-82c1-48d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 017d9a9e557ce49bdcace57bbd89b8ab",
            "pattern": "[file:hashes.SHA256 = '4aab2736a00e6aa27f4c05960416175d2b0f2217e09be786573ac9caf7e5c921']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-d688-42ba-8dc5-4843950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'elgunhost1997.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-dd40-483d-9f02-4477950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28802dd22d4647db604df09cb783f0e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-c224-4ce6-bdf5-4b6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eliadz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-a01c-4bdf-9e23-47d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 017d9a9e557ce49bdcace57bbd89b8ab",
            "pattern": "[file:hashes.SHA1 = '472d83b94fbd88354854f7cfa9cf82946ac46086']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba187-c224-44dc-a2e6-40b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:03.000Z",
            "modified": "2015-09-30T08:47:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2886ec3ebadc29b9dd9237a6385742f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba188-1bec-49e3-b6c9-401e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:04.000Z",
            "modified": "2015-09-30T08:47:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'elite667.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba188-a2a8-4067-aa68-4912950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:04.000Z",
            "modified": "2015-09-30T08:47:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'elrayan0.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba188-6184-4064-81a7-4df4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:04.000Z",
            "modified": "2015-09-30T08:47:04.000Z",
            "first_observed": "2015-09-30T08:47:04Z",
            "last_observed": "2015-09-30T08:47:04Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba188-6184-4064-81a7-4df4950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba188-6184-4064-81a7-4df4950d210b",
            "value": "https://www.virustotal.com/file/4aab2736a00e6aa27f4c05960416175d2b0f2217e09be786573ac9caf7e5c921/analysis/1434483872/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba188-7cc4-45ef-810b-4f38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:04.000Z",
            "modified": "2015-09-30T08:47:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28970fa17f21b96fe5ec9f3bb83786d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba188-b704-480c-b7b5-4048950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:04.000Z",
            "modified": "2015-09-30T08:47:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'emacay.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba188-ddb0-4f7a-beee-4338950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:04.000Z",
            "modified": "2015-09-30T08:47:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '289d11d20649bed9ac80058f9700d8d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba188-bf18-4196-915e-4f40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:04.000Z",
            "modified": "2015-09-30T08:47:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01518f007494a62d95a65fb004fbb584",
            "pattern": "[file:hashes.SHA256 = '8220ac89ac519432c2df82423a32ad93f0b55c1ecf4348d7a6c5d27c09c57112']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba188-ac44-42bc-a56a-4718950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:04.000Z",
            "modified": "2015-09-30T08:47:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '289df68a22f3bf99763c92f35190764d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba188-8694-4764-86ba-4b46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:04.000Z",
            "modified": "2015-09-30T08:47:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'emcan34.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-f84c-4e50-b46c-482a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'emela123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-6af0-4e41-adb4-4eec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01518f007494a62d95a65fb004fbb584",
            "pattern": "[file:hashes.SHA1 = 'f8d421635f0c508d837afba1c7ea669ad7f37874']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-87bc-45a7-891e-495a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'emirhan.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-5bb8-4648-b3a7-49a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '289e87eefe7ae7f97786028576972d35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-8fdc-4b8f-9af0-4dd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28be313659adc4f5a342ae41ad7fd36a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba189-8c70-4467-ae78-46a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "first_observed": "2015-09-30T08:47:05Z",
            "last_observed": "2015-09-30T08:47:05Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba189-8c70-4467-ae78-46a5950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba189-8c70-4467-ae78-46a5950d210b",
            "value": "https://www.virustotal.com/file/8220ac89ac519432c2df82423a32ad93f0b55c1ecf4348d7a6c5d27c09c57112/analysis/1432911136/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-a814-46a0-bf28-406c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'emirhanss.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-d538-47b4-8880-4cb6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28c4140bffded61b6deb1a485054fd19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-103c-4c72-887b-4447950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28d6a8b5aec70067195f479a8507de78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-fe1c-4ade-9e18-4a09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 014ea65e97e19856a1e99664b01691eb",
            "pattern": "[file:hashes.SHA256 = '67591a4a2a923382eecc9a728ffa4332390c881321489cbff34a00f3b2628135']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba189-e7a4-49f2-9ac3-4200950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:05.000Z",
            "modified": "2015-09-30T08:47:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'emobey.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18a-1894-48d4-98b7-441b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:06.000Z",
            "modified": "2015-09-30T08:47:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28dfdc648b16906b4280565cb8d9e7bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18a-7088-4b79-a8e1-45c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:06.000Z",
            "modified": "2015-09-30T08:47:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'emporiogunz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18a-208c-4b10-a44a-41c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:06.000Z",
            "modified": "2015-09-30T08:47:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 014ea65e97e19856a1e99664b01691eb",
            "pattern": "[file:hashes.SHA1 = 'db8eccb857300dbed0ab58818a2858a88bd3dee6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18a-9040-452d-b661-46ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:06.000Z",
            "modified": "2015-09-30T08:47:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'emrecankaya.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18a-f274-4622-b537-49c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:06.000Z",
            "modified": "2015-09-30T08:47:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28e99cca94b93e88d42d5fb72a02f88e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18a-4894-43eb-a889-4b4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:06.000Z",
            "modified": "2015-09-30T08:47:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28f2756bae2b4527bf6fdb83a07b1328']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba18a-45f0-4f80-b865-4d4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:06.000Z",
            "modified": "2015-09-30T08:47:06.000Z",
            "first_observed": "2015-09-30T08:47:06Z",
            "last_observed": "2015-09-30T08:47:06Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba18a-45f0-4f80-b865-4d4a950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba18a-45f0-4f80-b865-4d4a950d210b",
            "value": "https://www.virustotal.com/file/67591a4a2a923382eecc9a728ffa4332390c881321489cbff34a00f3b2628135/analysis/1436899448/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18a-4894-4d64-9cee-4ef0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:06.000Z",
            "modified": "2015-09-30T08:47:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'engin.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18a-4690-446f-a25a-444b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:06.000Z",
            "modified": "2015-09-30T08:47:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28f68a92a51a5c9cb1d063b97bdf4367']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18b-63a4-49f6-b411-4a2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:07.000Z",
            "modified": "2015-09-30T08:47:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'engrade181455.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18b-c074-4fcf-88d3-48fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:07.000Z",
            "modified": "2015-09-30T08:47:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 014d520022b34ca6bf1b2bcddad0e1ab",
            "pattern": "[file:hashes.SHA256 = '3acaf91b767d4f4217262c866f068572ad73d6c0c8086ca98122f57004d1ebe9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18b-821c-4066-925c-4511950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:07.000Z",
            "modified": "2015-09-30T08:47:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '28faec65ebccab352382345005395b04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18b-61d8-4dc1-9b40-486c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:07.000Z",
            "modified": "2015-09-30T08:47:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'enix.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18b-1e30-48d1-b59e-4933950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:07.000Z",
            "modified": "2015-09-30T08:47:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '29110ffb126929207b823f53ae5978f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18b-04ac-45f0-bb6b-465b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:07.000Z",
            "modified": "2015-09-30T08:47:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 014d520022b34ca6bf1b2bcddad0e1ab",
            "pattern": "[file:hashes.SHA1 = '44b79a2b2b7de13d03be2d32b6d7f2f6fb9bafb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18b-2c4c-4791-80af-4576950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:07.000Z",
            "modified": "2015-09-30T08:47:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '291ed5b9a12df98e04490b19e4a33fed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18b-fa28-4afd-86a9-4e4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:07.000Z",
            "modified": "2015-09-30T08:47:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'enny.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-fbb4-466d-b9a8-451e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '292c99ecf9d2568c429eb9abba375163']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba18b-0e04-4217-870c-4544950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:07.000Z",
            "modified": "2015-09-30T08:47:07.000Z",
            "first_observed": "2015-09-30T08:47:07Z",
            "last_observed": "2015-09-30T08:47:07Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba18b-0e04-4217-870c-4544950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba18b-0e04-4217-870c-4544950d210b",
            "value": "https://www.virustotal.com/file/3acaf91b767d4f4217262c866f068572ad73d6c0c8086ca98122f57004d1ebe9/analysis/1432997639/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-55b0-49d1-b196-472e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ennylol.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-7e00-4d7e-afbd-4ca7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '293062cf85f37bffea9219b11327a83c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-c92c-4c8b-be14-463c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'enskrts98.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-7524-40b1-a45c-4261950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 013889384b5a7037ff28465f8f9eedf9",
            "pattern": "[file:hashes.SHA256 = '3bd1980633a9ed8c574051bab37e56dd290404c4945bea823cf2affac18b3b38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-c92c-4a42-8e98-4d05950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '293151a6722fceef71c2aafb79532d20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-1914-4c1c-8a30-4d66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'enzy.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-ce08-4fe3-a672-4a87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'erferwtgwetgwe.serveblog.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-aab8-44b3-8a97-46bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 013889384b5a7037ff28465f8f9eedf9",
            "pattern": "[file:hashes.SHA1 = '009ca85158014436cbed12fc6b24becab102a55c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18c-4e30-4f6d-ac27-4736950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:08.000Z",
            "modified": "2015-09-30T08:47:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2933ec056667c612cade9823a9a398e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18d-6ca4-4170-97c6-4abc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ericman.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18d-e54c-4357-9dd9-4420950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ericriley18.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba18d-b170-4a9e-a469-47ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "first_observed": "2015-09-30T08:47:09Z",
            "last_observed": "2015-09-30T08:47:09Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba18d-b170-4a9e-a469-47ec950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba18d-b170-4a9e-a469-47ec950d210b",
            "value": "https://www.virustotal.com/file/3bd1980633a9ed8c574051bab37e56dd290404c4945bea823cf2affac18b3b38/analysis/1437455466/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18d-eb28-4867-a356-46cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '29518dd4e83fc06289ed8d36114360c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18d-f580-4dbd-8115-48ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'erkanss.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18d-faac-4e4e-a7b0-45a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '295592ad2ef01d7fd6812cdb9ab2a3fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18d-8214-4321-88e9-4511950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 012878f4948a71756e1c053a3e3658e8",
            "pattern": "[file:hashes.SHA256 = '22c92a1232fca59413092b487586f3446987c6ff686134ea218baf70bd6f6720']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18d-b958-40a9-97ba-474f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'error-404.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18d-4a44-45ac-8153-427c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '295be4649f83222bca817be3f9d76d85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18e-4384-41dc-a2c4-4bf0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '296a15d0a2ac0fb26b6c90d8fec92be7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18d-cb8c-45f7-9998-4cdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:09.000Z",
            "modified": "2015-09-30T08:47:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 012878f4948a71756e1c053a3e3658e8",
            "pattern": "[file:hashes.SHA1 = '36cb6199068841abfe533992ea633995971836a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18e-5450-482e-a6bd-40d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eryewj43.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18e-3b78-4f2b-8b74-414a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2979109b940abec0b51ba7d1ba891a64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18e-6270-4d00-a07b-48f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'esatbabboss.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba18e-67b0-4da2-a1f6-4928950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "first_observed": "2015-09-30T08:47:10Z",
            "last_observed": "2015-09-30T08:47:10Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba18e-67b0-4da2-a1f6-4928950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba18e-67b0-4da2-a1f6-4928950d210b",
            "value": "https://www.virustotal.com/file/22c92a1232fca59413092b487586f3446987c6ff686134ea218baf70bd6f6720/analysis/1432830259/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18e-19b8-4eac-b219-4c51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '297b80cf6d0d7d7c333b7140dcf8a3c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18e-bf6c-4bc7-83cf-4df7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'escarpindeluxe.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18e-30a0-405e-91e5-4f48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'esdf.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18e-f894-4f97-aff9-45e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 011de387d0fa15e918e928f8a49cfdde",
            "pattern": "[file:hashes.SHA256 = '28ae2acf6372c7dd5c0d2906154ec346a02650f6d7df73e0a0c6dcad3f3262df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18e-4360-496c-bad6-44a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:10.000Z",
            "modified": "2015-09-30T08:47:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '297e640b4939a0aa3d5957aa8e857938']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18f-d034-484a-b96d-46fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'espiocis.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18f-dc98-4a25-b2fd-4071950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2982b48640efc216db9372187d5dac01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18f-e960-4037-b234-4646950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 011de387d0fa15e918e928f8a49cfdde",
            "pattern": "[file:hashes.SHA1 = '156fcb267adf50612b0396ca9c5b7983d29f30a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18f-82b4-41c2-8482-4c4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '29a39076e47ca353e91a4e4cedfce1e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18f-0a18-45a8-9af5-4dd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'esref.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18f-5034-4ea2-ac29-4e2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '29ba454f4c348d073005d82429d5f355']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba18f-9fa0-4a83-a4df-4ca0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "first_observed": "2015-09-30T08:47:11Z",
            "last_observed": "2015-09-30T08:47:11Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba18f-9fa0-4a83-a4df-4ca0950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba18f-9fa0-4a83-a4df-4ca0950d210b",
            "value": "https://www.virustotal.com/file/28ae2acf6372c7dd5c0d2906154ec346a02650f6d7df73e0a0c6dcad3f3262df/analysis/1433181276/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18f-0e9c-44b6-8a5c-4ffc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '29c0c3ec32045870e2c05ba16a9fb147']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18f-c92c-4468-a7d1-4948950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eu3.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba190-cf1c-4d06-bbb5-4502950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:12.000Z",
            "modified": "2015-09-30T08:47:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '29da2b5e384185e89e6d119d575a2f69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba18f-5318-4b6c-a0e3-4f30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:11.000Z",
            "modified": "2015-09-30T08:47:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01112a0eeebe0d20a9a75fa97c96588e",
            "pattern": "[file:hashes.SHA256 = '341af256934777a3943e042ea65e4b078aadcf6e0703a5a72c31641b9eef1eff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba190-ffb8-4dcd-a8ac-43e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:12.000Z",
            "modified": "2015-09-30T08:47:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '29f95e895d644f5a3924fe291a4c1eba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba190-b250-4b1f-9a07-4e89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:12.000Z",
            "modified": "2015-09-30T08:47:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'evelynbarton.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba190-1aa0-4e01-b851-4233950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:12.000Z",
            "modified": "2015-09-30T08:47:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a0a8bc95278390a0240ed73f6e3ef14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba190-67d0-4f13-b43d-4e2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:12.000Z",
            "modified": "2015-09-30T08:47:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 01112a0eeebe0d20a9a75fa97c96588e",
            "pattern": "[file:hashes.SHA1 = '4634176b004247e44b2cb77c64aed7c912b605e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba190-ba68-46ef-baef-4fc3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:12.000Z",
            "modified": "2015-09-30T08:47:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a0ca2a07072154de9854163ce3e6962']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba190-8c44-4f60-b53a-4b09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:12.000Z",
            "modified": "2015-09-30T08:47:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'everhost.servecounterstrike.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba190-b88c-4e5b-9bd2-47e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:12.000Z",
            "modified": "2015-09-30T08:47:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a1d715ad7aa826416e52623208df938']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba190-7870-46da-a54a-45cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:12.000Z",
            "modified": "2015-09-30T08:47:12.000Z",
            "first_observed": "2015-09-30T08:47:12Z",
            "last_observed": "2015-09-30T08:47:12Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba190-7870-46da-a54a-45cc950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba190-7870-46da-a54a-45cc950d210b",
            "value": "https://www.virustotal.com/file/341af256934777a3943e042ea65e4b078aadcf6e0703a5a72c31641b9eef1eff/analysis/1436992716/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-4dc0-4491-9d12-4d49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a234a1b35bc01d0d316c7d1cfe019be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-2f18-46e3-a901-41d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'evilunion.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-da50-42e1-85da-47f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a295ac477d638e3b50e1de4198b300b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-33b8-4c6d-9972-42d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 011107487b3a2b02086d91b918f136db",
            "pattern": "[file:hashes.SHA256 = '603cd809687e937053cb252496d29d9d7a2dfc1ddf4ec20ee2d6432626a15347']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-dc48-492a-8baf-463c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a297b6554d4a7ab6aecfb8a4186f29e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-dd8c-426a-a8c2-4a86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'evilx.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-d940-40bb-b0e4-4842950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a29f75c751b9e83b1bd2c911021bf01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-6a44-477d-ad28-4511950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 011107487b3a2b02086d91b918f136db",
            "pattern": "[file:hashes.SHA1 = '4f0fd58d40cda206d699a89d437472f431584291']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-c6cc-431f-bb58-4f2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a2b6c6df47c7905d818e9654ee3e26d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba191-e790-45ab-b313-410f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:13.000Z",
            "modified": "2015-09-30T08:47:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'evinmartin.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba192-81a4-40bb-976f-4bb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:14.000Z",
            "modified": "2015-09-30T08:47:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a34437f883985d5bab75cf5250e3238']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba192-b358-426b-8e35-439b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:14.000Z",
            "modified": "2015-09-30T08:47:14.000Z",
            "first_observed": "2015-09-30T08:47:14Z",
            "last_observed": "2015-09-30T08:47:14Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba192-b358-426b-8e35-439b950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba192-b358-426b-8e35-439b950d210b",
            "value": "https://www.virustotal.com/file/603cd809687e937053cb252496d29d9d7a2dfc1ddf4ec20ee2d6432626a15347/analysis/1438102984/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba192-b108-4c10-90d8-4e85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:14.000Z",
            "modified": "2015-09-30T08:47:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a345083fa39e7361a1db158bbb28393']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba192-5bb0-4c10-bd07-4222950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:14.000Z",
            "modified": "2015-09-30T08:47:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'evinmartin1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba192-f4d0-42dc-9fb5-418d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:14.000Z",
            "modified": "2015-09-30T08:47:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a45c07b953132b18a9894e8e9c18849']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba192-dca8-4013-9c4f-413b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:14.000Z",
            "modified": "2015-09-30T08:47:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 010ccbc06bcdff93b073dd8091072f9e",
            "pattern": "[file:hashes.SHA256 = '660444aa75c538152184e9e70ab2d51bd69e708754bf4bc81542acc783e9e8de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba192-5784-4584-8c66-4096950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:14.000Z",
            "modified": "2015-09-30T08:47:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a5c918c31c993b6f653e14af02db622']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba192-2ed8-4c01-99da-4719950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:14.000Z",
            "modified": "2015-09-30T08:47:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'evinmartin2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba193-02fc-4f94-afaa-4c6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a6709804de244b36a3723f0b2632ce1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba192-b8f8-45cf-b7ca-4f2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:14.000Z",
            "modified": "2015-09-30T08:47:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 010ccbc06bcdff93b073dd8091072f9e",
            "pattern": "[file:hashes.SHA1 = '68d50dd77bce06ce01b58f486360698906427227']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba193-91b8-43fc-94d7-436b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a6a8dcb4531250666456a1d2a8dd841']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba193-ed78-4736-b94d-4b27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'exceem.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba193-09a0-4b05-a8f5-4b88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a730650e66208f163c3210b6005de8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba193-8bf0-41cf-8ff6-4a45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "first_observed": "2015-09-30T08:47:15Z",
            "last_observed": "2015-09-30T08:47:15Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba193-8bf0-41cf-8ff6-4a45950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba193-8bf0-41cf-8ff6-4a45950d210b",
            "value": "https://www.virustotal.com/file/660444aa75c538152184e9e70ab2d51bd69e708754bf4bc81542acc783e9e8de/analysis/1432653836/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba193-b840-4d0e-aaaf-4fd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a7f2c28363f7ea0ee6f98f5f7d2f105']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba193-6284-4671-89fa-4b46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'excesses55.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba193-3914-45cd-a8ca-4ae9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a836a8cf336d2105a0cfbc976ea337f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba193-e8d0-457f-be0f-4d3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0101c892d6c7678ffb313c3ebeda0cd6",
            "pattern": "[file:hashes.SHA256 = '109258922ea2c39d8b13f98fe9ec7b9e1aecee5c93dfe03f9ebebd36316d9402']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba194-c1b4-4adf-8c33-4b9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:16.000Z",
            "modified": "2015-09-30T08:47:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a94cf2d932688fd871d485c5eb5ada3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba193-827c-4233-bd9d-472b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:15.000Z",
            "modified": "2015-09-30T08:47:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'exocity.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba194-9458-453d-8fb2-4877950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:16.000Z",
            "modified": "2015-09-30T08:47:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2a9863202e5967e3c07c7a5c3c27eefe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba194-cc28-41c7-a923-4795950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:16.000Z",
            "modified": "2015-09-30T08:47:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0101c892d6c7678ffb313c3ebeda0cd6",
            "pattern": "[file:hashes.SHA1 = 'fecfdbe43fd1d2191a8253c6cdf79319860ce6a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba194-61dc-4cc2-a917-4173950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:16.000Z",
            "modified": "2015-09-30T08:47:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2aabc993d71ea46db2a58c58aa799094']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba194-65ac-4c87-95b3-43a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:16.000Z",
            "modified": "2015-09-30T08:47:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'experthostlist.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba194-1d74-458b-b6be-40d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:16.000Z",
            "modified": "2015-09-30T08:47:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ab36e5fdf2c56cf898ab832749cdae1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba194-21bc-49c0-b3fb-4e65950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:16.000Z",
            "modified": "2015-09-30T08:47:16.000Z",
            "first_observed": "2015-09-30T08:47:16Z",
            "last_observed": "2015-09-30T08:47:16Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba194-21bc-49c0-b3fb-4e65950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba194-21bc-49c0-b3fb-4e65950d210b",
            "value": "https://www.virustotal.com/file/109258922ea2c39d8b13f98fe9ec7b9e1aecee5c93dfe03f9ebebd36316d9402/analysis/1434581175/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba194-31ec-42cd-9906-47f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:16.000Z",
            "modified": "2015-09-30T08:47:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2abb43ee90cd2d27878a5e4735eecae3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba194-b19c-4198-8ac9-44f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:16.000Z",
            "modified": "2015-09-30T08:47:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'exploitports.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba195-e59c-4b09-8ef2-4c98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2abfaac963d5dce6477c2d95df9f9739']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba195-0a24-43c4-8be7-48c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00e5c245e863f92b16476d28c99f5e7b",
            "pattern": "[file:hashes.SHA256 = 'cf839661b96ab10e5da1b75afcb65235f0d71d460ad5285e063d7f045f384c1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba195-b54c-4902-b809-44aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ac63861156524a062330ee0fc83dd2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba195-ae1c-4bbd-b037-48a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'extrakter.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba195-f9e8-4be9-9ce9-48c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ac6388a194e2fd520373c78f0599c36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba195-7998-407f-9afc-4f0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00e5c245e863f92b16476d28c99f5e7b",
            "pattern": "[file:hashes.SHA1 = '3ed93c8a74d94531e2dec92a53d162dac5ef97f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba195-3b0c-4da9-be9b-4635950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2acf2a4a4a294a8d427fbd4f8602ba01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba195-42ec-4b97-9280-414f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eyesamongus.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba195-0bc4-478d-ada1-40bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ad978dec0b17afe7d56db9b48101f93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba195-878c-45b9-a389-4cfa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:17.000Z",
            "modified": "2015-09-30T08:47:17.000Z",
            "first_observed": "2015-09-30T08:47:17Z",
            "last_observed": "2015-09-30T08:47:17Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba195-878c-45b9-a389-4cfa950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba195-878c-45b9-a389-4cfa950d210b",
            "value": "https://www.virustotal.com/file/cf839661b96ab10e5da1b75afcb65235f0d71d460ad5285e063d7f045f384c1b/analysis/1436365364/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba196-1808-41b6-82af-458c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:18.000Z",
            "modified": "2015-09-30T08:47:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ae958268c7421eb1b94368dac055dcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba196-95e0-47f6-9fc9-4a98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:18.000Z",
            "modified": "2015-09-30T08:47:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'eyilmazz.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba196-ba98-43b8-9860-41d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:18.000Z",
            "modified": "2015-09-30T08:47:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ae9b442a96090c4b76d6b629b4fca19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba196-4b78-4f7b-864c-4a5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:18.000Z",
            "modified": "2015-09-30T08:47:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00d7f67ed122fe9e4da0d38b137ce1ba",
            "pattern": "[file:hashes.SHA256 = '8442065b95d59dedff26bd44db79d197c63b1cbb8a9684ff17732990de3fa4a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba196-3d14-4223-ad2e-49c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:18.000Z",
            "modified": "2015-09-30T08:47:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b02d9cfd03851b0f33b3504d894b4bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba196-2044-46aa-9b3e-4a35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:18.000Z",
            "modified": "2015-09-30T08:47:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ezate698.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba196-c478-4caa-8f8d-41a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:18.000Z",
            "modified": "2015-09-30T08:47:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b05d17fe6de2c852a9dc28dd619779e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba196-7434-46d9-bc3f-4303950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:18.000Z",
            "modified": "2015-09-30T08:47:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00d7f67ed122fe9e4da0d38b137ce1ba",
            "pattern": "[file:hashes.SHA1 = '66e9f3936cb15ca596c17d5a653e5d87975d32b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba196-1bd4-4a91-a0ae-4a7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:18.000Z",
            "modified": "2015-09-30T08:47:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ezgame.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba197-befc-4fe0-8754-4e24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'f15t56bv6gb4914.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba197-99c8-42d1-8a08-4c42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b069c1b50e28ab21d6b204b9d16dc74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba197-76d8-434a-bc57-4d00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'f56.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba197-5b20-4259-a23e-4426950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "first_observed": "2015-09-30T08:47:19Z",
            "last_observed": "2015-09-30T08:47:19Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba197-5b20-4259-a23e-4426950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba197-5b20-4259-a23e-4426950d210b",
            "value": "https://www.virustotal.com/file/8442065b95d59dedff26bd44db79d197c63b1cbb8a9684ff17732990de3fa4a7/analysis/1434448899/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba197-4918-4afe-b59e-45a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00bba76e0a5d347b7d288dcaa43fd854",
            "pattern": "[file:hashes.SHA256 = '47a61d375c0cb7b522951efebaf7c1d582a07bca1777d3e8a9519a2f6c735c51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba197-6280-475c-a61c-4b76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b0959649b85df2c89815e4e854021ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba197-fe8c-460b-8372-4ea6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'faacebok32.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba197-e2a8-4a38-8a99-4d26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00bba76e0a5d347b7d288dcaa43fd854",
            "pattern": "[file:hashes.SHA1 = '0a0de76b22b897527f847ebbfc692ea8d91655c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba197-5b34-43f8-b969-4893950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'facebook-dz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba197-9204-45d9-a080-43a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b11e762807d9f20604a50436b2b5fa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba197-10fc-425f-8160-4ee7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:19.000Z",
            "modified": "2015-09-30T08:47:19.000Z",
            "first_observed": "2015-09-30T08:47:19Z",
            "last_observed": "2015-09-30T08:47:19Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba197-10fc-425f-8160-4ee7950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba197-10fc-425f-8160-4ee7950d210b",
            "value": "https://www.virustotal.com/file/47a61d375c0cb7b522951efebaf7c1d582a07bca1777d3e8a9519a2f6c735c51/analysis/1434475585/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba198-9940-4092-8280-4638950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:20.000Z",
            "modified": "2015-09-30T08:47:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'facebook20155.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba198-ba54-4bef-8ccc-4d6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:20.000Z",
            "modified": "2015-09-30T08:47:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'facebook236.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba198-dc04-4bb0-9de9-4884950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:20.000Z",
            "modified": "2015-09-30T08:47:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b2828206ee2ff796c3b6e5ffdc80c26']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba198-8928-46b2-a39e-4f69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:20.000Z",
            "modified": "2015-09-30T08:47:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'facebookcenter.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba198-3d04-46ca-998c-4b5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:20.000Z",
            "modified": "2015-09-30T08:47:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00b94aec1dcadd52c7232f5783575083",
            "pattern": "[file:hashes.SHA256 = '8dd693b7576e0008533716c620a50362da9e203d32997e02a2373d8c90b618c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba198-c460-4457-9441-4ea8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:20.000Z",
            "modified": "2015-09-30T08:47:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fackt.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba198-dd78-43e0-90e3-42bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:20.000Z",
            "modified": "2015-09-30T08:47:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b2fc92e1c49bca008727518a939dbdc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba198-d3f0-4906-9613-458e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:20.000Z",
            "modified": "2015-09-30T08:47:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fadidijok.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba198-8518-49a1-8310-4d60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:20.000Z",
            "modified": "2015-09-30T08:47:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00b94aec1dcadd52c7232f5783575083",
            "pattern": "[file:hashes.SHA1 = 'b95534d2a9f964d3769b8c51b3a93dac66592179']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba199-2ce0-4e1f-b8d0-450c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "first_observed": "2015-09-30T08:47:21Z",
            "last_observed": "2015-09-30T08:47:21Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba199-2ce0-4e1f-b8d0-450c950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba199-2ce0-4e1f-b8d0-450c950d210b",
            "value": "https://www.virustotal.com/file/8dd693b7576e0008533716c620a50362da9e203d32997e02a2373d8c90b618c4/analysis/1434558672/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba199-ff20-4c5d-9b21-4cc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b3e9b3b6691073b97e8b60ffd2656ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba199-40e4-4911-bbca-4f7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00b53279725d357d9ba7dc466e3eb915",
            "pattern": "[file:hashes.SHA256 = '9dd37ece26cb59d4cd9167e50d0b55df78790b7b73a91eeb724d840c91ebd5ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba199-c134-4cde-88f5-499e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fahmichbn07.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba199-5d84-472a-afb5-459c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00b53279725d357d9ba7dc466e3eb915",
            "pattern": "[file:hashes.SHA1 = 'b7aaa4fbd670b6306d21fde7012d22dc3417a8da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba199-3880-49e7-b3af-43b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b441dbe47da7e5c3a33afd17998508d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba199-14dc-4e2e-805c-4f35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fajitas.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba199-b80c-4ca2-bea2-4f85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "first_observed": "2015-09-30T08:47:21Z",
            "last_observed": "2015-09-30T08:47:21Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba199-b80c-4ca2-bea2-4f85950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba199-b80c-4ca2-bea2-4f85950d210b",
            "value": "https://www.virustotal.com/file/9dd37ece26cb59d4cd9167e50d0b55df78790b7b73a91eeb724d840c91ebd5ba/analysis/1434590470/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba199-7324-4d06-b166-453a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'falconisthebest.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba199-061c-4a24-bcbb-499c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b47c774cc68033dd1b78fdf9df51bfe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba199-1e98-498a-982f-4f23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:21.000Z",
            "modified": "2015-09-30T08:47:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00af39b462c2f465725866dc7cea198e",
            "pattern": "[file:hashes.SHA256 = '13c87ec5cdd4bde216f82669472b2a079ed5145a3b09527b57fb0a1b76b6bb62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19a-5328-4e8a-8bbd-4cc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:22.000Z",
            "modified": "2015-09-30T08:47:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'falker00007.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19a-0670-45f8-a9a8-4452950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:22.000Z",
            "modified": "2015-09-30T08:47:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00af39b462c2f465725866dc7cea198e",
            "pattern": "[file:hashes.SHA1 = '868f6ed44da9171317e69649d3d4624e5578074f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19a-d1d4-46b0-a988-441e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:22.000Z",
            "modified": "2015-09-30T08:47:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b4f4ff9685719782fe2f6e19d089a52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba19a-c438-4961-bfde-4d31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:22.000Z",
            "modified": "2015-09-30T08:47:22.000Z",
            "first_observed": "2015-09-30T08:47:22Z",
            "last_observed": "2015-09-30T08:47:22Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba19a-c438-4961-bfde-4d31950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba19a-c438-4961-bfde-4d31950d210b",
            "value": "https://www.virustotal.com/file/13c87ec5cdd4bde216f82669472b2a079ed5145a3b09527b57fb0a1b76b6bb62/analysis/1435008555/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19a-fd2c-404c-b0bf-4dbb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:22.000Z",
            "modified": "2015-09-30T08:47:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'falkeuro.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19a-e8a4-43db-9e1e-4ee6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:22.000Z",
            "modified": "2015-09-30T08:47:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'familiafcku.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19a-6a10-42b4-a35e-4633950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:22.000Z",
            "modified": "2015-09-30T08:47:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b5094016c78be817be17e18a82a8ade']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19a-0410-4f19-819a-4285950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:22.000Z",
            "modified": "2015-09-30T08:47:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fanahacked.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19a-258c-4c77-8082-44a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:22.000Z",
            "modified": "2015-09-30T08:47:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00a71af4255736fe9d4cc33bac8132cf",
            "pattern": "[file:hashes.SHA256 = 'ce61b7d73e7fc3a129956963f5df6a0a514dd5c00703c110721942eaf3d45f5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19b-ee98-4920-8edf-4b2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fanasko.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19b-59b8-4b79-b468-4853950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b54ddfafeca39f43373198feca33806']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19b-5310-4d86-b338-4830950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fantastics.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19b-a5f0-41ea-85e8-4e26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00a71af4255736fe9d4cc33bac8132cf",
            "pattern": "[file:hashes.SHA1 = '4613efc891789a2230a5ba39486a8f6577931921']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19b-8e34-4b36-a29a-4710950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fantom0pera.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19b-81c4-49e7-add1-4b21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b571109f4f3aceee44995dc5a6cdab4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19b-5eec-4193-9e4f-4510950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fast.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba19b-8ff4-4034-a548-4a22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "first_observed": "2015-09-30T08:47:23Z",
            "last_observed": "2015-09-30T08:47:23Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba19b-8ff4-4034-a548-4a22950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba19b-8ff4-4034-a548-4a22950d210b",
            "value": "https://www.virustotal.com/file/ce61b7d73e7fc3a129956963f5df6a0a514dd5c00703c110721942eaf3d45f5c/analysis/1434025696/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19b-78b8-4e1a-af0e-4edb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fastkeylogger.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19b-cc3c-4dd1-9578-4c76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:23.000Z",
            "modified": "2015-09-30T08:47:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b5f21f69e1c90bd6c3aea7d42cdce62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-b1e4-4e3b-8ecd-43f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b612d46c7f0a041595f4477edb07299']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-3c20-484f-bd27-4202950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00a36d295770705cb28d218a44dac18b",
            "pattern": "[file:hashes.SHA256 = '1393d42f227f3210ba47fdc9d9c306d86ad9cb6c08732f9df6f2f0afbb7ae7e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-95c4-4397-ad3a-4709950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fastmusic.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-3a84-426f-881c-4a3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b785bef3dd0b9eb05047a0f7591336f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-f2e0-424d-898e-4614950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b8135ea7ec0695591a5c45c75574026']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-b66c-442f-8dda-4e69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00a36d295770705cb28d218a44dac18b",
            "pattern": "[file:hashes.SHA1 = '6c5e22b4a678b2556fb9a9849d1d1c00203649e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-c270-468d-b438-423a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fataltez.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-6418-4a1a-a697-41db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b841b99e28b6524bad5ba0f4f6fb9bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-78ec-492c-ae5c-48fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b858fd88e66bcdff7845d1b71682f17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba19c-be04-49d2-bf3c-49eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "first_observed": "2015-09-30T08:47:24Z",
            "last_observed": "2015-09-30T08:47:24Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba19c-be04-49d2-bf3c-49eb950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba19c-be04-49d2-bf3c-49eb950d210b",
            "value": "https://www.virustotal.com/file/1393d42f227f3210ba47fdc9d9c306d86ad9cb6c08732f9df6f2f0afbb7ae7e8/analysis/1433348873/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19c-92b4-472b-8453-49a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:24.000Z",
            "modified": "2015-09-30T08:47:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fatax.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19d-b26c-4c27-9db3-4de4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:25.000Z",
            "modified": "2015-09-30T08:47:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b94f1b2efc0758d7b68489e17c19f49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19d-14e4-4fa4-a31c-43d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:25.000Z",
            "modified": "2015-09-30T08:47:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2b9ab042c46c1389e952d47afe2bec72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19d-a8c0-493e-9efa-40ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:25.000Z",
            "modified": "2015-09-30T08:47:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 008f537696190e14126a9353425954e4",
            "pattern": "[file:hashes.SHA256 = '261188cd3ea5a142680486f2b8cb3de7978fa1d155083907f1affbca725c00d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19d-0bd8-434a-a42b-4f8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:25.000Z",
            "modified": "2015-09-30T08:47:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2bbb1d890624bcb0da9ddac3aac6d536']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19d-0670-4126-ad91-4919950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:25.000Z",
            "modified": "2015-09-30T08:47:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fatsali52.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19d-eb8c-45fd-89cd-4776950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:25.000Z",
            "modified": "2015-09-30T08:47:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2bc04687c3972a6820cc851dd06442e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19d-c1d0-4b8d-9252-4b17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:25.000Z",
            "modified": "2015-09-30T08:47:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 008f537696190e14126a9353425954e4",
            "pattern": "[file:hashes.SHA1 = 'bab02fbb7276b7de288a22887e34b5629b4a9549']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19d-eb8c-4677-a944-400b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:25.000Z",
            "modified": "2015-09-30T08:47:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'faunee.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19d-3438-4bc2-a632-48df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:25.000Z",
            "modified": "2015-09-30T08:47:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2bc079b0df5cf7fe814fdbb5b72c733c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-e974-44ea-90a4-4f61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fazer11.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba19e-07e0-4eb4-8960-420d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "first_observed": "2015-09-30T08:47:26Z",
            "last_observed": "2015-09-30T08:47:26Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba19e-07e0-4eb4-8960-420d950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba19e-07e0-4eb4-8960-420d950d210b",
            "value": "https://www.virustotal.com/file/261188cd3ea5a142680486f2b8cb3de7978fa1d155083907f1affbca725c00d0/analysis/1432619756/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-f0e0-4cc0-bab2-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2bc0bfacd7d345e6f6c3a8d42798f475']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-ae44-405f-9713-4955950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fbiclan.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-7974-49dc-b06a-4706950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2bc153048ac795217b753f4d4e58bef5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-2fa0-4994-8760-456b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 008bf838ac82b4e2adebe16e94e3c615",
            "pattern": "[file:hashes.SHA256 = '483942fb6d3556fe6dbc79f8cfe8afe1d522592baadcd9e133d6d4391470f4a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-94bc-4560-990f-4f5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fcktardi.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-6428-44fa-93dc-4db8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2bc7094288471e7e64b1f5fd7562b886']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-b594-45ad-919d-4c8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2bf42742a6545ec69477dc58c9f0e8f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-89bc-4d15-a407-4612950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 008bf838ac82b4e2adebe16e94e3c615",
            "pattern": "[file:hashes.SHA1 = 'c2cbea53ac6074311c9a060576b1a86319d790cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19e-6b90-4b30-a104-482c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:26.000Z",
            "modified": "2015-09-30T08:47:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fear192.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19f-c66c-4b8e-8025-4e08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:27.000Z",
            "modified": "2015-09-30T08:47:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c0d42c1160435f0091a0fcbc4e37df6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19f-6790-4a2a-bdcb-4572950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:27.000Z",
            "modified": "2015-09-30T08:47:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c302871fd6e1b5b68eb390e95381c53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba19f-db24-4f2f-9011-4aa7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:27.000Z",
            "modified": "2015-09-30T08:47:27.000Z",
            "first_observed": "2015-09-30T08:47:27Z",
            "last_observed": "2015-09-30T08:47:27Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba19f-db24-4f2f-9011-4aa7950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba19f-db24-4f2f-9011-4aa7950d210b",
            "value": "https://www.virustotal.com/file/483942fb6d3556fe6dbc79f8cfe8afe1d522592baadcd9e133d6d4391470f4a9/analysis/1433186073/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19f-0fb8-4e8c-8ee4-4d44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:27.000Z",
            "modified": "2015-09-30T08:47:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c30c40fda137f127fe1510140afe39c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19f-6790-4acc-88bb-4711950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:27.000Z",
            "modified": "2015-09-30T08:47:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fearbaba120.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19f-2388-44a3-ade9-4286950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:27.000Z",
            "modified": "2015-09-30T08:47:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fefefefefef.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19f-1e4c-4209-b585-412e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:27.000Z",
            "modified": "2015-09-30T08:47:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0089a6b44cf349ebeb6ae24e4aecce92",
            "pattern": "[file:hashes.SHA256 = '7d587c33ff202e2af4691a588f18d929b879c3673dce64ea770ac0b9ebae0dd3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19f-d7f8-4374-90a1-4cdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:27.000Z",
            "modified": "2015-09-30T08:47:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'felixis.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba19f-2388-4321-bee4-4015950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:27.000Z",
            "modified": "2015-09-30T08:47:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c3287475db07b565b51ac4512176b47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a0-d284-49e8-b6ed-4078950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:28.000Z",
            "modified": "2015-09-30T08:47:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fermetarace.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a0-e218-4eac-bf66-49f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:28.000Z",
            "modified": "2015-09-30T08:47:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0089a6b44cf349ebeb6ae24e4aecce92",
            "pattern": "[file:hashes.SHA1 = '997408da7ae92d23bf2281172f5a1b551b173f70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a0-d26c-4c23-8f58-422f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:28.000Z",
            "modified": "2015-09-30T08:47:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ffx.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a0-b208-4b2b-b01a-460e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:28.000Z",
            "modified": "2015-09-30T08:47:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c4208a01673a1809ea4c1d4fb28ed4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a0-2b1c-48b4-a674-4e57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:28.000Z",
            "modified": "2015-09-30T08:47:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ffx.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a0-bf5c-4d50-b4c4-4d11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:28.000Z",
            "modified": "2015-09-30T08:47:28.000Z",
            "first_observed": "2015-09-30T08:47:28Z",
            "last_observed": "2015-09-30T08:47:28Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a0-bf5c-4d50-b4c4-4d11950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a0-bf5c-4d50-b4c4-4d11950d210b",
            "value": "https://www.virustotal.com/file/7d587c33ff202e2af4691a588f18d929b879c3673dce64ea770ac0b9ebae0dd3/analysis/1432676796/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a0-ec8c-4a61-80a0-4636950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:28.000Z",
            "modified": "2015-09-30T08:47:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c4369527c6aefbf0175aa6de2e2c8d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a0-6d34-4842-b305-48d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:28.000Z",
            "modified": "2015-09-30T08:47:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 007a86e82960d17aa21fb339cd57b59c",
            "pattern": "[file:hashes.SHA256 = '84bd990d1eb5b02077c73b1b93f2a3636e8fa49de4d2cb3338893332ca5b53a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a0-ea40-4c46-ad4e-49b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:28.000Z",
            "modified": "2015-09-30T08:47:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fhatahinno.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a1-c370-4aa2-a801-4890950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 007a86e82960d17aa21fb339cd57b59c",
            "pattern": "[file:hashes.SHA1 = 'b7cbdd705417cf62f1af51b09c9a28584c27b291']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a1-1660-4329-9b44-4fc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c487622b5f55accba71304ef28d61a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a1-e3a0-4367-adab-4b48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "first_observed": "2015-09-30T08:47:29Z",
            "last_observed": "2015-09-30T08:47:29Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a1-e3a0-4367-adab-4b48950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a1-e3a0-4367-adab-4b48950d210b",
            "value": "https://www.virustotal.com/file/84bd990d1eb5b02077c73b1b93f2a3636e8fa49de4d2cb3338893332ca5b53a9/analysis/1434231087/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a1-0698-44ee-95c6-41be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fhfghfgh.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a1-28a8-413c-9ae9-495c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00763a6f6270980f704acc55a54ecdd5",
            "pattern": "[file:hashes.SHA256 = 'f465216e5f01113d0a6bbb198472578b6546412f6dfec22b4ecc069fa905b2a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a1-cb34-424e-afdf-4d61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c4aede78228811391c60c445eed87b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a1-89bc-458a-a375-4eba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00763a6f6270980f704acc55a54ecdd5",
            "pattern": "[file:hashes.SHA1 = '5c1ba56caf9ec8917e9da428e026826f62f170e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a1-8760-4d3e-8cd5-4c03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fiask07.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a1-9bf0-46a7-bf5f-4a86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "first_observed": "2015-09-30T08:47:29Z",
            "last_observed": "2015-09-30T08:47:29Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a1-9bf0-46a7-bf5f-4a86950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a1-9bf0-46a7-bf5f-4a86950d210b",
            "value": "https://www.virustotal.com/file/f465216e5f01113d0a6bbb198472578b6546412f6dfec22b4ecc069fa905b2a3/analysis/1433460485/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a1-cf34-4cb6-b3f7-4243950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:29.000Z",
            "modified": "2015-09-30T08:47:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c4b698d3c46565efad57dbd0bd0fb1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a2-b9e0-4df1-88ba-401b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:30.000Z",
            "modified": "2015-09-30T08:47:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00758890f47fd6ff81b25db2cdaaefb0",
            "pattern": "[file:hashes.SHA256 = '83db1ff28cc81e3e209a71c6c24eb4f6fde411b66b1335cbb9ce4b6718ce0f7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a2-b974-45bb-8183-4654950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:30.000Z",
            "modified": "2015-09-30T08:47:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fibertr.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a2-1280-4f84-ae4a-4417950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:30.000Z",
            "modified": "2015-09-30T08:47:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00758890f47fd6ff81b25db2cdaaefb0",
            "pattern": "[file:hashes.SHA1 = '5899523c89be22b84aabc0c38c4569ad1e1b53d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a2-8954-4438-8473-44fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:30.000Z",
            "modified": "2015-09-30T08:47:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c4df3ca4db51a027a6ea5fa210d54d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a2-3330-47fa-b30b-4926950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:30.000Z",
            "modified": "2015-09-30T08:47:30.000Z",
            "first_observed": "2015-09-30T08:47:30Z",
            "last_observed": "2015-09-30T08:47:30Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a2-3330-47fa-b30b-4926950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a2-3330-47fa-b30b-4926950d210b",
            "value": "https://www.virustotal.com/file/83db1ff28cc81e3e209a71c6c24eb4f6fde411b66b1335cbb9ce4b6718ce0f7b/analysis/1435326013/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a2-d6f4-466f-96f6-4e57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:30.000Z",
            "modified": "2015-09-30T08:47:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fifaworldh.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a2-7300-4fc1-b849-43e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:30.000Z",
            "modified": "2015-09-30T08:47:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 007084f153e5272e9283a343ee4bb256",
            "pattern": "[file:hashes.SHA256 = '9dbb2ca25c0917a62a4231fc01d19775209cc361f50c92a25ca62d06754f477a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a2-c088-4fe5-aaf8-4174950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:30.000Z",
            "modified": "2015-09-30T08:47:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c5f1d80b1703930f771f515446d166d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a3-f130-44ea-bcf5-4753950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 007084f153e5272e9283a343ee4bb256",
            "pattern": "[file:hashes.SHA1 = '47bc244529f9b23b2291906dde145b5875da5b0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a2-e0bc-40a4-b09f-42c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:30.000Z",
            "modified": "2015-09-30T08:47:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fifouludo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a3-6f6c-468b-bd14-4257950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "first_observed": "2015-09-30T08:47:31Z",
            "last_observed": "2015-09-30T08:47:31Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a3-6f6c-468b-bd14-4257950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a3-6f6c-468b-bd14-4257950d210b",
            "value": "https://www.virustotal.com/file/9dbb2ca25c0917a62a4231fc01d19775209cc361f50c92a25ca62d06754f477a/analysis/1412246545/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a3-9c0c-44cb-98d0-448c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c70159288bf605408231d572c8876f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a3-ac9c-47c0-b20b-4c6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 006f54ee87e90fb00bbefc1e1dcf7190",
            "pattern": "[file:hashes.SHA256 = 'b1404d8c2bfa44d1e343b58828342d76445c2fdec0ea73f842e46ce96c63a8d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a3-6d04-4295-afb9-45ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'filezila.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a3-f9cc-485b-932e-4db3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 006f54ee87e90fb00bbefc1e1dcf7190",
            "pattern": "[file:hashes.SHA1 = '3d85fb3142728bddd657657862dadc722f743dca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a3-57ec-4ab6-85c1-4a0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c76de9f6700b88a63ae38fea3762c22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a3-b978-445a-b95b-499e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "first_observed": "2015-09-30T08:47:31Z",
            "last_observed": "2015-09-30T08:47:31Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a3-b978-445a-b95b-499e950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a3-b978-445a-b95b-499e950d210b",
            "value": "https://www.virustotal.com/file/b1404d8c2bfa44d1e343b58828342d76445c2fdec0ea73f842e46ce96c63a8d9/analysis/1439994445/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a3-af04-49bf-b2d8-4365950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'findik.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a4-07d8-4ec9-81c7-435a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:32.000Z",
            "modified": "2015-09-30T08:47:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 006a78b9379ee91870ce45d6b7dfa9ae",
            "pattern": "[file:hashes.SHA256 = 'b057e2b6630b6281935476ffedbad425d3c687c9ae70260425fa8920eea957fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a3-79b4-4b8a-87e0-41b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:31.000Z",
            "modified": "2015-09-30T08:47:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c77d7f4c06767a6472f0a1384c9fb85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a4-a284-4d84-8ec9-4fac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:32.000Z",
            "modified": "2015-09-30T08:47:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 006a78b9379ee91870ce45d6b7dfa9ae",
            "pattern": "[file:hashes.SHA1 = 'add1df674b8c157a08587538222663a06f3e1cf4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a4-b454-4ff1-b683-4f94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:32.000Z",
            "modified": "2015-09-30T08:47:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fingers.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a4-3d70-4a58-a111-4a80950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:32.000Z",
            "modified": "2015-09-30T08:47:32.000Z",
            "first_observed": "2015-09-30T08:47:32Z",
            "last_observed": "2015-09-30T08:47:32Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a4-3d70-4a58-a111-4a80950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a4-3d70-4a58-a111-4a80950d210b",
            "value": "https://www.virustotal.com/file/b057e2b6630b6281935476ffedbad425d3c687c9ae70260425fa8920eea957fd/analysis/1436457224/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a4-5944-4192-935f-4f90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:32.000Z",
            "modified": "2015-09-30T08:47:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c77f0414a4d956895ccdbbc4114dda2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a4-7b54-41eb-afe9-48a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:32.000Z",
            "modified": "2015-09-30T08:47:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0066c6e2ca6c0b2fe1afdd28ca7f2177",
            "pattern": "[file:hashes.SHA256 = 'c96ab13a69874007b030913e449d700816e2269a01c24928cdd12bb0dc52a013']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a4-fbe4-40ab-b20b-44be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:32.000Z",
            "modified": "2015-09-30T08:47:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'firanet.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a4-6d9c-43dd-bd48-4b57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:32.000Z",
            "modified": "2015-09-30T08:47:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0066c6e2ca6c0b2fe1afdd28ca7f2177",
            "pattern": "[file:hashes.SHA1 = 'a886e966cdbc7983bb34493fce2491d9cd9b29d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a4-15d0-490a-9042-4ecc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:32.000Z",
            "modified": "2015-09-30T08:47:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c78ae4afcd999b5f0ef68aaa46f69c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a5-8e1c-4582-b6e0-46d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'firewalldiagnostic.ignorelist.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a5-3704-4fdf-b462-43e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'firstxxlist.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a5-91bc-4281-93f0-4188950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "first_observed": "2015-09-30T08:47:33Z",
            "last_observed": "2015-09-30T08:47:33Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a5-91bc-4281-93f0-4188950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a5-91bc-4281-93f0-4188950d210b",
            "value": "https://www.virustotal.com/file/c96ab13a69874007b030913e449d700816e2269a01c24928cdd12bb0dc52a013/analysis/1434494967/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a5-3704-4812-8f3f-4e64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c7d59c37105bbab5e733c2e2293ec1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a5-11d0-4f83-a957-4df9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'flashnoob.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a5-f648-48da-804a-47a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c834e56742719b8c8081454627a52e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a5-6b6c-498a-b5d5-4d3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 005cfff1840a0281479ad45277739217",
            "pattern": "[file:hashes.SHA256 = 'f0dd883e9986e81eb4781086d5530645d462a35d02de8db0e5323a00012e4553']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a5-cb24-497f-b470-4141950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'flashuser.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a5-918c-46a0-ae92-4344950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c9d8bc038dd7a2324cd964bf07649e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-e498-4f90-b613-483b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2c9fec93b8a4b74a2288d379a292ea98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a5-ce08-4102-959a-4e2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:33.000Z",
            "modified": "2015-09-30T08:47:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 005cfff1840a0281479ad45277739217",
            "pattern": "[file:hashes.SHA1 = '18f6cd512b79a13e086c6a45b7d70fea9b8c4473']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-7c3c-4dde-b45b-4054950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ca5f0afed7d2062c177b155637b6a55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-3e10-4fa2-99b7-483a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'floflohack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-f228-41b6-9158-4623950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ca7fcf704731f0fc57ab39dbf51baee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a6-6154-43b1-861b-4378950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "first_observed": "2015-09-30T08:47:34Z",
            "last_observed": "2015-09-30T08:47:34Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a6-6154-43b1-861b-4378950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a6-6154-43b1-861b-4378950d210b",
            "value": "https://www.virustotal.com/file/f0dd883e9986e81eb4781086d5530645d462a35d02de8db0e5323a00012e4553/analysis/1435474354/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-2bf8-4e0f-9ac0-4934950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'floomaster.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-45f0-4a19-ab1b-4eca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ca93a24576aa5631528512eae8dfaa7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-2bf0-4e2a-9ea0-46dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ca969c30d8e920917c234210f4385af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-9db4-483e-8d30-41e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0056dc7fd5039fe3093c1b1b967ba0e4",
            "pattern": "[file:hashes.SHA256 = '4d5ee6e2a5c76b4a04cc17252ccd8131a6debddaf0c2cdf572ff305f9b1216ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-1354-483f-9ead-4a76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'florenttou.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a6-080c-4efb-9fd8-4927950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:34.000Z",
            "modified": "2015-09-30T08:47:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2cd80af4b0dcff90fff5484090e83dbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-32cc-415c-8aa5-44f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2cd9e6a0e9e5254ab2aec657d23da276']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-4574-4699-8985-4943950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0056dc7fd5039fe3093c1b1b967ba0e4",
            "pattern": "[file:hashes.SHA1 = '042df279bd6d971a5b870e218e58214d67b39079']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-fa5c-4af8-9958-4c8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'flowingdns.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-ed34-4d88-8fff-4713950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2cdc2ae49b08e2cc4b8fb2c89bcef6c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-6754-4013-9b70-4a37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'flownet.serveblog.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a7-8800-4f9b-9a49-4468950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "first_observed": "2015-09-30T08:47:35Z",
            "last_observed": "2015-09-30T08:47:35Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a7-8800-4f9b-9a49-4468950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a7-8800-4f9b-9a49-4468950d210b",
            "value": "https://www.virustotal.com/file/4d5ee6e2a5c76b4a04cc17252ccd8131a6debddaf0c2cdf572ff305f9b1216ff/analysis/1438102956/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-113c-4e12-a2f0-4b6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ce64c44b8309777861c51dbb526f5bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-76f4-428a-9686-4cf6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fluffy754.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-12cc-4b9d-8f26-4261950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ceb1ff6777b39647375059ed1beb294']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-c794-4bb6-9fbe-4b21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 003bd75cf15ef3afd94ef906503ffd7d",
            "pattern": "[file:hashes.SHA256 = 'bd73a98f43f60495f591b757dcbcc440964be9f2f54b3e9c3fc34e462b078946']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a8-daa8-48f7-8bbc-4cf9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:36.000Z",
            "modified": "2015-09-30T08:47:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2cebd6393abbddcd772cad8e22cf65b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a7-46c0-4d7a-9ece-4526950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:35.000Z",
            "modified": "2015-09-30T08:47:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fodaseemeuvirus.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a8-1b50-4c50-bc81-484b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:36.000Z",
            "modified": "2015-09-30T08:47:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2cfa619b94dd220dc5a961d1e78be2de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a8-01e8-4df6-beeb-454a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:36.000Z",
            "modified": "2015-09-30T08:47:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 003bd75cf15ef3afd94ef906503ffd7d",
            "pattern": "[file:hashes.SHA1 = '24c11b0498c7bd605d6bcebb0c1c3cdc4a5af4d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a8-18f8-4ec7-910b-46a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:36.000Z",
            "modified": "2015-09-30T08:47:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'folornplanet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a8-8700-4a30-8ed1-405d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:36.000Z",
            "modified": "2015-09-30T08:47:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d0b44554cfd71e2ee6af042fef39135']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a8-0a18-4d42-aad2-4a77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:36.000Z",
            "modified": "2015-09-30T08:47:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'foobosblackhat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a8-6940-416c-b233-401e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:36.000Z",
            "modified": "2015-09-30T08:47:36.000Z",
            "first_observed": "2015-09-30T08:47:36Z",
            "last_observed": "2015-09-30T08:47:36Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a8-6940-416c-b233-401e950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a8-6940-416c-b233-401e950d210b",
            "value": "https://www.virustotal.com/file/bd73a98f43f60495f591b757dcbcc440964be9f2f54b3e9c3fc34e462b078946/analysis/1433452037/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a8-1e68-443a-af9e-4849950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:36.000Z",
            "modified": "2015-09-30T08:47:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d188c65ed7b6cc1979497d488951b4d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a8-25cc-4e28-9a85-4306950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:36.000Z",
            "modified": "2015-09-30T08:47:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fooboslepirate.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-12bc-4602-bae4-4ff6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'for17.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-1eb0-432e-a55f-4aa7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 002e1371d5e6db1d847c323eea08f8eb",
            "pattern": "[file:hashes.SHA256 = 'a0d7976090c3900175d34347025b01c33e3be427578e62db7461c018cbe12563']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-54c0-4b2e-82ae-4b2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d194e0772ec9a72e7d84d453bacb985']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-f43c-4862-987f-4e3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'forbidden123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-1d18-4823-b67a-4d77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d1dceaf1aca611e2540cb8a7d31a3d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-d380-4a4e-ae1e-45b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 002e1371d5e6db1d847c323eea08f8eb",
            "pattern": "[file:hashes.SHA1 = 'fa73504c78ca2c1dd5b03e536732c45146517f12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-3648-407a-90a6-4e7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d21ad83079efd016b0aa7be6bcd4655']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-3bf4-44b7-97ad-4fcc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'forcomet.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-4220-49e4-a358-4187950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d22113c350f2c3ed7f7cc5477689ead']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1a9-dbfc-47b2-b518-4b64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "first_observed": "2015-09-30T08:47:37Z",
            "last_observed": "2015-09-30T08:47:37Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1a9-dbfc-47b2-b518-4b64950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1a9-dbfc-47b2-b518-4b64950d210b",
            "value": "https://www.virustotal.com/file/a0d7976090c3900175d34347025b01c33e3be427578e62db7461c018cbe12563/analysis/1434562535/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1a9-4220-4144-8f42-4362950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:37.000Z",
            "modified": "2015-09-30T08:47:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'forvordo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1aa-d68c-4530-91a1-4057950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:38.000Z",
            "modified": "2015-09-30T08:47:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d388d76a81f0b313681684ce01853f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1aa-0960-4664-8b3c-4f93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:38.000Z",
            "modified": "2015-09-30T08:47:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fouadchadi777.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1aa-a658-45ec-a532-4fd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:38.000Z",
            "modified": "2015-09-30T08:47:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 002e07444674d98b05192db1bdc89d64",
            "pattern": "[file:hashes.SHA256 = 'd8b825f6a88a18de82bec045144a8ff81ea76094ff8a9152a51ad89b777925d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1aa-1e50-4fba-aadf-416e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:38.000Z",
            "modified": "2015-09-30T08:47:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d47771b022d104bd6a4389de2533511']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1aa-97ac-494a-9084-488f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:38.000Z",
            "modified": "2015-09-30T08:47:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'franckdeplain.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1aa-ff34-448c-be7d-4c5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:38.000Z",
            "modified": "2015-09-30T08:47:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d4937c1f3124a46e32b8138c067f9e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1aa-d72c-465b-90e7-4ea9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:38.000Z",
            "modified": "2015-09-30T08:47:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 002e07444674d98b05192db1bdc89d64",
            "pattern": "[file:hashes.SHA1 = '387224655092a8eae745f1c4ad278831922cfd85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1aa-efcc-4b13-9707-4d60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:38.000Z",
            "modified": "2015-09-30T08:47:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d4bd3cb38b50f345b632874ff823610']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1aa-e8f0-4367-a04f-4347950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:38.000Z",
            "modified": "2015-09-30T08:47:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'frazen82.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ab-b5c0-4e99-a2f3-45da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freak37.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1ab-cc9c-4f2d-b881-4550950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "first_observed": "2015-09-30T08:47:39Z",
            "last_observed": "2015-09-30T08:47:39Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1ab-cc9c-4f2d-b881-4550950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1ab-cc9c-4f2d-b881-4550950d210b",
            "value": "https://www.virustotal.com/file/d8b825f6a88a18de82bec045144a8ff81ea76094ff8a9152a51ad89b777925d6/analysis/1436005020/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ab-01ec-45ca-8276-4b9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d4d76d6cd421491642936cbebc49019']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ab-98dc-44cc-80be-49d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00260ac9f02bbeafa934ae95fd04e1ad",
            "pattern": "[file:hashes.SHA256 = '04cef7c04d22c5e8cf6e3c9ecd5c4e2178956c863a8c20657fd1d44fcc735a3d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ab-dad4-4e58-bffc-41b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freaksandgeeks.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ab-bd74-4b64-9a8a-4826950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00260ac9f02bbeafa934ae95fd04e1ad",
            "pattern": "[file:hashes.SHA1 = '169155a4746489a25809809a70235b1da1621b09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ab-7e18-4633-bc20-4026950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d510d79f60bc220d5ab54b86f35d9a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ab-e0a0-4099-8ada-45a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freddy1995.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ab-24cc-4b59-a18e-4c6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d5cd3d1082de9de79b6b52b89871633']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1ab-63f8-435f-9516-4d12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "first_observed": "2015-09-30T08:47:39Z",
            "last_observed": "2015-09-30T08:47:39Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1ab-63f8-435f-9516-4d12950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1ab-63f8-435f-9516-4d12950d210b",
            "value": "https://www.virustotal.com/file/04cef7c04d22c5e8cf6e3c9ecd5c4e2178956c863a8c20657fd1d44fcc735a3d/analysis/1434820551/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ac-4ebc-4526-9ec8-474b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:40.000Z",
            "modified": "2015-09-30T08:47:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d5dc138ccdede55636e0ce068376122']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ab-a708-464c-bbb3-4ba1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:39.000Z",
            "modified": "2015-09-30T08:47:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freecheats.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ac-4a7c-46e6-bec2-4ae0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:40.000Z",
            "modified": "2015-09-30T08:47:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freecoolstuff.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ac-2660-4e2e-8565-4b0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:40.000Z",
            "modified": "2015-09-30T08:47:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00214149b276159d241bba961dd88817",
            "pattern": "[file:hashes.SHA256 = 'f55f775a9cca9a60a7209a87af8126b71266050bd69236c8e6739f8df127e461']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ac-e818-497d-a627-4455950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:40.000Z",
            "modified": "2015-09-30T08:47:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d63a50423e759950d9ac3400e311dcc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ac-7b34-4298-86f8-4aec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:40.000Z",
            "modified": "2015-09-30T08:47:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00214149b276159d241bba961dd88817",
            "pattern": "[file:hashes.SHA1 = '2585022d42e33f9e13d196632cb0d306fb177dd1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ac-b468-46dc-ba60-4f59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:40.000Z",
            "modified": "2015-09-30T08:47:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freegenerator.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1ac-277c-4224-8df6-4723950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:40.000Z",
            "modified": "2015-09-30T08:47:40.000Z",
            "first_observed": "2015-09-30T08:47:40Z",
            "last_observed": "2015-09-30T08:47:40Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1ac-277c-4224-8df6-4723950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1ac-277c-4224-8df6-4723950d210b",
            "value": "https://www.virustotal.com/file/f55f775a9cca9a60a7209a87af8126b71266050bd69236c8e6739f8df127e461/analysis/1436378284/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ac-fddc-4180-a6d6-4e71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:40.000Z",
            "modified": "2015-09-30T08:47:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d667da6f04ad8ebb0f34c662f513ae2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ad-7c58-4b0f-8ec7-49f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 001cc4911d49e1c0f40fe0affaa1041f",
            "pattern": "[file:hashes.SHA256 = '950e8036085477ed8bc5f78e4b8af680347c290f64627a52d8b8dbc11fbc0148']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ac-a294-46a3-baf3-45b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:40.000Z",
            "modified": "2015-09-30T08:47:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freegp.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ad-61dc-4c6d-adc4-4a73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d702c3003afaa0a67966b4aefd315b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ad-d4b0-453a-8e0d-4987950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freelolskins.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ad-6ee0-4ffd-9d62-46f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 001cc4911d49e1c0f40fe0affaa1041f",
            "pattern": "[file:hashes.SHA1 = '480ae2334aa2142147918f7bf1fcd8ce5e0c8d72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ad-ad74-4948-99bd-4e55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d86bcdecf0341dc71fb3055ae56857b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ad-f610-4d2c-8a8f-47e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freeratforu.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ad-22f4-4fa9-95e5-454b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d8a17379ec8c8eb1279517cf3e8a786']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1ad-cb38-4990-bb54-4410950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "first_observed": "2015-09-30T08:47:41Z",
            "last_observed": "2015-09-30T08:47:41Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1ad-cb38-4990-bb54-4410950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1ad-cb38-4990-bb54-4410950d210b",
            "value": "https://www.virustotal.com/file/950e8036085477ed8bc5f78e4b8af680347c290f64627a52d8b8dbc11fbc0148/analysis/1434446164/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ad-9cf4-4d72-8ac5-4c7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freeshop2131.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ad-8e3c-46cc-8c62-4c61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:41.000Z",
            "modified": "2015-09-30T08:47:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d8c72ca791d6a0d93ecfdb12fcc2fe2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-a778-4074-b4f9-47ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freevpsdets.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-21cc-4909-989a-4c51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 001c75e16511be78bd3e66b05921a790",
            "pattern": "[file:hashes.SHA256 = 'd78bce1f1d05f5c9226ca3ba39e981045b2637c13e1c6f0f99399bdf8233d2e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-c8e0-4283-a494-4834950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'freshtaaa.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-1030-4100-81e3-40a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d8e4dbdd423a31dc6cdb21ae15c5f18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-4a90-4ad4-a383-439f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d90c064399d4448f60f32c07a3de1cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-9a04-4869-92e8-4cfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 001c75e16511be78bd3e66b05921a790",
            "pattern": "[file:hashes.SHA1 = 'bf563fbbf2b7f77b49ddfec9b9c0fe46496649da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-079c-4e3f-a572-4e54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'friman213.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-29c4-491f-8a10-4486950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2d990598b6bae833047fdc2ad1102827']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-1944-47bb-9dbb-499b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2da61719afb428aa322107180937f7be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1ae-3e4c-4f16-a7ac-454a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "first_observed": "2015-09-30T08:47:42Z",
            "last_observed": "2015-09-30T08:47:42Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1ae-3e4c-4f16-a7ac-454a950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1ae-3e4c-4f16-a7ac-454a950d210b",
            "value": "https://www.virustotal.com/file/d78bce1f1d05f5c9226ca3ba39e981045b2637c13e1c6f0f99399bdf8233d2e5/analysis/1433646806/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ae-ce18-4ba7-9a01-43c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:42.000Z",
            "modified": "2015-09-30T08:47:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'frndhck.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1af-8ccc-46f5-ac00-4c7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:43.000Z",
            "modified": "2015-09-30T08:47:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00165d1fea12608b251c36c34040f3ef",
            "pattern": "[file:hashes.SHA256 = 'a8c7489292211420fdf64bbc0e756b552c6cb5c274301ba86e539d645b7ecaa9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1af-9c3c-4d8e-8985-4e55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:43.000Z",
            "modified": "2015-09-30T08:47:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2da772bcb3b0402ea4dc8a4684899834']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1af-2c64-47d7-a832-4635950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:43.000Z",
            "modified": "2015-09-30T08:47:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00165d1fea12608b251c36c34040f3ef",
            "pattern": "[file:hashes.SHA1 = '829eb51c27fb1150f34f9aaedf5f1c5c07141fd5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1af-78bc-4172-b4ad-4894950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:43.000Z",
            "modified": "2015-09-30T08:47:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'frostloader.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1af-1f94-46b9-bb26-4aed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:43.000Z",
            "modified": "2015-09-30T08:47:43.000Z",
            "first_observed": "2015-09-30T08:47:43Z",
            "last_observed": "2015-09-30T08:47:43Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1af-1f94-46b9-bb26-4aed950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1af-1f94-46b9-bb26-4aed950d210b",
            "value": "https://www.virustotal.com/file/a8c7489292211420fdf64bbc0e756b552c6cb5c274301ba86e539d645b7ecaa9/analysis/1434239151/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1af-b48c-4f28-9d6c-4bc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:43.000Z",
            "modified": "2015-09-30T08:47:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2daa666e0f6bc29cf84dce7099e033ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1af-6670-4fc0-880e-4294950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:43.000Z",
            "modified": "2015-09-30T08:47:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0011baf13e0e200347f2ffef0b4e2d32",
            "pattern": "[file:hashes.SHA256 = 'b544acfb3cf07dd77eeb76d3ff8adfd54e3036c451b09f8b71352f4b9a8b67e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1af-f090-48a7-b944-48d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:43.000Z",
            "modified": "2015-09-30T08:47:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fsdler.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b0-c570-4214-a35e-4781950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0011baf13e0e200347f2ffef0b4e2d32",
            "pattern": "[file:hashes.SHA1 = 'c706ce347b22630eef5ed71b32f18430a4ae3c7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1af-fb18-4c76-91d0-4704950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:43.000Z",
            "modified": "2015-09-30T08:47:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2dad559f73960e958cdb1a45c14cb772']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1b0-b2ec-4102-ae84-40e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "first_observed": "2015-09-30T08:47:44Z",
            "last_observed": "2015-09-30T08:47:44Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1b0-b2ec-4102-ae84-40e1950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1b0-b2ec-4102-ae84-40e1950d210b",
            "value": "https://www.virustotal.com/file/b544acfb3cf07dd77eeb76d3ff8adfd54e3036c451b09f8b71352f4b9a8b67e7/analysis/1436715775/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b0-2d88-440d-acbf-4c95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fstyle.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b0-8d90-4bb3-aa56-43ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00042e4a6da8ecc3ba33250c2bafb94f",
            "pattern": "[file:hashes.SHA256 = '8980774ee77c15b31d7c8af5d3e2732faaefca651ceb6624c436c8699e10ddac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b0-54a8-4be0-90b7-421f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2daf8da768c6da8f21a52105aeb02504']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b0-9078-4141-ba74-4247950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 00042e4a6da8ecc3ba33250c2bafb94f",
            "pattern": "[file:hashes.SHA1 = 'a063027048cb8f0f63585edd4b20d5d22b561b98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b0-48ac-4776-8dfc-419a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fuck-up.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b0-908c-4708-b318-479a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2dbf522783c729e22e34e2fac5ff9e42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b0-1bdc-4ece-ba26-4508950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fucker14.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1b0-c8a8-4abf-b35e-4800950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "first_observed": "2015-09-30T08:47:44Z",
            "last_observed": "2015-09-30T08:47:44Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1b0-c8a8-4abf-b35e-4800950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1b0-c8a8-4abf-b35e-4800950d210b",
            "value": "https://www.virustotal.com/file/8980774ee77c15b31d7c8af5d3e2732faaefca651ceb6624c436c8699e10ddac/analysis/1434471277/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b0-1f34-405c-98cf-4039950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:44.000Z",
            "modified": "2015-09-30T08:47:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2dc5b92a2ed56478f331b59be1d496e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b1-25f8-4ab2-b78f-4e7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:45.000Z",
            "modified": "2015-09-30T08:47:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fuckingraped.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b1-ce64-4d8a-bf2c-4ca1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:45.000Z",
            "modified": "2015-09-30T08:47:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fuckingwork.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b1-c484-46c3-a302-4a09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:45.000Z",
            "modified": "2015-09-30T08:47:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0000875fa08e6294436a83694e083e8e",
            "pattern": "[file:hashes.SHA256 = '30b11cd37420974e8d4eaea5d999dcb753d1ab43b7b25322ba9adfe5c4e01a78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b1-1bf4-40f2-a669-48de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:45.000Z",
            "modified": "2015-09-30T08:47:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2dd3b96d5eee7eb8f5977dc414f53672']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b1-fcf0-41d6-8efb-4e99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:45.000Z",
            "modified": "2015-09-30T08:47:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fuckyoldash.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b1-cba4-41e2-af02-41d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:45.000Z",
            "modified": "2015-09-30T08:47:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv - Xchecked via VT: 0000875fa08e6294436a83694e083e8e",
            "pattern": "[file:hashes.SHA1 = '963c0d2bb1ea5601fad689e835c83276f08310d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "observed-data",
            "spec_version": "2.1",
            "id": "observed-data--560ba1b1-941c-4e03-b2db-419a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:45.000Z",
            "modified": "2015-09-30T08:47:45.000Z",
            "first_observed": "2015-09-30T08:47:45Z",
            "last_observed": "2015-09-30T08:47:45Z",
            "number_observed": 1,
            "object_refs": [
                "url--560ba1b1-941c-4e03-b2db-419a950d210b"
            ],
            "labels": [
                "misp:type=\"link\"",
                "misp:category=\"External analysis\""
            ]
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--560ba1b1-941c-4e03-b2db-419a950d210b",
            "value": "https://www.virustotal.com/file/30b11cd37420974e8d4eaea5d999dcb753d1ab43b7b25322ba9adfe5c4e01a78/analysis/1371623904/"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b1-e17c-4cba-87c9-4624950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:45.000Z",
            "modified": "2015-09-30T08:47:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2dd41d93743ba6f2014c41b8f6f54c72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b1-76fc-4408-9544-43ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:45.000Z",
            "modified": "2015-09-30T08:47:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fuckyoupedo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b2-1388-4f04-827e-4aba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:46.000Z",
            "modified": "2015-09-30T08:47:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fuiteinfectei.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b2-5e08-439f-80cc-4e0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:46.000Z",
            "modified": "2015-09-30T08:47:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fulleylove.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b2-c534-4e78-93e5-4a7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:46.000Z",
            "modified": "2015-09-30T08:47:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2dea628d011374d8a35f648d439d3bdb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b2-2a24-45af-949e-40df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:46.000Z",
            "modified": "2015-09-30T08:47:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fulltest1323.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b2-3508-45d1-bf74-4d27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:46.000Z",
            "modified": "2015-09-30T08:47:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'function1235231.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b2-3484-48ed-ab3c-41f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:46.000Z",
            "modified": "2015-09-30T08:47:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2deb3e7b6ee55802f2f8c9372748fe5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b2-d948-4b8c-be38-42dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:46.000Z",
            "modified": "2015-09-30T08:47:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2defde4cdbf5d863ef22768ed621ff1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b2-289c-43ee-a452-4b1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:46.000Z",
            "modified": "2015-09-30T08:47:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'funtimenet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b3-3b28-48e4-8327-4e2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:47.000Z",
            "modified": "2015-09-30T08:47:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2df5025256fa9086e6686e776e9b5af8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b3-13e0-41b3-9eaa-4c0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:47.000Z",
            "modified": "2015-09-30T08:47:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2dfd5e0a011c5da8fbf9833c701f2093']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b3-e448-4aec-ab13-4e8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:47.000Z",
            "modified": "2015-09-30T08:47:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'furthers.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b3-2a20-4365-ae9e-4bb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:47.000Z",
            "modified": "2015-09-30T08:47:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e01be06917e44dffeafd645d6298ede']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b3-0a00-45a1-ae48-493e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:47.000Z",
            "modified": "2015-09-30T08:47:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'fuxxer.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b3-3864-4f4c-9092-458b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:47.000Z",
            "modified": "2015-09-30T08:47:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'g27.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b3-f910-47d5-a9fb-431d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:47.000Z",
            "modified": "2015-09-30T08:47:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e07ebabfd3d8b54e22376aaadf91f5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b4-2700-4ea5-b85f-4293950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:48.000Z",
            "modified": "2015-09-30T08:47:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'g2x9m4b3r7c5i8v6.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b4-4868-4246-844c-4283950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:48.000Z",
            "modified": "2015-09-30T08:47:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'g53.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b4-b178-43d9-baa3-4cfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:48.000Z",
            "modified": "2015-09-30T08:47:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e0a11cbb7c97e883b4a1dab68eaa772']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b4-021c-4529-94f7-47ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:48.000Z",
            "modified": "2015-09-30T08:47:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'g7984.no-ip.bizt']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b4-ef34-4910-bebf-40df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:48.000Z",
            "modified": "2015-09-30T08:47:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'g97.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b4-d434-491c-9c15-4c3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:48.000Z",
            "modified": "2015-09-30T08:47:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e0a5bb5914131e516e7ca889e661460']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b4-5b80-46a6-b05c-474b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:48.000Z",
            "modified": "2015-09-30T08:47:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gabriel01.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b5-d338-44e8-9b62-4b03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:49.000Z",
            "modified": "2015-09-30T08:47:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gabriell20.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b4-5708-460f-acbd-4bcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:48.000Z",
            "modified": "2015-09-30T08:47:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e0c4d2f950c109ff5b83bfa1ac62a3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b5-7dc0-40c2-bc64-4554950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:49.000Z",
            "modified": "2015-09-30T08:47:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e0df766277761bed0689e1abb790e17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b5-aa48-4815-98ea-4893950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:49.000Z",
            "modified": "2015-09-30T08:47:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gabrielz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b5-3e40-44c3-aee4-420e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:49.000Z",
            "modified": "2015-09-30T08:47:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e103bb126fa6c1b33eaf600f7cac94b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b5-c410-4420-a5a2-49ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:49.000Z",
            "modified": "2015-09-30T08:47:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e1817d3b85d0bad63241fb575924ddb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b5-927c-4898-9971-4f12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:49.000Z",
            "modified": "2015-09-30T08:47:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gabrielzito.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b5-cf34-4dfd-af56-4c09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:49.000Z",
            "modified": "2015-09-30T08:47:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e1bcedabf1d3df7342b7070541607bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b6-a9e4-4b2a-abe7-4001950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:50.000Z",
            "modified": "2015-09-30T08:47:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gabudos.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b6-a570-4065-8257-4257950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:50.000Z",
            "modified": "2015-09-30T08:47:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gagancool8.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b6-8bf8-4588-9492-4bcb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:50.000Z",
            "modified": "2015-09-30T08:47:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e1fa0f6c9b82773ae3a385a56b6d1de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b6-95d8-4637-b469-4f6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:50.000Z",
            "modified": "2015-09-30T08:47:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gagauska-ukr.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b6-714c-40b7-a7df-49aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:50.000Z",
            "modified": "2015-09-30T08:47:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gaina.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b6-c0b0-4a91-acde-4b6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:50.000Z",
            "modified": "2015-09-30T08:47:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e302da6a7e45b7a887b97d42edd07b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b6-6cac-4b92-b299-4103950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:50.000Z",
            "modified": "2015-09-30T08:47:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e389515394794b1baf20e8e2112cf38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b6-b06c-4264-9ed8-4bd4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:50.000Z",
            "modified": "2015-09-30T08:47:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gaiver.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b7-d7e4-40a5-8d79-47b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:51.000Z",
            "modified": "2015-09-30T08:47:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e463b76aca46b41dbcb328a0116616a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b7-dc44-4560-9c13-4408950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:51.000Z",
            "modified": "2015-09-30T08:47:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamaexe.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b7-9e70-4a3d-b15d-4267950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:51.000Z",
            "modified": "2015-09-30T08:47:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamaexe.duckdns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b7-b198-4ba7-8ab1-47b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:51.000Z",
            "modified": "2015-09-30T08:47:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e5071a5810c74aeb331f147352e2a60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b7-c460-4fae-a768-4d34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:51.000Z",
            "modified": "2015-09-30T08:47:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamaexe.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b7-1e3c-4093-830f-4ce8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:51.000Z",
            "modified": "2015-09-30T08:47:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamaexe2.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b7-09d8-438b-8c8e-408d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:51.000Z",
            "modified": "2015-09-30T08:47:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e534b57632221a7e775ce7e5259ba19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b8-58bc-4851-af0e-4639950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:52.000Z",
            "modified": "2015-09-30T08:47:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamatest.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b8-d784-49c7-baff-43c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:52.000Z",
            "modified": "2015-09-30T08:47:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gameofthrones.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b8-fc40-4635-8979-4974950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:52.000Z",
            "modified": "2015-09-30T08:47:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e5f4958dba957d440b91077f206ba11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b8-5aa8-4cfa-a70f-4f8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:52.000Z",
            "modified": "2015-09-30T08:47:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e610aba01efa58bb3defd75a73b83d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b8-cee8-43bd-86a4-4923950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:52.000Z",
            "modified": "2015-09-30T08:47:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gameover1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b8-f4e8-49cf-88cd-4839950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:52.000Z",
            "modified": "2015-09-30T08:47:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e707e051b5ae4e1e3b22cb030509e06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b8-25c8-4380-a895-42f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:52.000Z",
            "modified": "2015-09-30T08:47:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamerscheat.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b9-5018-4c85-afad-41df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:53.000Z",
            "modified": "2015-09-30T08:47:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamertroll13.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b8-6b90-483a-9a84-4504950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:52.000Z",
            "modified": "2015-09-30T08:47:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e8b9d1a84206dca754d4c426a04d4fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b9-92bc-45b8-9d75-4af8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:53.000Z",
            "modified": "2015-09-30T08:47:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e9330d4057a0588389ce6bab50e6c21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b9-43d4-4745-8786-4078950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:53.000Z",
            "modified": "2015-09-30T08:47:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamerxlivestreaming.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b9-f270-4593-a2f9-4752950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:53.000Z",
            "modified": "2015-09-30T08:47:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2e9f2b0a64d90778d9bda896627b8ef3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b9-1ab4-44dc-bdf9-4576950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:53.000Z",
            "modified": "2015-09-30T08:47:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2eb8652be1025e8e130519d379852292']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b9-fdc8-4c8e-82d1-4196950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:53.000Z",
            "modified": "2015-09-30T08:47:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamesleak.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1b9-3fc0-4fd7-b321-40ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:53.000Z",
            "modified": "2015-09-30T08:47:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ebd2656b03ede3e4802ea5e663bb9de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ba-7568-497c-9c29-4ae9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:54.000Z",
            "modified": "2015-09-30T08:47:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ec5ab9bf3a990c29b2c1df4dfaf8c0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ba-551c-49e0-b16d-4732950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:54.000Z",
            "modified": "2015-09-30T08:47:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gameszero.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ba-a014-4984-9dcf-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:54.000Z",
            "modified": "2015-09-30T08:47:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ec69edda513c87e694e250d07643ae5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ba-952c-4eec-bb38-4a66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:54.000Z",
            "modified": "2015-09-30T08:47:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ecd93a6b1a981080070f74e13024c8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ba-2afc-448e-a946-4907950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:54.000Z",
            "modified": "2015-09-30T08:47:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gaming01.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ba-c9e4-4a19-8bf9-4d5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:54.000Z",
            "modified": "2015-09-30T08:47:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ed366ed714053555fd57deb37e9c3bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ba-1c54-43d2-8dc0-4816950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:54.000Z",
            "modified": "2015-09-30T08:47:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gamingtech.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bb-27d0-42b2-b8f8-42cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:55.000Z",
            "modified": "2015-09-30T08:47:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gammaclix.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ba-caf0-49e6-b0b0-4db8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:54.000Z",
            "modified": "2015-09-30T08:47:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ed47640240faad9ff9f2970f60820f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bb-e8d8-49db-9639-45a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:55.000Z",
            "modified": "2015-09-30T08:47:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ganamhacker.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bb-3cb0-4607-a4b1-4763950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:55.000Z",
            "modified": "2015-09-30T08:47:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gavronelove.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bb-c974-4447-9b2b-4730950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:55.000Z",
            "modified": "2015-09-30T08:47:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ed4ab815ca7cd9652f9d258b8fd8c59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bb-e26c-4df7-b1bf-40b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:55.000Z",
            "modified": "2015-09-30T08:47:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2edc2d991e876255ec843a7f9f0c3a3c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bb-b98c-480b-b187-4a7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:55.000Z",
            "modified": "2015-09-30T08:47:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gazzoose2000.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bb-6fd4-4e7d-b2f9-4354950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:55.000Z",
            "modified": "2015-09-30T08:47:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2edd7e06906848f200e2910495b7bd7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bc-340c-4dc9-8643-40e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:56.000Z",
            "modified": "2015-09-30T08:47:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2eebfdb30349e9f75f9ece07ec0d4192']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bb-55ac-4364-8be7-49dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:55.000Z",
            "modified": "2015-09-30T08:47:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gcorp42.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bc-85e0-4676-9af7-462c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:56.000Z",
            "modified": "2015-09-30T08:47:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ef4e1e949f37b2d296998a0eacf8237']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bc-0e44-47c1-b877-4bcd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:56.000Z",
            "modified": "2015-09-30T08:47:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2efbb8b9d79018eec498502ebc4bd0d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bc-0a34-4c72-bbbd-4029950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:56.000Z",
            "modified": "2015-09-30T08:47:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'geekayoub.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bc-74d8-4292-9ee6-4655950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:56.000Z",
            "modified": "2015-09-30T08:47:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f05962fd7a756296fe7bf4282b87a70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bc-80f4-42f1-a426-4485950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:56.000Z",
            "modified": "2015-09-30T08:47:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f206baedf74d0833f3a5d09506cab20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bc-8b98-47e0-9316-4218950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:56.000Z",
            "modified": "2015-09-30T08:47:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'geier.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bd-9c10-4260-8981-417e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:57.000Z",
            "modified": "2015-09-30T08:47:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f29054728d41cd09f679cd83a118861']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bd-b93c-428a-b153-4147950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:57.000Z",
            "modified": "2015-09-30T08:47:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f2d829127e98e9a92eb012473aa4322']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bd-ca90-4d5e-8568-4cc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:57.000Z",
            "modified": "2015-09-30T08:47:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'germaind117.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bd-07c0-496f-a6d2-4dc3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:57.000Z",
            "modified": "2015-09-30T08:47:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f2e56b59f52b247733e3662c8b0506a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bd-d374-4fdc-8fb0-4424950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:57.000Z",
            "modified": "2015-09-30T08:47:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gerrit.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bd-8230-4d87-a50c-42a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:57.000Z",
            "modified": "2015-09-30T08:47:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gerwgr3g.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bd-a318-4f90-9372-4963950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:57.000Z",
            "modified": "2015-09-30T08:47:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f3d5ab9ee16af55be32c18e7ef94469']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bd-66e8-4bc6-8c64-433f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:57.000Z",
            "modified": "2015-09-30T08:47:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gethitkids1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1be-1568-41d1-bb78-40bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:58.000Z",
            "modified": "2015-09-30T08:47:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'getrekte.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1be-1fcc-4df4-8b1f-4aee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:58.000Z",
            "modified": "2015-09-30T08:47:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f3ebd6738431016a9aea0586a01603d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1be-7694-4c74-8eaf-4066950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:58.000Z",
            "modified": "2015-09-30T08:47:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'getrektson.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1be-6144-4eeb-ba9d-4021950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:58.000Z",
            "modified": "2015-09-30T08:47:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gewoonmilan.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1be-84c4-417e-8a5a-458b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:58.000Z",
            "modified": "2015-09-30T08:47:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f4607f4aca673dd15402d92cede4e3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1be-79cc-47e0-82c4-4a92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:58.000Z",
            "modified": "2015-09-30T08:47:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f5996afbecb000f797662b591295a09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1be-0268-47fc-81d2-442f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:58.000Z",
            "modified": "2015-09-30T08:47:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gfgfgf12.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bf-2c60-400b-9bed-4d29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:59.000Z",
            "modified": "2015-09-30T08:47:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f5ea3975d51c5596da4b8d4b2ce07ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bf-57ec-43d8-b8dd-45fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:59.000Z",
            "modified": "2015-09-30T08:47:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gfnhbrjv.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bf-6680-4c10-853c-4507950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:59.000Z",
            "modified": "2015-09-30T08:47:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gg5.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bf-4050-4022-9e0b-4663950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:59.000Z",
            "modified": "2015-09-30T08:47:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f619d2d1a9dc6641f6abae4766ddfd1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bf-da1c-4a1d-aff4-4bc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:59.000Z",
            "modified": "2015-09-30T08:47:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gg98.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bf-a7cc-4258-975c-47cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:59.000Z",
            "modified": "2015-09-30T08:47:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ggrektmate.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bf-0e68-4a09-aa0f-401a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:59.000Z",
            "modified": "2015-09-30T08:47:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f6c0bc8a8bfbdf77184fc8968f3c1dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1bf-bbd4-4e58-9e0a-4cc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:47:59.000Z",
            "modified": "2015-09-30T08:47:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ghoust.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:47:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c0-7838-46ff-ac87-4c4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:00.000Z",
            "modified": "2015-09-30T08:48:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'giggitygoo.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c0-9798-4ab9-b417-44db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:00.000Z",
            "modified": "2015-09-30T08:48:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f6ca436a9c5bfc370297d851a463847']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c0-4cb4-4ed0-b9ec-4750950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:00.000Z",
            "modified": "2015-09-30T08:48:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gigii.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c0-ce3c-41da-b52f-43b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:00.000Z",
            "modified": "2015-09-30T08:48:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gigix.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c0-1d58-42db-b17d-45ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:00.000Z",
            "modified": "2015-09-30T08:48:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f6f03c78de3d61db22d1839aeaac4f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c0-2f20-4303-83c9-4832950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:00.000Z",
            "modified": "2015-09-30T08:48:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gigubomber.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c0-2d04-4b20-8e1c-480c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:00.000Z",
            "modified": "2015-09-30T08:48:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gimserat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c0-af80-4dba-898d-4622950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:00.000Z",
            "modified": "2015-09-30T08:48:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f703bc4b1091aebe79504fbd593752d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c1-18ec-43fa-859d-4872950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:01.000Z",
            "modified": "2015-09-30T08:48:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gimserat.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c1-df38-4e9c-8bce-48df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:01.000Z",
            "modified": "2015-09-30T08:48:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'giochxikva.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c1-cf0c-40a6-9cc2-4fc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:01.000Z",
            "modified": "2015-09-30T08:48:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f72e574ec76fe906b2156dbbf1d7557']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c1-a624-4005-b778-4fbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:01.000Z",
            "modified": "2015-09-30T08:48:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'glifez.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c1-35dc-4db2-8cd5-4edc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:01.000Z",
            "modified": "2015-09-30T08:48:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'glitsh.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c1-a704-4016-8b98-489a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:01.000Z",
            "modified": "2015-09-30T08:48:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f73aa23923f2229c3492fa48e0df625']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c1-ee70-4245-b036-4cc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:01.000Z",
            "modified": "2015-09-30T08:48:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'globus113.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c2-7b6c-487e-bbdf-4b83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:02.000Z",
            "modified": "2015-09-30T08:48:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'globus1290.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c2-84ec-4a50-a2ab-4893950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:02.000Z",
            "modified": "2015-09-30T08:48:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f744fbe72dc85145aa5b82b053d6424']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c2-2ae8-4d0f-b3fe-4267950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:02.000Z",
            "modified": "2015-09-30T08:48:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'glps88.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c2-7ebc-4034-a666-4009950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:02.000Z",
            "modified": "2015-09-30T08:48:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'goggif2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c2-6ba8-431f-b4c4-4ade950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:02.000Z",
            "modified": "2015-09-30T08:48:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f806dbf467d9768e38b129cf2d713fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c2-8cbc-44ab-8252-4dfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:02.000Z",
            "modified": "2015-09-30T08:48:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gogleupdate.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c2-4da0-4e58-9598-4097950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:02.000Z",
            "modified": "2015-09-30T08:48:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gokhan06900.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c2-8600-43c3-8a2b-43c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:02.000Z",
            "modified": "2015-09-30T08:48:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f8a34329071dceb16087678274baf6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c3-04b0-45f5-9639-4071950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:03.000Z",
            "modified": "2015-09-30T08:48:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gokkurtdarkcomet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c3-a490-4b42-85ba-4975950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:03.000Z",
            "modified": "2015-09-30T08:48:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'goko.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c3-8da4-4b1a-8d4f-46bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:03.000Z",
            "modified": "2015-09-30T08:48:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2f938eefbd911c6b348af12db79da0ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c3-53c0-4c8d-bc75-44c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:03.000Z",
            "modified": "2015-09-30T08:48:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'google1247.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c3-60ac-4f2a-bbe0-4caf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:03.000Z",
            "modified": "2015-09-30T08:48:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'googlealg.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c3-c0e4-430a-9098-468b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:03.000Z",
            "modified": "2015-09-30T08:48:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fa1e6f06d3c70f31c2de189d0d3b30d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c3-0624-428c-96b3-489b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:03.000Z",
            "modified": "2015-09-30T08:48:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'googleconnection.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c4-a708-4589-9990-4acd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:04.000Z",
            "modified": "2015-09-30T08:48:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'googleinc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c4-52e4-4c0a-b6d4-40d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:04.000Z",
            "modified": "2015-09-30T08:48:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fa4b346f9d431e8bbfa63e6f1dcf6a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c4-0ef0-4a42-9f6e-462f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:04.000Z",
            "modified": "2015-09-30T08:48:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'googleisgay2121.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c4-a2cc-42ba-8fc2-458d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:04.000Z",
            "modified": "2015-09-30T08:48:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'googleport.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c4-90d8-4757-b676-4255950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:04.000Z",
            "modified": "2015-09-30T08:48:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fa8d5455ccfd2cb461f908185468a7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c4-a468-4177-b8d7-4867950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:04.000Z",
            "modified": "2015-09-30T08:48:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'googleservers.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c4-d9c0-4401-853a-4375950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:04.000Z",
            "modified": "2015-09-30T08:48:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'goom.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c4-3c50-4691-b6ee-446d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:04.000Z",
            "modified": "2015-09-30T08:48:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fb00c9d8da54a8a9b625dfe970fe54e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c5-e704-4f7d-a9b0-4ea2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:05.000Z",
            "modified": "2015-09-30T08:48:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gorm.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c5-5778-4f4c-9835-4ab4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:05.000Z",
            "modified": "2015-09-30T08:48:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gosa.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c5-a2d0-4e6f-94e8-4589950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:05.000Z",
            "modified": "2015-09-30T08:48:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fbb8f7c6fc5514245f1ec19a3b39cb1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c5-2ad8-47e9-b69c-4905950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:05.000Z",
            "modified": "2015-09-30T08:48:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'govardhan123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c5-22b8-4167-a4ff-417b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:05.000Z",
            "modified": "2015-09-30T08:48:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fc063b11d3e70d504f2acea0e27b55f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c5-ace0-4391-a0c6-4ae2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:05.000Z",
            "modified": "2015-09-30T08:48:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gr88cht.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c6-5cd0-4aed-8467-4bc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:06.000Z",
            "modified": "2015-09-30T08:48:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fc1f5bfd644291ac475a9821b2ee1b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c6-1aa4-4fd4-9dfd-4870950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:06.000Z",
            "modified": "2015-09-30T08:48:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'greendeathsp.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c6-432c-4708-ae69-499f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:06.000Z",
            "modified": "2015-09-30T08:48:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fdd7bde86d2fcaebb36357266ad6f13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c6-c6e8-4cca-afd4-4649950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:06.000Z",
            "modified": "2015-09-30T08:48:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'gresta1.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c6-f5a0-4904-8ebc-4a7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:06.000Z",
            "modified": "2015-09-30T08:48:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fe6e9b484e498f92bd30f4e0b404c15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c6-7fb8-4a15-a08e-475c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:06.000Z",
            "modified": "2015-09-30T08:48:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'greyhat2.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c7-6430-421b-b908-4052950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:07.000Z",
            "modified": "2015-09-30T08:48:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2feacc8e7d109db1bbf1af59ca346c8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c7-a740-482f-8dae-43b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:07.000Z",
            "modified": "2015-09-30T08:48:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'grimpvp.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c7-1e74-4d5b-8a95-4108950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:07.000Z",
            "modified": "2015-09-30T08:48:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2ffc56afb999f99c45ad8ebd2697205f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c7-576c-45be-a739-4624950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:07.000Z",
            "modified": "2015-09-30T08:48:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'grinkamilanhosts.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c7-3e10-451c-8891-4f82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:07.000Z",
            "modified": "2015-09-30T08:48:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '2fff34ba8a61057bc85923429eaa8a37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c7-ad5c-430e-acdb-451d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:07.000Z",
            "modified": "2015-09-30T08:48:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'grishania.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c8-fe60-4d5f-a5e5-4bfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:08.000Z",
            "modified": "2015-09-30T08:48:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3003a535ea25711c6075bf8ebd89b53f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c8-32dc-46ed-99a3-49d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:08.000Z",
            "modified": "2015-09-30T08:48:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'grox123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c8-d03c-4719-a3dc-426b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:08.000Z",
            "modified": "2015-09-30T08:48:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30097de7781e07a1737fe2deb088f4e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c8-43fc-41e7-b69d-414a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:08.000Z",
            "modified": "2015-09-30T08:48:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'grumpy78300.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c8-b630-4f94-ab41-4808950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:08.000Z",
            "modified": "2015-09-30T08:48:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '300c18ea381d7e8064870c5fa7daaa33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c9-821c-45fb-9f39-4a79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:09.000Z",
            "modified": "2015-09-30T08:48:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'guard1234.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c9-396c-48df-85d5-4c71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:09.000Z",
            "modified": "2015-09-30T08:48:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3010b4c11b089c73d70089a6675b830a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c9-2810-4cef-88c8-4a0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:09.000Z",
            "modified": "2015-09-30T08:48:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'guilty-alien.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c9-c04c-40d5-86c0-467d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:09.000Z",
            "modified": "2015-09-30T08:48:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3029029c95575dd047affe5c03f82202']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c9-dd10-43fa-94dc-4c3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:09.000Z",
            "modified": "2015-09-30T08:48:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'guitaristeb13.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1c9-bdc8-4b01-8512-416d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:09.000Z",
            "modified": "2015-09-30T08:48:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '302bcb04e716e5afdf140b0d95166d41']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ca-de54-4bed-b168-450b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:10.000Z",
            "modified": "2015-09-30T08:48:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'guruaidlol.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ca-ba40-4132-8fa7-4f7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:10.000Z",
            "modified": "2015-09-30T08:48:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '302c879ce9e3bce6a6e0fb3ad4508149']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ca-dc9c-4702-a403-4ce5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:10.000Z",
            "modified": "2015-09-30T08:48:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'guzzz.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ca-3bd8-4453-a8ff-4b32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:10.000Z",
            "modified": "2015-09-30T08:48:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3047be34cc26fef7189efb7e9f37d1ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ca-e2dc-4f81-89f6-407d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:10.000Z",
            "modified": "2015-09-30T08:48:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'h32.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cb-acd0-436d-8ff6-4959950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:11.000Z",
            "modified": "2015-09-30T08:48:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '306478a90a524ae0b08a870e466733ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cb-75f8-4fcb-bf4f-42dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:11.000Z",
            "modified": "2015-09-30T08:48:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'h32.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cb-c924-492d-bd99-49ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:11.000Z",
            "modified": "2015-09-30T08:48:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '306d5d1dab027e833e4ffc4c1afe5ad7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cb-152c-4769-b56c-4144950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:11.000Z",
            "modified": "2015-09-30T08:48:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'h3c41trke.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cb-0ac4-4be4-b551-49fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:11.000Z",
            "modified": "2015-09-30T08:48:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3077959813f6589f7abd4567ee147a5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cb-faf0-48fb-92f4-4846950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:11.000Z",
            "modified": "2015-09-30T08:48:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'h3ker.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cc-8bf4-4f3d-b7fc-494b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:12.000Z",
            "modified": "2015-09-30T08:48:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '307936a7519cb4c0342c33359b7dbc16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cc-bc0c-49df-b46e-4f6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:12.000Z",
            "modified": "2015-09-30T08:48:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'h420.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cc-3358-4483-b762-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:12.000Z",
            "modified": "2015-09-30T08:48:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '307bc01c5605df43fa4002940ff1a9bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cc-4d0c-48b1-adfd-4d33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:12.000Z",
            "modified": "2015-09-30T08:48:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'h4kando.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cc-7bec-438c-8f0b-4e87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:12.000Z",
            "modified": "2015-09-30T08:48:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3081f8d2a24df0790e1d004eab30f394']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cd-0984-4ce9-bbfb-4f1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:13.000Z",
            "modified": "2015-09-30T08:48:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'h4x-rko.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cd-7c80-45e7-bc3f-4ca2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:13.000Z",
            "modified": "2015-09-30T08:48:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3090c2a61ea5fdcf1b488afbfcd11149']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cd-4e7c-44d4-a8f1-4dd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:13.000Z",
            "modified": "2015-09-30T08:48:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'h56.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cd-34dc-4596-9593-4d03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:13.000Z",
            "modified": "2015-09-30T08:48:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30976909f760bbe5abe9e84a76523314']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cd-78dc-4015-8544-4b44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:13.000Z",
            "modified": "2015-09-30T08:48:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'haackvirmod.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cd-fbc8-4c6f-a892-4ef0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:13.000Z",
            "modified": "2015-09-30T08:48:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '309fce7ebae60c4791ffe3f344ee5921']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ce-2ee8-4b66-b46b-4676950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:14.000Z",
            "modified": "2015-09-30T08:48:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'habbhoteleu.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ce-7f24-45ab-9f4e-46ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:14.000Z",
            "modified": "2015-09-30T08:48:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30adb32605830a8f96546e40397c581c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ce-1e9c-43b3-acd6-40f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:14.000Z",
            "modified": "2015-09-30T08:48:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'habloidhax.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ce-a0f0-4442-8455-4239950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:14.000Z",
            "modified": "2015-09-30T08:48:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30b54e3e3df4cfe443af9af10921aa9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ce-2144-4ab2-a096-44cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:14.000Z",
            "modified": "2015-09-30T08:48:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hack112233.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ce-6484-4162-93ab-49eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:14.000Z",
            "modified": "2015-09-30T08:48:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30b9fda5453b5dceb1c3ce8e43ff043a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cf-bd9c-4b58-8d32-4931950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:15.000Z",
            "modified": "2015-09-30T08:48:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hack228.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cf-4604-489a-8395-4910950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:15.000Z",
            "modified": "2015-09-30T08:48:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30bacb826eed6b5c1261ef06c8b4368b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cf-1bb8-4310-9af3-4ef6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:15.000Z",
            "modified": "2015-09-30T08:48:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hack228666777.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cf-9050-4360-960c-48bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:15.000Z",
            "modified": "2015-09-30T08:48:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30bd19a64a2270bf08301f42669231d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1cf-7688-467b-bb53-48c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:15.000Z",
            "modified": "2015-09-30T08:48:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hack3dpc.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d0-1238-4955-b61e-46e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:16.000Z",
            "modified": "2015-09-30T08:48:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30c71492e6aedf545ebaab6edff2f32c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d0-a374-47ef-8012-4b5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:16.000Z",
            "modified": "2015-09-30T08:48:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackbabyhack.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d0-a928-4842-be3d-4a51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:16.000Z",
            "modified": "2015-09-30T08:48:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30ca3938f0a121e485ee0ae7e70a6fbc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d0-0010-4a61-9343-4ad5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:16.000Z",
            "modified": "2015-09-30T08:48:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackbat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d0-b974-4408-b72c-4c6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:16.000Z",
            "modified": "2015-09-30T08:48:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30ca6594632fe4d9e6d18a96277f25e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d1-25f0-4e98-8877-40d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:17.000Z",
            "modified": "2015-09-30T08:48:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackbydz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d1-956c-4816-a2b9-49bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:17.000Z",
            "modified": "2015-09-30T08:48:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30d95441ec4103f2c78eb788015109ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d1-16b8-4a05-8d38-45d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:17.000Z",
            "modified": "2015-09-30T08:48:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackcardatn.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d1-e708-49e5-809c-494c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:17.000Z",
            "modified": "2015-09-30T08:48:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30edeb1678f5cd7dc39db753c2bbb004']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d1-06f8-44c0-91e5-49b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:17.000Z",
            "modified": "2015-09-30T08:48:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackead.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d1-1224-4baf-afc4-4b23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:17.000Z",
            "modified": "2015-09-30T08:48:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30f22bc61773c9733e6c8685531c5534']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d2-638c-4051-a882-4275950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:18.000Z",
            "modified": "2015-09-30T08:48:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hacked-frost.myftp.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d2-1fd0-43a4-b632-4dc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:18.000Z",
            "modified": "2015-09-30T08:48:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30f54eae3e12b2573d712faf744c2cbd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d2-fbe0-4c8e-a915-4aa8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:18.000Z",
            "modified": "2015-09-30T08:48:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackedbitch.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d2-7f38-4810-86d9-4cb8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:18.000Z",
            "modified": "2015-09-30T08:48:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30f9b0e96670aa765f24c7ccc41d2e47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d2-8f60-41b4-aa0c-43ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:18.000Z",
            "modified": "2015-09-30T08:48:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackedbyalvin.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d3-3f10-434e-aa51-4315950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:19.000Z",
            "modified": "2015-09-30T08:48:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30fc3c6c7c66986373312a64dd333671']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d3-af8c-440f-b33a-4d4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:19.000Z",
            "modified": "2015-09-30T08:48:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackedbyandrikos.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d3-7804-4455-bcfd-4233950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:19.000Z",
            "modified": "2015-09-30T08:48:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '30fcaa13d6cfec3a96afcde251ded442']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d3-1e0c-44a7-93fc-436a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:19.000Z",
            "modified": "2015-09-30T08:48:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackedona.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d3-db30-41d9-b9ee-40b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:19.000Z",
            "modified": "2015-09-30T08:48:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3104f70837cb6b3e1efcdf9a231ac97d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d3-2a30-4140-8099-4f7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:19.000Z",
            "modified": "2015-09-30T08:48:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackedrat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d4-2390-4f40-8b6f-4e88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:20.000Z",
            "modified": "2015-09-30T08:48:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '310b705bd1073e629d57d5e80a31bfec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d4-a728-4276-a86d-4458950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:20.000Z",
            "modified": "2015-09-30T08:48:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hacker1471.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d4-4bd4-4455-a728-4c88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:20.000Z",
            "modified": "2015-09-30T08:48:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '310e8dee083ba4398880916bb2650bc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d4-2c98-4371-98d6-4b5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:20.000Z",
            "modified": "2015-09-30T08:48:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hacker65.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d4-ddf8-41fa-a0f5-4136950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:20.000Z",
            "modified": "2015-09-30T08:48:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3116265604d9e9b46a4bfe285749fb2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d5-b2d4-4423-a2b8-4cc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:21.000Z",
            "modified": "2015-09-30T08:48:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackerb13.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d5-1900-4913-87b4-493a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:21.000Z",
            "modified": "2015-09-30T08:48:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3120eb7eeb60e4cfcd5ce029f08b5d67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d5-dc14-4e35-889c-4425950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:21.000Z",
            "modified": "2015-09-30T08:48:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackerboy24.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d5-0490-4256-9f2d-4924950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:21.000Z",
            "modified": "2015-09-30T08:48:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31249a6b9028bea271224452c192c751']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d5-b8a4-4b9c-9b5f-4272950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:21.000Z",
            "modified": "2015-09-30T08:48:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackerbymuroo.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d5-bc70-4718-9d86-48ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:21.000Z",
            "modified": "2015-09-30T08:48:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31289053b668188afd1837d15ed121dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d6-6ae8-405f-ac57-4d97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:22.000Z",
            "modified": "2015-09-30T08:48:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackerdark532.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d6-5334-449c-898a-4482950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:22.000Z",
            "modified": "2015-09-30T08:48:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3132429dd32902cd41493e993886f0df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d6-a314-46f3-bd4e-47bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:22.000Z",
            "modified": "2015-09-30T08:48:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackerdebutant.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d6-da9c-4d6e-8ae6-4e01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:22.000Z",
            "modified": "2015-09-30T08:48:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '313fa0e143ae458e67664493ad83cbca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d6-c120-4b6c-a905-428e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:22.000Z",
            "modified": "2015-09-30T08:48:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackerdopb.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d7-a178-4f91-8f5c-4f52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:23.000Z",
            "modified": "2015-09-30T08:48:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31490a34582e72973ceb21c181e10c95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d7-5300-4ff5-8ec4-40f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:23.000Z",
            "modified": "2015-09-30T08:48:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackerkomega.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d7-837c-4f4c-9d63-44ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:23.000Z",
            "modified": "2015-09-30T08:48:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '315c34d919e975e14cffd4402254534d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d7-5f58-451c-9fe2-40f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:23.000Z",
            "modified": "2015-09-30T08:48:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackermania123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d7-3494-4c98-bcf3-4c31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:23.000Z",
            "modified": "2015-09-30T08:48:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '316acbe04dbc74ae9c24dfef079c65a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d8-08d8-4b04-a1f8-4295950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:23.000Z",
            "modified": "2015-09-30T08:48:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackernakazal.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d8-0a10-427c-a7f0-4c43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:24.000Z",
            "modified": "2015-09-30T08:48:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31718931fe3ca03579e4ccd9e8b84d6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d8-cb78-42fd-a9b5-457b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:24.000Z",
            "modified": "2015-09-30T08:48:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackersafado.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d8-0b04-4a87-a454-4e3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:24.000Z",
            "modified": "2015-09-30T08:48:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '318143ff83f30952ecfb3063c74af503']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d8-13f0-4b9a-bf6a-4af2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:24.000Z",
            "modified": "2015-09-30T08:48:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackigorello2.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d8-bb88-4103-a840-49d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:24.000Z",
            "modified": "2015-09-30T08:48:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3183bef5f83ab0ea9bb15b39a7aeeabb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d9-67bc-4450-b695-4156950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:25.000Z",
            "modified": "2015-09-30T08:48:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hacking1234.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d9-4b3c-4b34-9d37-4cf2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:25.000Z",
            "modified": "2015-09-30T08:48:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '318ecf04913404f78380d476f7b82db3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d9-1be4-4a61-b16c-4bf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:25.000Z",
            "modified": "2015-09-30T08:48:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackingdanish.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d9-5bc0-4083-bce4-423a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:25.000Z",
            "modified": "2015-09-30T08:48:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '319072eed8d193864eefcde9bf64bc84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d9-1868-4990-86c9-47e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:25.000Z",
            "modified": "2015-09-30T08:48:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackinghamachi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1d9-beec-46d7-b82d-4419950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:25.000Z",
            "modified": "2015-09-30T08:48:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31a0d99a775469329285906c7e6989c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1da-5adc-44d2-b8ee-4013950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:26.000Z",
            "modified": "2015-09-30T08:48:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackingnsa.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1da-6704-48f3-b690-4266950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:26.000Z",
            "modified": "2015-09-30T08:48:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31a64f9886a7087c2871ade4f8e8c754']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1da-9920-47b3-b8d2-4b6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:26.000Z",
            "modified": "2015-09-30T08:48:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackingserver.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1da-f640-4cfd-ab20-4d63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:26.000Z",
            "modified": "2015-09-30T08:48:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31abcfcff6f673c783649d354f5ca9e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1da-4250-46ad-a981-40f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:26.000Z",
            "modified": "2015-09-30T08:48:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackinparadise.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1db-c2e0-4385-bf67-49d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:27.000Z",
            "modified": "2015-09-30T08:48:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31aec592342acd0cebf6295b65437249']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1db-c1cc-40ef-8d14-4bb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:27.000Z",
            "modified": "2015-09-30T08:48:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackkhanz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1db-e8fc-4911-b3a9-4d0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:27.000Z",
            "modified": "2015-09-30T08:48:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31b4f00a9b9f097caa4652c2d929751a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1db-ea24-4da8-92bc-422a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:27.000Z",
            "modified": "2015-09-30T08:48:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackkhanzz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1db-9060-492d-9603-4936950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:27.000Z",
            "modified": "2015-09-30T08:48:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31ca1d0d6cbd08f5f952feff6dbf8b67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dc-2fc0-4ebb-b528-4f6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:28.000Z",
            "modified": "2015-09-30T08:48:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackmaster89.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dc-29a4-4991-9431-448d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:28.000Z",
            "modified": "2015-09-30T08:48:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31d41141847c1fa704e1e3b40ba1224c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dc-fcb4-4ee5-9c1d-47e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:28.000Z",
            "modified": "2015-09-30T08:48:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hacknjrat09.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dc-99c8-45d9-924a-4415950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:28.000Z",
            "modified": "2015-09-30T08:48:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31db7a5f33006db761dbb8effe2e561d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dc-e93c-4ffe-9e5c-4fef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:28.000Z",
            "modified": "2015-09-30T08:48:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hacko12345.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dc-6324-448e-9dd0-490e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:28.000Z",
            "modified": "2015-09-30T08:48:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31defe448c309e82359b1867ee780619']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dd-efd8-46c5-b2b0-4cf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:29.000Z",
            "modified": "2015-09-30T08:48:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackoneflipser.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dd-6960-4246-acb4-42a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:29.000Z",
            "modified": "2015-09-30T08:48:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31e2d8ae3a2899985e6cf24a9d9a8f5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dd-d620-4ac9-80a6-437c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:29.000Z",
            "modified": "2015-09-30T08:48:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackteam576.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dd-fb40-4dbd-b6ff-44fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:29.000Z",
            "modified": "2015-09-30T08:48:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31ea54cbb755ef402ecfb3f083ab0117']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1dd-6dc4-4830-815c-4320950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:29.000Z",
            "modified": "2015-09-30T08:48:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hackzserver.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1de-e070-48e3-adfe-4627950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:29.000Z",
            "modified": "2015-09-30T08:48:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31ec65d208e678e055a2c38254f493e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1de-d528-4623-97a1-42c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:30.000Z",
            "modified": "2015-09-30T08:48:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hairybuns83.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1de-009c-467c-906c-4a02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:30.000Z",
            "modified": "2015-09-30T08:48:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31ec79fefea60679017cbaff2f3821be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1de-6408-47d4-b737-493f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:30.000Z",
            "modified": "2015-09-30T08:48:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hairybuns83rat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1de-8b9c-42db-8238-4a1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:30.000Z",
            "modified": "2015-09-30T08:48:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '31fa29e365a024557cacf552422572d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1df-77c8-4883-9919-4982950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:30.000Z",
            "modified": "2015-09-30T08:48:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'haizerno.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1df-8b98-40ea-a220-4363950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:31.000Z",
            "modified": "2015-09-30T08:48:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32013a2bfa93acbfaeeacdcc37e2bfe5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1df-3be0-4d6b-8c8d-4106950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:31.000Z",
            "modified": "2015-09-30T08:48:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hak3d.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1df-a0d8-4b60-a9f1-4c2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:31.000Z",
            "modified": "2015-09-30T08:48:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '320780dccab208301abf62bc32e65f57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1df-4840-4864-8358-4e26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:31.000Z",
            "modified": "2015-09-30T08:48:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'halahalala.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1df-e4b0-4550-a6e4-48be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:31.000Z",
            "modified": "2015-09-30T08:48:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3219f10ae4190ec1f943211e2c358fce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e0-8e0c-4d33-b6fe-4cd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:32.000Z",
            "modified": "2015-09-30T08:48:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hamaher.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e0-fc14-4520-a29a-45f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:32.000Z",
            "modified": "2015-09-30T08:48:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '321e201b15f33e7552ce76fb9b4e3d32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e0-1ca0-4bdd-b718-4cbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:32.000Z",
            "modified": "2015-09-30T08:48:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hammerhearde.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e0-55f4-412d-bf21-4472950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:32.000Z",
            "modified": "2015-09-30T08:48:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3226f2077e2c0102fbc2e108499f5cba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e0-35ec-4e10-853a-4729950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:32.000Z",
            "modified": "2015-09-30T08:48:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hancho.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e0-b32c-47ec-a219-4766950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:32.000Z",
            "modified": "2015-09-30T08:48:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '322a11eb8fa3f9fa0555c7964ad1375e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e1-b7a4-4d19-ba1f-4fed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:33.000Z",
            "modified": "2015-09-30T08:48:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'harputlu..duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e1-7104-4208-a1d6-4e43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:33.000Z",
            "modified": "2015-09-30T08:48:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '322aa8d0b63c48e322598cd40fd651a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e1-68e0-491f-be91-4f5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:33.000Z",
            "modified": "2015-09-30T08:48:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'harry12.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e1-64ac-497e-b50d-45c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:33.000Z",
            "modified": "2015-09-30T08:48:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '322e6231fe4cad697709ff18eb555cb5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e1-55d0-4bbe-88d5-49b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:33.000Z",
            "modified": "2015-09-30T08:48:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hartman-anonymous.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e2-0e88-4162-9442-4ef9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:34.000Z",
            "modified": "2015-09-30T08:48:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '323e354a5278eb201750f7a7bc99e4ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e2-3584-480a-b74e-4350950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:34.000Z",
            "modified": "2015-09-30T08:48:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'harunuysal.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e2-bec8-4b7b-80bb-4850950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:34.000Z",
            "modified": "2015-09-30T08:48:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32410c8e44dac30410400ada5aef7ff9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e2-0404-4238-8a02-4333950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:34.000Z",
            "modified": "2015-09-30T08:48:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hatemsniper123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e2-5560-4984-8e81-4ce4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:34.000Z",
            "modified": "2015-09-30T08:48:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32425fd03bd49a8d5094da1bb2bf6754']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e3-5990-4237-a7ab-40c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:35.000Z",
            "modified": "2015-09-30T08:48:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'haveaccount.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e3-64d8-4ea4-aa9d-4e7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:35.000Z",
            "modified": "2015-09-30T08:48:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '325d68b63cfa4e5bf1e0394eec1c83b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e3-1d10-4ed6-9d78-4d98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:35.000Z",
            "modified": "2015-09-30T08:48:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'haxzor.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e3-3dcc-4b84-b787-4170950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:35.000Z",
            "modified": "2015-09-30T08:48:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32668d1664a3d9d4019f5fa38dc37923']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e3-8030-44cd-99c4-498b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:35.000Z",
            "modified": "2015-09-30T08:48:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'haydenpen.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e3-94d8-4e1f-95cd-4ded950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:35.000Z",
            "modified": "2015-09-30T08:48:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32738c469c60df8f8ce67f3b6a40aaac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e4-e930-440c-9e03-46bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:36.000Z",
            "modified": "2015-09-30T08:48:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hck8mster.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e4-2590-4270-a2fc-45e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:36.000Z",
            "modified": "2015-09-30T08:48:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3283ed5068e39956d7f00c2c6339f4fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e4-f178-4606-9b4f-46ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:36.000Z",
            "modified": "2015-09-30T08:48:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hckkk.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e4-a914-45da-b148-4555950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:36.000Z",
            "modified": "2015-09-30T08:48:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32852c9f924d8e63eb4cfe02a2bb9c7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e4-8f6c-4b3e-9df3-4f08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:36.000Z",
            "modified": "2015-09-30T08:48:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hcokiid.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e4-f508-4bd6-9ad7-4ae2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:36.000Z",
            "modified": "2015-09-30T08:48:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32905a6fcd523e06f58f0dff2da64e6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e5-4534-40e0-b2a9-4bf2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:37.000Z",
            "modified": "2015-09-30T08:48:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hdz.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e5-2900-4825-a9a1-4ec8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:37.000Z",
            "modified": "2015-09-30T08:48:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3292760683dea54adfa121c5b1370f11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e5-e0dc-48e7-a7d5-4ee3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:37.000Z",
            "modified": "2015-09-30T08:48:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'heartofdvl.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e5-b714-40a1-87f4-4e4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:37.000Z",
            "modified": "2015-09-30T08:48:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32a0ea0d3050812bf370068400a10a3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e5-ff40-492d-b2b0-423f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:37.000Z",
            "modified": "2015-09-30T08:48:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'heartofdvl.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e6-f328-45d5-9e94-4f88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:38.000Z",
            "modified": "2015-09-30T08:48:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32a38730e573e985355c15ac51ca9a35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e6-2178-45ea-ab68-4d99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:38.000Z",
            "modified": "2015-09-30T08:48:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'heartofman.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e6-c630-4de6-83dd-4cab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:38.000Z",
            "modified": "2015-09-30T08:48:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32a7bc0916428400468f6a87d3e15e77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e6-d000-4b0d-9bd0-4f8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:38.000Z",
            "modified": "2015-09-30T08:48:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hectorsalamanco.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e6-09f8-4d0d-b1de-4034950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:38.000Z",
            "modified": "2015-09-30T08:48:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32a9cef9839044c5c4eea023f7130d71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e7-2560-4aea-9fc6-488f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:39.000Z",
            "modified": "2015-09-30T08:48:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hectortr.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e7-b588-47e9-acce-4509950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:39.000Z",
            "modified": "2015-09-30T08:48:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32bb5bb4ef1e2bc5ea805675427a5eb6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e7-fa64-4c58-8eb2-48ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:39.000Z",
            "modified": "2015-09-30T08:48:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'heddserver.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e7-d7f4-4ae0-96b0-4e68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:39.000Z",
            "modified": "2015-09-30T08:48:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32bd3847d4da2bdcfa7fdc8d2cb640df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e7-bd60-45e1-b316-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:39.000Z",
            "modified": "2015-09-30T08:48:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'heebsisgay.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e7-37cc-4aa8-9adb-4c87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:39.000Z",
            "modified": "2015-09-30T08:48:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32c5312a41fd38e43783aa79103bac0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e8-e870-4abb-a278-4b2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:40.000Z",
            "modified": "2015-09-30T08:48:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hejhej.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e8-5de4-410c-8ba9-4bf0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:40.000Z",
            "modified": "2015-09-30T08:48:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32cf5ff954d394e1dc7a1ae9c13d4cea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e8-2bac-4a8a-9b91-4270950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:40.000Z",
            "modified": "2015-09-30T08:48:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hell-gaming.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e8-ae28-4fd3-bec1-4c2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:40.000Z",
            "modified": "2015-09-30T08:48:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32d2603e7577c22b9c9bff7e1fd422b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e8-1770-46d7-bc56-41d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:40.000Z",
            "modified": "2015-09-30T08:48:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hellocosmos.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e9-4e50-4b7b-8be8-4046950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:41.000Z",
            "modified": "2015-09-30T08:48:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32d431fad7eea7d9e0b04bbef8eb96e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e9-3d74-4b7c-8a56-4483950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:41.000Z",
            "modified": "2015-09-30T08:48:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hellokx.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e9-ef58-430c-830b-4c5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:41.000Z",
            "modified": "2015-09-30T08:48:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32d4fe92ad8c48ff23084bb6c75fadf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e9-e410-47bb-a4cf-457d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:41.000Z",
            "modified": "2015-09-30T08:48:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hellomynameisjeff.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1e9-b980-445d-a4db-4ba5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:41.000Z",
            "modified": "2015-09-30T08:48:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32d52c8bbb81aa6b7a8f86953738090e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ea-8014-415f-a002-4988950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:42.000Z",
            "modified": "2015-09-30T08:48:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'helmodkush.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ea-e33c-49f8-b9bc-44e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:42.000Z",
            "modified": "2015-09-30T08:48:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32e1ab3599f2582c110008cb42767c46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ea-ef98-45de-9eb1-4793950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:42.000Z",
            "modified": "2015-09-30T08:48:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'helper.servebeer.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ea-aff0-4bf5-ac22-4df8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:42.000Z",
            "modified": "2015-09-30T08:48:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32edb5bd2a52ffbcaec77796069aabca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ea-6220-41be-9c9b-4a50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:42.000Z",
            "modified": "2015-09-30T08:48:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hendriusdark.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ea-c7ac-4a86-83c7-4e8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:42.000Z",
            "modified": "2015-09-30T08:48:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32ee628d05c7eb9e6479d564ffabd61d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1eb-64b0-4afe-8fbe-4e82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:43.000Z",
            "modified": "2015-09-30T08:48:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'heretia.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1eb-6004-40dd-8022-4a89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:43.000Z",
            "modified": "2015-09-30T08:48:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32f0580e7e345623e9b440268fa367ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1eb-1a44-4185-98fc-42d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:43.000Z",
            "modified": "2015-09-30T08:48:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hereticrat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1eb-f1a8-4ee6-9701-4230950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:43.000Z",
            "modified": "2015-09-30T08:48:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32f1e575c2499631b0000ba2d3c817ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1eb-2dc8-408d-865c-44f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:43.000Z",
            "modified": "2015-09-30T08:48:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'herhalde.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ec-742c-4a40-a0ad-4f6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:44.000Z",
            "modified": "2015-09-30T08:48:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32f9b15b2f988f36b958f7ac29387576']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ec-8340-4107-9934-4d6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:44.000Z",
            "modified": "2015-09-30T08:48:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'herhaldeyani.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ec-0470-4af8-b869-4ba3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:44.000Z",
            "modified": "2015-09-30T08:48:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '32fe1148624d6be7d11ab303c37d3b09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ec-3198-4233-9dc7-4170950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:44.000Z",
            "modified": "2015-09-30T08:48:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hermozone.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ec-9d54-4ef7-b494-4e4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:44.000Z",
            "modified": "2015-09-30T08:48:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3300184060c07a88638ecbe0b1ee0d2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ec-0194-4b33-af09-421d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:44.000Z",
            "modified": "2015-09-30T08:48:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'herohero.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ed-f058-4ddd-bfc0-4b73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:45.000Z",
            "modified": "2015-09-30T08:48:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3300b8b19ea741c3d3b996f7b4a1cb9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ed-4ac0-4380-bb76-431e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:45.000Z",
            "modified": "2015-09-30T08:48:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hexylmodzz.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ed-f40c-4e9d-8ee0-4db3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:45.000Z",
            "modified": "2015-09-30T08:48:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '330c3ca991969243975d07cb8684d824']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ed-9f94-4af6-b1f4-4cd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:45.000Z",
            "modified": "2015-09-30T08:48:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hfrat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ed-d710-40e5-9286-4ac5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:45.000Z",
            "modified": "2015-09-30T08:48:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '331c950d9277346526de5e3a1205b000']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ee-5900-4a5c-a7c7-42e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:46.000Z",
            "modified": "2015-09-30T08:48:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hhhaaa.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ee-0cd0-4957-a4ba-4f58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:46.000Z",
            "modified": "2015-09-30T08:48:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33306b3a847f45e642b5f2ef8312217a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ee-c014-4401-aa88-4265950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:46.000Z",
            "modified": "2015-09-30T08:48:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hicham157484.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ee-443c-42f5-91fc-4819950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:46.000Z",
            "modified": "2015-09-30T08:48:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33343f5c868d7aafb72850bd5e1143bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ee-8600-4892-9703-4927950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:46.000Z",
            "modified": "2015-09-30T08:48:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hichaman.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ee-d92c-49d9-a7cc-4347950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:46.000Z",
            "modified": "2015-09-30T08:48:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3340cb6c55424a4849656f3fcca68516']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ef-9540-4bcf-aba5-475d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:47.000Z",
            "modified": "2015-09-30T08:48:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hichamreal198.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ef-1270-4139-9be7-4011950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:47.000Z",
            "modified": "2015-09-30T08:48:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '334f251dc28f056e840f3cfb9006c3fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ef-0338-4cac-ab98-42b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:47.000Z",
            "modified": "2015-09-30T08:48:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hicyabye.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ef-9ed8-4790-b6a7-4d2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:47.000Z",
            "modified": "2015-09-30T08:48:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3368bf773be9d3e107e2ee0ae72125d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ef-f4e8-4417-9357-482a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:47.000Z",
            "modified": "2015-09-30T08:48:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hiddendark.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f0-7a0c-42fd-93b2-4eaa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:48.000Z",
            "modified": "2015-09-30T08:48:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '336a95b0483b4369462e108f2538b011']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f0-b2dc-4b9a-9ce2-4a2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:48.000Z",
            "modified": "2015-09-30T08:48:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hiddenrobloxrat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f0-cfa0-4ec7-bfb0-4f6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:48.000Z",
            "modified": "2015-09-30T08:48:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33761cfa58cdaad0bb0f8c4abddc8397']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f0-3154-4008-8ad8-4dfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:48.000Z",
            "modified": "2015-09-30T08:48:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hide-ip.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f0-7314-47bc-9b90-45dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:48.000Z",
            "modified": "2015-09-30T08:48:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33809dea15e2d60e5607229a896077e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f1-d07c-4a22-b8ee-42a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:49.000Z",
            "modified": "2015-09-30T08:48:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hiepngulol.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f1-0628-4166-9cf3-48ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:49.000Z",
            "modified": "2015-09-30T08:48:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33816327296234eb4bd34cdad11fb501']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f1-8588-4578-a66e-4fcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:49.000Z",
            "modified": "2015-09-30T08:48:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hierrodc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f1-c700-4238-9570-4095950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:49.000Z",
            "modified": "2015-09-30T08:48:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3382964ea50fedaa50a70493937a4da7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f1-91a4-48c3-afcd-470c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:49.000Z",
            "modified": "2015-09-30T08:48:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hilecim.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f1-9564-40bb-81e8-406e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:49.000Z",
            "modified": "2015-09-30T08:48:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3390042b3fad4169f10b6ae66326c72f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f2-266c-4ae5-960b-4031950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:50.000Z",
            "modified": "2015-09-30T08:48:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hileciyiz21.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f2-c5cc-4039-abf9-4f32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:50.000Z",
            "modified": "2015-09-30T08:48:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '339ac2b43acdcd6c258ab100180eeb94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f2-3e20-4aa3-b3d0-4f10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:50.000Z",
            "modified": "2015-09-30T08:48:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'himatest.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f2-b964-4b13-9f1f-40f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:50.000Z",
            "modified": "2015-09-30T08:48:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '339ba6c6ea302de004e7cd1a7301b216']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f2-5db0-4052-8a19-4d5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:50.000Z",
            "modified": "2015-09-30T08:48:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hishonda42.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f2-a244-4f11-aeb7-45b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:50.000Z",
            "modified": "2015-09-30T08:48:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33b46d15605a29f56506d1389ad413d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f3-e3a4-4b28-be93-4987950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:51.000Z",
            "modified": "2015-09-30T08:48:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hizaoui.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f3-b144-41b7-9ccc-4408950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:51.000Z",
            "modified": "2015-09-30T08:48:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33b63f6a887fc2b4a7b24c24224b3471']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f3-44b4-4e12-ae54-48a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:51.000Z",
            "modified": "2015-09-30T08:48:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hjfgjhjghj.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f3-66ac-4119-a033-41fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:51.000Z",
            "modified": "2015-09-30T08:48:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33b99f485a9abb965b1228dd8949a5f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f3-df78-4253-baf2-481b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:51.000Z",
            "modified": "2015-09-30T08:48:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hkaihiwatari.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f4-dad8-415d-a8e1-4e62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:52.000Z",
            "modified": "2015-09-30T08:48:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33c3422e7fc9beabf92ddefc85188624']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f4-b614-424a-9645-4a68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:52.000Z",
            "modified": "2015-09-30T08:48:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hnoo17.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f4-9938-4f07-84ae-403c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:52.000Z",
            "modified": "2015-09-30T08:48:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33c68e5e078ff94a8399829618ad6c1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f4-57e4-4620-95ff-4dba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:52.000Z",
            "modified": "2015-09-30T08:48:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hoangthanh996.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f4-72c8-4c22-b89c-4c1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:52.000Z",
            "modified": "2015-09-30T08:48:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33cd3b7c128040f22dda601c17c4ca92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f5-738c-435d-ae28-4828950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:53.000Z",
            "modified": "2015-09-30T08:48:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hocmercmo1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f5-f4b8-436d-9e1d-47eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:53.000Z",
            "modified": "2015-09-30T08:48:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33d03cac77fe31171c7ed52499fd58f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f5-fb7c-40f3-bd38-4289950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:53.000Z",
            "modified": "2015-09-30T08:48:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'holycrickey1234.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f5-7cb0-42d9-8f70-4fab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:53.000Z",
            "modified": "2015-09-30T08:48:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33db80e72b6c25569f4fbf755020930a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f5-5cbc-4b85-8437-4ac8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:53.000Z",
            "modified": "2015-09-30T08:48:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'honus7.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f5-ebe4-420a-a84d-48fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:53.000Z",
            "modified": "2015-09-30T08:48:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33e6463555aa109e285208bbff9613ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f6-ff1c-4d33-9ae7-4cf7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:54.000Z",
            "modified": "2015-09-30T08:48:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hooskiserver.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f6-ffc4-4ee9-a295-4179950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:54.000Z",
            "modified": "2015-09-30T08:48:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33ea3086c803dbaf8f668f9198aa20ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f6-160c-491a-8292-41f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:54.000Z",
            "modified": "2015-09-30T08:48:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hoosterr.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f6-59d0-446e-8630-4d0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:54.000Z",
            "modified": "2015-09-30T08:48:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33ebdad4d184acbea09f809a5b126b48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f6-79d4-4e11-a86a-446f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:54.000Z",
            "modified": "2015-09-30T08:48:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'horansugerballe.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f7-5c78-49d1-bc6b-49e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:55.000Z",
            "modified": "2015-09-30T08:48:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33ec0b1a47074c92f79189ddc8732d3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f7-4b9c-4133-afd3-4b51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:55.000Z",
            "modified": "2015-09-30T08:48:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'host12321.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f7-02f0-4aac-8db5-4635950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:55.000Z",
            "modified": "2015-09-30T08:48:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '33f13e35e40abd6bc0fb7b7fcb34568b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f7-d9d0-4b56-920b-4091950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:55.000Z",
            "modified": "2015-09-30T08:48:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'host232.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f7-4f7c-4574-98ff-4940950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:55.000Z",
            "modified": "2015-09-30T08:48:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34080507f08dfa7f5b5dbdcd06416ddf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f8-b204-470d-bc54-46c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:56.000Z",
            "modified": "2015-09-30T08:48:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'host333228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f8-d7d8-4852-aecf-469e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:56.000Z",
            "modified": "2015-09-30T08:48:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '342cc9200dc0300f603bc620a03c58c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f8-b698-4171-9143-40a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:56.000Z",
            "modified": "2015-09-30T08:48:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hosthack.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f8-4a74-49b2-9437-4dba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:56.000Z",
            "modified": "2015-09-30T08:48:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3439692f74b53caea3119895a257e498']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f8-a320-448e-a86d-4213950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:56.000Z",
            "modified": "2015-09-30T08:48:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hostminecraft.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f8-43bc-4d6c-8519-4fc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:56.000Z",
            "modified": "2015-09-30T08:48:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '343ff3ac0e65923581835f60313bde42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f9-2c00-4da5-b963-458f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:57.000Z",
            "modified": "2015-09-30T08:48:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hostpstop.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f9-88d8-42e5-9d67-47c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:57.000Z",
            "modified": "2015-09-30T08:48:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '344b82d7f5060b345f8ef0041a891111']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f9-53b0-4bfd-8a01-4d04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:57.000Z",
            "modified": "2015-09-30T08:48:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hotspt.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f9-f480-4609-9024-40c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:57.000Z",
            "modified": "2015-09-30T08:48:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34528d70f02a8ab5782af80d80b7f016']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1f9-b124-4a6c-9106-4c4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:57.000Z",
            "modified": "2015-09-30T08:48:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'houlette.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fa-3aa8-478c-a62c-4c92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:58.000Z",
            "modified": "2015-09-30T08:48:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3454986f06478d6ae3afcfc4ff8c8d57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fa-3be4-4a7e-881c-4c25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:58.000Z",
            "modified": "2015-09-30T08:48:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hoyda.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fa-f31c-4bdc-86bf-4e85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:58.000Z",
            "modified": "2015-09-30T08:48:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3454b35ca1f4185f36b678de49c0a3b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fa-4634-4f97-b700-41ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:58.000Z",
            "modified": "2015-09-30T08:48:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3454c139ea4db1991532f169ea65cff6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fb-4278-496d-8d91-4494950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:59.000Z",
            "modified": "2015-09-30T08:48:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3469f6d8aab6796ab3eb33cb92849fb6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fb-abac-4f92-83cc-4fe3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:59.000Z",
            "modified": "2015-09-30T08:48:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '346a038cd54fe2e626f1819cb92be695']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fb-a318-4dee-92d5-4b01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:48:59.000Z",
            "modified": "2015-09-30T08:48:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '346cfa2fdd4fd870c7059afc729c6956']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:48:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fc-99f4-438f-930b-4051950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:00.000Z",
            "modified": "2015-09-30T08:49:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hudcu.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fc-c738-416c-bf39-467b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:00.000Z",
            "modified": "2015-09-30T08:49:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '347ecfd31448b4325337c23c16947d58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fc-2600-48c2-8684-44bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:00.000Z",
            "modified": "2015-09-30T08:49:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'huepiska.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fc-f720-4a6a-b451-4b59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:00.000Z",
            "modified": "2015-09-30T08:49:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34940778cd3a7d766874e571f62729b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fc-821c-4369-b639-49f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:00.000Z",
            "modified": "2015-09-30T08:49:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hugerat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fc-8b00-41c4-8a67-4d90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:00.000Z",
            "modified": "2015-09-30T08:49:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34a01014bc61ee99120d4fcdda9525c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fd-7644-4cf6-aa9d-4050950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:01.000Z",
            "modified": "2015-09-30T08:49:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hungeria.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fd-0cb4-4ace-9d47-4189950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:01.000Z",
            "modified": "2015-09-30T08:49:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34a399a44a0fe6936ec7047c6093c352']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fd-00a4-4101-a263-484f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:01.000Z",
            "modified": "2015-09-30T08:49:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hunteramazigh.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fd-f788-43f2-ab15-4184950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:01.000Z",
            "modified": "2015-09-30T08:49:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34a5c260069e1df15efc00a382bd6740']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fd-14ec-414e-919d-49f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:01.000Z",
            "modified": "2015-09-30T08:49:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hunterfirstrsps.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fe-4b20-4d1e-b56a-4cee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:02.000Z",
            "modified": "2015-09-30T08:49:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34a6d7d2681f3a76af1555230e1e3519']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fe-f5a8-4a8b-9116-4d18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:02.000Z",
            "modified": "2015-09-30T08:49:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'huoraaturpaa.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fe-ef48-4d9f-9b64-4a42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:02.000Z",
            "modified": "2015-09-30T08:49:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34a8af47c96bc6090aaaa12cda1fd3a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fe-b9b4-4a50-9f7d-4956950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:02.000Z",
            "modified": "2015-09-30T08:49:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'husseinmud10.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1fe-3a58-4db4-aeec-4c07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:02.000Z",
            "modified": "2015-09-30T08:49:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34b043bc49c7ad0022d3be1f7b03d965']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ff-e100-4079-be1b-42e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:03.000Z",
            "modified": "2015-09-30T08:49:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'hyperhydra.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ff-c030-4e3c-9cb1-49f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:03.000Z",
            "modified": "2015-09-30T08:49:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34b04cfd399a5e63c79867111d0db6a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ff-6b8c-431d-a6f1-4502950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:03.000Z",
            "modified": "2015-09-30T08:49:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iamarat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ff-d194-4e46-9ab6-48ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:03.000Z",
            "modified": "2015-09-30T08:49:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34b956ae33013f7e477d4d097e199cea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ff-bc90-419b-8114-465b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:03.000Z",
            "modified": "2015-09-30T08:49:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iamhere11.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba1ff-7324-4c8d-a090-4d55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:03.000Z",
            "modified": "2015-09-30T08:49:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34bbc0ffc06940c0c6397dcc848c842a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba200-2b20-42a5-a428-4c00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:04.000Z",
            "modified": "2015-09-30T08:49:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ibrahem22.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba200-2bec-400d-adee-414f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:04.000Z",
            "modified": "2015-09-30T08:49:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34dd020a0a391136c3c41f1d7a60eef1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba200-f650-4940-aac0-4967950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:04.000Z",
            "modified": "2015-09-30T08:49:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'icecomet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba200-c710-4c6e-bfc2-4f6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:04.000Z",
            "modified": "2015-09-30T08:49:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34de76a33b71700f9e006f5a2a20cc48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba200-b8c8-4f45-850d-41a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:04.000Z",
            "modified": "2015-09-30T08:49:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ichmagponies.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba201-5304-4c89-96c9-43ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:05.000Z",
            "modified": "2015-09-30T08:49:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34e0528176ebbf660951f27209e65868']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba201-5968-4ef4-9cc0-49b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:05.000Z",
            "modified": "2015-09-30T08:49:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'idontcare.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba201-ff1c-4b75-a660-4292950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:05.000Z",
            "modified": "2015-09-30T08:49:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34e265333b18f99609db3aa557a304de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba201-d60c-4b08-8476-48da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:05.000Z",
            "modified": "2015-09-30T08:49:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ief93oalds940.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba201-fe0c-4ed6-9b1c-4a08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:05.000Z",
            "modified": "2015-09-30T08:49:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34e27fe3bc8d4cb5f5c46720b1043b11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba202-974c-49e1-a93e-4e4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:06.000Z",
            "modified": "2015-09-30T08:49:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ien92.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba202-be1c-45b1-acfe-41c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:06.000Z",
            "modified": "2015-09-30T08:49:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34ec08222d56da4c8af3768031bd8032']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba202-6f88-4bfa-b1bb-4374950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:06.000Z",
            "modified": "2015-09-30T08:49:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'igiorombo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba202-a80c-4b4e-a8c2-4a7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:06.000Z",
            "modified": "2015-09-30T08:49:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '34f0a86e090a44ef966bea40f7b0af02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba202-c284-4621-9190-416e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:06.000Z",
            "modified": "2015-09-30T08:49:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'igor541.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba202-f290-4470-89b0-43d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:06.000Z",
            "modified": "2015-09-30T08:49:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '350cbdd04b42a96a92cde8b137657ca7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba203-ea5c-4869-9a01-4dc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:07.000Z",
            "modified": "2015-09-30T08:49:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'igordns157.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba203-b484-4fbb-a858-4c35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:07.000Z",
            "modified": "2015-09-30T08:49:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '350f95ba72a60751d4d0aa60de460ecb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba203-a12c-4ebc-aa05-425c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:07.000Z",
            "modified": "2015-09-30T08:49:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'igrok345.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba203-de34-4238-8643-4686950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:07.000Z",
            "modified": "2015-09-30T08:49:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35183fd550c16ca8a2cb7abc8a7f8c18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba203-8bcc-4b16-92d2-4719950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:07.000Z",
            "modified": "2015-09-30T08:49:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ihackkidslikeyou.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba203-5004-42d8-a451-4c05950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:07.000Z",
            "modified": "2015-09-30T08:49:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '351897d131c4d43475425776cf560a7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba204-4718-47ea-810f-4fa7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:08.000Z",
            "modified": "2015-09-30T08:49:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ihaveyou.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba204-2ec0-4ac0-b65e-4e9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:08.000Z",
            "modified": "2015-09-30T08:49:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35260e1c488da520cec1b6115367c016']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba204-4c08-476c-90dc-4090950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:08.000Z",
            "modified": "2015-09-30T08:49:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ihemn123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba204-04c4-49de-aac8-4bfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:08.000Z",
            "modified": "2015-09-30T08:49:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '352a9d5a64328507fc723a16e15157d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba204-d198-4121-bd96-4eb5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:08.000Z",
            "modified": "2015-09-30T08:49:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ihsanbaba.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba205-75c0-499b-b0ab-4edc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:09.000Z",
            "modified": "2015-09-30T08:49:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3538e2ce91f056258c2953f9edae1d2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba205-1184-474a-928e-4572950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:09.000Z",
            "modified": "2015-09-30T08:49:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iiiliii.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba205-335c-459f-b69a-4786950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:09.000Z",
            "modified": "2015-09-30T08:49:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '354d7c76eb2d2f10eb15dab9ec8e4b89']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba205-e11c-4bb5-bc20-4ce9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:09.000Z",
            "modified": "2015-09-30T08:49:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iinmarco.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba205-4a58-44a2-8d1d-46b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:09.000Z",
            "modified": "2015-09-30T08:49:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '355063bf54898d64bf6a3fcb12a5dc75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba206-df24-4cd0-939f-4578950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:10.000Z",
            "modified": "2015-09-30T08:49:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iiubacuk.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba206-8a00-4017-b4ab-413d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:10.000Z",
            "modified": "2015-09-30T08:49:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '356337eb5db1a6b9b6a7d1bebe75713c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba206-cde8-4d5d-aa60-47e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:10.000Z",
            "modified": "2015-09-30T08:49:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iklera.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba206-9434-46b6-bc7e-419c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:10.000Z",
            "modified": "2015-09-30T08:49:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '357b7caa52dadab6f22dc0c46811956e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba206-2b1c-4b2a-9f87-4557950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:10.000Z",
            "modified": "2015-09-30T08:49:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iliasilias11.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba206-4b78-4a61-a355-460a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:10.000Z",
            "modified": "2015-09-30T08:49:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3592061fc56127d4f60a011a8264b36b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba207-4ef0-4904-a1c4-4772950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:11.000Z",
            "modified": "2015-09-30T08:49:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ilikebigcock.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba207-34dc-4ac5-9919-45bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:11.000Z",
            "modified": "2015-09-30T08:49:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35a04c34b3f5a86c5b4ac34daf9ffeae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba207-d538-4734-b351-4a2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:11.000Z",
            "modified": "2015-09-30T08:49:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iliketrains.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba207-fd4c-4a7b-bdf4-441a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:11.000Z",
            "modified": "2015-09-30T08:49:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35a5621aa9b65974012cb6731787e144']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba207-4e74-4e3c-90bf-44e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:11.000Z",
            "modified": "2015-09-30T08:49:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iliykol121121.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba207-40d4-427a-a59e-43eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:11.000Z",
            "modified": "2015-09-30T08:49:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35aa4d5db5f0dc389f23917f4dc5c278']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba208-8140-4dcb-ba15-46fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:12.000Z",
            "modified": "2015-09-30T08:49:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ilkemsemih.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba208-6d70-4ce9-a74c-4142950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:12.000Z",
            "modified": "2015-09-30T08:49:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35ac9cf158de58381c005adf757f1b74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba208-8b40-4931-9bcf-456e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:12.000Z",
            "modified": "2015-09-30T08:49:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ilkerdark.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba208-d068-406c-b10c-4521950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:12.000Z",
            "modified": "2015-09-30T08:49:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35aede90277cd430e3217d49fbcacc12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba208-4788-4a7e-aebe-4795950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:12.000Z",
            "modified": "2015-09-30T08:49:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'illrekya.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba209-e008-4504-a5d9-4fc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:13.000Z",
            "modified": "2015-09-30T08:49:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35b77521891018bd8a85a48bb8ecddca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba209-77e8-47d1-b585-4741950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:13.000Z",
            "modified": "2015-09-30T08:49:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iloveroxy1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba209-a8d4-496f-8798-45c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:13.000Z",
            "modified": "2015-09-30T08:49:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35b896f6a11e8b22db9c6f3fece1b0dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba209-9d50-4901-adb9-42fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:13.000Z",
            "modified": "2015-09-30T08:49:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iloveyou5678.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba209-ced4-4a93-9cb4-4e60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:13.000Z",
            "modified": "2015-09-30T08:49:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35c868a501854a54c37039344f48575b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20a-4450-4171-967e-4080950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:14.000Z",
            "modified": "2015-09-30T08:49:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ilya5229152290.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20a-9d00-4365-8256-4f7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:14.000Z",
            "modified": "2015-09-30T08:49:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35ec7f7d059347a96fc493032eec168d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20a-3a80-46fd-a287-43b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:14.000Z",
            "modified": "2015-09-30T08:49:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ilyeskassoul.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20a-431c-4138-a56f-4b38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:14.000Z",
            "modified": "2015-09-30T08:49:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '35f5be9282e424d5ad45b0b757872ec1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20a-2448-4f99-baf4-442b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:14.000Z",
            "modified": "2015-09-30T08:49:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ilyq159.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20a-a7dc-46d2-85a6-4c58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:14.000Z",
            "modified": "2015-09-30T08:49:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36030b17651b10fa6084b0bf24539222']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20b-7e7c-44d6-b147-4314950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:15.000Z",
            "modified": "2015-09-30T08:49:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'imad.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20b-8a70-4a07-b23f-4c04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:15.000Z",
            "modified": "2015-09-30T08:49:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36058a5b4c05de496f252af335fa9f1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20b-4760-46f1-b333-41fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:15.000Z",
            "modified": "2015-09-30T08:49:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'imblue.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20b-65c0-4aa9-bfbf-43c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:15.000Z",
            "modified": "2015-09-30T08:49:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36083d5778a3f9a3da22d196d553234e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20b-85d4-477a-9bd0-4628950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:15.000Z",
            "modified": "2015-09-30T08:49:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'imclockwork.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20c-7290-4a37-9de1-4911950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:16.000Z",
            "modified": "2015-09-30T08:49:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '361254cc7887ebcc31932384f46b528e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20c-c298-4cb1-ac02-47f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:16.000Z",
            "modified": "2015-09-30T08:49:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'imdahost.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20c-fcd8-446a-a5dc-4d92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:16.000Z",
            "modified": "2015-09-30T08:49:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3616c2652715743235d460a45e5f20f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20c-b340-42ec-a67e-495a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:16.000Z",
            "modified": "2015-09-30T08:49:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'imgfile.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20c-f10c-48ab-be1e-4258950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:16.000Z",
            "modified": "2015-09-30T08:49:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '361a189a71224f35e8734af5372ce441']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20d-03cc-41e4-99ef-4499950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:17.000Z",
            "modified": "2015-09-30T08:49:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iminent11.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20d-aadc-46a1-81b2-420a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:17.000Z",
            "modified": "2015-09-30T08:49:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3622d1f8299daf9dabe997df1b3cd86e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20d-59d4-4ada-ba4a-4679950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:17.000Z",
            "modified": "2015-09-30T08:49:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iminside.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20d-7f30-4a9f-8b37-4fb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:17.000Z",
            "modified": "2015-09-30T08:49:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36240aa2848dac426b30600a3d109865']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20d-1480-459c-8b10-4e4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:17.000Z",
            "modified": "2015-09-30T08:49:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'immortalcoding.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20d-1abc-42c9-8ae1-450b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:17.000Z",
            "modified": "2015-09-30T08:49:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3627c305ace47201c6e9835e24d574e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20e-b30c-4aaa-af14-4f5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:18.000Z",
            "modified": "2015-09-30T08:49:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'imnobody.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20e-415c-4d05-932e-40eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:18.000Z",
            "modified": "2015-09-30T08:49:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '362e8721ff518d9c574d2156cfce42b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20e-fe50-4b8a-bd2e-41f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:18.000Z",
            "modified": "2015-09-30T08:49:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'important.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20e-7860-4c4f-aaf1-4b18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:18.000Z",
            "modified": "2015-09-30T08:49:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '362f5f53c8d5a25f11c35a8ef6ada9fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20e-5384-4a0f-be7a-428b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:18.000Z",
            "modified": "2015-09-30T08:49:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'inceilknur96.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20e-f710-4d47-8206-407b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:18.000Z",
            "modified": "2015-09-30T08:49:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36309d56790fb8c90c974423b4183354']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20f-0668-4f3f-b42f-41cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:19.000Z",
            "modified": "2015-09-30T08:49:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'individualen.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20f-8714-4094-a3f2-4b4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:19.000Z",
            "modified": "2015-09-30T08:49:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3632dbc3e51c18546e4b4f34c19a573c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20f-d144-4bfb-8375-4b03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:19.000Z",
            "modified": "2015-09-30T08:49:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'infathos.ignorelist.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20f-ab98-4e0f-9f92-4694950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:19.000Z",
            "modified": "2015-09-30T08:49:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3647aeae2ffbf37072b7100ef3a2a775']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba20f-df28-4d8f-8e81-465a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:19.000Z",
            "modified": "2015-09-30T08:49:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'infected.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba210-81ac-481d-9236-4303950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:20.000Z",
            "modified": "2015-09-30T08:49:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '364e4543e5db8a444f714ecd785a270c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba210-0c34-4627-ae3b-4371950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:20.000Z",
            "modified": "2015-09-30T08:49:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'inforeaper.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba210-7f98-4a0c-96b4-48ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:20.000Z",
            "modified": "2015-09-30T08:49:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '365b9a3e6298215d2948b43e3c21e8bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba210-41ec-46f3-b481-41d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:20.000Z",
            "modified": "2015-09-30T08:49:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'infraredhere.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba210-4ec4-43ac-9b71-4001950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:20.000Z",
            "modified": "2015-09-30T08:49:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3666c3ce30706bf75ca0bf26c61970c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba211-fec8-4395-bea8-4dd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:21.000Z",
            "modified": "2015-09-30T08:49:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'inmk7086.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba211-85c4-47e8-908a-494e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:21.000Z",
            "modified": "2015-09-30T08:49:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '366d6efb53095586783a06ec8b992102']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba211-1934-483f-b07f-4193950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:21.000Z",
            "modified": "2015-09-30T08:49:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'innoxent.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba211-0b48-4400-89d0-45b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:21.000Z",
            "modified": "2015-09-30T08:49:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '366edbaeaf47c1fa2dd69d3ae7937c71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba211-a10c-49ab-bffa-42d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:21.000Z",
            "modified": "2015-09-30T08:49:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'insanitycoding.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba211-7fd0-4574-9422-4068950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:21.000Z",
            "modified": "2015-09-30T08:49:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3677cabf8f12a5588e90b9df9befe8b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba212-e960-4ae3-ad29-44a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:22.000Z",
            "modified": "2015-09-30T08:49:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'insert.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba212-a56c-4bfc-9e21-408a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:22.000Z",
            "modified": "2015-09-30T08:49:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '367c1a7daa428efdf3cac02333ef329c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba212-74d0-486b-9d0e-44b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:22.000Z",
            "modified": "2015-09-30T08:49:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'insidebucks.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba212-7d78-42c8-a423-42e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:22.000Z",
            "modified": "2015-09-30T08:49:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36806fe6f6f28cbefec8360bfe9761e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba212-4c18-4808-bf5c-4444950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:22.000Z",
            "modified": "2015-09-30T08:49:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'invadihaks123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba213-0ba4-4c74-86c9-4349950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:23.000Z",
            "modified": "2015-09-30T08:49:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '368843dd75c2fc84bc46395094afd82f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba213-447c-48db-9ca9-4f5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:23.000Z",
            "modified": "2015-09-30T08:49:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'invy.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba213-407c-44b0-b66a-4286950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:23.000Z",
            "modified": "2015-09-30T08:49:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '369805c18da6c5f8bc904c6f57bf8244']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba213-68f4-4911-83c1-4918950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:23.000Z",
            "modified": "2015-09-30T08:49:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ipconfig4.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba213-8870-47b1-976e-40ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:23.000Z",
            "modified": "2015-09-30T08:49:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36bb44c3dbb764154d0813546f5c422d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba214-d3d8-4e8b-b7eb-43f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:24.000Z",
            "modified": "2015-09-30T08:49:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ipdns.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba214-1fe8-4c99-9b2a-4aa4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:24.000Z",
            "modified": "2015-09-30T08:49:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36c3069f6dd68ce4282fe473f602f33b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba214-6498-42ae-a01e-434e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:24.000Z",
            "modified": "2015-09-30T08:49:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iphonehost.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba214-0b24-4cc2-b5e2-4b67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:24.000Z",
            "modified": "2015-09-30T08:49:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36c3f47d7543b0529716f5b6cc0d8623']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba214-5364-4191-99fd-4329950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:24.000Z",
            "modified": "2015-09-30T08:49:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iplaymymusic.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba214-1ea4-48e7-aa5d-4d94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:24.000Z",
            "modified": "2015-09-30T08:49:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36cceae41be1e62996703319d6ec1f7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba215-1a90-4642-8fc5-4881950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:25.000Z",
            "modified": "2015-09-30T08:49:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ipmacdark.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba215-9048-414c-b175-40e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:25.000Z",
            "modified": "2015-09-30T08:49:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36db4f1d9ce110263e02707b6378f4ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba215-2748-4271-8c53-4683950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:25.000Z",
            "modified": "2015-09-30T08:49:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ipping.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba215-dd5c-48ec-ae4c-483c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:25.000Z",
            "modified": "2015-09-30T08:49:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36ddd2f98daaa61582d82e2cd6e8f7a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba215-214c-43ba-8b55-4848950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:25.000Z",
            "modified": "2015-09-30T08:49:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ipservices.3utilities.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba215-c570-4918-aaa4-4c47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:25.000Z",
            "modified": "2015-09-30T08:49:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36e86735980b63cd796b76bd45c03d31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba216-c7f0-4488-b804-42a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:26.000Z",
            "modified": "2015-09-30T08:49:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'irem65haktan.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba216-cadc-45cf-a482-41e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:26.000Z",
            "modified": "2015-09-30T08:49:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36f222bf479911ffa48e439cc349f9a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba216-cc48-4e9f-b8a0-4cb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:26.000Z",
            "modified": "2015-09-30T08:49:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'irfannn.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba216-2220-4d22-8c87-494a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:26.000Z",
            "modified": "2015-09-30T08:49:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '36fe5942ca73ba7541bc638f7aa14686']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba216-dfb0-4525-9da2-4b86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:26.000Z",
            "modified": "2015-09-30T08:49:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'irishkasotona.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba217-1e74-4039-805f-46e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:27.000Z",
            "modified": "2015-09-30T08:49:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '370154f8416868ee0b42859113205565']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba217-1560-43ad-aa6c-4f29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:27.000Z",
            "modified": "2015-09-30T08:49:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'isaac69.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba217-5370-43a4-9cda-4152950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:27.000Z",
            "modified": "2015-09-30T08:49:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '370322e28cbbe9aae5cf4e65f499d4c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba217-74a4-46f2-9e18-438a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:27.000Z",
            "modified": "2015-09-30T08:49:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'isacredspectre.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba217-4964-4804-8941-400b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:27.000Z",
            "modified": "2015-09-30T08:49:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37047809042ca2cb8294ca82ce11583e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba218-4d20-4b9a-844b-44b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:28.000Z",
            "modified": "2015-09-30T08:49:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'islam2015.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba218-f120-44c3-bf63-4eff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:28.000Z",
            "modified": "2015-09-30T08:49:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '371189b677b4b8b32d3f43c219d40c0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba218-7ae0-4bd0-987e-4ab6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:28.000Z",
            "modified": "2015-09-30T08:49:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'islamder.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba218-0de4-44af-afb4-4122950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:28.000Z",
            "modified": "2015-09-30T08:49:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37127c90db47ac085448df8e01c057c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba218-e00c-41b4-bad3-4a30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:28.000Z",
            "modified": "2015-09-30T08:49:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ismailyldrm.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba218-ac70-45c1-9f28-436f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:28.000Z",
            "modified": "2015-09-30T08:49:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '372020e20ab85e33d64d79df9fe24d45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba219-d958-4f0a-85f4-4331950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:29.000Z",
            "modified": "2015-09-30T08:49:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'isotze.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba219-8d88-49c9-8bd3-435e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:29.000Z",
            "modified": "2015-09-30T08:49:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3738a7bad42df329f568dbf960497ba3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba219-c258-4f20-a55b-40f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:29.000Z",
            "modified": "2015-09-30T08:49:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'istanbul.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba219-5bbc-41e4-9f4d-455f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:29.000Z",
            "modified": "2015-09-30T08:49:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3739fda8236b558ed532a578471c2141']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba219-a8dc-4d23-ab86-4b31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:29.000Z",
            "modified": "2015-09-30T08:49:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'itstoolate.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba219-5d24-4ab4-9250-4335950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:29.000Z",
            "modified": "2015-09-30T08:49:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '373fb1f4f7d546503a4418488dd63fc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21a-66a4-4058-aa48-4ac7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:30.000Z",
            "modified": "2015-09-30T08:49:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iturtzswag.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21a-c55c-4400-95f4-48a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:30.000Z",
            "modified": "2015-09-30T08:49:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '375308d79df161b737f70b2da8973293']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21a-a208-435c-8ad1-44e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:30.000Z",
            "modified": "2015-09-30T08:49:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ivan.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21a-7f1c-4270-be6c-41a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:30.000Z",
            "modified": "2015-09-30T08:49:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3758e6206b09470ab1ae35ab536abcb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21a-b0d4-4814-a705-48f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:30.000Z",
            "modified": "2015-09-30T08:49:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ivanjazz01.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21b-3d2c-4870-8361-45c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:31.000Z",
            "modified": "2015-09-30T08:49:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3759b8b4f97423a9d89ae84cbad076eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21b-27d0-4969-9b6e-4b50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:31.000Z",
            "modified": "2015-09-30T08:49:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'iwinuwin.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21b-5ad0-45ad-897a-414d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:31.000Z",
            "modified": "2015-09-30T08:49:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '375e89de0adb51eb4f2b7ad0aa9ad83e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21b-9cb0-4909-8459-461a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:31.000Z",
            "modified": "2015-09-30T08:49:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'izideepke.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21b-ed34-425f-8e6b-4583950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:31.000Z",
            "modified": "2015-09-30T08:49:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '375f6b5ecfbb14edfec9b421d70ce972']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21c-0f1c-4fc0-a0a8-47a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:32.000Z",
            "modified": "2015-09-30T08:49:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'j0ker01.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21c-184c-4b31-aa64-4ab4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:32.000Z",
            "modified": "2015-09-30T08:49:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '375f75e165f9a4c6ac4804fccc8afdac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21c-8498-47f7-8ee0-4ae1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:32.000Z",
            "modified": "2015-09-30T08:49:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'j0ker01.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21c-96a8-4924-936b-4f6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:32.000Z",
            "modified": "2015-09-30T08:49:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37630f9a661590f6c216c3ff9be73d04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21c-757c-45a8-9892-4588950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:32.000Z",
            "modified": "2015-09-30T08:49:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'j42.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21c-fa58-4e59-9f68-4b57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:32.000Z",
            "modified": "2015-09-30T08:49:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3766cdb756bdcde5ed1a970efec84160']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21d-0b2c-416b-a239-424c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:33.000Z",
            "modified": "2015-09-30T08:49:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'j56.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21d-1e14-4348-8a8c-4d0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:33.000Z",
            "modified": "2015-09-30T08:49:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3772d766dc5b07a2f97d96b2327d49da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21d-c19c-4bc1-9aba-424a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:33.000Z",
            "modified": "2015-09-30T08:49:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'j98.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21d-0b20-4d1a-9c51-4447950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:33.000Z",
            "modified": "2015-09-30T08:49:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37740297c036c61b59717cb3b926cfe0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21d-c10c-439d-9aca-4d5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:33.000Z",
            "modified": "2015-09-30T08:49:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'j99.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21d-9a64-4274-ad13-4551950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:33.000Z",
            "modified": "2015-09-30T08:49:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3774a0d7dba97e1d720ebadf0740a6a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21e-16ac-4503-a2b1-47c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:34.000Z",
            "modified": "2015-09-30T08:49:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jaaziizi.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21e-5898-4187-8794-4cfc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:34.000Z",
            "modified": "2015-09-30T08:49:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37809d280b2ec17c3836b21e93a435b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21e-cd08-4f7c-8193-4fb5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:34.000Z",
            "modified": "2015-09-30T08:49:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jack9879.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21e-8b98-44fd-8974-4977950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:34.000Z",
            "modified": "2015-09-30T08:49:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37992ed5e4c14c66394e6ad8992597f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21e-3548-4992-afcb-4845950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:34.000Z",
            "modified": "2015-09-30T08:49:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jackdroid.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21f-0dac-4e13-8a4f-4df5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:35.000Z",
            "modified": "2015-09-30T08:49:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '379fed01a3eada42511f927d72b1a245']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21f-e758-4f24-bf4e-4947950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:35.000Z",
            "modified": "2015-09-30T08:49:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jackselecta.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21f-4180-4c0a-a6da-4f63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:35.000Z",
            "modified": "2015-09-30T08:49:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37b2844460f92117ec912880cbf314d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21f-13c8-4da3-ad72-407a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:35.000Z",
            "modified": "2015-09-30T08:49:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jackshacks.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba21f-4130-4a1b-925e-4bbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:35.000Z",
            "modified": "2015-09-30T08:49:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37b874f96598f832730f79ea349b3a3c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba220-8c60-447c-be2b-472c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:36.000Z",
            "modified": "2015-09-30T08:49:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jaeyong1502.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba220-c90c-43df-a4f5-4bde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:36.000Z",
            "modified": "2015-09-30T08:49:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37c172174dc4d97db91198b1c495474b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba220-f354-4947-b572-4669950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:36.000Z",
            "modified": "2015-09-30T08:49:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37cf4047d67295f02cf1aea5c45271a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba220-61e4-4a7b-80fd-45c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:36.000Z",
            "modified": "2015-09-30T08:49:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jaeyong999.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba220-f3c8-4611-a4ab-48f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:36.000Z",
            "modified": "2015-09-30T08:49:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37cfdb92fa57558a9518006b4898ee27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba221-e4fc-4771-a063-4377950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:37.000Z",
            "modified": "2015-09-30T08:49:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jah-team.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba221-53d8-43a3-a687-4915950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:37.000Z",
            "modified": "2015-09-30T08:49:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37e8dde74d4e9f0e9997246411bcc745']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba221-b990-4d29-aef2-4513950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:37.000Z",
            "modified": "2015-09-30T08:49:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jah.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba221-beec-4d16-9dff-4066950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:37.000Z",
            "modified": "2015-09-30T08:49:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37f79d73dc50075e09eb164f170c5559']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba221-b710-46ee-a5a5-454d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:37.000Z",
            "modified": "2015-09-30T08:49:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jakmarles.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba222-605c-4daa-b2a6-4c6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:38.000Z",
            "modified": "2015-09-30T08:49:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '37fd4d4fb1933515d6d9dd71f9bdce2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba222-9fb8-4186-ac08-432b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:38.000Z",
            "modified": "2015-09-30T08:49:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jalan2makan.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba222-5c48-4d58-8aba-4db5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:38.000Z",
            "modified": "2015-09-30T08:49:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38128f095a8c9bfd08211cfd30387ab1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba222-f2a0-4609-956e-4185950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:38.000Z",
            "modified": "2015-09-30T08:49:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jamal01.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba222-ccd0-4d30-8a4d-4d91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:38.000Z",
            "modified": "2015-09-30T08:49:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '381ca469f855ae465c0f04f2fdaa1db7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba222-e3e8-48f0-ad74-41b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:38.000Z",
            "modified": "2015-09-30T08:49:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jandarmant06.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba223-3194-4de1-b2c7-4336950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:39.000Z",
            "modified": "2015-09-30T08:49:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3820c5da30e29f5337be55fa4a7deaf4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba223-16bc-4e7a-8a3d-4e7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:39.000Z",
            "modified": "2015-09-30T08:49:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jaogp0.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba223-e0c0-4741-bbb8-4f80950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:39.000Z",
            "modified": "2015-09-30T08:49:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3835bb002ea7cd43a04b8594cb6a5a54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba223-d50c-4a25-8e3c-4e72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:39.000Z",
            "modified": "2015-09-30T08:49:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jard1999.no-ip.bizt']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba223-aea0-403f-8cba-473e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:39.000Z",
            "modified": "2015-09-30T08:49:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '383e670a364300aaac5debbff279d2e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba224-50dc-49b8-8e1f-409c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:40.000Z",
            "modified": "2015-09-30T08:49:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jaredserver.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba224-0e18-4b27-8073-4978950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:40.000Z",
            "modified": "2015-09-30T08:49:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '384110fdf6bd75a490c8fba73c7c3c7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba224-fae4-474d-a869-47ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:40.000Z",
            "modified": "2015-09-30T08:49:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jaremisko.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba224-ad00-4e4b-b43b-499d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:40.000Z",
            "modified": "2015-09-30T08:49:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38527f7f7024bc15a6edc953225ccf88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba224-b278-4c14-b7ac-4e63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:40.000Z",
            "modified": "2015-09-30T08:49:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jars.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba224-b34c-434b-b52d-4fa1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:40.000Z",
            "modified": "2015-09-30T08:49:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '385dd6ca99f83da69a09b3d86f97e2e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba225-073c-4faf-a7ee-4649950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:41.000Z",
            "modified": "2015-09-30T08:49:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jason.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba225-4a9c-4b90-8076-40c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:41.000Z",
            "modified": "2015-09-30T08:49:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38603d54fddf2ca79e87eaee80793cc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba225-b188-4635-83d1-471f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:41.000Z",
            "modified": "2015-09-30T08:49:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'javabytetech.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba225-46c0-4f45-87c2-4fe3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:41.000Z",
            "modified": "2015-09-30T08:49:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '386177f86db4c097fe5079e891dba2f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba225-8c00-465f-afd5-4f45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:41.000Z",
            "modified": "2015-09-30T08:49:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jayandtjhack.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba226-b0ac-4384-b539-49e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:42.000Z",
            "modified": "2015-09-30T08:49:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3872ebf4a51cd9a53837a1f39ff39c96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba226-4e40-438c-b602-485e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:42.000Z",
            "modified": "2015-09-30T08:49:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jaybutt.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba226-c68c-4aa4-9c90-4ae0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:42.000Z",
            "modified": "2015-09-30T08:49:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3878f7959e2b6d4aada9a4f27259e8e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba226-b940-45fb-bfd9-4322950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:42.000Z",
            "modified": "2015-09-30T08:49:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jckl.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba226-7944-412b-8f22-4226950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:42.000Z",
            "modified": "2015-09-30T08:49:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3879a50f8f4c9a3cb2a61bf804ddb223']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba226-f9fc-4819-b2ac-4eee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:42.000Z",
            "modified": "2015-09-30T08:49:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jebozovan.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba227-77b0-4420-9c58-469f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:43.000Z",
            "modified": "2015-09-30T08:49:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3887c003d9cb5eb47331d13ec6307f23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba227-2de4-41f7-a293-4c97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:43.000Z",
            "modified": "2015-09-30T08:49:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jedi.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba227-58f8-42ad-bb94-46ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:43.000Z",
            "modified": "2015-09-30T08:49:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '388c0576c8965bc215af77da9f5d8350']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba227-13a8-4076-9d91-4333950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:43.000Z",
            "modified": "2015-09-30T08:49:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jemoederinafrika.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba227-a410-4940-855f-4873950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:43.000Z",
            "modified": "2015-09-30T08:49:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38928336f76b8d76aa26bed699c73dd1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba228-c6c0-4baf-97dc-4920950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:44.000Z",
            "modified": "2015-09-30T08:49:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jenni.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba228-b63c-48ee-b671-46e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:44.000Z",
            "modified": "2015-09-30T08:49:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3896c427349365c0cb4175f4236cc39e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba228-451c-45ef-b084-41df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:44.000Z",
            "modified": "2015-09-30T08:49:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jer001.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba228-f1a4-47db-9792-4c59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:44.000Z",
            "modified": "2015-09-30T08:49:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '389da12f6ee21ac7ebe9b224915129e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba228-a284-4286-9d95-410c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:44.000Z",
            "modified": "2015-09-30T08:49:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jeromeportant.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba228-f060-4976-b6b0-44df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:44.000Z",
            "modified": "2015-09-30T08:49:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38afa22b3157badcbcd8095c8c128698']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba229-e8a8-4eb6-a977-4a27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:45.000Z",
            "modified": "2015-09-30T08:49:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jesam.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba229-d334-4ee8-88f5-4720950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:45.000Z",
            "modified": "2015-09-30T08:49:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38b2d6a9ac8c5c4077969111b3347d52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba229-2800-49fb-a416-46ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:45.000Z",
            "modified": "2015-09-30T08:49:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jestkokos.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba229-8200-48be-99b9-48d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:45.000Z",
            "modified": "2015-09-30T08:49:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38c6423990ad168b375c6baff6b2312d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba229-d930-4dbf-9b29-4012950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:45.000Z",
            "modified": "2015-09-30T08:49:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jesusloveyou.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22a-bd38-4d9b-bc77-4818950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:46.000Z",
            "modified": "2015-09-30T08:49:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38ce2727229f6570407d22ad5e3a0af1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22a-4114-47f6-aa0c-4475950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:46.000Z",
            "modified": "2015-09-30T08:49:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jevousbaise.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22a-f058-48fe-8825-4931950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:46.000Z",
            "modified": "2015-09-30T08:49:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38cfa86b5cd75324366665ab24d6cf58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22a-12f8-4141-ac16-4a8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:46.000Z",
            "modified": "2015-09-30T08:49:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jimmykarcter.ddnsking.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22a-f8e0-4a93-83b7-4b5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:46.000Z",
            "modified": "2015-09-30T08:49:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38d6e6d0830906d60165b4f11fc75e02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22b-0ef0-4f78-8c79-4e5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:47.000Z",
            "modified": "2015-09-30T08:49:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jinchurrikifag.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22b-d610-4f35-91d5-4120950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:47.000Z",
            "modified": "2015-09-30T08:49:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38e7a6b63b382a71d04c0ff670b8ded5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22b-3420-402f-9d84-46c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:47.000Z",
            "modified": "2015-09-30T08:49:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jinx404.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22b-98f4-4a72-b697-4344950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:47.000Z",
            "modified": "2015-09-30T08:49:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38e7c0e2bb1e3a7953e861199185981e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22b-5df0-4e8c-8bc1-43a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:47.000Z",
            "modified": "2015-09-30T08:49:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jinxrr.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22b-b1dc-48f3-bde9-4281950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:47.000Z",
            "modified": "2015-09-30T08:49:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38f0b94087554b94ce828aa5fb4aa0f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22c-e0c4-4bca-a0f6-4f95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:48.000Z",
            "modified": "2015-09-30T08:49:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jinxrr123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22c-cd4c-4f3b-9d1b-4ed9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:48.000Z",
            "modified": "2015-09-30T08:49:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38f22dd1d2d4b4db17589a42a4d22ef1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22c-ad5c-481c-b062-447e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:48.000Z",
            "modified": "2015-09-30T08:49:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jktujktu.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22c-4efc-436b-9811-4f5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:48.000Z",
            "modified": "2015-09-30T08:49:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38f46fc5832e2156d9faf33b3c91b8de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22c-b59c-42c6-9f7e-47b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:48.000Z",
            "modified": "2015-09-30T08:49:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jlosaq.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22c-f7fc-4151-87a8-4656950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:48.000Z",
            "modified": "2015-09-30T08:49:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '38f733d31ed6c2c5891401edb2769fb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22d-93a0-4dc4-adf7-4456950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:49.000Z",
            "modified": "2015-09-30T08:49:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jmkrar.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22d-01a0-425f-9b28-4a8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:49.000Z",
            "modified": "2015-09-30T08:49:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3902b8681e54f6c2b789824b3d79a6fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22d-a1b0-45b0-b2a4-49f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:49.000Z",
            "modified": "2015-09-30T08:49:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jn-jn182.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22d-61d8-4b04-bba5-4fd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:49.000Z",
            "modified": "2015-09-30T08:49:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3907ab6c8fdcd8dc7747b068bab7b8c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22d-3e60-4f27-a2d4-48b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:49.000Z",
            "modified": "2015-09-30T08:49:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jnrhacked.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22e-83e0-407c-b765-452f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:50.000Z",
            "modified": "2015-09-30T08:49:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39094728eda8b8c1441543844fdf20ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22e-154c-4065-9da0-4527950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:50.000Z",
            "modified": "2015-09-30T08:49:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'joakimeg.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22e-b3a8-4240-8037-4a5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:50.000Z",
            "modified": "2015-09-30T08:49:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '390cc9846fea0f0f8dabfd822e4b4e74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22e-ca28-4b3e-a2bb-4223950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:50.000Z",
            "modified": "2015-09-30T08:49:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'johnderby666.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22e-e27c-49f1-bb3c-4b81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:50.000Z",
            "modified": "2015-09-30T08:49:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3911fb8350bceb7156490bf092996f81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22f-b4c8-413e-9a7e-40a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:51.000Z",
            "modified": "2015-09-30T08:49:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jokaa.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22f-6dd0-4280-8797-469a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:51.000Z",
            "modified": "2015-09-30T08:49:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '391ad52f7b1b6d7fe0ea336e6e71dd0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22f-bccc-4267-941f-41a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:51.000Z",
            "modified": "2015-09-30T08:49:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'joker100497.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22f-ca98-4280-9844-4631950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:51.000Z",
            "modified": "2015-09-30T08:49:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '392adea6d0da23a038d6339ac9c044cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22f-811c-4721-8ff4-42d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:51.000Z",
            "modified": "2015-09-30T08:49:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jokerjoker.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba22f-0f7c-45a0-8cd3-4e83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:51.000Z",
            "modified": "2015-09-30T08:49:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3931bf95ee2895c239784301277d0911']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba230-b72c-4488-9968-4e85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:52.000Z",
            "modified": "2015-09-30T08:49:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jokerproo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba230-8094-4774-814f-4c59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:52.000Z",
            "modified": "2015-09-30T08:49:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '394024c648004352ed1a8f2d6fd5ff71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba230-bf40-4465-8ab2-4bba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:52.000Z",
            "modified": "2015-09-30T08:49:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jokersyria2012.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba230-869c-4f53-8d81-4e33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:52.000Z",
            "modified": "2015-09-30T08:49:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3941190806865b216125b4e99454a81d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba230-f3a4-46a9-9c34-4a63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:52.000Z",
            "modified": "2015-09-30T08:49:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jonny21.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba230-e598-49e7-9f2a-47ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:52.000Z",
            "modified": "2015-09-30T08:49:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '394519e00ffb584c122e31058cffcd91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba231-3208-4368-8ef6-4d68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:53.000Z",
            "modified": "2015-09-30T08:49:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jonysins.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba231-0910-4c85-94c2-4aab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:53.000Z",
            "modified": "2015-09-30T08:49:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '394a08a5f52e63d43650e53ecc31daf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba231-8290-4748-9783-449f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:53.000Z",
            "modified": "2015-09-30T08:49:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'josepconquista.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba231-d058-412b-898b-46a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:53.000Z",
            "modified": "2015-09-30T08:49:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3957b268328e413d87e8388b9c75c92b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba231-54c4-470d-93fc-400a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:53.000Z",
            "modified": "2015-09-30T08:49:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'josephlandry.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba232-a758-481c-b8d8-4e67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:54.000Z",
            "modified": "2015-09-30T08:49:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '395b870a9a45c427bef7e8420e225a76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba232-d658-4270-9181-4f82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:54.000Z",
            "modified": "2015-09-30T08:49:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'joshson11.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba232-af88-4ddd-a7ce-41b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:54.000Z",
            "modified": "2015-09-30T08:49:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '395c15bcd7ea066fa1446d02fb769f33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba232-86f0-4f25-b571-4d0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:54.000Z",
            "modified": "2015-09-30T08:49:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jratbot.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba232-db14-4b5d-85fd-4050950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:54.000Z",
            "modified": "2015-09-30T08:49:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3962e5252016791c53c33f4cb2cc8f95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba233-05a0-4c00-92ce-43c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:55.000Z",
            "modified": "2015-09-30T08:49:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jtexase.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba233-4694-47af-90ef-468a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:55.000Z",
            "modified": "2015-09-30T08:49:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '396463def29985db755efc7f37d5a407']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba233-97b4-4e9c-a077-4ba7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:55.000Z",
            "modified": "2015-09-30T08:49:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jtheboss911.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba233-18e0-462d-bcbd-4494950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:55.000Z",
            "modified": "2015-09-30T08:49:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39650a4bd941006791efce9f02270a8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba233-5848-4135-b618-4759950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:55.000Z",
            "modified": "2015-09-30T08:49:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'jtrat.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba233-4f6c-4678-a8d2-48d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:55.000Z",
            "modified": "2015-09-30T08:49:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '396c45a297f5df84140f5b471b068637']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba234-9650-4bf8-9e5c-484c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:56.000Z",
            "modified": "2015-09-30T08:49:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'justachickenwing.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba234-32f8-496a-87c6-43e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:56.000Z",
            "modified": "2015-09-30T08:49:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '396f65bd7be6449ed9c9322b673f4210']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba234-9b58-4327-9d16-4079950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:56.000Z",
            "modified": "2015-09-30T08:49:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'justatest69.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba234-7334-41f9-9c1a-4c6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:56.000Z",
            "modified": "2015-09-30T08:49:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '397752a1ab38e3c0b776aa6aab0161ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba234-ce88-49d7-b0db-4d51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:56.000Z",
            "modified": "2015-09-30T08:49:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'justfindmenoob.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba235-6cc4-4427-b62f-4160950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:57.000Z",
            "modified": "2015-09-30T08:49:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '397d18e3c03e496b313e56a53dba6d37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba235-6f44-4bed-9bf7-43c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:57.000Z",
            "modified": "2015-09-30T08:49:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'justicar.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba235-ee18-4de6-88a8-488d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:57.000Z",
            "modified": "2015-09-30T08:49:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3980b99cade8cf6a1f7b2a745a31a7f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba235-c290-4f5c-945b-41b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:57.000Z",
            "modified": "2015-09-30T08:49:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'justinlee123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba235-70a8-48d8-b295-4541950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:57.000Z",
            "modified": "2015-09-30T08:49:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3985eae121345c17835aa9a316ab4343']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba236-40d0-40b7-bcb3-4eba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:58.000Z",
            "modified": "2015-09-30T08:49:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'justroksisafaggot.servemp3.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba236-fad4-4b9d-b202-4757950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:58.000Z",
            "modified": "2015-09-30T08:49:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '398ba891e1c9fb793fa1b9c010e0d9e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba236-eb3c-46a1-8057-4e5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:58.000Z",
            "modified": "2015-09-30T08:49:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kaaii.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba236-55c0-4b07-b84a-4289950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:58.000Z",
            "modified": "2015-09-30T08:49:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '398bd43acf0e2d82e10e9a3c5f99f18d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba236-3e9c-420b-9081-45ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:58.000Z",
            "modified": "2015-09-30T08:49:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kaeso213.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba236-e0b0-4e55-9b80-43ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:58.000Z",
            "modified": "2015-09-30T08:49:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3997f4aadce62fd56cd6f18d1283357a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba237-1bd4-4daa-b5d4-42c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:59.000Z",
            "modified": "2015-09-30T08:49:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kagero-grup.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba237-08b4-4827-861a-407a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:59.000Z",
            "modified": "2015-09-30T08:49:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39a3dc7e5c52ca5f6766708856b5c059']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba237-7080-4396-85b0-4503950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:59.000Z",
            "modified": "2015-09-30T08:49:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kagero-mehmet.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba237-ac40-499a-948c-47b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:59.000Z",
            "modified": "2015-09-30T08:49:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39acfed7f48abad7c138ec3abd3d4cc0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba237-ade8-495c-964e-4efe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:49:59.000Z",
            "modified": "2015-09-30T08:49:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kaitsubr.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:49:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba238-80a4-41e7-a0e7-4ba9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:00.000Z",
            "modified": "2015-09-30T08:50:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39bb1939f8a5aceb55efefd63b9db92f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba238-68c8-448b-83f5-4a4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:00.000Z",
            "modified": "2015-09-30T08:50:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kajosek.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba238-2788-4054-b8d7-4fed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:00.000Z",
            "modified": "2015-09-30T08:50:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39becae963d67f0e2b33d3b1ae7e477a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba238-5678-4f3d-811b-40bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:00.000Z",
            "modified": "2015-09-30T08:50:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kakarot.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba238-0560-4524-aef9-42a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:00.000Z",
            "modified": "2015-09-30T08:50:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39c153b65805761a47fc8ef29fd2e43d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba239-a838-4559-b82b-4976950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:01.000Z",
            "modified": "2015-09-30T08:50:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kalala.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba239-d784-4189-ae35-4cfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:01.000Z",
            "modified": "2015-09-30T08:50:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39ec5d9cd9377a3c346c7f41ba943c9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba239-2180-425e-b51a-4d81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:01.000Z",
            "modified": "2015-09-30T08:50:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kalik.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba239-15a8-4941-90bd-49a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:01.000Z",
            "modified": "2015-09-30T08:50:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39f19ee53028d9e7a2eb8e0f5688d347']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba239-66d4-45b9-93b5-49fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:01.000Z",
            "modified": "2015-09-30T08:50:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kalkan1319.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba239-846c-4e94-855b-4435950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:01.000Z",
            "modified": "2015-09-30T08:50:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39f4a94d6036ace24cd7a49067a57f71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23a-dc28-4030-8b8c-4370950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:02.000Z",
            "modified": "2015-09-30T08:50:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kameia7306.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23a-9088-4805-a97e-4c0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:02.000Z",
            "modified": "2015-09-30T08:50:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '39fc6d33317529e6228d6f7fdfecebf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23a-45b4-435f-8676-4fb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:02.000Z",
            "modified": "2015-09-30T08:50:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kameta.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23a-0fbc-4b30-ad58-408f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:02.000Z",
            "modified": "2015-09-30T08:50:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a06016139b04c69db31673a163deea5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23a-6d74-4a1d-a744-4650950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:02.000Z",
            "modified": "2015-09-30T08:50:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kami2015.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23a-266c-4b52-a029-479e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:02.000Z",
            "modified": "2015-09-30T08:50:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a13739213271fad33b3420d9420bce0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23b-89fc-49eb-beb4-4ea9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:03.000Z",
            "modified": "2015-09-30T08:50:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kanifolduc1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23b-cacc-41c5-a5a2-46ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:03.000Z",
            "modified": "2015-09-30T08:50:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a1884d55a66ee7fb3e328fb186b3360']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23b-1d98-45de-aa30-447e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:03.000Z",
            "modified": "2015-09-30T08:50:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kanunsuzdc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23b-42c0-45bb-b1e5-421b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:03.000Z",
            "modified": "2015-09-30T08:50:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a1f5885d9399ed39936dd583e67c266']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23c-784c-4b97-a80e-4b16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:04.000Z",
            "modified": "2015-09-30T08:50:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a23b8da9ff43d5244e7aae19b850801']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23b-aa10-4d7e-b45e-41fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:03.000Z",
            "modified": "2015-09-30T08:50:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kapaxdcss.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23c-9190-4fbd-baf6-43cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:04.000Z",
            "modified": "2015-09-30T08:50:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a351f380b36e46f26b99e4305762639']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23c-0668-4475-b38b-4ed4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:04.000Z",
            "modified": "2015-09-30T08:50:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kardanadammm.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23c-832c-4be9-96a6-445c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:04.000Z",
            "modified": "2015-09-30T08:50:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'karikosan123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23c-e354-4e74-856c-4aec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:04.000Z",
            "modified": "2015-09-30T08:50:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a38feaf331a91cba5e1f165ea5b1326']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23c-6d98-4f0f-80e8-471a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:04.000Z",
            "modified": "2015-09-30T08:50:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'karizmam.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23c-7340-40f9-9d17-4466950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:04.000Z",
            "modified": "2015-09-30T08:50:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'karlosmoralesespato.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23c-bbe8-4038-bb17-484d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:04.000Z",
            "modified": "2015-09-30T08:50:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a5368a25f03013733136d3154d9775f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23d-0b30-4da9-b6ff-4cd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:05.000Z",
            "modified": "2015-09-30T08:50:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'karm2015.myftp.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23d-90a8-459d-b001-46f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:05.000Z",
            "modified": "2015-09-30T08:50:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'karm2015.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23d-2fd0-43f5-bea4-438c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:05.000Z",
            "modified": "2015-09-30T08:50:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a59453cf1e8bdd8dc5e23f92e0efc91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23d-a508-4f30-ab52-4e9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:05.000Z",
            "modified": "2015-09-30T08:50:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'karmahack.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23d-ae48-42d8-981b-461b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:05.000Z",
            "modified": "2015-09-30T08:50:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'karouisahbi.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23d-e7a8-40cc-bb66-4252950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:05.000Z",
            "modified": "2015-09-30T08:50:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a64efbaf65a997c6ce513feb7f27c98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23d-cea8-4542-87f0-40fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:05.000Z",
            "modified": "2015-09-30T08:50:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kasika.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23e-9554-4fe8-94c0-4884950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:06.000Z",
            "modified": "2015-09-30T08:50:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kasper2000.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23e-0564-40b0-a765-4542950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:06.000Z",
            "modified": "2015-09-30T08:50:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a69e991f185674e761aa0bff736fe04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23e-c6dc-41f9-9f85-461a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:06.000Z",
            "modified": "2015-09-30T08:50:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kasper2010.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23e-018c-4abf-a57c-448c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:06.000Z",
            "modified": "2015-09-30T08:50:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'katilbamya48.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23e-b384-4150-b848-4721950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:06.000Z",
            "modified": "2015-09-30T08:50:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a7022248cb7b88ab4318894258b36ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23e-3558-4590-8cf1-4159950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:06.000Z",
            "modified": "2015-09-30T08:50:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'katuawesome.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23e-eb50-4935-a594-491d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:06.000Z",
            "modified": "2015-09-30T08:50:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kawi93.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23e-258c-46d1-bcb3-4ec7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:06.000Z",
            "modified": "2015-09-30T08:50:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a7e42d3265115ba44b3968e0706b9f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23f-7678-465e-baa5-492e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:07.000Z",
            "modified": "2015-09-30T08:50:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kba69.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23f-ddf8-44c5-936f-47d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:07.000Z",
            "modified": "2015-09-30T08:50:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kcj7321.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23f-900c-4fb9-9412-4c6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:07.000Z",
            "modified": "2015-09-30T08:50:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a9107813f87d2f955dcc3d1095489a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23f-9d38-413f-a649-4f25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:07.000Z",
            "modified": "2015-09-30T08:50:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'keelek.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23f-e784-459d-9502-4c09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:07.000Z",
            "modified": "2015-09-30T08:50:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kelpi1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23f-ab9c-4a0c-966f-4bc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:07.000Z",
            "modified": "2015-09-30T08:50:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3a9acf5c09eb2e40cc7c0c7f248a1953']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23f-d414-4f1b-92a3-4548950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:07.000Z",
            "modified": "2015-09-30T08:50:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kenaworsdc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba240-0938-4c82-9505-4838950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:08.000Z",
            "modified": "2015-09-30T08:50:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kenguest.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba23f-0390-4040-99a6-41e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:07.000Z",
            "modified": "2015-09-30T08:50:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ab0ea00192181924d077317afb6099d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba240-a5d8-4194-bda6-4091950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:08.000Z",
            "modified": "2015-09-30T08:50:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kenibi.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba240-8e18-4c25-94e8-4266950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:08.000Z",
            "modified": "2015-09-30T08:50:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kenzog.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba240-e324-494b-9279-4aa3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:08.000Z",
            "modified": "2015-09-30T08:50:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ab3b1d30c2b02f2bd71e7798697e9f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba240-0470-45d4-93de-4bdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:08.000Z",
            "modified": "2015-09-30T08:50:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'keplerhost.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba240-79ac-42b3-827d-4022950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:08.000Z",
            "modified": "2015-09-30T08:50:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kerufil.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba240-2d2c-436e-8a9c-42e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:08.000Z",
            "modified": "2015-09-30T08:50:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ac027f28c9b5638351b9c0cc17ef95f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba240-e640-4f30-9423-4095950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:08.000Z",
            "modified": "2015-09-30T08:50:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kevinbaconisgreat.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba241-a024-412c-aa39-4478950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:09.000Z",
            "modified": "2015-09-30T08:50:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kevindarkcomet.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba241-f9f0-42da-956d-45fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:09.000Z",
            "modified": "2015-09-30T08:50:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3acf2751393de9935430f026d48e4d8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba241-59e4-46b6-a2f7-436b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:09.000Z",
            "modified": "2015-09-30T08:50:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'keyftp.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba241-7eb0-40e8-9673-4165950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:09.000Z",
            "modified": "2015-09-30T08:50:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'keylogger.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba241-e35c-4d1a-84de-4437950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:09.000Z",
            "modified": "2015-09-30T08:50:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ad159ef0de819cbd5f8999b905b901c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba241-7374-4b8c-89c9-4400950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:09.000Z",
            "modified": "2015-09-30T08:50:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'keylogger2014.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba241-ad34-4a38-ad12-4d9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:09.000Z",
            "modified": "2015-09-30T08:50:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'keylogmuhafizi.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba241-ba20-4bca-8db5-4c5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:09.000Z",
            "modified": "2015-09-30T08:50:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ade900ab266557c3d54d9a8fc8500bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba242-948c-402c-b143-45ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:10.000Z",
            "modified": "2015-09-30T08:50:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kfc420life.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba242-6884-4449-9e7a-4267950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:10.000Z",
            "modified": "2015-09-30T08:50:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kgykey.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba242-6fa8-4e49-b334-4b8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:10.000Z",
            "modified": "2015-09-30T08:50:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3afc4301abb1297d7cb731f0e180cabb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba242-2a1c-4c58-9631-4d18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:10.000Z",
            "modified": "2015-09-30T08:50:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'khaled132.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba242-d384-47a4-ac7a-42a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:10.000Z",
            "modified": "2015-09-30T08:50:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'khtamam90.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba242-4cd8-4027-a8d4-42a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:10.000Z",
            "modified": "2015-09-30T08:50:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b0564243894f4c2a36b21c949fd422e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba242-6454-4f17-8325-4aab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:10.000Z",
            "modified": "2015-09-30T08:50:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'khteam.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba243-8a20-4dc2-b348-40a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:11.000Z",
            "modified": "2015-09-30T08:50:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kidkad.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba242-08b8-417e-910e-4015950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:10.000Z",
            "modified": "2015-09-30T08:50:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b094c4dc6b39049f458ffd228adf84b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba243-09f4-4164-b667-458b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:11.000Z",
            "modified": "2015-09-30T08:50:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kidtaponn.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba243-7fb0-4875-a8be-45ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:11.000Z",
            "modified": "2015-09-30T08:50:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kiki0908.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba243-ace4-4a9c-8b30-4326950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:11.000Z",
            "modified": "2015-09-30T08:50:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b0a25dff7c49dd748b9d4a4073e9f8d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba243-4554-4f43-896f-4aa6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:11.000Z",
            "modified": "2015-09-30T08:50:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kiki22.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba243-c7d0-4b15-be3e-4b8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:11.000Z",
            "modified": "2015-09-30T08:50:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kikougn.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba243-a86c-4ca0-96f5-4d8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:11.000Z",
            "modified": "2015-09-30T08:50:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b0b5b88bf297f1b17763f6bfbc027c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba244-66c8-4dcd-a731-4217950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:12.000Z",
            "modified": "2015-09-30T08:50:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'killcheaters.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba244-3670-4791-a76d-480b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:12.000Z",
            "modified": "2015-09-30T08:50:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kimolo.ddnsking.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba244-b280-454d-be8f-40b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:12.000Z",
            "modified": "2015-09-30T08:50:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b0f9a977d3602b13415540b038b6580']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba244-003c-43ff-b67a-4b88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:12.000Z",
            "modified": "2015-09-30T08:50:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kin8-genral.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba244-3cb4-44d4-acba-45b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:12.000Z",
            "modified": "2015-09-30T08:50:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kinddeshut.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba244-a028-40e4-a23e-42c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:12.000Z",
            "modified": "2015-09-30T08:50:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b1b2d0e5faf4ecd5a70c2e8cedd8bda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba244-1170-461d-a4b8-47bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:12.000Z",
            "modified": "2015-09-30T08:50:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kinderriegel.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba244-b790-4dde-9623-4f96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:12.000Z",
            "modified": "2015-09-30T08:50:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kingc0.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba244-e670-48d7-ba36-4502950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:12.000Z",
            "modified": "2015-09-30T08:50:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b1f4a532d99a570e798b96847473902']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba245-0b88-43c7-a13d-4b4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:13.000Z",
            "modified": "2015-09-30T08:50:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kingking859624.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba245-aaf4-4667-9858-4cd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:13.000Z",
            "modified": "2015-09-30T08:50:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kinglagg.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba245-1390-45c7-8b5d-4176950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:13.000Z",
            "modified": "2015-09-30T08:50:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b2281c86f40f28d0df60326b6930415']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba245-e500-4838-a8e5-4a88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:13.000Z",
            "modified": "2015-09-30T08:50:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kingodtheworld.servecounterstrike.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba245-c57c-4168-a26d-4830950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:13.000Z",
            "modified": "2015-09-30T08:50:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kingprog.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba245-6838-4f06-bbd5-4aeb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:13.000Z",
            "modified": "2015-09-30T08:50:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b3244fc7158c35e638f149ba655fdc0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba245-6c44-4fd0-b6bc-4dc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:13.000Z",
            "modified": "2015-09-30T08:50:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kingsgb.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba246-ef00-4303-81d5-469a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:14.000Z",
            "modified": "2015-09-30T08:50:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kira2110.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba246-f2cc-4824-a411-46a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:13.000Z",
            "modified": "2015-09-30T08:50:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b34a1aeabe502cba86ba251362d179f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba246-31a4-4ea5-b20b-418d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:14.000Z",
            "modified": "2015-09-30T08:50:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kirillco.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba246-5b50-43c6-a2fd-4f2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:14.000Z",
            "modified": "2015-09-30T08:50:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kirillkorolev.ddnsking.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba246-bb38-409e-b5fc-446f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:14.000Z",
            "modified": "2015-09-30T08:50:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b3d84595f892827f338ccb8e6094496']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba246-fb48-4386-8b7e-4c43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:14.000Z",
            "modified": "2015-09-30T08:50:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kirra0078787.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba246-2d8c-4ec5-b4dd-476f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:14.000Z",
            "modified": "2015-09-30T08:50:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kisa.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba246-57c4-4d19-b31b-46f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:14.000Z",
            "modified": "2015-09-30T08:50:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b497a9fec2115aff9599066d835b333']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba247-f6d8-476e-8a6e-490c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:15.000Z",
            "modified": "2015-09-30T08:50:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kisakisa.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba247-e66c-40e1-ab18-4038950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:15.000Z",
            "modified": "2015-09-30T08:50:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kiselekchannel.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba247-1064-4c41-ac8e-40a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:15.000Z",
            "modified": "2015-09-30T08:50:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b4a702f7fdeb5a589e8e45a32c3a315']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba247-a034-4c47-b311-438e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:15.000Z",
            "modified": "2015-09-30T08:50:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kitkat11.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba247-e340-4488-8a9f-4e6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:15.000Z",
            "modified": "2015-09-30T08:50:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kittieamii.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba247-d9fc-4048-b6ee-4dbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:15.000Z",
            "modified": "2015-09-30T08:50:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b4ca53852fc1a6ba0e52c5c33085a55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba247-543c-4c4c-a7ff-4093950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:15.000Z",
            "modified": "2015-09-30T08:50:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kiuiaflgdsf.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba247-8298-4152-8291-418a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:15.000Z",
            "modified": "2015-09-30T08:50:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kiuiaflgdsf1.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba247-a448-47a6-83e9-462f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:15.000Z",
            "modified": "2015-09-30T08:50:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b4fc50d54353dc81fc3e9e54d877738']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba248-1ef0-4792-bc37-4179950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:16.000Z",
            "modified": "2015-09-30T08:50:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kiuiaflgdsf2.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba248-4560-411c-97f8-415f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:16.000Z",
            "modified": "2015-09-30T08:50:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kiuiaflgdsf3.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba248-2fec-44ab-bce9-4c17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:16.000Z",
            "modified": "2015-09-30T08:50:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b56482d3695ab53ff888251a399a298']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba248-1bf8-4e22-b3a6-48ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:16.000Z",
            "modified": "2015-09-30T08:50:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kiuiaflgdsf4.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba248-6138-4278-bf3b-4177950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:16.000Z",
            "modified": "2015-09-30T08:50:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kiuiaflgdsf5.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba248-0354-4a55-bf9a-4517950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:16.000Z",
            "modified": "2015-09-30T08:50:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b6570266326b467d20c6d740f0b8187']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba248-18a8-4b44-a444-4b49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:16.000Z",
            "modified": "2015-09-30T08:50:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'klaidasj.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba249-6cc0-4ea7-9f6a-45c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:17.000Z",
            "modified": "2015-09-30T08:50:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'klemen2015.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba249-fdac-4e4a-9258-4a43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:17.000Z",
            "modified": "2015-09-30T08:50:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b6e5a078a1ef33ae542e229f7f16b29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba249-9384-459e-8854-4743950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:17.000Z",
            "modified": "2015-09-30T08:50:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kli44.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba249-500c-4ea7-882f-478b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:17.000Z",
            "modified": "2015-09-30T08:50:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kli4ka1989.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba249-2850-47ca-81d8-446b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:17.000Z",
            "modified": "2015-09-30T08:50:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b7e3b2f2c9600db88ca589e2e1c37d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba249-ade4-4702-ae19-4189950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:17.000Z",
            "modified": "2015-09-30T08:50:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'knlaak.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba249-6298-4068-8a43-45b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:17.000Z",
            "modified": "2015-09-30T08:50:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kobelev123123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba249-e2ac-45ce-995f-4d9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:17.000Z",
            "modified": "2015-09-30T08:50:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b833b5559f1362296daa81049ef3c6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24a-b5c8-46aa-8120-458e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:18.000Z",
            "modified": "2015-09-30T08:50:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kodlack14.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24a-e388-42d7-a476-4881950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:18.000Z",
            "modified": "2015-09-30T08:50:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'koe.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24a-8198-418e-b61d-4873950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:18.000Z",
            "modified": "2015-09-30T08:50:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b864bb262009d9547a2b955c2c130fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24a-dc98-46f4-b55f-4927950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:18.000Z",
            "modified": "2015-09-30T08:50:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kolya.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24a-3aa8-4f1e-becb-43c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:18.000Z",
            "modified": "2015-09-30T08:50:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kolyan.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24a-2bf0-4526-b3f5-42b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:18.000Z",
            "modified": "2015-09-30T08:50:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b87a9e1e5c24a58bdf8538b74dc38cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24a-ab24-4896-9d3f-4b7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:18.000Z",
            "modified": "2015-09-30T08:50:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'komikcaps.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24b-47c4-4e71-bc86-4751950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:19.000Z",
            "modified": "2015-09-30T08:50:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'konlikesmen.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24a-246c-4499-b090-4f62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:18.000Z",
            "modified": "2015-09-30T08:50:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b8f16c555573d9711b73d8bde468acd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24b-aa94-4eb8-a912-4d43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:19.000Z",
            "modified": "2015-09-30T08:50:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'konrad.ignorelist.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24b-6e6c-4cdb-bd78-4240950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:19.000Z",
            "modified": "2015-09-30T08:50:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kontolanime.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24b-0b90-4026-8a0a-4bb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:19.000Z",
            "modified": "2015-09-30T08:50:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b9822a3a1cf9aa63dfa9d0e9ac87203']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24b-76dc-45ce-9f92-4f6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:19.000Z",
            "modified": "2015-09-30T08:50:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kosomak.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24b-9784-49bb-b7ab-4ebc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:19.000Z",
            "modified": "2015-09-30T08:50:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kot9pa.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24b-f638-459c-ade9-4bcc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:19.000Z",
            "modified": "2015-09-30T08:50:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3b9a9106e95a8efbbad729c3bc263c12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24b-86d0-48d1-b0bd-42ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:19.000Z",
            "modified": "2015-09-30T08:50:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'koter.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24c-8a7c-4b50-ac2e-43bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:20.000Z",
            "modified": "2015-09-30T08:50:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kotwhat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24c-9a08-48d2-966c-4e1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:20.000Z",
            "modified": "2015-09-30T08:50:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3bb4092b1372978e421e0c65ea43e560']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24c-d680-441a-81e5-4b56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:20.000Z",
            "modified": "2015-09-30T08:50:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kousbot.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24c-85d0-46cb-8c72-44a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:20.000Z",
            "modified": "2015-09-30T08:50:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kralcoder.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24c-5404-453a-ad42-446b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:20.000Z",
            "modified": "2015-09-30T08:50:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3bc9129a0affc96a40145d4fa49bd549']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24c-1a18-4942-a6d2-4bd1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:20.000Z",
            "modified": "2015-09-30T08:50:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kralenes.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24c-f118-43fc-92e3-43f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:20.000Z",
            "modified": "2015-09-30T08:50:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'krasav4ik98.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24c-5f2c-4f03-beee-42c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:20.000Z",
            "modified": "2015-09-30T08:50:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3bca2549a463597d21fd7c76cb609543']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24d-54b0-4a7f-b598-405c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:21.000Z",
            "modified": "2015-09-30T08:50:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kripto.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24d-7be0-43f5-b2bf-4a06950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:21.000Z",
            "modified": "2015-09-30T08:50:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kristals.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24d-6f94-4404-917a-461f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:21.000Z",
            "modified": "2015-09-30T08:50:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3be8220c468a3a054801afd7a5a37fec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24d-1f40-46f4-9edf-41a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:21.000Z",
            "modified": "2015-09-30T08:50:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kromiix.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24d-da04-4b45-8dde-4f1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:21.000Z",
            "modified": "2015-09-30T08:50:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'krsto777.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24d-bef4-497c-b722-4fa7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:21.000Z",
            "modified": "2015-09-30T08:50:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3bfda08a43d92ce0073031ed3f3a8514']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24d-f048-4e57-9f13-47a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:21.000Z",
            "modified": "2015-09-30T08:50:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kryptomite.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24e-4768-48e6-835d-4b45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:22.000Z",
            "modified": "2015-09-30T08:50:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kt-hackgame.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24d-73dc-49f5-8960-426e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:21.000Z",
            "modified": "2015-09-30T08:50:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c013028a25f13e76411f256cdceb7f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24e-9b10-4059-8863-4911950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:22.000Z",
            "modified": "2015-09-30T08:50:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kuh3u88y4okl.3utilities.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24e-7ee0-40ee-adb8-434d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:22.000Z",
            "modified": "2015-09-30T08:50:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kunlesaba.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24e-559c-4e01-9b4e-4a63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:22.000Z",
            "modified": "2015-09-30T08:50:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c084190130f2f7b5f3bb2ec8280b3fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24e-d4fc-45f3-bf04-46dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:22.000Z",
            "modified": "2015-09-30T08:50:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kurac.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24e-92f4-4922-ade1-486e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:22.000Z",
            "modified": "2015-09-30T08:50:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kurbanci0150.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24e-bde8-4e3f-b9af-426d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:22.000Z",
            "modified": "2015-09-30T08:50:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c0946c47ea4ff1af2f0fb8b2b11dad5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24f-43b0-4885-bada-4c31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:23.000Z",
            "modified": "2015-09-30T08:50:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kurbannn.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24f-16b4-401d-9c84-4fde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:23.000Z",
            "modified": "2015-09-30T08:50:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kurd4help.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24f-1314-4f3e-99f2-4f11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:23.000Z",
            "modified": "2015-09-30T08:50:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c09e8d87e168fe224ed77f56568275e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24f-f244-4799-8b61-4286950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:23.000Z",
            "modified": "2015-09-30T08:50:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kurdin.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24f-08e8-4447-80b3-4df4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:23.000Z",
            "modified": "2015-09-30T08:50:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kurdish11.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24f-58f8-4a08-af71-461c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:23.000Z",
            "modified": "2015-09-30T08:50:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c142a1bc3ae74a4f753276be3df16ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24f-c430-4cea-9a5d-452e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:23.000Z",
            "modified": "2015-09-30T08:50:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kurdlove.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba250-2420-45d4-86aa-4218950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:24.000Z",
            "modified": "2015-09-30T08:50:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kutjes.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba24f-cabc-4ef8-afa3-48a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:23.000Z",
            "modified": "2015-09-30T08:50:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c17df8951bf3048e75a4abe0cd41968']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba250-0654-4482-a290-4421950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:24.000Z",
            "modified": "2015-09-30T08:50:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kylonburgert.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba250-cc6c-4a30-a4c9-4d6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:24.000Z",
            "modified": "2015-09-30T08:50:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kynr.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba250-be48-44e4-a3ef-4753950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:24.000Z",
            "modified": "2015-09-30T08:50:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c201882f287ba60ee6b38ab3aca2dda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba250-deec-4dbb-8a8e-4c5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:24.000Z",
            "modified": "2015-09-30T08:50:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kys.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba250-8678-4aa1-a71a-464e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:24.000Z",
            "modified": "2015-09-30T08:50:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'kyzori.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba250-98f8-4d57-8d12-428d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:24.000Z",
            "modified": "2015-09-30T08:50:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c20fd354f220985e53161b7d626ed33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba250-41c0-4622-abd1-40e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:24.000Z",
            "modified": "2015-09-30T08:50:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'l33th4x.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba251-be84-4f8a-83f9-4c20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:25.000Z",
            "modified": "2015-09-30T08:50:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'laaen.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba251-c3cc-4115-9729-44a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:25.000Z",
            "modified": "2015-09-30T08:50:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c29534ba84a6578163741dea9ba4f6b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba251-b184-4701-82a5-4fba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:25.000Z",
            "modified": "2015-09-30T08:50:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'laartje373.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba251-7e80-488c-997a-40c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:25.000Z",
            "modified": "2015-09-30T08:50:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'labbe2.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba251-2ee0-4e47-bd02-4798950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:25.000Z",
            "modified": "2015-09-30T08:50:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c2ab7209f4e313fa521863df359c93f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba251-4648-497f-9681-4015950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:25.000Z",
            "modified": "2015-09-30T08:50:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'labrechadera.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba251-a6ac-4f3f-badb-4d72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:25.000Z",
            "modified": "2015-09-30T08:50:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lacin1991.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba251-4600-4cf0-8c89-4fc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:25.000Z",
            "modified": "2015-09-30T08:50:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c3db2e25d0adddebbd5cba432fdf456']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba252-5830-4210-b15b-4c6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:26.000Z",
            "modified": "2015-09-30T08:50:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lahwoun.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba252-debc-4e75-91fa-4f19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:26.000Z",
            "modified": "2015-09-30T08:50:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lajtowa.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba252-3c38-44bc-9d7c-486a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:26.000Z",
            "modified": "2015-09-30T08:50:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c430ceb79dd6ec151ed0ceb1a4fb204']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba252-ce5c-4a67-9717-4289950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:26.000Z",
            "modified": "2015-09-30T08:50:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lajutto.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba252-4f90-44f3-bfb8-418a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:26.000Z",
            "modified": "2015-09-30T08:50:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lalaker1.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba252-a5ec-4d7c-a221-4114950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:26.000Z",
            "modified": "2015-09-30T08:50:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c48570b3e87cc7af33a1ff349139625']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba252-1c48-4037-bedb-4f14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:26.000Z",
            "modified": "2015-09-30T08:50:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lalka228.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba253-df24-4d3a-a5a8-4c5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:27.000Z",
            "modified": "2015-09-30T08:50:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lamaxg0d.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba252-8b0c-4e92-b535-4576950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:26.000Z",
            "modified": "2015-09-30T08:50:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c4c4d788572a2c3764890d9212b108b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba253-6d44-46ab-9a0e-4e82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:27.000Z",
            "modified": "2015-09-30T08:50:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lambda.servecounterstrike.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba253-ccb4-4203-9401-404a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:27.000Z",
            "modified": "2015-09-30T08:50:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lancerhack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba253-20e4-40eb-a73a-431c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:27.000Z",
            "modified": "2015-09-30T08:50:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c58279f2f4e40ebf97745bab8dcf52b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba253-52f0-4bb5-ad95-4c3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:27.000Z",
            "modified": "2015-09-30T08:50:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lanetlidost3131.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba253-0f8c-453b-b738-4cab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:27.000Z",
            "modified": "2015-09-30T08:50:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c5ac72c0f208b6bcd5cd7914bbd70e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba253-5d18-4aa9-8bd3-4347950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:27.000Z",
            "modified": "2015-09-30T08:50:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c5d2b983954dda34a20869edd0ab20e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba253-6e04-4a59-a608-450b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:27.000Z",
            "modified": "2015-09-30T08:50:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lanno1212.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba254-b11c-4176-82fb-415f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:28.000Z",
            "modified": "2015-09-30T08:50:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c66a16d8f0824352f993b2799273d89']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba254-ff5c-455c-ad0d-40c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:28.000Z",
            "modified": "2015-09-30T08:50:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c8ca512d2f7dbd1a51da587c146d3b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba254-281c-4226-8a4d-4877950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:28.000Z",
            "modified": "2015-09-30T08:50:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lanzapapa.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba254-85c4-4b9f-8dea-4222950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:28.000Z",
            "modified": "2015-09-30T08:50:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c8ea15e9bad84cf81c2fce10782e265']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba254-a5b4-4cf4-8bf1-46ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:28.000Z",
            "modified": "2015-09-30T08:50:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c9d3f5d37ba899e899b5ce7c10256b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba254-a19c-4046-901c-4e89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:28.000Z",
            "modified": "2015-09-30T08:50:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'larsenpower.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba254-25dc-443e-886a-42f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:28.000Z",
            "modified": "2015-09-30T08:50:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3c9efa7520390dc090d784bd29f5da9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba255-0760-4adb-a844-4853950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:29.000Z",
            "modified": "2015-09-30T08:50:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3cac2889c96c88f2c848487e4333e132']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba255-8378-45de-8c92-4c79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:28.000Z",
            "modified": "2015-09-30T08:50:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'laughingatyoursecurity.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba255-30ac-4f3e-a65c-4503950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:29.000Z",
            "modified": "2015-09-30T08:50:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3cb6f373df685bd5da6ecbd326ec3007']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba255-f6b4-439a-be14-4793950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:29.000Z",
            "modified": "2015-09-30T08:50:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3cc298c99febd00ed1a3ef10bcc0a083']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba255-23e4-4576-9551-46e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:29.000Z",
            "modified": "2015-09-30T08:50:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'launcher-terraforia.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba255-1ad0-4c23-a2a5-4213950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:29.000Z",
            "modified": "2015-09-30T08:50:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3cca37ff958e9995c024d1b758d4c472']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba255-9230-466e-a596-4750950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:29.000Z",
            "modified": "2015-09-30T08:50:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3cce328c914e54a3023d3ca424790280']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba255-a4c8-42e7-aa69-4eab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:29.000Z",
            "modified": "2015-09-30T08:50:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lea1am.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba256-5204-4cf5-8b10-4203950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:30.000Z",
            "modified": "2015-09-30T08:50:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ccf76c1c099e6ad042b8565e9e1946b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba256-3e5c-4cc8-849e-4405950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:30.000Z",
            "modified": "2015-09-30T08:50:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3cd49db73dc2fe082a812b9adbdee10f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba256-a5c4-480e-b69d-46e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:30.000Z",
            "modified": "2015-09-30T08:50:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leadoleado.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba256-ef18-4ce1-b7e5-4fbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:30.000Z",
            "modified": "2015-09-30T08:50:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3cdee3ebe9650dcec1e61e98e5417a2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba256-c8e8-40f8-81d2-4d18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:30.000Z",
            "modified": "2015-09-30T08:50:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ce5349756f393ae27671ac086dacb3d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba256-bf84-47c8-b29d-4e8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:30.000Z",
            "modified": "2015-09-30T08:50:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leedlehuehue.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba256-e8d4-4606-9e44-4f33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:30.000Z",
            "modified": "2015-09-30T08:50:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3cf2b2836f753cb86facf3c7f12814af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba257-7bb8-46b6-8cec-4677950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:31.000Z",
            "modified": "2015-09-30T08:50:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3cf39b52fc1b94137e26ca971c79af84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba256-479c-4134-b228-4ed7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:30.000Z",
            "modified": "2015-09-30T08:50:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leeroyj.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba257-28cc-4de5-b4d3-4485950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:31.000Z",
            "modified": "2015-09-30T08:50:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d0ad5ca44d4497aeb542c0eec77b7bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba257-ed20-4478-9ba1-4701950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:31.000Z",
            "modified": "2015-09-30T08:50:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d144ebdf7bddd3ce803b551c963b7d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba257-b7ac-46ca-8ee0-498a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:31.000Z",
            "modified": "2015-09-30T08:50:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leesin.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba257-a480-4b46-af2b-44d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:31.000Z",
            "modified": "2015-09-30T08:50:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d19f0ad56e7ff6876f25e5b967d70f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba257-539c-489a-bc17-42e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:31.000Z",
            "modified": "2015-09-30T08:50:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d28b0274bfebceac1215391aa387eef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba257-f0ec-4f0d-beda-40c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:31.000Z",
            "modified": "2015-09-30T08:50:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leet.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba257-80d0-4016-8621-419e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:31.000Z",
            "modified": "2015-09-30T08:50:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d2b38f8433e433ba8d7ebdac1f3f31b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba258-3f98-4d2b-b470-4a95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:32.000Z",
            "modified": "2015-09-30T08:50:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d30110aa600958ca16c68b2bee04249']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba258-b854-4a04-b15e-4f2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:32.000Z",
            "modified": "2015-09-30T08:50:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leetnigger1337.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba258-a69c-407f-8d86-4f3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:32.000Z",
            "modified": "2015-09-30T08:50:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d38359afc99bbe14ca010adf061eee4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba258-aaf0-4951-ad9b-4160950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:32.000Z",
            "modified": "2015-09-30T08:50:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d3f740f7b9e3cfad729b208e3d43fa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba258-345c-498b-a1f5-4bc2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:32.000Z",
            "modified": "2015-09-30T08:50:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leflaber.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba258-fa08-46fc-ad39-409e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:32.000Z",
            "modified": "2015-09-30T08:50:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d3f945ea26f6f0f124f7abadecfc6f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba258-2990-4bec-bad9-437a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:32.000Z",
            "modified": "2015-09-30T08:50:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d4d136de5e4cd22d1c6442111b5fb7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba258-f9b8-49c0-8626-4074950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:32.000Z",
            "modified": "2015-09-30T08:50:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'legalbotserver.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba259-4bf0-470f-aa6c-46c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:33.000Z",
            "modified": "2015-09-30T08:50:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d523d8bd11ed1864b40267ddd0a3c66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba259-d92c-431f-ac9d-4b5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:33.000Z",
            "modified": "2015-09-30T08:50:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d5fd2c8145051392747b100c1dccf63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba259-b9d0-4ba2-8831-4f47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:33.000Z",
            "modified": "2015-09-30T08:50:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'legeabszonline.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba259-2db8-4834-9f0c-4e89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:33.000Z",
            "modified": "2015-09-30T08:50:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d66db88e4e762005e0b6d1df98b15cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba259-7594-449a-b43f-4ed2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:33.000Z",
            "modified": "2015-09-30T08:50:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d8191b97ec68c4de216aa296bb1a492']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba259-37b4-486a-a006-473e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:33.000Z",
            "modified": "2015-09-30T08:50:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'legit420.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba259-c974-44d7-9537-475f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:33.000Z",
            "modified": "2015-09-30T08:50:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d82fe32078b2a98cd5e7d22da9d0982']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25a-9e9c-4a9f-ab59-4620950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:34.000Z",
            "modified": "2015-09-30T08:50:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d8aa0a37f27bae92073c17e9116c496']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25a-cf54-4c98-915d-46ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:34.000Z",
            "modified": "2015-09-30T08:50:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lelz6134.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25a-68bc-4cbc-ae01-4f88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:34.000Z",
            "modified": "2015-09-30T08:50:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d8b9df93ddaa57e81392367db4ebf48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25a-c7ec-4855-aa05-419e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:34.000Z",
            "modified": "2015-09-30T08:50:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d9967b4a2d231aafff0f4dd0f9a9a76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25a-43fc-4e53-be80-4099950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:34.000Z",
            "modified": "2015-09-30T08:50:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lenn.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25a-affc-49f2-bf00-42f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:34.000Z",
            "modified": "2015-09-30T08:50:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3d99eb063c2130924033c5a76001bbc6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25a-caac-4fc3-bc48-4f4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:34.000Z",
            "modified": "2015-09-30T08:50:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3da40eeeca88fa078caed5ce2f82c559']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25a-0ec8-42ce-863e-44e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:34.000Z",
            "modified": "2015-09-30T08:50:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lentourage1152.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25b-3170-4e74-875f-4843950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:35.000Z",
            "modified": "2015-09-30T08:50:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3da466fd5e92fa92e1e2114cceaf9c51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25b-75d8-4b61-89d8-4a24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:35.000Z",
            "modified": "2015-09-30T08:50:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3db01633767f6ed453c30a666f967465']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25b-8328-4663-9fa3-482a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:35.000Z",
            "modified": "2015-09-30T08:50:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leon34.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25b-e6e8-423b-ae0b-49f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:35.000Z",
            "modified": "2015-09-30T08:50:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3db731ee0837b67382b9b0e7ed147e80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25b-477c-4b33-9eb3-443b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:35.000Z",
            "modified": "2015-09-30T08:50:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3db8d836cd54306fe81a4338ab8f5b1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25b-7a64-4b2e-90e9-4b0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:35.000Z",
            "modified": "2015-09-30T08:50:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leopard129.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25b-119c-4472-a671-4d57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:35.000Z",
            "modified": "2015-09-30T08:50:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3dbae272277618f65186d440c0ace7a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25c-d304-4301-ac29-42c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:36.000Z",
            "modified": "2015-09-30T08:50:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3dc4338d38f4b187cace37900076031e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25b-0d2c-4665-a538-4e31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:35.000Z",
            "modified": "2015-09-30T08:50:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leoskorpion91.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25c-3450-4ad8-988b-48b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:36.000Z",
            "modified": "2015-09-30T08:50:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3dc6f36a407edb43f6489ae6ae2c0bc7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25c-292c-4a03-a0f9-4cb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:36.000Z",
            "modified": "2015-09-30T08:50:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3dc9d9b0d0c5279143f42379ae99ef23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25c-6e7c-4d18-8baf-42cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:36.000Z",
            "modified": "2015-09-30T08:50:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lepetitsalo.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25c-894c-4bdf-85ae-472e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:36.000Z",
            "modified": "2015-09-30T08:50:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3dcb93e89aadf0164f3641b921ba88a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25c-5548-460a-8871-4989950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:36.000Z",
            "modified": "2015-09-30T08:50:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'leq1skr.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25c-e638-433f-8ac8-456d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:36.000Z",
            "modified": "2015-09-30T08:50:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3de62d75014ef1379507372e24abf997']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25d-9504-4216-8bff-48cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:37.000Z",
            "modified": "2015-09-30T08:50:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lethalkillaz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25d-7364-4664-b1bb-48e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:37.000Z",
            "modified": "2015-09-30T08:50:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3deb83a1fdeddced1806efc6a051777d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25d-ae54-4636-a01b-48d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:37.000Z",
            "modified": "2015-09-30T08:50:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'letsdothat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25d-8c84-4789-8cb2-4b98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:37.000Z",
            "modified": "2015-09-30T08:50:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3debf0c9b2d98b02333823993b218018']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25d-8068-4119-b4e7-45ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:37.000Z",
            "modified": "2015-09-30T08:50:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'letsdothis.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25d-6478-4532-9151-41a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:37.000Z",
            "modified": "2015-09-30T08:50:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3dedf31e1d5d8085ba8ce1a7881bdb65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25e-2c24-4411-8c0f-4e84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:38.000Z",
            "modified": "2015-09-30T08:50:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'letsstartwork.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25e-7e00-40dd-88ed-4189950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:38.000Z",
            "modified": "2015-09-30T08:50:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3df396664575657e2ec79faf7d0af2f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25e-2da8-4465-af51-4515950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:38.000Z",
            "modified": "2015-09-30T08:50:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'letthemknow.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25e-a8f4-437b-af2f-4aef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:38.000Z",
            "modified": "2015-09-30T08:50:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3df948baf3c580452cde945f2ca46790']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25e-8298-476a-8b80-4132950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:38.000Z",
            "modified": "2015-09-30T08:50:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'level10.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25f-88c4-4e9b-9d17-4b1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:39.000Z",
            "modified": "2015-09-30T08:50:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3df9ce9cc25df36c2fd5c6b993ecc7ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25f-81e0-4827-ac3a-477e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:39.000Z",
            "modified": "2015-09-30T08:50:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'liamsiabidc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25f-b424-4eaf-8a3f-4496950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:39.000Z",
            "modified": "2015-09-30T08:50:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e00bb53231498071e6f9953a7300cc6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25f-5fec-4d6d-a21f-465c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:39.000Z",
            "modified": "2015-09-30T08:50:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'librarymanko.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25f-e714-4562-958b-42cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:39.000Z",
            "modified": "2015-09-30T08:50:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e013fc042ead752b76d406c176ee559']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba25f-5974-402d-9aab-4a28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:39.000Z",
            "modified": "2015-09-30T08:50:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lifeisbest.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba260-73d4-4881-82b0-483c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:40.000Z",
            "modified": "2015-09-30T08:50:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e0940d2a0ca210f7a31dbe0eb22109d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba260-ffa4-4e54-abd0-463c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:40.000Z",
            "modified": "2015-09-30T08:50:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lightner0.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba260-0d78-42e3-bfc8-47a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:40.000Z",
            "modified": "2015-09-30T08:50:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e1eb2eff331cf7493ba04dd44aa3e37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba260-48dc-4474-ad47-44e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:40.000Z",
            "modified": "2015-09-30T08:50:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lightner0.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba260-892c-4d95-ad88-4b3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:40.000Z",
            "modified": "2015-09-30T08:50:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e33bc0b6192021946fd752506d40052']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba260-e6d8-4656-95c7-464c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:40.000Z",
            "modified": "2015-09-30T08:50:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'likedtdlnw.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba261-0764-442a-8a6e-4a98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:41.000Z",
            "modified": "2015-09-30T08:50:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e34528639a06cea9597e7327a437724']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba261-3914-42f6-9701-46c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:41.000Z",
            "modified": "2015-09-30T08:50:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'liloula.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba261-e510-447f-a801-4d61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:41.000Z",
            "modified": "2015-09-30T08:50:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e4fa1564641c4a36759f5cee4dd4128']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba261-ad04-4d2a-b297-4639950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:41.000Z",
            "modified": "2015-09-30T08:50:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'liloula.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba261-5360-489a-86c0-4058950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:41.000Z",
            "modified": "2015-09-30T08:50:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e5768e27f32c89de04a3c999f41cb8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba262-38a4-4e95-931b-456f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:42.000Z",
            "modified": "2015-09-30T08:50:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lilpyro.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba262-4530-4190-95ba-4328950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:42.000Z",
            "modified": "2015-09-30T08:50:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e5886a701988baaf2c30cd02d3caaea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba262-678c-4ed5-bd15-453f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:42.000Z",
            "modified": "2015-09-30T08:50:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'linil11.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba262-e258-454e-86af-429a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:42.000Z",
            "modified": "2015-09-30T08:50:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e5ff3de547d2008b950d8b62ed5a20d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba262-12d0-499a-beb1-4f21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:42.000Z",
            "modified": "2015-09-30T08:50:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lizzerdminecraft.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba262-1e68-422f-97a9-4291950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:42.000Z",
            "modified": "2015-09-30T08:50:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e6e4286e1939b5b19d763c6d4ec4269']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba263-1fe0-4e59-8b17-4ed6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:43.000Z",
            "modified": "2015-09-30T08:50:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ljy08420.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba263-db60-4435-a666-4afa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:43.000Z",
            "modified": "2015-09-30T08:50:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e6fa0e8cdd0e74c0f2e4168d0448606']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba263-400c-485d-a177-4143950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:43.000Z",
            "modified": "2015-09-30T08:50:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'llamarat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba263-64cc-4d50-800e-4bdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:43.000Z",
            "modified": "2015-09-30T08:50:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e704be14f3ed4af0a000018637a5953']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba263-af14-49a1-b688-41cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:43.000Z",
            "modified": "2015-09-30T08:50:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lmaobox.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba263-f3fc-4dd3-b44f-49aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:43.000Z",
            "modified": "2015-09-30T08:50:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e7520f161fb0d06d9948492f20d6618']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba264-d8e0-4433-984e-4b58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:44.000Z",
            "modified": "2015-09-30T08:50:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lodingg.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba264-29c4-43f6-bb96-4e44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:44.000Z",
            "modified": "2015-09-30T08:50:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e7d7c4e4b0ea9f5693c1881d16426c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba264-1830-4804-8369-45ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:44.000Z",
            "modified": "2015-09-30T08:50:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lohotron.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba264-be5c-443d-8b57-4645950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:44.000Z",
            "modified": "2015-09-30T08:50:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e896884b5f3a0b44487467ecc666510']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba264-4a30-4726-9382-47e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:44.000Z",
            "modified": "2015-09-30T08:50:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lol1231.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba265-2594-4f46-b188-4d23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:45.000Z",
            "modified": "2015-09-30T08:50:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e8ba5be8bd71f518c6cee32bc1fa4b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba265-cea4-4987-9d93-4431950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:45.000Z",
            "modified": "2015-09-30T08:50:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'loldeedaws.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba265-6204-458e-9864-4e69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:45.000Z",
            "modified": "2015-09-30T08:50:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e954b84bb9eca1da33ca6aa1cbce99a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba265-7514-4cae-9366-49c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:45.000Z",
            "modified": "2015-09-30T08:50:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lole.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba265-a6cc-42e9-92a0-4cf5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:45.000Z",
            "modified": "2015-09-30T08:50:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3e9695cbbb3e568b1193483b535df2c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba266-8bc4-4813-9861-493c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:46.000Z",
            "modified": "2015-09-30T08:50:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lolezpz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba266-34f4-4b90-9d9e-430c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:46.000Z",
            "modified": "2015-09-30T08:50:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ea0118ee111c7fb7cb22b91bf6bdb15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba266-9454-4e8c-8fba-490c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:46.000Z",
            "modified": "2015-09-30T08:50:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'loligerloler.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba266-aa54-43a8-9c67-4882950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:46.000Z",
            "modified": "2015-09-30T08:50:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ea0d52ff3533ced61b9f9dc9828c5d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba266-5668-46d9-9bce-47ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:46.000Z",
            "modified": "2015-09-30T08:50:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'loljwz.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba266-7ec0-451f-9a4e-49d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:46.000Z",
            "modified": "2015-09-30T08:50:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3eb216df6d42033f3e8a8516b44bac5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba267-b4b8-4902-a478-4e0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:47.000Z",
            "modified": "2015-09-30T08:50:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lolk7ol.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba267-a9b0-4d1e-8fc3-42ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:47.000Z",
            "modified": "2015-09-30T08:50:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3eb59679bd8ffa91ad0b04fe39548d74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba267-ac98-4183-9c15-4280950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:47.000Z",
            "modified": "2015-09-30T08:50:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lolkilol.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba267-3b1c-4e38-9742-4275950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:47.000Z",
            "modified": "2015-09-30T08:50:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3eb648d06471aa80cedc22da7b6f881b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba267-3634-41f4-a5fd-478d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:47.000Z",
            "modified": "2015-09-30T08:50:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lolwtf123.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba267-0a48-483c-912b-4ade950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:47.000Z",
            "modified": "2015-09-30T08:50:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ec21b212debe33665d7affd7a57ad8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba268-d9c4-4941-9bc5-4ddd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:48.000Z",
            "modified": "2015-09-30T08:50:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lordfection.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba268-65f8-4cd5-b024-4b11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:48.000Z",
            "modified": "2015-09-30T08:50:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ed336a76f934fc5831cfe348e961e60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba268-85a4-4977-bd2d-41c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:48.000Z",
            "modified": "2015-09-30T08:50:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lorislepgmskilleurdutrentehuit.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba268-5548-4355-97aa-4a1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:48.000Z",
            "modified": "2015-09-30T08:50:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ee246af92add3cdb0569a481897786b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba268-1048-4ac7-bcd5-4517950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:48.000Z",
            "modified": "2015-09-30T08:50:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'losik9.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba269-91e0-4959-a638-465a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:49.000Z",
            "modified": "2015-09-30T08:50:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ee8bc97ad11089994783e9f3be0836a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba269-5a90-4560-acb9-45a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:49.000Z",
            "modified": "2015-09-30T08:50:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lotsorats.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba269-b5c4-4a05-8ae8-4ea9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:49.000Z",
            "modified": "2015-09-30T08:50:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ef04635af870d5af8f700f40ff37803']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba269-7b34-497a-b074-402e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:49.000Z",
            "modified": "2015-09-30T08:50:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'louckm.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba269-7244-437a-acb0-4e78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:49.000Z",
            "modified": "2015-09-30T08:50:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ef37c6bf3e9c4ab5fee39d7de5126dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26a-fb4c-448e-839b-4b4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:50.000Z",
            "modified": "2015-09-30T08:50:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'loveablejerk.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26a-7a5c-4b68-bd7b-458f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:50.000Z",
            "modified": "2015-09-30T08:50:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ef75c05bc72df7be0a9e767c6198fc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26a-63e0-42b7-a36e-4090950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:50.000Z",
            "modified": "2015-09-30T08:50:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'loxloxlox.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26a-c820-4e77-925f-4a10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:50.000Z",
            "modified": "2015-09-30T08:50:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ef7cf32aa393ade974437598ad5252a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26a-324c-4979-8bb4-4dcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:50.000Z",
            "modified": "2015-09-30T08:50:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lptp.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26a-f298-40d8-abf3-4d2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:50.000Z",
            "modified": "2015-09-30T08:50:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3efde4448c0e62951700c3de966d47e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26b-f9f0-4234-ac53-4ae3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:51.000Z",
            "modified": "2015-09-30T08:50:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lucasdc.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26b-4ba0-4ec9-9a6e-47bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:51.000Z",
            "modified": "2015-09-30T08:50:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f1549b7b44d8d2b13cac40eb4d15a68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26b-afcc-4324-b04e-4e24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:51.000Z",
            "modified": "2015-09-30T08:50:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lucid.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26b-5034-4c53-a394-490f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:51.000Z",
            "modified": "2015-09-30T08:50:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f1ca25d0293145bceace0b5e3272aa2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26b-806c-4b3e-940d-413b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:51.000Z",
            "modified": "2015-09-30T08:50:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lucifer13.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26b-1b30-4718-b03c-4e9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:51.000Z",
            "modified": "2015-09-30T08:50:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f2f120b845825cf1d57a867dbfa07c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26c-a270-4e68-869d-4be7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:52.000Z",
            "modified": "2015-09-30T08:50:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'luckytiger38.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26c-53b8-48b5-b3df-4f17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:52.000Z",
            "modified": "2015-09-30T08:50:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f3960a7ae1524a3339eeba4f417be99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26c-1f04-44ac-b650-4c1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:52.000Z",
            "modified": "2015-09-30T08:50:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'luizpaulo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26c-2084-4c54-8106-4ce4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:52.000Z",
            "modified": "2015-09-30T08:50:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f3c05d6eb8cbbcc9d2dea51d895b401']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26c-f748-46d5-b96a-4708950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:52.000Z",
            "modified": "2015-09-30T08:50:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lukewarm4.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26d-366c-4ee5-a68a-4594950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:53.000Z",
            "modified": "2015-09-30T08:50:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f4342e6de660f91eda217dc33ff22a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26d-531c-4201-98d2-4714950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:53.000Z",
            "modified": "2015-09-30T08:50:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lumin23.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26d-8088-4767-bf39-4b64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:53.000Z",
            "modified": "2015-09-30T08:50:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f5139c8db6c470a9a243eb58d8f2165']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26d-a24c-4a0f-829c-4d8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:53.000Z",
            "modified": "2015-09-30T08:50:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lvgse-sports.servecounterstrike.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26d-24e0-4e0a-adc2-40b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:53.000Z",
            "modified": "2015-09-30T08:50:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f5f31fcc1c32b0bc667b0ce8d6d4724']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26d-8dd8-45a6-bc66-4d7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:53.000Z",
            "modified": "2015-09-30T08:50:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lydiadc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26e-4444-463b-840f-4252950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:54.000Z",
            "modified": "2015-09-30T08:50:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f6892ccc4ee65e240018ba6c8f7b7cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26e-8fd4-4524-bcff-473e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:54.000Z",
            "modified": "2015-09-30T08:50:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'lyow123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26e-56a0-4c62-b0c0-428c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:54.000Z",
            "modified": "2015-09-30T08:50:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f6f6c9667553b176a53154edd360a22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26e-b31c-4a62-b581-47a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:54.000Z",
            "modified": "2015-09-30T08:50:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'm0szuht.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26e-b860-4521-b73f-4cc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:54.000Z",
            "modified": "2015-09-30T08:50:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f823951ff970a3e9a71bbec6a2dc3d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26f-0d24-4673-b0bf-4141950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:55.000Z",
            "modified": "2015-09-30T08:50:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'm21.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26f-60a4-4c48-9389-4bf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:55.000Z",
            "modified": "2015-09-30T08:50:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f8c2b6a350e9c8c09a54f4c39916f9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26f-a658-438a-bb11-4e47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:55.000Z",
            "modified": "2015-09-30T08:50:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'm5tl.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26f-2670-4c93-a1ba-4270950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:55.000Z",
            "modified": "2015-09-30T08:50:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3f995d9a93fdc8515a34652cb261cb76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26f-b48c-4cf6-aa4b-4a3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:55.000Z",
            "modified": "2015-09-30T08:50:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'macambira.serveminecraft.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba26f-81bc-4bec-bf9f-49cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:55.000Z",
            "modified": "2015-09-30T08:50:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fa140ad7dd975e72734713f33148e10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba270-5db8-4da4-b932-4066950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:56.000Z",
            "modified": "2015-09-30T08:50:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mace-server.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba270-9d80-4213-9c96-4441950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:56.000Z",
            "modified": "2015-09-30T08:50:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fa1e1644f3b78ed1dca2d96e77f9fd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba270-aa90-4e78-85d0-4d50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:56.000Z",
            "modified": "2015-09-30T08:50:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'macito5.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba270-d624-4e58-9120-4eec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:56.000Z",
            "modified": "2015-09-30T08:50:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fc1053cf979d855e2190f0baed82526']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba270-2858-4307-9d82-4edc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:56.000Z",
            "modified": "2015-09-30T08:50:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maclevine.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba270-17e8-47a7-99bb-49a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:56.000Z",
            "modified": "2015-09-30T08:50:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fd73c04bdbf0f59acce5df5fee27661']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba271-9f84-4120-8c42-4d7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:57.000Z",
            "modified": "2015-09-30T08:50:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'macom1232.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba271-3dd4-448b-a72b-40d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:57.000Z",
            "modified": "2015-09-30T08:50:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fd8268693d365e48a55ac88a5883e10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba271-e298-4aa2-bba7-49dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:57.000Z",
            "modified": "2015-09-30T08:50:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'madmixer.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba271-7f18-43ae-a2ce-4dc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:57.000Z",
            "modified": "2015-09-30T08:50:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fdbcaeb571d60f0e20f7fd753acc0fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba271-875c-45eb-ad8e-4b9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:57.000Z",
            "modified": "2015-09-30T08:50:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'madnoize.serveminecraft.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba272-2be4-477e-89a4-495a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:58.000Z",
            "modified": "2015-09-30T08:50:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fea9043f94d8395beba025336f94ab6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba272-fdd4-4998-b00f-4c31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:58.000Z",
            "modified": "2015-09-30T08:50:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'madoxboy2016.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba272-72ec-4015-bf96-498a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:58.000Z",
            "modified": "2015-09-30T08:50:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fed655605b3def6278fe53c33a2b827']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba272-3948-4d3f-aefc-433b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:58.000Z",
            "modified": "2015-09-30T08:50:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mael-des.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba272-d164-4641-be89-4e3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:58.000Z",
            "modified": "2015-09-30T08:50:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fee691cdf5028363a177786196e6b68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba273-eab4-4856-9528-4510950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:59.000Z",
            "modified": "2015-09-30T08:50:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'magictrick.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba273-02e4-4f12-9487-4052950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:59.000Z",
            "modified": "2015-09-30T08:50:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3fefa40d72baed8b6c15614941f0c5fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba273-4acc-4c8b-bad8-44ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:59.000Z",
            "modified": "2015-09-30T08:50:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mahdi009.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba273-f96c-4f0e-8026-4a4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:59.000Z",
            "modified": "2015-09-30T08:50:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '3ff5ede46adc1a684ccdf83576e77a30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba273-d8c8-4621-be1d-46d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:59.000Z",
            "modified": "2015-09-30T08:50:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mahdinajdi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba273-b8dc-4a44-8391-468a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:50:59.000Z",
            "modified": "2015-09-30T08:50:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4005268f70b792e3e9d97d36f6ebfaea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:50:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba274-64c8-4a1d-9612-40b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:00.000Z",
            "modified": "2015-09-30T08:51:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'makar1234.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba274-ddd0-4bba-b3e7-4886950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:00.000Z",
            "modified": "2015-09-30T08:51:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '401be371505753d63f2432bfeb9ab7bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba274-03c8-44b5-b31a-43ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:00.000Z",
            "modified": "2015-09-30T08:51:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maklis201.serveblog.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba274-9464-49c8-a15d-451a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:00.000Z",
            "modified": "2015-09-30T08:51:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40217023bd74cb6e78accaf9bfd510a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba274-577c-47e1-ab01-4c86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:00.000Z",
            "modified": "2015-09-30T08:51:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maksimuthka.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba274-6418-43c0-8725-4ce4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:00.000Z",
            "modified": "2015-09-30T08:51:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40227c4146228a966ef0856cd8dfa1fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba275-0004-4658-9f27-4fd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:01.000Z",
            "modified": "2015-09-30T08:51:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maksipes232323.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba275-5580-4e3c-bff1-487b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:01.000Z",
            "modified": "2015-09-30T08:51:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '402306a938e72d52179bd1fe7369b91d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba275-6f74-4528-b95e-407f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:01.000Z",
            "modified": "2015-09-30T08:51:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'makson.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba275-9270-4887-9c69-43ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:01.000Z",
            "modified": "2015-09-30T08:51:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40260ee6bccbcab5323b7b1da0a8fee6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba275-3f44-4b84-ad8d-4510950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:01.000Z",
            "modified": "2015-09-30T08:51:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'malade.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba276-481c-45cc-a014-4fed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:02.000Z",
            "modified": "2015-09-30T08:51:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '402637116952d3fc993412e6052fa138']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba276-8eb4-4e0e-829f-4d5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:02.000Z",
            "modified": "2015-09-30T08:51:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'malcomx883.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba276-ceb4-40ce-ac95-40c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:02.000Z",
            "modified": "2015-09-30T08:51:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40291d22e1cbfbb1b8c999f9d14a26be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba276-34d4-4b4c-97c8-41d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:02.000Z",
            "modified": "2015-09-30T08:51:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'malika33.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba276-76ec-4a28-b480-4cb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:02.000Z",
            "modified": "2015-09-30T08:51:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40310d5d51987bada0e64edcb89d1422']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba277-8da4-4d36-866d-4e93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:03.000Z",
            "modified": "2015-09-30T08:51:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'malikalijamil.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba277-aa04-489e-a540-4697950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:03.000Z",
            "modified": "2015-09-30T08:51:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '403df5e5cb949e2d9e95e8001a5c810a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba277-ff18-4af6-a380-4734950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:03.000Z",
            "modified": "2015-09-30T08:51:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maling.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba277-7710-432b-bd4d-4d74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:03.000Z",
            "modified": "2015-09-30T08:51:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4042d1462aea5b7ee494be162edc51fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba277-09dc-4db4-ad74-45b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:03.000Z",
            "modified": "2015-09-30T08:51:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mallyw.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba277-3cb8-46b6-b89a-42f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:03.000Z",
            "modified": "2015-09-30T08:51:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40523e5c3489a681246bd1d627430bfb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba278-88ac-4ed4-a49f-4902950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:04.000Z",
            "modified": "2015-09-30T08:51:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mamadz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba278-d3c0-4180-9de5-4e47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:04.000Z",
            "modified": "2015-09-30T08:51:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4054fa7eaf0aedcf90e99e90301a80fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba278-0414-4f30-bdf7-4ffb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:04.000Z",
            "modified": "2015-09-30T08:51:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mamazung01.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba278-e57c-4f34-a56d-49cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:04.000Z",
            "modified": "2015-09-30T08:51:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40563315219a686ed41a0a11526143c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba278-23a0-48d8-821c-421f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:04.000Z",
            "modified": "2015-09-30T08:51:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mamkaru.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba278-aa80-4f22-8108-415e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:04.000Z",
            "modified": "2015-09-30T08:51:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '405ace7923c7cb4b00b33ef58d4592bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba279-2e50-4ba0-b757-4dd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:05.000Z",
            "modified": "2015-09-30T08:51:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'manga826.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba279-6454-4d89-9326-4a58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:05.000Z",
            "modified": "2015-09-30T08:51:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '405b6c4b4d88aaab4087b8eca30b6029']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba279-dcd4-4f6f-b4ea-49eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:05.000Z",
            "modified": "2015-09-30T08:51:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mango-pvp.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba279-ceb4-4b2d-bc1a-4716950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:05.000Z",
            "modified": "2015-09-30T08:51:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40623264facd171753a084c96aecc612']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba279-cdb8-46db-9227-4777950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:05.000Z",
            "modified": "2015-09-30T08:51:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maninthemiddle166.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27a-d088-451a-a6d4-4c7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:06.000Z",
            "modified": "2015-09-30T08:51:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40625adb43f23834fc21d4df0c205cff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27a-05d4-487e-9232-4557950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:06.000Z",
            "modified": "2015-09-30T08:51:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'marajoara18.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27a-a734-462a-898e-4ada950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:06.000Z",
            "modified": "2015-09-30T08:51:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '407720f2312823f81442cec0c202fb0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27a-6984-42c6-9de2-44e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:06.000Z",
            "modified": "2015-09-30T08:51:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'march31.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27a-fca4-4ccb-8dba-4d6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:06.000Z",
            "modified": "2015-09-30T08:51:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '408bc7e601817d14a418e89c7bd21c25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27b-c044-49a4-9fc6-4182950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:07.000Z",
            "modified": "2015-09-30T08:51:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mariasalvador.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27b-8df4-40fa-81c1-4725950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:07.000Z",
            "modified": "2015-09-30T08:51:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '409615aaeeb20b8ffc50a6bcc9d6da05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27b-e03c-4820-9235-4568950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:07.000Z",
            "modified": "2015-09-30T08:51:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'marioarasuge.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27b-44e0-4dbe-878f-419f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:07.000Z",
            "modified": "2015-09-30T08:51:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40acdf05af22aaf5f577da55ad91889f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27b-07f0-4660-bb8d-4b30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:07.000Z",
            "modified": "2015-09-30T08:51:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mariokartwiiu.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27b-3a5c-4297-b0ba-439b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:07.000Z",
            "modified": "2015-09-30T08:51:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40c23be3b053d14bb0106652dc7790ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27c-8c88-4782-b0b1-47a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:08.000Z",
            "modified": "2015-09-30T08:51:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mariouma22.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27c-4ea4-407f-8b22-4f34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:08.000Z",
            "modified": "2015-09-30T08:51:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40c75e258e8eb7a60835e4ba4f6cbd09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27c-c3d4-46c0-b092-4ef8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:08.000Z",
            "modified": "2015-09-30T08:51:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mariusica21.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27c-605c-4904-82e1-45f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:08.000Z",
            "modified": "2015-09-30T08:51:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40c7dd42d80cd7930d87f942b28b567a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27c-5168-4068-b0db-42c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:08.000Z",
            "modified": "2015-09-30T08:51:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mark2014.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27c-ffa8-4051-a51e-4bba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:08.000Z",
            "modified": "2015-09-30T08:51:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40d3b24552605e2c10efc4df7f77d398']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27d-9654-4c24-b902-46b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:09.000Z",
            "modified": "2015-09-30T08:51:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'markquax.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27d-9998-45d2-9454-49ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:09.000Z",
            "modified": "2015-09-30T08:51:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40d85cab553f42846de78c08d2725c18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27d-fa9c-49d6-b8a2-442d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:09.000Z",
            "modified": "2015-09-30T08:51:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'martinhunter.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27d-38f8-4019-9b66-4242950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:09.000Z",
            "modified": "2015-09-30T08:51:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40e0274fa5d09b31ecc1691977faeb00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27d-2bb0-45c3-8e99-43ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:09.000Z",
            "modified": "2015-09-30T08:51:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mascdriver.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27e-3684-495a-a9bd-4ab1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:10.000Z",
            "modified": "2015-09-30T08:51:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40e531aec5331993b32421ec00a3f938']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27e-f5ac-4883-aa20-4211950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:10.000Z",
            "modified": "2015-09-30T08:51:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'masii.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27e-f1a0-4985-91b4-40dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:10.000Z",
            "modified": "2015-09-30T08:51:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40e6b2e4fd73de29b33376eb907c8c2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27e-41b4-40ca-bb13-4d49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:10.000Z",
            "modified": "2015-09-30T08:51:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maske.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27e-3d68-4df6-b6b5-4cd1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:10.000Z",
            "modified": "2015-09-30T08:51:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '40f4ca699ca50c20f3143a58cbf68fed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27f-8344-44fb-a5f6-4f1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:11.000Z",
            "modified": "2015-09-30T08:51:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maskit.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27f-f6dc-4768-8609-4dbb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:11.000Z",
            "modified": "2015-09-30T08:51:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4105612906866ae6d6b9e2ed733695ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27f-9b54-4d25-b934-4048950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:11.000Z",
            "modified": "2015-09-30T08:51:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maspidthetaco.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27f-eb70-413e-aa85-4a7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:11.000Z",
            "modified": "2015-09-30T08:51:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '410889065db8c07cd7f6d03ce2966d6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27f-04d4-40fc-a167-47dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:11.000Z",
            "modified": "2015-09-30T08:51:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mass1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba27f-9e18-4075-bcdf-4fd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:11.000Z",
            "modified": "2015-09-30T08:51:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4108bbe4b87eca8c9e2d6a1673e9bf2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba280-4aa4-4216-86df-4a5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:12.000Z",
            "modified": "2015-09-30T08:51:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mateddc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba280-80d8-41ba-9686-4126950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:12.000Z",
            "modified": "2015-09-30T08:51:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41093d3939c757c19ea56815047d1e00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba280-339c-4b56-a0aa-42af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:12.000Z",
            "modified": "2015-09-30T08:51:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mateus59.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba280-1994-4f3a-8fca-41be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:12.000Z",
            "modified": "2015-09-30T08:51:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4113312a0ca631e073d4356404779bd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba280-43e8-42a9-be39-4b77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:12.000Z",
            "modified": "2015-09-30T08:51:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mathew79.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba280-2910-4c3b-9b25-4903950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:12.000Z",
            "modified": "2015-09-30T08:51:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4115ffc3fb8cbf90d660dee4c0abfddc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba281-802c-4633-9d4c-442b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:13.000Z",
            "modified": "2015-09-30T08:51:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mathmaker.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba281-ab08-479c-bf65-4c2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:13.000Z",
            "modified": "2015-09-30T08:51:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4117e79af52472a42d31954473280c05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba281-271c-4350-aa5d-4674950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:13.000Z",
            "modified": "2015-09-30T08:51:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mathsyr1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba281-8d58-48be-b57a-4db1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:13.000Z",
            "modified": "2015-09-30T08:51:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41180cb330af154ca4878a4c4a42ddd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba281-0824-4755-a1f6-4f8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:13.000Z",
            "modified": "2015-09-30T08:51:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'matrixdj.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba282-d370-444d-a344-4b3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:13.000Z",
            "modified": "2015-09-30T08:51:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '411c5275d117382da445032c7c67cd33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba282-1fe4-4585-80e5-4d3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:14.000Z",
            "modified": "2015-09-30T08:51:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'matrixratskips.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba282-6f54-4a21-a498-4bce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:14.000Z",
            "modified": "2015-09-30T08:51:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '411fd33c0b0bbecb0a90931261a8afa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba282-f660-46be-ae76-47c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:14.000Z",
            "modified": "2015-09-30T08:51:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'matthieuxclaeys.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba282-3078-4c02-b40d-4b56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:14.000Z",
            "modified": "2015-09-30T08:51:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41200fa4c3924f4cdb50cb1acfb349e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba282-0e58-41b4-86f7-4791950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:14.000Z",
            "modified": "2015-09-30T08:51:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'matthieuxclaeys.no-ip.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba283-b930-4f77-bc9b-4c98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:15.000Z",
            "modified": "2015-09-30T08:51:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '412439e1b3195e0eb310a78515afcb36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba283-9be4-4d22-959f-4c1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:15.000Z",
            "modified": "2015-09-30T08:51:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mattieeec.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba283-0bd4-4511-bda0-4f0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:15.000Z",
            "modified": "2015-09-30T08:51:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '412e6e7a21ea489e339f232d8eb94cd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba283-1744-4d35-ba9c-41df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:15.000Z",
            "modified": "2015-09-30T08:51:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maxell.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba283-4264-41be-bea4-4e84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:15.000Z",
            "modified": "2015-09-30T08:51:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '413e26f95af1638c908767873eb1aa43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba284-b5c4-4c01-8a6e-49d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:16.000Z",
            "modified": "2015-09-30T08:51:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maxik555.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba284-46e8-4980-840b-48ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:16.000Z",
            "modified": "2015-09-30T08:51:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '413ff85a4154e6e9a99ee953f3003faf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba284-fa48-405b-aee4-44b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:16.000Z",
            "modified": "2015-09-30T08:51:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maximka1950.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba284-6160-4b65-95ef-4848950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:16.000Z",
            "modified": "2015-09-30T08:51:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41509c9428c03fe9a65119d147495df0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba284-0ff8-4427-9c1f-40b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:16.000Z",
            "modified": "2015-09-30T08:51:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maxxix.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba284-e7fc-4b7c-80ac-48ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:16.000Z",
            "modified": "2015-09-30T08:51:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4153ac6425e8fe72baa5ff70cfbe3f3c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba285-9508-48bc-b2df-4dce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:17.000Z",
            "modified": "2015-09-30T08:51:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maxxsense.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba285-664c-4b07-93fb-4760950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:17.000Z",
            "modified": "2015-09-30T08:51:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4155223b52c67dd33358882563993826']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba285-7ea0-4b91-a321-4083950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:17.000Z",
            "modified": "2015-09-30T08:51:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'maymaa.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba285-1b58-4db2-b9b8-4613950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:17.000Z",
            "modified": "2015-09-30T08:51:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4161ef7e5aef71dd2a424cdc7060fbb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba285-509c-4f6e-874b-4832950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:17.000Z",
            "modified": "2015-09-30T08:51:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mayyzeer.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba285-7f7c-498c-9604-457b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:17.000Z",
            "modified": "2015-09-30T08:51:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '416e110cd7c8cb3d59a6bde963d5e8bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba286-f598-4064-b3cf-4cce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:18.000Z",
            "modified": "2015-09-30T08:51:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mazurin19.servebeer.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba286-e9a0-4fb5-bab3-4e36950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:18.000Z",
            "modified": "2015-09-30T08:51:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '417824fcf32296515158e6b4a04ded05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba286-550c-4439-80b2-4e90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:18.000Z",
            "modified": "2015-09-30T08:51:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mcbosspvp.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba286-3584-4b89-89a2-4cf6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:18.000Z",
            "modified": "2015-09-30T08:51:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4179d235563339d2089ed934c9ddcfc5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba286-faa4-4681-b6dc-4751950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:18.000Z",
            "modified": "2015-09-30T08:51:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mcdjkaan12.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba287-58b8-4880-aff8-4a5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:19.000Z",
            "modified": "2015-09-30T08:51:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '417d431a2ac68f09c63877be9725eca5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba287-a010-4c4f-b7a8-440e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:19.000Z",
            "modified": "2015-09-30T08:51:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mcodxftw.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba287-05e8-43c3-9807-430c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:19.000Z",
            "modified": "2015-09-30T08:51:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '417e47fc532d44def4ef117f073afc2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba287-9f50-47bc-b3a4-409e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:19.000Z",
            "modified": "2015-09-30T08:51:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mctawer.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba287-60f4-4b1c-b765-4b17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:19.000Z",
            "modified": "2015-09-30T08:51:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4181cad84e7aa595781c6cdd13da9c08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba288-b554-48d0-81c4-4363950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:20.000Z",
            "modified": "2015-09-30T08:51:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mctylmz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba288-9a84-4841-a805-4b85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:20.000Z",
            "modified": "2015-09-30T08:51:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4186a596b36a7e875919c9b9c8f21262']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba288-10e0-4581-af00-45c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:20.000Z",
            "modified": "2015-09-30T08:51:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mdark.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba288-7d9c-441c-bda4-4c01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:20.000Z",
            "modified": "2015-09-30T08:51:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '418733cdfc93f6d00ad7d79cda8ff78d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba288-9ffc-485d-a86e-4f1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:20.000Z",
            "modified": "2015-09-30T08:51:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mdma4dayz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba288-346c-4cee-a088-455c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:20.000Z",
            "modified": "2015-09-30T08:51:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4191020f91edd77a0302cb036566c3fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba289-e75c-4917-a36e-44f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:21.000Z",
            "modified": "2015-09-30T08:51:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'meatking.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba289-5bbc-4454-a11f-4c52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:21.000Z",
            "modified": "2015-09-30T08:51:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '419d1a0141fb952ab087cb09c64db003']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba289-d960-4f3d-b132-4f46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:21.000Z",
            "modified": "2015-09-30T08:51:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mechant.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba289-11e8-4fa6-be99-4369950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:21.000Z",
            "modified": "2015-09-30T08:51:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41a628703f48532b88ba29d28a2f1af8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba289-03ec-492d-bbc3-417e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:21.000Z",
            "modified": "2015-09-30T08:51:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mediaconstantin.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba289-3944-45de-b9be-4260950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:21.000Z",
            "modified": "2015-09-30T08:51:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41b7dbf0b6929e3c46a5562aa046380a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28a-f228-4ca8-ad07-4cd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:22.000Z",
            "modified": "2015-09-30T08:51:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'medostedo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28a-6970-44d8-98dc-48f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:22.000Z",
            "modified": "2015-09-30T08:51:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41be2f40cb605b0a5c354642a642ca0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28a-6d58-41b5-bd51-4588950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:22.000Z",
            "modified": "2015-09-30T08:51:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'meeps.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28a-b1e4-4d69-aac3-42fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:22.000Z",
            "modified": "2015-09-30T08:51:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41c0c7e4aaa3afea92eb15d1600c1c4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28a-2004-4c28-8930-49bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:22.000Z",
            "modified": "2015-09-30T08:51:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'meepz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28b-3ad4-4f99-aebb-4593950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:23.000Z",
            "modified": "2015-09-30T08:51:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41cbed18a5d1b9eb5b2672bd09f88318']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28b-03dc-4748-9962-46c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:23.000Z",
            "modified": "2015-09-30T08:51:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'megabox66.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28b-d1dc-4794-82ab-4d44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:23.000Z",
            "modified": "2015-09-30T08:51:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41d64b0865d8b97e8fb7c72380d76df9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28b-cf68-4109-978d-4418950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:23.000Z",
            "modified": "2015-09-30T08:51:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'megabr890.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28b-c204-4ad0-9fbf-4723950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:23.000Z",
            "modified": "2015-09-30T08:51:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41e19c447ccf08bd62f246c217cc7046']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28c-b70c-4302-b03c-4c5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:24.000Z",
            "modified": "2015-09-30T08:51:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'megafox19.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28c-5690-4f8d-b020-44a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:24.000Z",
            "modified": "2015-09-30T08:51:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41f4d8d7c9edce3616f6bbcf92dafe40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28c-d200-4d42-ae4c-44de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:24.000Z",
            "modified": "2015-09-30T08:51:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'megavirus.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28c-703c-4449-98d6-42b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:24.000Z",
            "modified": "2015-09-30T08:51:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41fbeaee9ead9ddbc8dcb524e95bb5e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28c-7a00-4c52-bda8-43bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:24.000Z",
            "modified": "2015-09-30T08:51:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'megmet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28c-5a4c-463e-a19b-445d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:24.000Z",
            "modified": "2015-09-30T08:51:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '41fefbb2c6cd3e7b42ebf0c047d9e9c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28d-3f3c-4f8a-9d7f-4b1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:25.000Z",
            "modified": "2015-09-30T08:51:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mehmet35.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28d-1b04-43b9-ba86-427d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:25.000Z",
            "modified": "2015-09-30T08:51:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4213311719a4bf31275baf4d30f3c196']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28d-369c-4b6c-a2f7-440e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:25.000Z",
            "modified": "2015-09-30T08:51:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mehmet351.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28d-cc04-4043-b70c-4205950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:25.000Z",
            "modified": "2015-09-30T08:51:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '421d225207844761c94464bd623bebdd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28d-bb1c-43bb-9a43-4d9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:25.000Z",
            "modified": "2015-09-30T08:51:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mehmet35170.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28d-1028-43e5-b92f-4edc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:25.000Z",
            "modified": "2015-09-30T08:51:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '422d42a5f920ced6920e28537c5fe21f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28e-f6c4-4490-87d0-423e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:26.000Z",
            "modified": "2015-09-30T08:51:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'melkorhack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28e-f378-48d0-b4f5-4d3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:26.000Z",
            "modified": "2015-09-30T08:51:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42372a9018878627621a2aa49f4bd360']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28e-0f6c-43f5-9521-4d52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:26.000Z",
            "modified": "2015-09-30T08:51:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'memet35.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28e-4ae8-43b9-8f0f-4186950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:26.000Z",
            "modified": "2015-09-30T08:51:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4239cdf341cd90f08c0e2f2b9c25bbe5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28e-c204-41c8-93f1-4a80950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:26.000Z",
            "modified": "2015-09-30T08:51:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'memeteam.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28f-4f00-4a0b-9e41-48dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:27.000Z",
            "modified": "2015-09-30T08:51:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42505b349187855ce0d4d32bece68ef0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28f-a1ac-4bcf-9286-41d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:27.000Z",
            "modified": "2015-09-30T08:51:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'memo14.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28f-0f68-4e7e-9553-47bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:27.000Z",
            "modified": "2015-09-30T08:51:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4259074a631c7944c88c39626d7bb325']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28f-5870-421f-a4bf-4286950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:27.000Z",
            "modified": "2015-09-30T08:51:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'memories.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba28f-6080-4c68-bdb9-46fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:27.000Z",
            "modified": "2015-09-30T08:51:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '426a7c0998a981fc21dc82a07461d510']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba290-2b3c-4ca9-8878-4564950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:28.000Z",
            "modified": "2015-09-30T08:51:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mengendap.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba290-6850-4b30-aa72-4d07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:28.000Z",
            "modified": "2015-09-30T08:51:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '426bc4e5e81976a9524fcc38577b1c37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba290-411c-4e2b-906e-4e00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:28.000Z",
            "modified": "2015-09-30T08:51:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'menowa.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba290-5690-4344-93fe-4d13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:28.000Z",
            "modified": "2015-09-30T08:51:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42778e3213c1bf197207b02e4565c0c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba290-8f90-4550-8eac-4c5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:28.000Z",
            "modified": "2015-09-30T08:51:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'merc35.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba290-bd58-446c-a48c-4cb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:28.000Z",
            "modified": "2015-09-30T08:51:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '427e08b0dfcff9d738bed44f044a90d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba291-0404-4857-92d2-4327950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:29.000Z",
            "modified": "2015-09-30T08:51:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'meserver123swag.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba291-52ec-4150-99af-4c0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:29.000Z",
            "modified": "2015-09-30T08:51:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '429139b5f1c917a0be901dad9f8276e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba291-c628-4dbb-88e4-4507950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:29.000Z",
            "modified": "2015-09-30T08:51:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'meshey.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba291-9748-4a19-a773-430d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:29.000Z",
            "modified": "2015-09-30T08:51:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42a53c254a73b1408ee6e2dd9647ae25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba291-9148-4bf5-ad41-44b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:29.000Z",
            "modified": "2015-09-30T08:51:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'metab501.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba291-8a38-4c5f-b481-4613950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:29.000Z",
            "modified": "2015-09-30T08:51:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42a9185f846984217da6f73a250c000a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba292-7d94-474b-9406-4e62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:30.000Z",
            "modified": "2015-09-30T08:51:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'metaz1s.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba292-abac-4594-9bc2-47e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:30.000Z",
            "modified": "2015-09-30T08:51:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42c52b0679a2c8adaf73f9f04d850605']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba292-4ebc-4678-891c-4cca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:30.000Z",
            "modified": "2015-09-30T08:51:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42ce7760913b4328ca027124342bb22d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba292-0c04-4d61-ae54-408a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:30.000Z",
            "modified": "2015-09-30T08:51:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'metin2hile.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba293-3ecc-450a-9aef-450f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:31.000Z",
            "modified": "2015-09-30T08:51:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42d34466af997c2b266b810f64c5e300']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba293-1a00-4285-b7fd-44de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:31.000Z",
            "modified": "2015-09-30T08:51:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'metindc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba293-89a0-449b-8c44-4c7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:31.000Z",
            "modified": "2015-09-30T08:51:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42dd4f69a3513995d0656e28f1356d4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba293-aca8-4321-ab7e-4f70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:31.000Z",
            "modified": "2015-09-30T08:51:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mezorno.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba293-8248-4ebc-ab30-4fa7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:31.000Z",
            "modified": "2015-09-30T08:51:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42dda6cd89cf4b3aea06df0327dac164']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba293-7d08-4a59-a71e-4b46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:31.000Z",
            "modified": "2015-09-30T08:51:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mhunters.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba294-6e4c-43f9-a24f-4dd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:32.000Z",
            "modified": "2015-09-30T08:51:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '42fdf34d2e599a8cc8c33d174bca0174']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba294-4c20-445d-a589-4e91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:32.000Z",
            "modified": "2015-09-30T08:51:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'miba9007.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba294-2aa0-43a9-9193-45d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:32.000Z",
            "modified": "2015-09-30T08:51:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '430053a8567b9e98b454e2cd9b26e9b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba294-5414-4fc6-8321-47ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:32.000Z",
            "modified": "2015-09-30T08:51:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'michaelhartfiel123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba294-9144-4153-ba3d-40d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:32.000Z",
            "modified": "2015-09-30T08:51:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '430628228cd6a21609ea600ed3fec822']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba295-276c-47ba-9d0e-4d86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:33.000Z",
            "modified": "2015-09-30T08:51:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'michangeluss.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba295-ab4c-4eb6-b776-4847950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:33.000Z",
            "modified": "2015-09-30T08:51:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '430c8492fbe503f52b315c20de6a9ed7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba295-c8c4-458c-a533-440e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:33.000Z",
            "modified": "2015-09-30T08:51:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'microsoft.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba295-ae94-42ab-a46e-46af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:33.000Z",
            "modified": "2015-09-30T08:51:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4314baf190c5dee65d9a9b2baa8190ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba295-a218-48f4-a66a-48b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:33.000Z",
            "modified": "2015-09-30T08:51:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'microsoft23.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba295-4d40-4228-bb3a-406a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:33.000Z",
            "modified": "2015-09-30T08:51:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4315086d1b0d0ca5b591b718feac3e21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba296-6e88-4d07-92f8-459e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:34.000Z",
            "modified": "2015-09-30T08:51:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'microsofthostwds.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba296-046c-4e27-b8bc-478c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:34.000Z",
            "modified": "2015-09-30T08:51:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '43157767ffd056f6488743d6b74efc55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba296-f850-4ed6-8e53-4f5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:34.000Z",
            "modified": "2015-09-30T08:51:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'microsoftnet.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba296-63a0-4f4a-8e46-419b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:34.000Z",
            "modified": "2015-09-30T08:51:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4316c5a0d2853cd5b4c32045202347b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba296-c228-49df-9898-4563950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:34.000Z",
            "modified": "2015-09-30T08:51:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'microsoftnet.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba296-7558-4516-9deb-4034950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:34.000Z",
            "modified": "2015-09-30T08:51:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '43192031ce5ea8e06c398b53d04a6916']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba297-6298-4a7b-b49f-4750950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:35.000Z",
            "modified": "2015-09-30T08:51:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'microsoftupdate.authorizeddns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba297-d290-4305-b8ab-4b8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:35.000Z",
            "modified": "2015-09-30T08:51:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '432869d960f5168ed71ee54a78bd2cc7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba297-00a8-4c0c-8117-4c27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:35.000Z",
            "modified": "2015-09-30T08:51:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'microsoftupdate.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba297-3d48-4806-b113-4db6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:35.000Z",
            "modified": "2015-09-30T08:51:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '432896dcec2a319f7e9b616811e945d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba297-7690-41bf-aed2-4afd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:35.000Z",
            "modified": "2015-09-30T08:51:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'microweb.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba298-5f60-4647-b2a9-4ec6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:36.000Z",
            "modified": "2015-09-30T08:51:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '433dbe78527531181d63b9cadf141c9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba298-c384-4f76-a5ec-47e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:36.000Z",
            "modified": "2015-09-30T08:51:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'midnight8045.duckydns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba298-2f78-443d-9701-4b75950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:36.000Z",
            "modified": "2015-09-30T08:51:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '433e3c1099b5271cb67b6558b0df5c6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba298-0954-4c55-a54e-4ade950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:36.000Z",
            "modified": "2015-09-30T08:51:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'midoam.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba298-dafc-4a02-bef0-4665950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:36.000Z",
            "modified": "2015-09-30T08:51:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '433efb61f30ce147151e2c958d09b11f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba298-d75c-4eed-a72c-4727950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:36.000Z",
            "modified": "2015-09-30T08:51:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mightysmith.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba299-b908-4dde-8d13-4b52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:37.000Z",
            "modified": "2015-09-30T08:51:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '434330d8fc4ad7320642d458bb03275e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba299-ce44-4c6e-b484-4c95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:37.000Z",
            "modified": "2015-09-30T08:51:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mikimouse007.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba299-d3fc-4dd9-9ee7-45d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:37.000Z",
            "modified": "2015-09-30T08:51:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4345288a56910716ac501cb476259c5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba299-37d0-4f1e-b3fa-4041950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:37.000Z",
            "modified": "2015-09-30T08:51:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'milieu.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba299-86e0-4d5d-8620-46b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:37.000Z",
            "modified": "2015-09-30T08:51:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '434e3c0f88dc2be141a636f13a52355f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29a-5800-402f-9d18-4b03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:38.000Z",
            "modified": "2015-09-30T08:51:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mimimaru.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29a-cca8-4166-8d76-4921950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:38.000Z",
            "modified": "2015-09-30T08:51:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4350deaef83f24b839a87e2607abe1a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29a-25f4-4f9d-954e-4fd4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:38.000Z",
            "modified": "2015-09-30T08:51:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mine123qqqq.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29a-b7c4-46e5-935c-4a9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:38.000Z",
            "modified": "2015-09-30T08:51:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4355d512e059740800a3e61ecc2e41fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29a-9c30-43d1-961a-4ace950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:38.000Z",
            "modified": "2015-09-30T08:51:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'minecraft480.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29a-70f8-4627-9892-4ea6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:38.000Z",
            "modified": "2015-09-30T08:51:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4358fffdd0e3a566ffb794cc4eb44431']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29b-69f0-4126-8620-41cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:39.000Z",
            "modified": "2015-09-30T08:51:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'minecraftfatcat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29b-da30-4f2e-8e93-4793950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:39.000Z",
            "modified": "2015-09-30T08:51:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '436d5e791b1b0ba846358830fad51fd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29b-606c-4c53-8c6d-47f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:39.000Z",
            "modified": "2015-09-30T08:51:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'minecraftjavaload.serveminecraft.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29b-18e0-4594-81b2-479d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:39.000Z",
            "modified": "2015-09-30T08:51:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '43848371a5cbeaa0aa7b130f53bda905']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29b-94ec-44a1-af04-4304950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:39.000Z",
            "modified": "2015-09-30T08:51:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'minecraftpesp.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29c-2d28-45ae-a14d-4625950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:40.000Z",
            "modified": "2015-09-30T08:51:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '438db1d07ed1a146c0f30e2cbda64a08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29c-fba8-4ed3-b24c-473a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:40.000Z",
            "modified": "2015-09-30T08:51:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'minecraftserver1337.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29c-a85c-44f2-970f-407d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:40.000Z",
            "modified": "2015-09-30T08:51:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '438fe8f9883d09bfa2a6ef252d635223']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29c-b190-4a18-acc8-4cb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:40.000Z",
            "modified": "2015-09-30T08:51:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'minecraftservice.serveminecraft.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29c-8530-4f47-ac71-40f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:40.000Z",
            "modified": "2015-09-30T08:51:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '43b7abd1ad30f9c8fdf79da3e089aed4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29d-4604-4cc6-8485-4d49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:41.000Z",
            "modified": "2015-09-30T08:51:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'minekrafter41.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29d-d558-4511-af46-45ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:41.000Z",
            "modified": "2015-09-30T08:51:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '43b818c4ff3152d5ea347b6e3895f0c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29d-39d8-4ab5-a732-49ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:41.000Z",
            "modified": "2015-09-30T08:51:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'minh123minh.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29d-a7e4-4597-84b2-43cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:41.000Z",
            "modified": "2015-09-30T08:51:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '43c2f9a9472879c7757ff1b176bda126']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29d-bcfc-47bc-b6ae-437a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:41.000Z",
            "modified": "2015-09-30T08:51:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'miroaliko.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29d-a654-45d8-b8ff-4ebf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:41.000Z",
            "modified": "2015-09-30T08:51:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '43cf0209369f01e305dd0735a77d6d47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29e-c974-48f3-bb57-4500950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:42.000Z",
            "modified": "2015-09-30T08:51:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mironson2.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29e-5bfc-43fe-a06c-499c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:42.000Z",
            "modified": "2015-09-30T08:51:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '43d15954b82bb13928b71e538c036eb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29e-0560-49e1-9331-4a8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:42.000Z",
            "modified": "2015-09-30T08:51:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'misterzlomaster.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29e-0eb0-445d-b592-4d99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:42.000Z",
            "modified": "2015-09-30T08:51:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '43da3d78c8c77b4b0efb70da908b3bc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29e-f3e0-47ae-80ed-4364950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:42.000Z",
            "modified": "2015-09-30T08:51:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mjudakid.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29e-7fa0-4e8f-bceb-41e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:42.000Z",
            "modified": "2015-09-30T08:51:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44022be3eede03a25b1cc36e407eac43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29f-6058-4317-806f-48e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:43.000Z",
            "modified": "2015-09-30T08:51:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mksu911.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29f-a880-4612-b039-4933950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:43.000Z",
            "modified": "2015-09-30T08:51:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44048ee123c36648566f40609b17d73d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29f-3c28-454a-b1ef-4835950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:43.000Z",
            "modified": "2015-09-30T08:51:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mlebin41.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29f-85b4-4a49-8e60-4e9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:43.000Z",
            "modified": "2015-09-30T08:51:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '440a9ce18b74a50ce8205229fe25ac4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba29f-ba2c-4f8f-b2e1-4016950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:43.000Z",
            "modified": "2015-09-30T08:51:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mlghack.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a0-c7f4-4234-b99b-4da7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:44.000Z",
            "modified": "2015-09-30T08:51:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44184c21e45035f3572b7b53d92a0adb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a0-a5fc-42c1-a4ca-4389950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:44.000Z",
            "modified": "2015-09-30T08:51:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mmvvrr1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a0-66ac-4bb2-bcc5-42fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:44.000Z",
            "modified": "2015-09-30T08:51:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '442233300464d1aa805be377b7f84339']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a0-dc38-4041-8cd8-426f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:44.000Z",
            "modified": "2015-09-30T08:51:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moatazshokry.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a0-64b0-4e82-b55e-4896950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:44.000Z",
            "modified": "2015-09-30T08:51:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '442662d58d547e6891008b07eea167f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a1-6648-447b-9e93-4ae7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:45.000Z",
            "modified": "2015-09-30T08:51:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moatazzain.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a1-6734-49db-a572-489d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:45.000Z",
            "modified": "2015-09-30T08:51:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4426de3090fc23bb05f5c4d83b6a5eda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a1-1c34-4a49-a5d7-4f42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:45.000Z",
            "modified": "2015-09-30T08:51:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'modedattor.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a1-f760-4a35-b088-4f0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:45.000Z",
            "modified": "2015-09-30T08:51:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4429129871ff8598fe5866bc9ddf6189']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a1-ef24-4a31-8711-4000950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:45.000Z",
            "modified": "2015-09-30T08:51:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mods5153135.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a1-6b40-45a8-947a-4d13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:45.000Z",
            "modified": "2015-09-30T08:51:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '443890eafef22c2892c827b880bbfc7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a2-98d0-49bf-98c7-4cfa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:46.000Z",
            "modified": "2015-09-30T08:51:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moha123.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a2-2d24-422e-8df2-43cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:46.000Z",
            "modified": "2015-09-30T08:51:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4438db1c995ad9efc559f1e172cb47b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a2-e4bc-45f0-8cc0-4292950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:46.000Z",
            "modified": "2015-09-30T08:51:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moha55.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a2-ec70-4a12-8f28-4f6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:46.000Z",
            "modified": "2015-09-30T08:51:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44414c7daf60199c3b537e022c060d85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a2-2898-4e68-a606-4b0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:46.000Z",
            "modified": "2015-09-30T08:51:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mohahack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a2-c864-4fa1-a219-4857950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:46.000Z",
            "modified": "2015-09-30T08:51:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '444a4b19a4eb87094a3d3b8ed30d2ce7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a3-1f88-4a1d-aa14-4f86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:47.000Z",
            "modified": "2015-09-30T08:51:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'molham.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a3-f7b0-4100-aa5d-4d2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:47.000Z",
            "modified": "2015-09-30T08:51:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44517a5d6a7d9190e2b5239b5023f4c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a3-84b4-4a16-b4db-4027950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:47.000Z",
            "modified": "2015-09-30T08:51:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'molhcanov.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a3-9be4-4eb0-bbdf-4ea0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:47.000Z",
            "modified": "2015-09-30T08:51:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44537442975b2aa117fe930f1e5ad263']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a3-92a8-40de-a431-4a77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:47.000Z",
            "modified": "2015-09-30T08:51:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'momox91290.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a3-9cd0-4bfc-8d9e-435c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:47.000Z",
            "modified": "2015-09-30T08:51:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44605f25740a5f715d09e5065d65b3fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a4-467c-430f-8bc9-4014950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:48.000Z",
            "modified": "2015-09-30T08:51:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moneyhacker.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a4-dcd8-489c-9276-4186950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:48.000Z",
            "modified": "2015-09-30T08:51:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4468c966f45aeb39de8f7eb16d501d55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a4-2cc8-4233-bda8-488f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:48.000Z",
            "modified": "2015-09-30T08:51:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moneyscloset.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a4-9a44-4d9c-a4d9-415b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:48.000Z",
            "modified": "2015-09-30T08:51:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '446a4d061e941d18966dcb44b658e327']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a4-2dc8-4d70-abcb-45b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:48.000Z",
            "modified": "2015-09-30T08:51:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'monofox.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a5-10b4-4592-a12d-4810950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:49.000Z",
            "modified": "2015-09-30T08:51:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '446a967645eeeef101a1056db607674a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a5-f228-46f6-a03b-47fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:49.000Z",
            "modified": "2015-09-30T08:51:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'monoxide.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a5-83d4-4917-969e-4a5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:49.000Z",
            "modified": "2015-09-30T08:51:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4477538b2d453ddafa84310c1e89670d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a5-1cf8-413f-80e4-4f46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:49.000Z",
            "modified": "2015-09-30T08:51:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'monrat.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a5-dac0-4545-9434-435f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:49.000Z",
            "modified": "2015-09-30T08:51:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '448067c1765b21de921569c228fba02e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a6-a870-4f5a-bc14-4dd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:50.000Z",
            "modified": "2015-09-30T08:51:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'monsterx.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a6-73e4-4ff1-a8b8-40d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:50.000Z",
            "modified": "2015-09-30T08:51:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44836a5e0dbfd0641e8a1bffc818775c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a6-0dcc-4596-80a2-480d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:50.000Z",
            "modified": "2015-09-30T08:51:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'monstrikghost.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a6-ed74-483e-8986-4764950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:50.000Z",
            "modified": "2015-09-30T08:51:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '448393aa022b869c24d341c33a739635']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a6-ccb8-4d09-a9f7-4c15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:50.000Z",
            "modified": "2015-09-30T08:51:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moonmoon.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a6-cb8c-4c36-aaba-4c01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:50.000Z",
            "modified": "2015-09-30T08:51:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4484f6bc9ddcfbd2c275f2e45b5e9a64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a7-0090-4bc5-8083-43d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:51.000Z",
            "modified": "2015-09-30T08:51:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'morebounce.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a7-e01c-4e20-aa52-476d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:51.000Z",
            "modified": "2015-09-30T08:51:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4485474b6f7372671ce5dc840a8734d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a7-5c30-4a76-8a8c-4185950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:51.000Z",
            "modified": "2015-09-30T08:51:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moremore.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a7-ea7c-4bff-95e9-48bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:51.000Z",
            "modified": "2015-09-30T08:51:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '448728de077e91084a3c5bffc965f30c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a7-5544-45ed-8da0-4dbb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:51.000Z",
            "modified": "2015-09-30T08:51:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'morgus0976.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a8-ac10-47d5-9fa6-47ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:52.000Z",
            "modified": "2015-09-30T08:51:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '448daa88497cc989bc6b011e95a2f9a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a8-ee54-4e63-9c69-4fb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:52.000Z",
            "modified": "2015-09-30T08:51:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moritzcomet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a8-3424-452b-945d-4c86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:52.000Z",
            "modified": "2015-09-30T08:51:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44a5f22d2101902df67e99843082a291']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a8-6f84-4778-b8bc-4f8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:52.000Z",
            "modified": "2015-09-30T08:51:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'morl0ck.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a8-e340-4253-b468-4b84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:52.000Z",
            "modified": "2015-09-30T08:51:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44b21a81bdce8ede07e18cde5e19e6f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a9-4418-43c4-a76a-4203950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:53.000Z",
            "modified": "2015-09-30T08:51:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mortadajaber.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a9-6410-4dfe-a466-45b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:53.000Z",
            "modified": "2015-09-30T08:51:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44c5634fea1ca822c692369b86d76344']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a9-1cb8-4c3a-902c-4a63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:53.000Z",
            "modified": "2015-09-30T08:51:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mostafa112.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a9-c208-4205-aaf3-48da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:53.000Z",
            "modified": "2015-09-30T08:51:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44db292513f7fdb63893ac44520d2a7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a9-33f4-40ac-b7e3-4390950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:53.000Z",
            "modified": "2015-09-30T08:51:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mostafa7775147.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2a9-2968-40c8-a8cc-4073950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:53.000Z",
            "modified": "2015-09-30T08:51:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44db5160cb66226f19af3bdbb805a6c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2aa-f91c-4e26-b1c0-4f38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:54.000Z",
            "modified": "2015-09-30T08:51:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mothefacker.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2aa-09a8-4d2a-b849-4e93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:54.000Z",
            "modified": "2015-09-30T08:51:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44dd91a85f66307f0715f460c50057c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2aa-4d18-40b7-b41c-415f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:54.000Z",
            "modified": "2015-09-30T08:51:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'motoxrider.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2aa-bbec-4e3e-ba57-49d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:54.000Z",
            "modified": "2015-09-30T08:51:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44eecfdc1a40175ed8750cb15b850bab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2aa-eaf4-4186-aaac-4832950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:54.000Z",
            "modified": "2015-09-30T08:51:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mougly.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2aa-5338-41b5-8f13-4cf6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:54.000Z",
            "modified": "2015-09-30T08:51:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44efc59e3abdb96e5dfbffa75150febf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ab-7234-4710-a88d-4de8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:55.000Z",
            "modified": "2015-09-30T08:51:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mouse405.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ab-6b2c-4860-bc09-4f99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:55.000Z",
            "modified": "2015-09-30T08:51:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44f6136f5da2eff8f5cb65226b132a5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ab-7124-49a2-b8b2-47c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:55.000Z",
            "modified": "2015-09-30T08:51:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'moustafa111.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ab-b514-4594-8a4e-47b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:55.000Z",
            "modified": "2015-09-30T08:51:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44fa26c4cc69909298680a5f9f6c522a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ab-b140-4f57-a365-4a2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:55.000Z",
            "modified": "2015-09-30T08:51:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mraddyvv.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ac-dcb8-42bf-9b88-433b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:56.000Z",
            "modified": "2015-09-30T08:51:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '44fc61f36a3fbce3cc714a37bb9d2e7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ac-6800-48d6-9faa-4dc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:56.000Z",
            "modified": "2015-09-30T08:51:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrahmed.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ac-bf1c-4392-bb8a-43b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:56.000Z",
            "modified": "2015-09-30T08:51:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45060a92a013b78a1598adc39fedbfab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ac-8e88-4872-97fd-42ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:56.000Z",
            "modified": "2015-09-30T08:51:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mratdeneme.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ac-0c74-49b0-bbf7-4931950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:56.000Z",
            "modified": "2015-09-30T08:51:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '450c9d8f929ed31bb75c41453e05fa60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ad-811c-444d-b1ba-4cdf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:57.000Z",
            "modified": "2015-09-30T08:51:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrbikjo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ad-fbe8-4eeb-bf38-4101950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:57.000Z",
            "modified": "2015-09-30T08:51:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '451bb5427ea12c949994889043fcf8e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ad-09d4-4872-afe8-4a9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:57.000Z",
            "modified": "2015-09-30T08:51:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrblue58.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ad-7074-4b8d-ab00-40a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:57.000Z",
            "modified": "2015-09-30T08:51:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4520196dfcc8b9fb4c5f2ba1bebb76dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ad-a2fc-40b9-a86f-448c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:57.000Z",
            "modified": "2015-09-30T08:51:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrdan2015.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ad-ec88-4c74-a727-488c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:57.000Z",
            "modified": "2015-09-30T08:51:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45213179c7d49f8558e3ccbd9a9b9b12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ae-b6e8-4f73-a11e-40ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:58.000Z",
            "modified": "2015-09-30T08:51:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrdn.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ae-dabc-4a0c-ad47-476d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:58.000Z",
            "modified": "2015-09-30T08:51:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '452d746be43449fa23a25f9ca5fa1eef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ae-8a98-4d13-bb9b-4b6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:58.000Z",
            "modified": "2015-09-30T08:51:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrdurgut.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ae-bd08-4798-9a72-464f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:58.000Z",
            "modified": "2015-09-30T08:51:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '453681f426c9c3701aa9aa4040a943e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ae-5ba0-477f-867d-4f22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:58.000Z",
            "modified": "2015-09-30T08:51:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrhomer228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ae-2de4-4848-93dc-4220950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:58.000Z",
            "modified": "2015-09-30T08:51:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4548218c0731e0b630525b9a423fa4a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2af-687c-4e65-ad6e-4f45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:59.000Z",
            "modified": "2015-09-30T08:51:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrmeowclub.mooo.comt']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2af-83f8-41d2-a034-4557950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:59.000Z",
            "modified": "2015-09-30T08:51:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4554d3f3739d99cb920294b279a82e03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2af-ae04-4620-8879-4751950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:59.000Z",
            "modified": "2015-09-30T08:51:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrmini1025.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2af-29c8-4e66-b01f-4950950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:59.000Z",
            "modified": "2015-09-30T08:51:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '455666507dfa23cb6e39c21c984a4fea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2af-cf68-4b5c-9509-4ae6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:51:59.000Z",
            "modified": "2015-09-30T08:51:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrocznakometa.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:51:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b0-2144-46d9-924c-4f28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:00.000Z",
            "modified": "2015-09-30T08:52:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '455f6527d32df1d460713024641cf9a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b0-a6ac-4a4c-973d-486e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:00.000Z",
            "modified": "2015-09-30T08:52:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrrobot.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b0-2534-4f92-9c60-47b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:00.000Z",
            "modified": "2015-09-30T08:52:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45608ecc6bc65cdbda00f280ff5b7425']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b0-a230-4a99-95db-4b9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:00.000Z",
            "modified": "2015-09-30T08:52:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrrok.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b0-6a4c-4a59-bd9d-4aa8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:00.000Z",
            "modified": "2015-09-30T08:52:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4562fde9c24182ffae452f305bed0adb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b1-5728-4019-9a49-419f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:01.000Z",
            "modified": "2015-09-30T08:52:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrthacker.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b1-b2f4-42c7-b6bb-4c0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:01.000Z",
            "modified": "2015-09-30T08:52:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45647b412575548c4c38ae57350d5e98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b1-d824-445b-baf8-43f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:01.000Z",
            "modified": "2015-09-30T08:52:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrtrac.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b1-030c-4d5b-a6be-4361950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:01.000Z",
            "modified": "2015-09-30T08:52:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '458116c14e5708beede32a2b2c1a89fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b1-a8d0-4c67-98f3-4f92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:01.000Z",
            "modified": "2015-09-30T08:52:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrvladkiller1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b1-54f0-46c8-97f6-4517950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:01.000Z",
            "modified": "2015-09-30T08:52:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '458649a3e38c4faf069f9736a7c5bf25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b2-3f98-4e5a-81a6-484c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:02.000Z",
            "modified": "2015-09-30T08:52:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mrwhite68.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b2-d29c-4484-a340-44dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:02.000Z",
            "modified": "2015-09-30T08:52:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45899729d3d4c78f2a77debd2a268030']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b2-2aa4-4955-b32b-4acf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:02.000Z",
            "modified": "2015-09-30T08:52:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'msodenetim.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b2-5430-4fc9-8eb2-425f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:02.000Z",
            "modified": "2015-09-30T08:52:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '458a0c939862d1b22327c255bfab2dec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b2-5958-4ca6-99c4-453f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:02.000Z",
            "modified": "2015-09-30T08:52:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '458e979b31dc84ba6d7311e6b8f5cceb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b3-6650-4459-8224-40e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:03.000Z",
            "modified": "2015-09-30T08:52:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mths.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b3-bbc8-48cc-9fd8-44aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:03.000Z",
            "modified": "2015-09-30T08:52:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4594e85d6b6e0bafb11c030a40059500']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b3-72b4-4d31-bfad-43f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:03.000Z",
            "modified": "2015-09-30T08:52:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'muawaycontas.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b3-b198-460b-8222-40b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:03.000Z",
            "modified": "2015-09-30T08:52:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4595eb8b2a3738705530f27851cf7c28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b3-ca74-433e-91d0-426d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:03.000Z",
            "modified": "2015-09-30T08:52:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'muhamadharer.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b4-20dc-4453-bd90-4aa9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:04.000Z",
            "modified": "2015-09-30T08:52:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45b4fe750908f9ca17e28a922c719e98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b4-7d40-43ad-a7e6-451c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:04.000Z",
            "modified": "2015-09-30T08:52:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'muie-voua3293.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b4-98b8-44f5-be29-410a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:04.000Z",
            "modified": "2015-09-30T08:52:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45bccb30504c64c61f55867b4842c368']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b4-1084-43b4-8bc3-4066950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:04.000Z",
            "modified": "2015-09-30T08:52:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'muie-voua3293.no-ip.boz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b4-f988-4e52-a725-4962950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:04.000Z",
            "modified": "2015-09-30T08:52:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45bece6d02140150c9589af6f757bbea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b4-3b7c-45ac-b2a6-41aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:04.000Z",
            "modified": "2015-09-30T08:52:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'muki32.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b5-b7f4-4534-aca3-4453950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:05.000Z",
            "modified": "2015-09-30T08:52:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45cd03bb7e3b7adccdedb34edcba9acc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b5-5910-439e-93a8-41f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:05.000Z",
            "modified": "2015-09-30T08:52:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'multiply.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b5-a4b8-43b1-a841-4ef2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:05.000Z",
            "modified": "2015-09-30T08:52:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45d3a7eb953f5a13b6f8b34f81b4d8d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b5-9904-49c1-b17b-4074950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:05.000Z",
            "modified": "2015-09-30T08:52:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mumya.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b5-e47c-4b3e-a90f-425d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:05.000Z",
            "modified": "2015-09-30T08:52:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45d4ec105ef4672df43c2968595ee392']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b6-4a10-44a9-8b18-41b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:06.000Z",
            "modified": "2015-09-30T08:52:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'murathack.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b6-7c94-419e-bfcd-42da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:06.000Z",
            "modified": "2015-09-30T08:52:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45e589b6c5bdded56a7036fd83479282']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b6-b440-4c5b-be04-41c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:06.000Z",
            "modified": "2015-09-30T08:52:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'muratreklam.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b6-3350-487f-8e34-4ede950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:06.000Z",
            "modified": "2015-09-30T08:52:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45e5a5a992f6dc755c75d1182667e41b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b6-aa10-4dd9-a4d9-4d13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:06.000Z",
            "modified": "2015-09-30T08:52:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'murderlikedj.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b6-eba0-47c9-956a-4e8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:06.000Z",
            "modified": "2015-09-30T08:52:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '45fd01b73a6ec0ece060716de6e9d48c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b7-95dc-4a2a-994f-41f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:07.000Z",
            "modified": "2015-09-30T08:52:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'murkote.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b7-db94-479f-bf26-4638950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:07.000Z",
            "modified": "2015-09-30T08:52:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46096960eb11030cf440fed41581c750']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b7-fd38-4388-8fc8-4b74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:07.000Z",
            "modified": "2015-09-30T08:52:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'musilinedc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b7-07a4-47e9-84a1-4160950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:07.000Z",
            "modified": "2015-09-30T08:52:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46096d22e424c12228dea4bfd32a4f4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b7-7704-4da2-9de7-466f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:07.000Z",
            "modified": "2015-09-30T08:52:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mustangtdc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b8-1140-46bd-900a-4c2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:08.000Z",
            "modified": "2015-09-30T08:52:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4613d839e0453aa4fe1512a646f8f503']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b8-f99c-4945-adb0-4c11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:08.000Z",
            "modified": "2015-09-30T08:52:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'muuven.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b8-2de0-452f-8c3d-4ffc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:08.000Z",
            "modified": "2015-09-30T08:52:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46151de529895f7e7788070b1d695b83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b8-7dd0-4567-b44e-4b0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:08.000Z",
            "modified": "2015-09-30T08:52:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mx9p3.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b8-a808-4365-8bc9-4682950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:08.000Z",
            "modified": "2015-09-30T08:52:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4618dcc70400955218d3c58d96d566e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b8-2e30-470e-9343-479b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:08.000Z",
            "modified": "2015-09-30T08:52:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'my25.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b9-1ffc-42ea-9523-4e25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:09.000Z",
            "modified": "2015-09-30T08:52:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '461d7d62950e6d340c2f56363127b9ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b9-dd74-4459-b46e-49f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:09.000Z",
            "modified": "2015-09-30T08:52:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mycomputer.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b9-b2a4-45fd-aa83-4058950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:09.000Z",
            "modified": "2015-09-30T08:52:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '461e5e3b10c6ba2a02fe6e83ffc868d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b9-f99c-4eb4-a400-4c0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:09.000Z",
            "modified": "2015-09-30T08:52:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myfreecams.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2b9-279c-4aaf-917a-4f9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:09.000Z",
            "modified": "2015-09-30T08:52:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4622fb968be3a0b5c9ccf4f7ed9e0f2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ba-81e0-4662-9d5d-45bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:10.000Z",
            "modified": "2015-09-30T08:52:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myfun3.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ba-6950-46d0-815f-48d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:10.000Z",
            "modified": "2015-09-30T08:52:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '462351f5914ae4a982dedc427467be43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ba-4d84-4358-a0e0-4aae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:10.000Z",
            "modified": "2015-09-30T08:52:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myhackip.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ba-b324-45a0-955a-42be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:10.000Z",
            "modified": "2015-09-30T08:52:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '463364f1554a86d08efcc3845532569f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ba-bf54-44ea-b159-455a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:10.000Z",
            "modified": "2015-09-30T08:52:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myhaxgg.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ba-64c0-4caa-9483-4691950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:10.000Z",
            "modified": "2015-09-30T08:52:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4654036eee2f2211c4616497a23801c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bb-69fc-4705-8449-49ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:11.000Z",
            "modified": "2015-09-30T08:52:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myhostname.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bb-ca8c-46b1-a5c2-4185950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:11.000Z",
            "modified": "2015-09-30T08:52:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '465e50e9c15e2380ecf2b698082aa82e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bb-bf00-4d77-9e98-447d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:11.000Z",
            "modified": "2015-09-30T08:52:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myinfinity.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bb-6410-4e6b-9b72-42d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:11.000Z",
            "modified": "2015-09-30T08:52:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '466309cbea39b9b891f55a983220c19d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bb-9a10-49b7-bfc9-459c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:11.000Z",
            "modified": "2015-09-30T08:52:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myjrathost.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bc-6e24-4e84-ba59-404c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:12.000Z",
            "modified": "2015-09-30T08:52:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46644b9cc51e259321c6a13613c9541e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bc-84d0-4c94-af33-4383950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:12.000Z",
            "modified": "2015-09-30T08:52:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mynikes2001.serveblog.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bc-10e4-4e62-a823-48fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:12.000Z",
            "modified": "2015-09-30T08:52:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '466f256bf690e0a8d9e0590d933a70be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bc-9718-45e0-9584-4464950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:12.000Z",
            "modified": "2015-09-30T08:52:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myonline.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bc-d508-4a70-b4aa-4afd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:12.000Z",
            "modified": "2015-09-30T08:52:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4677ad8f052e3b650e80298d2d8e24fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bd-450c-459d-80b3-4162950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:13.000Z",
            "modified": "2015-09-30T08:52:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myowlfriend.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bd-1fa4-4961-ad6a-4b1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:13.000Z",
            "modified": "2015-09-30T08:52:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '467a62bfb844402c30015e66c079ead8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bd-d358-4cc8-a8d2-4b15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:13.000Z",
            "modified": "2015-09-30T08:52:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myprince.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bd-bde8-4d13-879a-4283950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:13.000Z",
            "modified": "2015-09-30T08:52:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46801530bb16f23d1fbea03801be98f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bd-35d8-472b-992a-448a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:13.000Z",
            "modified": "2015-09-30T08:52:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myrat.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bd-f700-4beb-83f9-41aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:13.000Z",
            "modified": "2015-09-30T08:52:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4684692baefb33b2afafb650599198d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2be-a414-4f77-b61a-4e6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:14.000Z",
            "modified": "2015-09-30T08:52:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myrat555.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2be-dcf8-46cf-a7cd-4c87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:14.000Z",
            "modified": "2015-09-30T08:52:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '468898c0cb826c4249d17d8351e61801']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2be-4c9c-4c1d-904c-43c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:14.000Z",
            "modified": "2015-09-30T08:52:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myrat666.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2be-a8f4-4344-8471-4eee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:14.000Z",
            "modified": "2015-09-30T08:52:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46966949dcfcef6bf04b4a51f8b6ba88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2be-41bc-444b-9718-44ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:14.000Z",
            "modified": "2015-09-30T08:52:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myrat93.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bf-14b8-4790-b94b-4f03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:15.000Z",
            "modified": "2015-09-30T08:52:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '469993803ffd9cc2665fc626b459c8c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bf-05c8-45f3-947e-48bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:15.000Z",
            "modified": "2015-09-30T08:52:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mysteamspeak.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bf-d798-44bc-ab0b-490b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:15.000Z",
            "modified": "2015-09-30T08:52:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '469cc48d3784f68f08a3f54f5cbc414a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bf-c050-4008-a9fe-417b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:15.000Z",
            "modified": "2015-09-30T08:52:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mysticalkiller.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2bf-7150-45eb-8984-4959950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:15.000Z",
            "modified": "2015-09-30T08:52:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '469dc1a9e88bd0f3d5deb7e17a0620d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c0-d9a8-4cd7-925c-4b3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:16.000Z",
            "modified": "2015-09-30T08:52:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'myszx.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c0-dcd4-4b93-b763-4df9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:16.000Z",
            "modified": "2015-09-30T08:52:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46a201a237d3b2f8aa1106d1406911c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c0-4c20-498b-8812-4a8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:16.000Z",
            "modified": "2015-09-30T08:52:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'mythcrafting.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c0-c190-46e2-abe3-45c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:16.000Z",
            "modified": "2015-09-30T08:52:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46b947fe1f8432f9c4a4e3a921c19d36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c0-b760-4e1b-9803-4b68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:16.000Z",
            "modified": "2015-09-30T08:52:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'n4ku.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c0-2fbc-42ce-ab2f-46c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:16.000Z",
            "modified": "2015-09-30T08:52:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46bb16a6a2ea1a6b3cb851455211f5e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c1-a620-405b-b547-4993950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:17.000Z",
            "modified": "2015-09-30T08:52:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'naebator371.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c1-b274-4896-8296-4756950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:17.000Z",
            "modified": "2015-09-30T08:52:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46c34f0dd3b5674040fe5003ebe7a2ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c1-d9e8-4382-9d1a-427a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:17.000Z",
            "modified": "2015-09-30T08:52:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'naemnikx.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c1-5118-4abe-8ed2-40a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:17.000Z",
            "modified": "2015-09-30T08:52:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46c70ebc759bcc2feb43c2dfdf6f520b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c1-b2a0-41db-b34d-4f9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:17.000Z",
            "modified": "2015-09-30T08:52:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'naname500.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c2-c4d0-4cba-89ed-476d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:18.000Z",
            "modified": "2015-09-30T08:52:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46d49b42bdf627f8fa7fa91726febcd5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c2-4fac-4c2a-aec5-4310950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:18.000Z",
            "modified": "2015-09-30T08:52:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nanzy.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c2-4784-46a9-b480-48ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:18.000Z",
            "modified": "2015-09-30T08:52:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46dbbacc56bb43848daeba73a2863e2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c2-785c-4f1e-90bd-4089950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:18.000Z",
            "modified": "2015-09-30T08:52:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'narcotraf.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c2-14a8-4448-8b6c-4965950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:18.000Z",
            "modified": "2015-09-30T08:52:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46e4ad86786ba546928edccbdf2ae95c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c3-a940-49ef-89ec-42ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:19.000Z",
            "modified": "2015-09-30T08:52:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'narkotik1994.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c3-4c54-46d6-a5ad-4a61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:19.000Z",
            "modified": "2015-09-30T08:52:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46eb7c6854f1d6717a4351ede6006b90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c3-a9d8-40fb-b2af-431f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:19.000Z",
            "modified": "2015-09-30T08:52:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nasos.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c3-2844-431d-b361-43d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:19.000Z",
            "modified": "2015-09-30T08:52:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46eb816ab8519c4cbc1357f0549ff299']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c3-14ec-450f-84d1-43ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:19.000Z",
            "modified": "2015-09-30T08:52:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'naughtyrooster.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c3-7818-4936-99bb-4058950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:19.000Z",
            "modified": "2015-09-30T08:52:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46ecb8bab37d30863faa767240097239']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c4-8ad4-42c6-9f25-4232950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:20.000Z",
            "modified": "2015-09-30T08:52:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'navek222.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c4-7504-4591-a0bb-4b8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:20.000Z",
            "modified": "2015-09-30T08:52:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '46f1fce7f20158d0d54e9e7de25343e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c4-83d8-4b12-86dc-4bc2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:20.000Z",
            "modified": "2015-09-30T08:52:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'naym.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c4-c5f8-4e52-9789-4048950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:20.000Z",
            "modified": "2015-09-30T08:52:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4718529a17ee37e0a88ef790fcd7d9d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c4-1a50-48c9-ab91-4247950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:20.000Z",
            "modified": "2015-09-30T08:52:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'necrofear.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c4-d448-42d9-8fdc-4e00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:20.000Z",
            "modified": "2015-09-30T08:52:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4718a40561b0d3a12e2fb95a1c625367']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c5-a288-4051-a693-4419950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:21.000Z",
            "modified": "2015-09-30T08:52:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'necromancreas.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c5-884c-41c3-a1bf-41fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:21.000Z",
            "modified": "2015-09-30T08:52:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '471de74fd2745a829f9798ded35f59ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c5-1fcc-4239-8731-4474950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:21.000Z",
            "modified": "2015-09-30T08:52:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'negar.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c5-08e8-488d-b2f4-48f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:21.000Z",
            "modified": "2015-09-30T08:52:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4727335ce3a9c9b524f7c06194e2737d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c5-7ce4-4d34-b708-49b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:21.000Z",
            "modified": "2015-09-30T08:52:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'negative-plus.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c6-73e0-4990-b6e6-4678950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:22.000Z",
            "modified": "2015-09-30T08:52:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '472b76f9b08d9865befabb2a7acbafcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c6-5f18-481d-a284-4697950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:22.000Z",
            "modified": "2015-09-30T08:52:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nemec0306.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c6-1c84-4730-a948-40c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:22.000Z",
            "modified": "2015-09-30T08:52:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47486e56249d33012084a912074f3e04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c6-26e4-4ff5-a502-4526950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:22.000Z",
            "modified": "2015-09-30T08:52:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'neochann.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c6-cb78-4ae7-8cbf-4174950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:22.000Z",
            "modified": "2015-09-30T08:52:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '474a95c10e453b6b0b6cf4a1996b294c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c7-847c-4746-aa8e-4e6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:23.000Z",
            "modified": "2015-09-30T08:52:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nesrat39.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c7-15f0-40c2-8cab-4cf2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:23.000Z",
            "modified": "2015-09-30T08:52:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '475ac715635eb7fb836d7bcdbe24a372']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c7-acdc-4325-b50a-4aaa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:23.000Z",
            "modified": "2015-09-30T08:52:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'netrise2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c7-58bc-48a8-9603-4517950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:23.000Z",
            "modified": "2015-09-30T08:52:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '475bd83ce3b5813ac6e7f067e39ddf77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c7-85f0-4385-804c-4fb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:23.000Z",
            "modified": "2015-09-30T08:52:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nexgraphics.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c7-c05c-458f-ae3a-4a74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:23.000Z",
            "modified": "2015-09-30T08:52:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '476073939c64dc9b2bc5e9e2b30d9778']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c8-2758-4247-8dd8-4af6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:24.000Z",
            "modified": "2015-09-30T08:52:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nexkiller.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c8-e2d8-438c-a1f2-4753950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:24.000Z",
            "modified": "2015-09-30T08:52:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4776045ae09773983d256b503de5a796']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c8-bb40-4685-9896-4878950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:24.000Z",
            "modified": "2015-09-30T08:52:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'neymeroussama.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c8-f2a0-49f1-b190-4a3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:24.000Z",
            "modified": "2015-09-30T08:52:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4781508876c82e7236b78c66af65db86']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c8-e270-4e5f-9f8d-4aea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:24.000Z",
            "modified": "2015-09-30T08:52:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nezjdov.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c9-18e0-44b8-a07c-4791950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:25.000Z",
            "modified": "2015-09-30T08:52:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4782ef875fedf23493cd0e54d53989c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c9-908c-47ef-9b75-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:25.000Z",
            "modified": "2015-09-30T08:52:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ngokhong.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c9-f19c-408a-b2d4-4f56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:25.000Z",
            "modified": "2015-09-30T08:52:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4783a30534a2566c463eeef510d06650']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c9-07bc-4c10-aa6c-4e5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:25.000Z",
            "modified": "2015-09-30T08:52:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nguyendinhthang.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2c9-ff70-4312-82f3-40c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:25.000Z",
            "modified": "2015-09-30T08:52:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4784dcf9310b95ab575eefb21f2347d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ca-da04-4a75-ac15-4e5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:26.000Z",
            "modified": "2015-09-30T08:52:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ngwtim.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ca-db68-47c5-95b2-40c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:26.000Z",
            "modified": "2015-09-30T08:52:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4788ac1775e30e1abb17b6672af2250e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ca-3ad4-4a92-81fb-4d15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:26.000Z",
            "modified": "2015-09-30T08:52:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nhatalie10.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ca-5834-4e37-a1bf-49c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:26.000Z",
            "modified": "2015-09-30T08:52:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4791c7e113e0ee2c215e98747f7b31b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ca-23cc-4074-8beb-4bc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:26.000Z",
            "modified": "2015-09-30T08:52:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nickthedick.ignorelist.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ca-8e4c-42e2-869f-43b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:26.000Z",
            "modified": "2015-09-30T08:52:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4791ec2a595700569a8c9674646a61ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cb-2898-4d57-bb0d-4cf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:27.000Z",
            "modified": "2015-09-30T08:52:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nickynick02.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cb-b6b0-461c-a0f3-465e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:27.000Z",
            "modified": "2015-09-30T08:52:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47a392a1f6b80cc4e1a7ff49a7ab9d2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cb-101c-4adc-9221-4e29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:27.000Z",
            "modified": "2015-09-30T08:52:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nico94.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cb-8714-410a-8023-485c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:27.000Z",
            "modified": "2015-09-30T08:52:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47ac5fdeda8b302f4efae4f87eec33e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cb-9fec-40e3-aa4d-4bd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:27.000Z",
            "modified": "2015-09-30T08:52:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nigger123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cb-df2c-4be4-ac8a-4006950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:27.000Z",
            "modified": "2015-09-30T08:52:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47b9e4c9d74c137b08366ad10e24a7f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cc-38e0-4663-929f-47bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:28.000Z",
            "modified": "2015-09-30T08:52:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'niggerfeet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cc-2068-41f7-89a3-4332950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:28.000Z",
            "modified": "2015-09-30T08:52:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47c26f97a34f3f2c6bed50e407c3a1fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cc-88ec-4059-8c8b-4191950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:28.000Z",
            "modified": "2015-09-30T08:52:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nightsesh.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cc-8b68-4db6-8487-4d8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:28.000Z",
            "modified": "2015-09-30T08:52:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47c882e5827f0f9f22f5fb2049fc9b64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cc-ade4-4d39-ae0d-440a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:28.000Z",
            "modified": "2015-09-30T08:52:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'niiii88888888.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cd-8584-4c3f-8a91-4a54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:29.000Z",
            "modified": "2015-09-30T08:52:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47c95b7753ee804d44a46fc3faae3e19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cd-7d50-421a-a2ec-4c13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:29.000Z",
            "modified": "2015-09-30T08:52:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikagogichaishvili.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cd-7f44-49b4-a365-46ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:29.000Z",
            "modified": "2015-09-30T08:52:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47d41b5b2e9208fe501a7899f2465385']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cd-2c10-4ac6-a57a-4dae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:29.000Z",
            "modified": "2015-09-30T08:52:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikit.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cd-0be4-431f-bd7e-4082950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:29.000Z",
            "modified": "2015-09-30T08:52:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47d55023ecac3f22413da6e7448d7807']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ce-6508-482e-966f-4442950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:30.000Z",
            "modified": "2015-09-30T08:52:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikit222.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ce-e800-4418-b4f5-4c2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:30.000Z",
            "modified": "2015-09-30T08:52:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47d823079d76f28eba48a071aefc9263']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ce-52c0-40f8-acd2-4c7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:30.000Z",
            "modified": "2015-09-30T08:52:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikita6866.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ce-bdec-41da-81ca-4a53950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:30.000Z",
            "modified": "2015-09-30T08:52:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47daae0a5e8db75e3595a4323179a325']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ce-80f4-4bc4-888b-4cc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:30.000Z",
            "modified": "2015-09-30T08:52:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikita87686867.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ce-27b8-47d3-8d92-4cbb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:30.000Z",
            "modified": "2015-09-30T08:52:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47e4918ed3985013d4ef83d948143790']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cf-62d0-4887-9e19-40a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:31.000Z",
            "modified": "2015-09-30T08:52:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikitakek1.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cf-4c34-48e0-b874-48eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:31.000Z",
            "modified": "2015-09-30T08:52:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47e67c6a0f83ee26224de0ccf17c9391']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cf-54fc-40f8-a77e-4b32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:31.000Z",
            "modified": "2015-09-30T08:52:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikitos60960.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cf-30d8-4717-a2d6-4743950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:31.000Z",
            "modified": "2015-09-30T08:52:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47f00d6dcccae2a58e23479b7000657a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cf-5ac0-470f-ba9f-46a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:31.000Z",
            "modified": "2015-09-30T08:52:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikol1235.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2cf-3850-472b-9934-478a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:31.000Z",
            "modified": "2015-09-30T08:52:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47f15f2f75fc8eabd2c407fbf3016df7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d0-7cec-472d-b6ce-4a7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:32.000Z",
            "modified": "2015-09-30T08:52:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikolashnikov.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d0-96e4-41a6-b9e6-4cd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:32.000Z",
            "modified": "2015-09-30T08:52:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '47f6ce80997f529eec4abd4bb5b0d2c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d0-d9cc-4402-b089-4387950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:32.000Z",
            "modified": "2015-09-30T08:52:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nikolev.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d0-5e8c-4864-bb3f-4ce3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:32.000Z",
            "modified": "2015-09-30T08:52:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4806944254ac14fef12c99e0dd421b1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d0-b9ec-45c2-a8e6-4342950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:32.000Z",
            "modified": "2015-09-30T08:52:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'niks704.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d1-5db4-4699-8ef5-42fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:33.000Z",
            "modified": "2015-09-30T08:52:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4808f5a5f92ae5fa2a8500744b53b1bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d1-22d0-44bb-897f-4de7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:33.000Z",
            "modified": "2015-09-30T08:52:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nimoru.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d1-06a8-4c1e-ba5d-442c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:33.000Z",
            "modified": "2015-09-30T08:52:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '482051aaf70200e48c3005e04c56bb66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d1-942c-44aa-bdd0-4de0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:33.000Z",
            "modified": "2015-09-30T08:52:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ninja-world-vpn.strangled.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d1-af74-4178-abd8-415a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:33.000Z",
            "modified": "2015-09-30T08:52:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '482af4fdf8e02e89f80b4138079ba083']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d2-de9c-4f92-8fbc-40fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:34.000Z",
            "modified": "2015-09-30T08:52:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ninjarocks.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d2-c174-408c-8f31-4065950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:34.000Z",
            "modified": "2015-09-30T08:52:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '482c38b2fae9b5d413b40a72091c8c6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d2-5cec-4483-af5b-4a19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:34.000Z",
            "modified": "2015-09-30T08:52:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'njrat-hacked.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d2-3124-4d4d-93b7-4801950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:34.000Z",
            "modified": "2015-09-30T08:52:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4832aff4eb35be205fb24a571097322e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d2-cde4-490d-8c62-4140950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:34.000Z",
            "modified": "2015-09-30T08:52:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'njrat98754682.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d2-a07c-40bd-a324-4f30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:34.000Z",
            "modified": "2015-09-30T08:52:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '483600b6323999f74712a3a6dd1dc717']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d3-60ec-4200-b088-4765950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:35.000Z",
            "modified": "2015-09-30T08:52:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nkhack.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d3-bcd4-4cc5-a716-4ce0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:35.000Z",
            "modified": "2015-09-30T08:52:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '483dfcfe3ba4fa54baba83fa040f6c65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d3-52f0-4f3a-bc68-429a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:35.000Z",
            "modified": "2015-09-30T08:52:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nkm1337.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d3-168c-4552-a397-46b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:35.000Z",
            "modified": "2015-09-30T08:52:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4841dc4c9a6c5da49d6cf59cdd18cdf7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d3-4f4c-4ff9-9b30-489b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:35.000Z",
            "modified": "2015-09-30T08:52:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nn.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d4-abbc-48a8-bbfd-4efd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:35.000Z",
            "modified": "2015-09-30T08:52:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '484437f4b03ae4ee1fcb04bae43bf25c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d4-c674-40ee-bdad-4756950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:36.000Z",
            "modified": "2015-09-30T08:52:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4849d05ee11ac7535ccd23dcd3d6a39c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d4-b8f8-4626-acfc-4fcc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:36.000Z",
            "modified": "2015-09-30T08:52:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'noble6.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d4-12c8-427a-a88f-4e51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:36.000Z",
            "modified": "2015-09-30T08:52:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '484ef87239ae412883376b88f1b7b0b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d4-8630-43c7-948a-4bb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:36.000Z",
            "modified": "2015-09-30T08:52:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nobodywithyou.quicksytes.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d5-7b60-42ef-8757-4c84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:37.000Z",
            "modified": "2015-09-30T08:52:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '484f81636f98142058438941b4964a53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d5-ec48-4c1c-953d-4cd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:37.000Z",
            "modified": "2015-09-30T08:52:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nodarius.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d5-210c-4c27-9650-4bfc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:37.000Z",
            "modified": "2015-09-30T08:52:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4867281bc3fbb91deaa24dd9c41fd960']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d5-bda8-4a4e-b02a-4e78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:37.000Z",
            "modified": "2015-09-30T08:52:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nohack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d5-13ec-4ed0-b12f-4f17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:37.000Z",
            "modified": "2015-09-30T08:52:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '486bb6aee30086992f24b341d23b32f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d5-0a38-42e7-a102-4f2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:37.000Z",
            "modified": "2015-09-30T08:52:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'noip123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d6-2630-433d-bc54-4a6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:38.000Z",
            "modified": "2015-09-30T08:52:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '486c76047359e1c44633ec5f662752c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d6-85cc-4465-8712-4836950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:38.000Z",
            "modified": "2015-09-30T08:52:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'noip4.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d6-2c58-4da5-95b5-4b34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:38.000Z",
            "modified": "2015-09-30T08:52:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4871e23b2e081fc218599be03a9d710c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d6-ef1c-42e8-ad8d-4956950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:38.000Z",
            "modified": "2015-09-30T08:52:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'noip4.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d6-0430-4414-9fb2-4444950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:38.000Z",
            "modified": "2015-09-30T08:52:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4872b2150644c2efefa0b226ab8769e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d7-049c-4864-a8e3-4ceb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:39.000Z",
            "modified": "2015-09-30T08:52:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'noipduc2.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d7-50e0-4b0a-92b6-4f36950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:39.000Z",
            "modified": "2015-09-30T08:52:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '487e3a040f319d6b63ada934b220088c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d7-06f4-406a-89be-41c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:39.000Z",
            "modified": "2015-09-30T08:52:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nolimitu.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d7-aba8-499d-9a10-4f12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:39.000Z",
            "modified": "2015-09-30T08:52:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '488680ff5c789c964305754ac74b626f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d7-288c-4995-bee0-4744950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:39.000Z",
            "modified": "2015-09-30T08:52:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nono47.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d7-9990-4800-9388-46ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:39.000Z",
            "modified": "2015-09-30T08:52:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '489ae7a4ac8b3eb495bb3f88bc789da7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d8-0ec4-48ac-8eb8-4c9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:40.000Z",
            "modified": "2015-09-30T08:52:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nontapat123.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d8-a934-49b8-8a3e-4456950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:40.000Z",
            "modified": "2015-09-30T08:52:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '489b541696bef31b6f6913352316d835']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d8-c4e8-42d4-a31c-44cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:40.000Z",
            "modified": "2015-09-30T08:52:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nooutza.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d8-3d38-4def-8a95-43ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:40.000Z",
            "modified": "2015-09-30T08:52:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48a0de1bcead39b4a9b70282159e54b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d8-81b0-4fbc-8968-4604950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:40.000Z",
            "modified": "2015-09-30T08:52:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'norecognized1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d8-635c-4204-9e37-4873950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:40.000Z",
            "modified": "2015-09-30T08:52:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48ac523037bc25a8393a241be9b9552f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d9-aa50-42e6-be18-45f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:41.000Z",
            "modified": "2015-09-30T08:52:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'norecoilcsgo.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d9-4f3c-492b-bd03-4147950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:41.000Z",
            "modified": "2015-09-30T08:52:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48aed28e3aa4e73f317d9adac1d2fcab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d9-4eb4-4aec-94ce-49ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:41.000Z",
            "modified": "2015-09-30T08:52:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nosprive.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d9-9e70-4106-925c-48cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:41.000Z",
            "modified": "2015-09-30T08:52:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48ba58c9884d8360802a4c924ecc2a3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2d9-b794-4807-972f-4df6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:41.000Z",
            "modified": "2015-09-30T08:52:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nostress.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2da-4c68-40e0-b1a0-4a8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:42.000Z",
            "modified": "2015-09-30T08:52:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48bd800661838c2ef51a0d06c3f45455']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2da-8e80-4888-aefd-4707950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:42.000Z",
            "modified": "2015-09-30T08:52:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'not-ip.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2da-7f18-4bcc-9992-4909950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:42.000Z",
            "modified": "2015-09-30T08:52:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48c2d1a86b99c47749e3cbdff0ef2059']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2da-cf64-4719-aba3-49e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:42.000Z",
            "modified": "2015-09-30T08:52:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'notarat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2da-2014-412b-b48f-4678950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:42.000Z",
            "modified": "2015-09-30T08:52:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48d38b0c3cd6e6c37c98164652d679d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2db-5768-4c00-9de8-412d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:43.000Z",
            "modified": "2015-09-30T08:52:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nothackhere.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2db-b1b8-4765-bbcd-41b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:43.000Z",
            "modified": "2015-09-30T08:52:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48dd5b14e99bbc77a954d30a5050e2a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2db-cdec-43d2-a29e-4a9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:43.000Z",
            "modified": "2015-09-30T08:52:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nothing317.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2db-f030-45d8-bf55-4a03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:43.000Z",
            "modified": "2015-09-30T08:52:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48e64770d6941a6937965c95bc646d69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2db-d744-41f8-b12d-4b99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:43.000Z",
            "modified": "2015-09-30T08:52:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nothingfishyhere.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2db-0088-4da4-9836-44e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:43.000Z",
            "modified": "2015-09-30T08:52:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48ee22d1b007127ca4208a92b2f61092']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dc-3188-4213-8d56-480d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:44.000Z",
            "modified": "2015-09-30T08:52:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'notthistime.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dc-70b8-4f9e-a474-4b48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:44.000Z",
            "modified": "2015-09-30T08:52:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48eea3cdb1f2523f59db45f2caeed2e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dc-f794-49fb-a610-496f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:44.000Z",
            "modified": "2015-09-30T08:52:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nouserip.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dc-d88c-48b7-8a4f-48b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:44.000Z",
            "modified": "2015-09-30T08:52:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '48f163e781593b340655aa6675f10ea2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dc-e1f4-4f7a-ad67-4848950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:44.000Z",
            "modified": "2015-09-30T08:52:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'novice.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dd-a140-422b-bdcd-4c8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:45.000Z",
            "modified": "2015-09-30T08:52:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '490021f0f12540d96cfb885faf25ef45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dd-4b48-444e-b4f4-48f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:45.000Z",
            "modified": "2015-09-30T08:52:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nozria.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dd-9048-42a7-b62b-4ea3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:45.000Z",
            "modified": "2015-09-30T08:52:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4916df963cfd6c44d1fcda3f2f1617e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dd-54e0-4dc6-a16b-4778950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:45.000Z",
            "modified": "2015-09-30T08:52:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ns1.c6427.sgvps.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2dd-d77c-4f48-9d40-4337950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:45.000Z",
            "modified": "2015-09-30T08:52:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49186430e57152cfd156cd7624fa7e4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2de-e668-457b-be50-4f3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:46.000Z",
            "modified": "2015-09-30T08:52:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ns2.c6427.sgvps.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2de-c104-4ef4-a24a-4fd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:46.000Z",
            "modified": "2015-09-30T08:52:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4918e7961514dad437bd5288de2e853c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2de-08dc-4e40-9ddb-4d08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:46.000Z",
            "modified": "2015-09-30T08:52:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ns75.7skyhost.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2de-b058-4894-91a4-4774950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:46.000Z",
            "modified": "2015-09-30T08:52:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '491c81c012b8cf245c25bdf742276443']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2de-e258-4b74-a3cd-4c21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:46.000Z",
            "modified": "2015-09-30T08:52:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ns76.7skyhost.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2de-f5a0-42a8-b19e-412a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:46.000Z",
            "modified": "2015-09-30T08:52:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '491ce3ce4035bc1587c7ad387e468e24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2df-e218-4b3c-a52e-4ec9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:47.000Z",
            "modified": "2015-09-30T08:52:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nsjrat.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2df-1154-454d-ae6f-45ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:47.000Z",
            "modified": "2015-09-30T08:52:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '492509edbaee0e5e90ce5256927247ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2df-d9f8-4027-a1d0-42c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:47.000Z",
            "modified": "2015-09-30T08:52:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nsoferatu.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2df-c1e8-4fb8-b332-4993950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:47.000Z",
            "modified": "2015-09-30T08:52:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '492dbc83b1c4d19cc3d2cfa24f908a3c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2df-d334-4665-8d76-4e80950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:47.000Z",
            "modified": "2015-09-30T08:52:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ntusecres.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2df-7ff8-477c-bd75-4ce1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:47.000Z",
            "modified": "2015-09-30T08:52:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4933612c53100182e26d17f9d93afe55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e0-2d7c-48b1-ae97-4461950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:48.000Z",
            "modified": "2015-09-30T08:52:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nulldzen.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e0-3630-423e-bd29-40f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:48.000Z",
            "modified": "2015-09-30T08:52:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49353903cfefd21c4fde3734b115ca68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e0-c738-40c7-a5a3-4b7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:48.000Z",
            "modified": "2015-09-30T08:52:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'number228haker.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e0-dff8-43f9-9df2-47cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:48.000Z",
            "modified": "2015-09-30T08:52:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '493f0a7a1fa9a38d1cb8a10feaa91f66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e0-a0a8-4ad0-a585-4295950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:48.000Z",
            "modified": "2015-09-30T08:52:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nurivolkanckc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e1-1db0-47b8-91fe-437d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:49.000Z",
            "modified": "2015-09-30T08:52:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '494e4be7493dbc04f45c3ccddf8101b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e1-f0fc-4263-88d4-4430950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:49.000Z",
            "modified": "2015-09-30T08:52:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nuttycracker.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e1-054c-46a0-94f4-4892950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:49.000Z",
            "modified": "2015-09-30T08:52:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4952f0b5d26a789c53deac84a0b96d31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e1-8030-4473-9a84-4ce5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:49.000Z",
            "modified": "2015-09-30T08:52:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nvpniviet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e1-f7b0-4e4a-a27e-4848950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:49.000Z",
            "modified": "2015-09-30T08:52:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49750420f18c63391b02c59fe4e11af6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e2-4e50-4b0d-b74a-4e81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:50.000Z",
            "modified": "2015-09-30T08:52:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nxs-games.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e2-8884-4f0e-8ca0-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:50.000Z",
            "modified": "2015-09-30T08:52:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49758da5043f860173046081dc515d47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e2-03b0-4372-a595-44d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:50.000Z",
            "modified": "2015-09-30T08:52:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'nyoob.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e2-7200-481c-8673-4ad7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:50.000Z",
            "modified": "2015-09-30T08:52:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49772e265fe6564d3ce77825d7a5f6d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e2-81bc-402f-a9bc-4b99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:50.000Z",
            "modified": "2015-09-30T08:52:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'o1cerberus.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e2-935c-46f8-9ebc-4e99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:50.000Z",
            "modified": "2015-09-30T08:52:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '497a79faa6e5302ab1cc55af4fd76724']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e3-7868-435f-b329-4bef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:51.000Z",
            "modified": "2015-09-30T08:52:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'oatzadid007.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e3-e94c-419d-89b2-4612950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:51.000Z",
            "modified": "2015-09-30T08:52:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '498696566e64fffe40598be1a57d60fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e3-3530-4bd7-bdb4-4150950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:51.000Z",
            "modified": "2015-09-30T08:52:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'objectifgn.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e3-1334-47f6-863b-4d07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:51.000Z",
            "modified": "2015-09-30T08:52:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49887742839add7bfbbbd6a6b9c20f4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e3-2d58-497b-99f8-45bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:51.000Z",
            "modified": "2015-09-30T08:52:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'obyda.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e4-e110-4973-8692-4edb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:52.000Z",
            "modified": "2015-09-30T08:52:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49896a96cef626e2728bba7940eaaecd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e4-311c-4559-8392-4932950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:52.000Z",
            "modified": "2015-09-30T08:52:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'obynocross.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e4-a990-4d3b-aac1-44cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:52.000Z",
            "modified": "2015-09-30T08:52:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '498ab77c09e044f2c2ac1f9ce946935a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e4-4e68-4df8-bf71-48cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:52.000Z",
            "modified": "2015-09-30T08:52:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'oceanostest.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e4-abb4-40ee-bd57-4192950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:52.000Z",
            "modified": "2015-09-30T08:52:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '498c7dfb1661af11caaf7bab7ce4cd90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e5-81a8-4bb6-a768-4293950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:53.000Z",
            "modified": "2015-09-30T08:52:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'oddsober.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e5-4b14-4576-a5a2-4b2f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:53.000Z",
            "modified": "2015-09-30T08:52:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '498def7a131a7d081095c04249258314']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e5-7abc-4083-8746-4155950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:53.000Z",
            "modified": "2015-09-30T08:52:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ogidi1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e5-42ac-4cd4-b069-45f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:53.000Z",
            "modified": "2015-09-30T08:52:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4990fef7ff79ed626f74470e8444570d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e5-6f98-48be-a1f1-4afa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:53.000Z",
            "modified": "2015-09-30T08:52:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ogwake.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e5-052c-40b8-80ea-44eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:53.000Z",
            "modified": "2015-09-30T08:52:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '499c382cb9c870474e171cda8bdf3163']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e6-5a78-43fd-a4ed-416c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:54.000Z",
            "modified": "2015-09-30T08:52:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ohbexxc.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e6-17d4-47b7-9ded-4930950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:54.000Z",
            "modified": "2015-09-30T08:52:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49a06a2329a6642d2f9ae27074f33e0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e6-1e70-451e-b01c-460a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:54.000Z",
            "modified": "2015-09-30T08:52:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ohhseeker.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e6-d7f4-4d8a-8347-4653950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:54.000Z",
            "modified": "2015-09-30T08:52:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49a66798f15a6da8157c35af88f603e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e6-510c-4532-b535-4080950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:54.000Z",
            "modified": "2015-09-30T08:52:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'okisss.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e6-5f78-4d1d-97bc-402a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:54.000Z",
            "modified": "2015-09-30T08:52:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49a7ee3cb9937f9d692ef96c2e660ffd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e7-14b8-4d17-b0bb-4f15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:55.000Z",
            "modified": "2015-09-30T08:52:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'oktaybks97.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e7-b4d8-417d-8386-41a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:55.000Z",
            "modified": "2015-09-30T08:52:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49ab1e5203bb037bdcd6b538f8561cde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e7-614c-4d33-aa72-4ea8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:55.000Z",
            "modified": "2015-09-30T08:52:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'olegt4.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e7-08ac-4d8d-b5c3-45f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:55.000Z",
            "modified": "2015-09-30T08:52:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49b7334befdb624c34dd88d2637c3559']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e7-c6c4-4dc6-8f9d-4707950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:55.000Z",
            "modified": "2015-09-30T08:52:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'olepravisa.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e8-8b40-453b-8710-4239950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:56.000Z",
            "modified": "2015-09-30T08:52:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49b7c09a10eaeb2208b20d5dbcf62d3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e8-19f8-4483-8398-4040950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:56.000Z",
            "modified": "2015-09-30T08:52:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'omanoman.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e8-ab88-40ad-80bf-44fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:56.000Z",
            "modified": "2015-09-30T08:52:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49ba823efd4dfe4b37529e35ffc9af2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e8-a284-4144-82e5-44f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:56.000Z",
            "modified": "2015-09-30T08:52:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'omer.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e8-aed8-4a2b-ad86-481c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:56.000Z",
            "modified": "2015-09-30T08:52:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49d21c4a280855e4c66d50984a4f3caf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e9-383c-4799-a9d6-48e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:57.000Z",
            "modified": "2015-09-30T08:52:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'omerhakeri.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e9-e690-4bf4-bb6b-41c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:57.000Z",
            "modified": "2015-09-30T08:52:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'omgitsolifox.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e9-686c-4c28-951c-40d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:57.000Z",
            "modified": "2015-09-30T08:52:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49d4311f72098e0c8ecf8f7c4346c008']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e9-a884-46b4-9e3e-4065950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:57.000Z",
            "modified": "2015-09-30T08:52:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'onon.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e9-5020-485b-9f13-4cff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:57.000Z",
            "modified": "2015-09-30T08:52:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'onthewifi.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e9-5380-4927-972a-4c50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:57.000Z",
            "modified": "2015-09-30T08:52:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49d4468eecf0fe2b8700d7655fc425b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e9-0f98-47eb-a5d7-41c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:57.000Z",
            "modified": "2015-09-30T08:52:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ooooodooooo.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e9-9450-4746-94af-4556950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:57.000Z",
            "modified": "2015-09-30T08:52:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'open-window.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2e9-f13c-4da6-b310-4662950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:57.000Z",
            "modified": "2015-09-30T08:52:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49d5de3215be492fc9aa71427aa0b1a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ea-cf40-4785-aef3-4773950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:58.000Z",
            "modified": "2015-09-30T08:52:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'opofab.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ea-76dc-4121-93d7-459c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:58.000Z",
            "modified": "2015-09-30T08:52:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'orgasmatron.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ea-4b5c-4e63-85ab-4181950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:58.000Z",
            "modified": "2015-09-30T08:52:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49d7179f82068667d102d0eb883b5812']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ea-8be0-428f-995b-4736950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:58.000Z",
            "modified": "2015-09-30T08:52:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'original211.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ea-1d20-470a-8f4f-4624950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:58.000Z",
            "modified": "2015-09-30T08:52:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'orlikm.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ea-4ba4-4797-bae0-4728950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:58.000Z",
            "modified": "2015-09-30T08:52:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49da92f01f3213d3a8aa4e9da30507f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ea-550c-4d74-bfa6-4faf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:58.000Z",
            "modified": "2015-09-30T08:52:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'osgoil.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2eb-d66c-43b1-a8bd-48fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:59.000Z",
            "modified": "2015-09-30T08:52:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'osgol.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2eb-be68-4576-aaed-44a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:59.000Z",
            "modified": "2015-09-30T08:52:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49e75f5bcec8577874fd24fba56b2de7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2eb-550c-4ff9-8c23-4ddf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:59.000Z",
            "modified": "2015-09-30T08:52:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'osmo20001.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2eb-af78-4793-a4dc-4c8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:59.000Z",
            "modified": "2015-09-30T08:52:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'otfdark.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2eb-f2b8-4075-9169-4dd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:59.000Z",
            "modified": "2015-09-30T08:52:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '49f1edcd6ca7c0def16454bf9fd63d75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2eb-c670-4092-86e0-42e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:59.000Z",
            "modified": "2015-09-30T08:52:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ousadia0310.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2eb-b778-4c60-91b4-4600950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:59.000Z",
            "modified": "2015-09-30T08:52:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'out.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2eb-8cfc-4dcd-8d16-4241950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:52:59.000Z",
            "modified": "2015-09-30T08:52:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a034e182a36e9078265ca508dd18598']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:52:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ec-5324-419a-bd1e-44ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:00.000Z",
            "modified": "2015-09-30T08:53:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'overskyonly.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ec-c05c-41af-8416-4a17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:00.000Z",
            "modified": "2015-09-30T08:53:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'oxi.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ec-9044-48af-a8ac-4df1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:00.000Z",
            "modified": "2015-09-30T08:53:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a09aa94f6b7fe9b206dc76c6f7d5343']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ec-a274-4c7a-bc9f-4c73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:00.000Z",
            "modified": "2015-09-30T08:53:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ozandeneme.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ec-aa98-4602-aa68-409f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:00.000Z",
            "modified": "2015-09-30T08:53:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'p0k3r-d3str0y3r.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ec-e4f8-4e58-9dba-4e78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:00.000Z",
            "modified": "2015-09-30T08:53:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a0a5585ef45dc8c757f8612c6851820']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ec-e0f8-476c-b923-484e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:00.000Z",
            "modified": "2015-09-30T08:53:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'p89.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ed-b37c-4394-9d21-47ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:01.000Z",
            "modified": "2015-09-30T08:53:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pabloecco.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ec-b0c8-41f8-8e46-4b45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:00.000Z",
            "modified": "2015-09-30T08:53:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a1d5bc58829fb863c2eb004ba634c9e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ed-cdf8-4143-9d53-47cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:01.000Z",
            "modified": "2015-09-30T08:53:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'paggajwz.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ed-d328-4283-bd55-4065950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:01.000Z",
            "modified": "2015-09-30T08:53:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pakistanihacking.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ed-62e8-4374-8258-4e66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:01.000Z",
            "modified": "2015-09-30T08:53:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a256de56da14b8ab5e8c2086421a1ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ed-3b18-40aa-8e72-4dee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:01.000Z",
            "modified": "2015-09-30T08:53:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'palmsroyal.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ed-5b3c-4f1d-8561-430f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:01.000Z",
            "modified": "2015-09-30T08:53:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pandahackerler123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ed-5948-461e-b6f5-476e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:01.000Z",
            "modified": "2015-09-30T08:53:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a3077eac730d6337701ba5cb5eae79d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ed-f728-42e7-8c9c-4b83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:01.000Z",
            "modified": "2015-09-30T08:53:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pandoor.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ee-be3c-4143-9b39-4eb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:02.000Z",
            "modified": "2015-09-30T08:53:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pandorarat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ee-6fc0-437c-a45d-4c27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:02.000Z",
            "modified": "2015-09-30T08:53:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a33005bca582d31b62a29aba5e3dc38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ee-6a90-43d7-8428-49d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:02.000Z",
            "modified": "2015-09-30T08:53:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'panicogg.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ee-7b40-48f5-94d3-4b43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:02.000Z",
            "modified": "2015-09-30T08:53:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pantera.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ee-7158-4817-a884-4616950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:02.000Z",
            "modified": "2015-09-30T08:53:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a489b47c3ea402853ea79695456c1b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ee-ca14-428a-bdd2-4c88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:02.000Z",
            "modified": "2015-09-30T08:53:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'panzermodz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ee-235c-44f1-9962-4800950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:02.000Z",
            "modified": "2015-09-30T08:53:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'papi2.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ee-1d6c-4ac2-aec9-4a86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:02.000Z",
            "modified": "2015-09-30T08:53:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a49527a40999e4a20d181d2a32535cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ef-3820-4c22-bfc5-4cee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:03.000Z",
            "modified": "2015-09-30T08:53:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pappu.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ef-3e6c-4a3d-9fa0-48b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:03.000Z",
            "modified": "2015-09-30T08:53:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'paradise-project.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ef-1d14-48d4-9245-4fd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:03.000Z",
            "modified": "2015-09-30T08:53:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a4d840e7ac499b4fbd66d2cbe2a33f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ef-d3d0-42c5-92d5-4e76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:03.000Z",
            "modified": "2015-09-30T08:53:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'paradox222.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ef-84bc-4042-b90b-4fba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:03.000Z",
            "modified": "2015-09-30T08:53:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'parkl.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ef-d224-4f5a-9e73-44e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:03.000Z",
            "modified": "2015-09-30T08:53:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a51638f324c1b1479949196582bd130']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ef-4138-42fc-9b4e-40f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:03.000Z",
            "modified": "2015-09-30T08:53:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'parxide.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f0-21a0-40aa-ab3d-44c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:04.000Z",
            "modified": "2015-09-30T08:53:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'passthru.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ef-7320-4e05-8710-454b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:03.000Z",
            "modified": "2015-09-30T08:53:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a5626598a2bf355526dc3d1ac4cd2ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f0-3218-4419-a977-4f40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:04.000Z",
            "modified": "2015-09-30T08:53:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pathfinder.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f0-4ce0-421b-9bf2-4842950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:04.000Z",
            "modified": "2015-09-30T08:53:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pauvre01.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f0-1ed0-405b-a72e-4baf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:04.000Z",
            "modified": "2015-09-30T08:53:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a59cef8c01846aa79827791dded5df6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f0-d908-433a-a212-4452950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:04.000Z",
            "modified": "2015-09-30T08:53:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pchacked1pro.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f0-0088-42a6-be4d-4d5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:04.000Z",
            "modified": "2015-09-30T08:53:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pcx-attack.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f0-4f40-4f40-9970-4bc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:04.000Z",
            "modified": "2015-09-30T08:53:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a5ac11a601a8af2694c0df85e5bb6d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f0-875c-48e5-a27d-4a5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:04.000Z",
            "modified": "2015-09-30T08:53:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pedrocidade.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f1-28d4-4cee-9719-49f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:05.000Z",
            "modified": "2015-09-30T08:53:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pedrohck123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f1-ad1c-4ba9-81e3-4725950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:05.000Z",
            "modified": "2015-09-30T08:53:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a65d250dad03f9eff0866e037dff95f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f1-1664-4f96-89ef-4870950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:05.000Z",
            "modified": "2015-09-30T08:53:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'penisgangbang69.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f1-30f4-40b2-a33c-4b07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:05.000Z",
            "modified": "2015-09-30T08:53:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pentesting789.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f1-ae34-42e6-8595-4382950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:05.000Z",
            "modified": "2015-09-30T08:53:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a6ce8c04850753e4fd333e15aeb1599']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f1-79ac-41f2-be7e-4ee1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:05.000Z",
            "modified": "2015-09-30T08:53:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pentesting96.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f1-3b04-414a-a1de-4f64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:05.000Z",
            "modified": "2015-09-30T08:53:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pepdawg420.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f1-5cbc-4a27-8df0-4a40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:05.000Z",
            "modified": "2015-09-30T08:53:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a72c01201baf150ce31f2d279d5d3df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f2-6aa4-43e4-900d-44dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:06.000Z",
            "modified": "2015-09-30T08:53:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pepsicola.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f2-60d0-4fcf-908d-4527950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:06.000Z",
            "modified": "2015-09-30T08:53:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'perejlomka.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f2-402c-4756-b52a-43e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:06.000Z",
            "modified": "2015-09-30T08:53:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a77b7f03f736ef7190102afdf1ca5f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f2-b7ac-41eb-893e-4ed9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:06.000Z",
            "modified": "2015-09-30T08:53:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pest228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f2-ef8c-4b2d-8ba3-4505950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:06.000Z",
            "modified": "2015-09-30T08:53:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'peterpanjack.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f2-b504-490d-9a12-43b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:06.000Z",
            "modified": "2015-09-30T08:53:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a922fcc99f2a183546a4afe83d525cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f2-e464-4bd5-9537-4a31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:06.000Z",
            "modified": "2015-09-30T08:53:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pfkegf.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f3-b684-4bd1-b96e-48da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:07.000Z",
            "modified": "2015-09-30T08:53:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'phatrat.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f2-a27c-452e-b9ce-4b58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:06.000Z",
            "modified": "2015-09-30T08:53:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a939caa60bb6bac6f0962dd55511dc6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f3-cd34-4590-9eb4-4608950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:07.000Z",
            "modified": "2015-09-30T08:53:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'philcomet.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f3-1ddc-4e46-8fa3-4be0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:07.000Z",
            "modified": "2015-09-30T08:53:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'phishyphats.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f3-6408-4d79-a3be-44e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:07.000Z",
            "modified": "2015-09-30T08:53:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a9ba2586494678083c88308504db078']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f3-0618-42bd-8cb6-4c85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:07.000Z",
            "modified": "2015-09-30T08:53:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'phobia7.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f3-f228-49aa-9df7-400f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:07.000Z",
            "modified": "2015-09-30T08:53:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'photoshoptutorial.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f3-e960-4542-a738-4668950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:07.000Z",
            "modified": "2015-09-30T08:53:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4a9dac57bfb22c93956349ca65caf6f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f3-2c08-4244-b704-4216950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:07.000Z",
            "modified": "2015-09-30T08:53:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'phpdomai.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f4-bb3c-4248-8cd3-46db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:08.000Z",
            "modified": "2015-09-30T08:53:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pidar1337.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f4-7458-4346-a276-444e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:08.000Z",
            "modified": "2015-09-30T08:53:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4aa3b04eb66c20e2e1b5d08122683c55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f4-f8e0-4f08-b42d-4cb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:08.000Z",
            "modified": "2015-09-30T08:53:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'piko94321.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f4-a288-46e7-bec7-403c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:08.000Z",
            "modified": "2015-09-30T08:53:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'piordrin.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f4-654c-4df8-a3d5-458d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:08.000Z",
            "modified": "2015-09-30T08:53:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4aad64993f10cdc248d39f3d6d6559bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f4-8f10-40c6-a4e9-4dc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:08.000Z",
            "modified": "2015-09-30T08:53:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pipboy.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f4-7af4-4d98-baad-47e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:08.000Z",
            "modified": "2015-09-30T08:53:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pipiska1338.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f4-5208-4764-b6ca-4f74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:08.000Z",
            "modified": "2015-09-30T08:53:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4acec7cb44cc887ff326c4cf735277b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f5-7998-4b7b-9cef-411a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:09.000Z",
            "modified": "2015-09-30T08:53:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pipiska228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f5-57d4-4a21-ad61-4cd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:09.000Z",
            "modified": "2015-09-30T08:53:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pira17dz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f5-1f70-4bd7-8a22-4306950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:09.000Z",
            "modified": "2015-09-30T08:53:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ad2a304f9694c2e91e5d0c9564381ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f5-cc0c-4038-b571-4e8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:09.000Z",
            "modified": "2015-09-30T08:53:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'piratag.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f5-c5d8-4392-af39-4a4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:09.000Z",
            "modified": "2015-09-30T08:53:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pitux322.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f5-a4ec-439f-b50b-4c9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:09.000Z",
            "modified": "2015-09-30T08:53:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4add6fe52631ed7d2204cb9a7d829689']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f5-42e8-43ed-a7aa-4f99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:09.000Z",
            "modified": "2015-09-30T08:53:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pkgoingout.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f6-4efc-40e1-97fe-48dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:10.000Z",
            "modified": "2015-09-30T08:53:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'playamaza.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f6-d944-4780-8eee-4702950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:09.000Z",
            "modified": "2015-09-30T08:53:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4aefced97db4da38cb6cf1e452f11792']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f6-40d8-4057-b2a5-4629950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:10.000Z",
            "modified": "2015-09-30T08:53:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pleasework.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f6-bb10-4906-bf7a-4417950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:10.000Z",
            "modified": "2015-09-30T08:53:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pleaseworkthx.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f6-2310-49cc-921a-4a97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:10.000Z",
            "modified": "2015-09-30T08:53:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4affb4763abdc5c26daa79fb3ef970aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f6-c244-46b6-8706-4403950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:10.000Z",
            "modified": "2015-09-30T08:53:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pleserk.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f6-508c-4592-ad0b-4bb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:10.000Z",
            "modified": "2015-09-30T08:53:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'plswork.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f6-88c0-4eab-9c91-46e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:10.000Z",
            "modified": "2015-09-30T08:53:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b00c35dbcbf64fe5166bb0b1d8862d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f7-e404-46ce-ac62-4293950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:11.000Z",
            "modified": "2015-09-30T08:53:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'plumpy.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f7-8008-40c4-afce-4821950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:11.000Z",
            "modified": "2015-09-30T08:53:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'po317.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f7-2000-4307-82ed-4109950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:11.000Z",
            "modified": "2015-09-30T08:53:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b056921373480c3eed1cdeaeca755a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f7-3938-4bc8-8bd8-48ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:11.000Z",
            "modified": "2015-09-30T08:53:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pocketgamers123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f7-4938-43a3-8fce-44d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:11.000Z",
            "modified": "2015-09-30T08:53:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'podvalenuy.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f7-0938-44f8-8ca4-425d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:11.000Z",
            "modified": "2015-09-30T08:53:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b0678e6ebb62de077c3249205f695e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f7-feb0-4cf1-b5c2-490b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:11.000Z",
            "modified": "2015-09-30T08:53:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'poison.no-ip.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f8-a8cc-42db-b076-456f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:12.000Z",
            "modified": "2015-09-30T08:53:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pokemon30.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f7-e020-4647-b965-4852950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:11.000Z",
            "modified": "2015-09-30T08:53:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b086e843e80b0d52136a5a95165b315']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f8-cca8-4d14-849d-4fcc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:12.000Z",
            "modified": "2015-09-30T08:53:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pokemonssvpn.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f8-b9ec-4d3f-a8bb-4f44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:12.000Z",
            "modified": "2015-09-30T08:53:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'polat72.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f8-3fb0-48fd-a76e-4265950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:12.000Z",
            "modified": "2015-09-30T08:53:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b0aec0df51c56b3e83670198ff48104']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f8-aff0-4325-a1be-4767950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:12.000Z",
            "modified": "2015-09-30T08:53:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'poman.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f8-b190-4688-8818-43ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:12.000Z",
            "modified": "2015-09-30T08:53:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'popcreez.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f8-44f4-4131-8540-44ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:12.000Z",
            "modified": "2015-09-30T08:53:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b0e75d0438a48b0d414850d01cc0a20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f8-e570-48a2-a7b9-45ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:12.000Z",
            "modified": "2015-09-30T08:53:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'popxmods.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f9-b70c-41da-9578-4aa3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:13.000Z",
            "modified": "2015-09-30T08:53:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'popxmods.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f9-6ce4-41bf-989c-42f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:13.000Z",
            "modified": "2015-09-30T08:53:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b11c3c9280d9830d7363e5bb0c7509e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f9-96f0-49bb-b9a0-4170950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:13.000Z",
            "modified": "2015-09-30T08:53:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'poqaaze.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f9-d7c0-4ec1-a312-4a37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:13.000Z",
            "modified": "2015-09-30T08:53:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'porcodio.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f9-52cc-41e7-9251-4b85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:13.000Z",
            "modified": "2015-09-30T08:53:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b1727eb8e8d69d13ff4dba20790c70d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f9-f23c-49a1-8312-445f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:13.000Z",
            "modified": "2015-09-30T08:53:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'porgue123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f9-ef3c-40a7-b9a8-4383950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:13.000Z",
            "modified": "2015-09-30T08:53:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pornop.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2f9-aa60-4633-ae00-471c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:13.000Z",
            "modified": "2015-09-30T08:53:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b18c656d56afee156cdeea78f765d2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fa-ba90-457f-b16b-41c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:14.000Z",
            "modified": "2015-09-30T08:53:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'portportie.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fa-ac44-482a-acd4-42f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:14.000Z",
            "modified": "2015-09-30T08:53:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'potatoes.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fa-f510-478b-b68e-4fb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:14.000Z",
            "modified": "2015-09-30T08:53:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b19e7c5ae94805f2ef178b8f6b39203']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fa-b488-4945-9795-45d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:14.000Z",
            "modified": "2015-09-30T08:53:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'potatosingh.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fa-f220-4212-b19a-451d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:14.000Z",
            "modified": "2015-09-30T08:53:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'potroh55.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fa-8b08-495b-a357-4a5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:14.000Z",
            "modified": "2015-09-30T08:53:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b1b4ab924204a41166d87cf0e374381']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fa-72d8-49bb-8c5f-4871950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:14.000Z",
            "modified": "2015-09-30T08:53:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pourlefundutroll.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fb-5464-4f90-99e3-4c26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:15.000Z",
            "modified": "2015-09-30T08:53:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'primedon1990.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fa-38f8-41b8-815c-42c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:14.000Z",
            "modified": "2015-09-30T08:53:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b1c64dffb5d5fe13572869b0d6fcb15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fb-19b8-4397-b6b2-4443950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:15.000Z",
            "modified": "2015-09-30T08:53:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'prinkrat.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fb-abb0-4dbb-8fd5-4557950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:15.000Z",
            "modified": "2015-09-30T08:53:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'priv8.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fb-0e38-4797-bef0-4a60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:15.000Z",
            "modified": "2015-09-30T08:53:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b1d53e2c069f66079aff39e687a4012']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fb-9170-4d6d-92c4-444d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:15.000Z",
            "modified": "2015-09-30T08:53:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'private99999.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fb-fad8-424f-a65f-4f11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:15.000Z",
            "modified": "2015-09-30T08:53:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'privatebuild.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fb-3d1c-4f0b-8909-43be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:15.000Z",
            "modified": "2015-09-30T08:53:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b294f4d6e17eaee9d18c274e99f7ed6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fc-c30c-4a19-950d-4963950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:16.000Z",
            "modified": "2015-09-30T08:53:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pro2015.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fc-6784-4eb8-92a4-4769950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:16.000Z",
            "modified": "2015-09-30T08:53:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'proangel100.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fc-f584-4a5d-b3f9-4e55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:16.000Z",
            "modified": "2015-09-30T08:53:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b2c3b5af1594e5a2407f389e53b3ae8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fc-06d0-4dd4-8594-4cea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:16.000Z",
            "modified": "2015-09-30T08:53:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'proba111.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fc-06e4-4bb1-9a9e-48cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:16.000Z",
            "modified": "2015-09-30T08:53:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'probality.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fc-cf6c-4654-9bcd-41ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:16.000Z",
            "modified": "2015-09-30T08:53:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b2f5c66c225efe468f5b45acbc85818']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fc-c8b4-4473-8d88-4480950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:16.000Z",
            "modified": "2015-09-30T08:53:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'probenhost.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fc-0c84-4bf5-b97c-41b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:16.000Z",
            "modified": "2015-09-30T08:53:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'prodigy1750.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fc-3230-4767-8808-4d7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:16.000Z",
            "modified": "2015-09-30T08:53:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b34b1ea570f7d686556a35f486c509f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fd-dba8-40d4-a944-437a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:17.000Z",
            "modified": "2015-09-30T08:53:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'prog32bit.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fd-42d4-495d-8d20-4adb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:17.000Z",
            "modified": "2015-09-30T08:53:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'program22.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fd-ccdc-477b-b54f-480a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:17.000Z",
            "modified": "2015-09-30T08:53:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b3850ada3332e006daa7ed15e4150af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fd-fea4-44dd-8cc2-4817950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:17.000Z",
            "modified": "2015-09-30T08:53:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'prohackerpro.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fd-f238-4339-85e4-4492950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:17.000Z",
            "modified": "2015-09-30T08:53:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'prohackmader.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fd-6ed4-43f7-ac48-40a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:17.000Z",
            "modified": "2015-09-30T08:53:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b3a999052204a301c66b54085acf15b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fd-72c4-42dc-8360-49fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:17.000Z",
            "modified": "2015-09-30T08:53:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'projectory.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fe-37c0-43f6-a5c3-4f7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:18.000Z",
            "modified": "2015-09-30T08:53:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'projrspsdown.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fe-8a2c-4ce2-85df-4115950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:18.000Z",
            "modified": "2015-09-30T08:53:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b4298cea473f6c78b652e48f1138595']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fe-9954-49ef-af00-46cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:18.000Z",
            "modified": "2015-09-30T08:53:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pronickrc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fe-15f8-4369-a50a-4b0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:18.000Z",
            "modified": "2015-09-30T08:53:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'prosto1234.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fe-0ae0-414e-a793-460a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:18.000Z",
            "modified": "2015-09-30T08:53:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b535809fef16364eb777f299874310f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fe-dbb0-41b1-843d-4b68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:18.000Z",
            "modified": "2015-09-30T08:53:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'protehtest.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fe-477c-401d-b4ca-4ba2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:18.000Z",
            "modified": "2015-09-30T08:53:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'prototypeiv.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2fe-2a80-40da-bd7d-43d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:18.000Z",
            "modified": "2015-09-30T08:53:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b53f282e7eca382febb1019b6c74aac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ff-de78-4145-a431-43d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:19.000Z",
            "modified": "2015-09-30T08:53:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'proxivpn.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ff-303c-405d-9186-4a23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:19.000Z",
            "modified": "2015-09-30T08:53:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'proxylab01cf2.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ff-15d8-423e-b667-4aa1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:19.000Z",
            "modified": "2015-09-30T08:53:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b5d8f9b6e6ef8885460e44bf6a23758']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ff-34b4-49cd-970c-425b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:19.000Z",
            "modified": "2015-09-30T08:53:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'prozerdll.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ff-841c-46bf-80fb-4d1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:19.000Z",
            "modified": "2015-09-30T08:53:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pshadow.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ff-d868-4588-85ab-4cdd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:19.000Z",
            "modified": "2015-09-30T08:53:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b6078bb8f6eb4ec5d18353fd2c49c48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ff-57e4-4af4-98c0-4696950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:19.000Z",
            "modified": "2015-09-30T08:53:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'psikopat37.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba300-caa0-4e4e-b2c8-4731950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:20.000Z",
            "modified": "2015-09-30T08:53:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pspsony.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba2ff-f570-4d1f-8505-4bf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:19.000Z",
            "modified": "2015-09-30T08:53:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b615fadf784d397041f814ef470c4e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba300-c9c4-4a05-b36c-49f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:20.000Z",
            "modified": "2015-09-30T08:53:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'psychoticdrama.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba300-ce30-49b8-ad65-4ef9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:20.000Z",
            "modified": "2015-09-30T08:53:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pupka2101.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba300-f3b8-4cf8-833c-49dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:20.000Z",
            "modified": "2015-09-30T08:53:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b6ea55672044a35df760ebd03bd9e53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba300-5224-44db-81c6-451c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:20.000Z",
            "modified": "2015-09-30T08:53:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pupuk25.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba300-d0c4-4f5b-8286-409f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:20.000Z",
            "modified": "2015-09-30T08:53:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'purpolessedc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba300-8f7c-40d4-ad16-4a8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:20.000Z",
            "modified": "2015-09-30T08:53:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b747ff31b6c4c2cdbfb686404dd983c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba300-207c-4b14-b96b-46dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:20.000Z",
            "modified": "2015-09-30T08:53:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pusheen.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba301-4f18-47a1-9651-4876950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:21.000Z",
            "modified": "2015-09-30T08:53:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'putas.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba301-614c-4377-b9ac-4f10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:21.000Z",
            "modified": "2015-09-30T08:53:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b7e0680b56730fdb974d40914c0f7cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba301-b3cc-47fc-a52f-4b42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:21.000Z",
            "modified": "2015-09-30T08:53:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'pvparena.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba301-a1b0-49d8-8d7a-48be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:21.000Z",
            "modified": "2015-09-30T08:53:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'q1w22.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba301-e778-4827-82b6-48ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:21.000Z",
            "modified": "2015-09-30T08:53:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b8c3dda8f53953f573584322fc4aa9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba301-4184-478d-8e79-409b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:21.000Z",
            "modified": "2015-09-30T08:53:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'qasqai.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba301-a464-4bfc-ad49-4a1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:21.000Z",
            "modified": "2015-09-30T08:53:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'qazwar.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba301-5f00-4f4f-9259-40ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:21.000Z",
            "modified": "2015-09-30T08:53:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b96c64b5d880db1d48505d1a7448640']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba302-d674-4cd2-a1c0-4c6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:22.000Z",
            "modified": "2015-09-30T08:53:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'qickstep.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba302-5024-4132-a590-4469950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:22.000Z",
            "modified": "2015-09-30T08:53:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'qnbtutorial.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba302-0da8-4886-9587-4184950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:22.000Z",
            "modified": "2015-09-30T08:53:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b9793383b60cdb99e254a8e4fd0ef45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba302-5764-4c35-9a7d-4ef1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:22.000Z",
            "modified": "2015-09-30T08:53:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'quest.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba302-4ffc-4742-b6fb-4eb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:22.000Z",
            "modified": "2015-09-30T08:53:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'quxk.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba302-7224-4f7c-81cc-495e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:22.000Z",
            "modified": "2015-09-30T08:53:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4b9c3f17ac73891c5c64965f291bc317']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba302-0520-4273-a4f7-42d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:22.000Z",
            "modified": "2015-09-30T08:53:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'qweasd1005.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba303-6df8-4439-b245-46af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:23.000Z",
            "modified": "2015-09-30T08:53:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'qwerty741147qwerty.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba303-c118-4ad0-abeb-47af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:23.000Z",
            "modified": "2015-09-30T08:53:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ba45fb8823a0201bf6045b5fc82847c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba303-cdfc-47cf-94d9-4075950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:23.000Z",
            "modified": "2015-09-30T08:53:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'qwezzkomet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba303-4e18-4280-8138-4ce7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:23.000Z",
            "modified": "2015-09-30T08:53:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'r34.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba303-8fb8-4863-9d81-42f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:23.000Z",
            "modified": "2015-09-30T08:53:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4babcd58f4fa50bc89144076275136dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba303-c998-4825-b901-4b85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:23.000Z",
            "modified": "2015-09-30T08:53:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'r4fff13.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba303-a760-46b3-87f6-4673950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:23.000Z",
            "modified": "2015-09-30T08:53:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4baeefcd85effcad2da595b74711a482']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba303-c438-49c8-b683-43d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:23.000Z",
            "modified": "2015-09-30T08:53:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4bcabdbffc4688f17adbf998018b94cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba303-b4e0-4aae-8ab8-4520950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:23.000Z",
            "modified": "2015-09-30T08:53:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'radouanehacker.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba304-c9c0-47b6-a471-4bd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:24.000Z",
            "modified": "2015-09-30T08:53:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4be143b62cd321657266f9c9b9c13f0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba304-5854-4ba0-96ae-4c85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:24.000Z",
            "modified": "2015-09-30T08:53:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4bec85bca096412bdb84e3d2cfb8019a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba304-a354-4db2-8655-4176950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:24.000Z",
            "modified": "2015-09-30T08:53:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rafaehacker12.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba304-ed38-4d11-ae46-4611950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:24.000Z",
            "modified": "2015-09-30T08:53:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4bee22573eea4665f4f1dcfc6d5df24e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba304-ec60-4b10-8e0d-4d45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:24.000Z",
            "modified": "2015-09-30T08:53:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4beffd763faa52040d319702d6bb020d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba304-1a88-4031-91ca-468d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:24.000Z",
            "modified": "2015-09-30T08:53:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ragnarokwin.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba304-3684-425d-a861-428d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:24.000Z",
            "modified": "2015-09-30T08:53:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4bf235082e06bf699313bc2b9d1b23d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba305-76f8-48f5-9925-4f69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:25.000Z",
            "modified": "2015-09-30T08:53:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4bf731fb6f5d217ca85595736e3a06d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba305-0dc0-408d-ad62-44aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:25.000Z",
            "modified": "2015-09-30T08:53:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rahmanjunior.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba305-9c00-467d-a445-43e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:25.000Z",
            "modified": "2015-09-30T08:53:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4bf7494a1922a233685d53ec4fff6d39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba305-1d98-409b-83a7-4f91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:25.000Z",
            "modified": "2015-09-30T08:53:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4bfebb5a18d46648d0b9159ccf864171']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba305-e3e0-496c-b490-412c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:25.000Z",
            "modified": "2015-09-30T08:53:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'raincheck.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba305-d30c-4541-9f31-478e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:25.000Z",
            "modified": "2015-09-30T08:53:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c037fc7f159f2aa31086d763cc10a6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba305-45ec-48e4-94f9-4502950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:25.000Z",
            "modified": "2015-09-30T08:53:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c08313327dd8af6b8b77af02c4c8b0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba305-1f1c-454c-a6b2-41ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:25.000Z",
            "modified": "2015-09-30T08:53:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rak-dno.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba306-cd24-494a-a571-4a4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:26.000Z",
            "modified": "2015-09-30T08:53:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c0c86a76e5fc5752574b796de1d7f97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba306-a00c-45c6-a14d-4caf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:26.000Z",
            "modified": "2015-09-30T08:53:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c0eb88ecb1620f9a80bf1589ddb549a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba306-19fc-4031-b81d-4b4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:26.000Z",
            "modified": "2015-09-30T08:53:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ralphyous.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba306-3810-451c-a8d5-4cba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:26.000Z",
            "modified": "2015-09-30T08:53:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c1209a6de719e0966ea7f482db71ccc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba306-a164-4612-a0d8-43ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:26.000Z",
            "modified": "2015-09-30T08:53:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c1af437e2dee05a6a537939b7b83f80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba306-5ab8-476c-a40d-4389950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:26.000Z",
            "modified": "2015-09-30T08:53:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ram789co.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba306-fa20-45f6-b1a5-41fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:26.000Z",
            "modified": "2015-09-30T08:53:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c29b50aee13e8c072bd2edca3df8eb6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba306-3c4c-40ab-8ec7-481b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:26.000Z",
            "modified": "2015-09-30T08:53:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c52150c6458d97cffe5f89ad962ac07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba306-8b7c-45a5-8ae0-4a0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:26.000Z",
            "modified": "2015-09-30T08:53:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ramcomet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba307-a570-4d81-8bbf-4b79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:27.000Z",
            "modified": "2015-09-30T08:53:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c596a1b8ced702c99fde69f61ae57e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba307-4424-4e8a-9fec-4abc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:27.000Z",
            "modified": "2015-09-30T08:53:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c68016877b28c42d461767c40e5f912']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba307-ddb0-4836-854d-453f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:27.000Z",
            "modified": "2015-09-30T08:53:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ramdom.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba307-46f0-46ea-9012-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:27.000Z",
            "modified": "2015-09-30T08:53:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4c68516919c3b3f32f8c5ad2b858abea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba307-6784-4a48-bdff-4da4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:27.000Z",
            "modified": "2015-09-30T08:53:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ca0303152953d722f32ff78d2188648']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba307-58a0-447e-8e01-4835950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:27.000Z",
            "modified": "2015-09-30T08:53:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rami2019.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba307-10e8-4a3e-bbef-4441950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:27.000Z",
            "modified": "2015-09-30T08:53:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ca033ecc82859d0014facb90269385e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba308-aaa4-4711-8de4-4c5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:28.000Z",
            "modified": "2015-09-30T08:53:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ca03ec7d8dfc202187531f6e979fe84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba308-1f38-4ce1-8e6b-468b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:28.000Z",
            "modified": "2015-09-30T08:53:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ramsayhacker.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba308-9e40-40ec-b4bc-4751950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:28.000Z",
            "modified": "2015-09-30T08:53:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ca8c3a23c797d38242eafd9105b10c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba308-a6d8-4825-b58a-4027950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:28.000Z",
            "modified": "2015-09-30T08:53:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cb118582d2d4df56a56c99efcebe1c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba308-b4e8-4293-8514-47e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:28.000Z",
            "modified": "2015-09-30T08:53:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ramzesdit.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba308-9210-403a-87d7-4d60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:28.000Z",
            "modified": "2015-09-30T08:53:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cb78482f44d32af70a6926cbc26e719']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba308-cc88-4145-8cd7-419d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:28.000Z",
            "modified": "2015-09-30T08:53:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cbc58423730c7e979fe34f9c30f2b39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba308-e364-4c8d-9eeb-409f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:28.000Z",
            "modified": "2015-09-30T08:53:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'random123456.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba309-1e3c-4729-bed1-48b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:29.000Z",
            "modified": "2015-09-30T08:53:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cc39faf83763d1d26d8acda9a663771']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba309-7020-4e4f-bb9f-49ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:29.000Z",
            "modified": "2015-09-30T08:53:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cc7e3daa6e25453f10ef25e88ae67b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba309-dc80-477e-8bd8-4a68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:29.000Z",
            "modified": "2015-09-30T08:53:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'randomhostnamehere.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba309-a618-4c6f-be01-4068950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:29.000Z",
            "modified": "2015-09-30T08:53:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cc84b236d61864c7c3171ca35cd0824']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba309-8890-47e7-9005-41a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:29.000Z",
            "modified": "2015-09-30T08:53:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ccf5814291d99974200ca8709fff3ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba309-5194-4bc8-9c5c-4d28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:29.000Z",
            "modified": "2015-09-30T08:53:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'randominteger.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba309-7170-475b-9f18-457f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:29.000Z",
            "modified": "2015-09-30T08:53:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cf13b699c24f401ab76f637a409629b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30a-57b0-45ec-80a9-4d18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:30.000Z",
            "modified": "2015-09-30T08:53:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cfba8ffa821a8ee96e0939aba2a0c8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba309-405c-450c-a535-4d76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:29.000Z",
            "modified": "2015-09-30T08:53:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'randomopstuff.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30a-a10c-4de3-9c17-4b6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:30.000Z",
            "modified": "2015-09-30T08:53:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cfc451e3ac1f04fd13f3db2d7f917b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30a-b60c-48b6-bf06-4c45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:30.000Z",
            "modified": "2015-09-30T08:53:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4cfeef5737d672ea8a24f56047429522']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30a-7094-407e-a8c5-4ae0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:30.000Z",
            "modified": "2015-09-30T08:53:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'randomtrollness.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30a-1f30-4348-9b7a-446d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:30.000Z",
            "modified": "2015-09-30T08:53:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d00904acfd5bf1c7b4d0ad1cdf0b515']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30a-974c-43e2-948d-41eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:30.000Z",
            "modified": "2015-09-30T08:53:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d00d5b2a47589549183bebe71a77c9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30a-ab14-4de4-a9ec-4a45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:30.000Z",
            "modified": "2015-09-30T08:53:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ranwing.servegme.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30a-7b3c-4069-a404-41d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:30.000Z",
            "modified": "2015-09-30T08:53:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d01310b74e708cdf046532b2d8785de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30b-5e18-4f71-942e-432f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:31.000Z",
            "modified": "2015-09-30T08:53:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d0ab9e92bcc1b98eeb55edc085822e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30b-c784-4719-80bb-473b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:31.000Z",
            "modified": "2015-09-30T08:53:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ranxp.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30b-0940-427b-ba68-4d0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:31.000Z",
            "modified": "2015-09-30T08:53:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d0afc2e73bae89f0ee6a9ae7123b3ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30b-ae98-4c0a-b315-4874950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:31.000Z",
            "modified": "2015-09-30T08:53:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d1d08022994e0c4a5a4cbc604f7c50e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30b-f1f4-4354-b749-4b5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:31.000Z",
            "modified": "2015-09-30T08:53:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'raouf13000.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30b-33dc-490d-bcf6-4147950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:31.000Z",
            "modified": "2015-09-30T08:53:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d24d7a49b586a16b41aa023c211c0e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30b-0e80-4b6e-a8ec-43b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:31.000Z",
            "modified": "2015-09-30T08:53:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d2bf19f60902f147b5c45f80cb29f5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30b-f87c-42e4-afc5-4095950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:31.000Z",
            "modified": "2015-09-30T08:53:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'raptorsdc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30c-ebcc-405d-b89a-4c87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:32.000Z",
            "modified": "2015-09-30T08:53:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d41db1d80d9649fc55322cfdd4c8400']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30c-6bec-4eb2-8547-47e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:32.000Z",
            "modified": "2015-09-30T08:53:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d5a952b22c0812155db01f7ba0dae98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30c-9e58-48b2-84d3-4eef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:32.000Z",
            "modified": "2015-09-30T08:53:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'raringdc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30c-9b80-4d6a-9cce-4be2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:32.000Z",
            "modified": "2015-09-30T08:53:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d5ae5afde9e62f9dd277336e0276a6b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30c-65bc-4c80-91f7-48b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:32.000Z",
            "modified": "2015-09-30T08:53:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d5e48316759a1bdbf9a24a9e1bf287b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30c-6170-4894-9d2d-479f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:32.000Z",
            "modified": "2015-09-30T08:53:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rasta9a1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30c-1038-4636-bed2-4a5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:32.000Z",
            "modified": "2015-09-30T08:53:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d644bcda2318c76006974c17923fc48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30d-c9f4-47d4-880b-457c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:33.000Z",
            "modified": "2015-09-30T08:53:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d69e484ace47257f2013969ceca76da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30c-9a40-4827-a0b1-4a71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:32.000Z",
            "modified": "2015-09-30T08:53:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30d-c318-44bc-9510-49c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:33.000Z",
            "modified": "2015-09-30T08:53:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d6a3967cbc8b1e6d536bfb05cffe718']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30d-03b4-4c3b-bc18-4b4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:33.000Z",
            "modified": "2015-09-30T08:53:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d7657f853316546b8161fe11e22abe2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30d-e054-4b56-b673-45d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:33.000Z",
            "modified": "2015-09-30T08:53:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rat1254.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30d-11fc-4572-9cfe-4b30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:33.000Z",
            "modified": "2015-09-30T08:53:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d85338ea100c00e3047cae0998f224e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30d-7a00-4a31-8120-42e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:33.000Z",
            "modified": "2015-09-30T08:53:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4d9ffdf7b73b990b6229d70a8d8b869a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30d-5160-4593-8ec3-46a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:33.000Z",
            "modified": "2015-09-30T08:53:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rat142.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30d-0c68-4164-89bb-48b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:33.000Z",
            "modified": "2015-09-30T08:53:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4da4bd3196362e1b397ee2f76adb7cb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30e-25bc-49f4-bdd4-4a94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:34.000Z",
            "modified": "2015-09-30T08:53:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4dada56f0e046887aee8ac2ca1f5176a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30e-c878-4f3e-809e-4414950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:34.000Z",
            "modified": "2015-09-30T08:53:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rat4etofe.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30e-eef8-4a71-8411-43e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:34.000Z",
            "modified": "2015-09-30T08:53:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4db968d4d8202ee9372ad291914edfb3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30e-d298-4c4a-a8fc-408d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:34.000Z",
            "modified": "2015-09-30T08:53:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4dbd9daed081483501ad189ceedf5ee8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30e-0e40-4370-8f49-43de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:34.000Z",
            "modified": "2015-09-30T08:53:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rat7.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30e-e094-4ad6-a58c-4e51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:34.000Z",
            "modified": "2015-09-30T08:53:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4dd77ae1b067774765ae0c7afb93c79c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30e-1454-4c8c-b377-4201950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:34.000Z",
            "modified": "2015-09-30T08:53:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ddc5c12d756a074ec066fab2056350f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30e-9450-4a9b-816c-48d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:34.000Z",
            "modified": "2015-09-30T08:53:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratbadboy.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30f-ef88-4270-8ca1-4fb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:35.000Z",
            "modified": "2015-09-30T08:53:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ded0098174ea5fd63726c3c1cda3d37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30f-ce28-42d3-b780-403a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:35.000Z",
            "modified": "2015-09-30T08:53:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4df4091930b59895cc66099cab32c8d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30f-fea8-415d-97e1-402b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:35.000Z",
            "modified": "2015-09-30T08:53:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratbykamran.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30f-9638-4336-97ab-449f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:35.000Z",
            "modified": "2015-09-30T08:53:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4df879718487039aabf9178814fd860e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30f-6bb0-48d4-a7d6-4b3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:35.000Z",
            "modified": "2015-09-30T08:53:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e01bdf1b71d01bc8043ac062556d59c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30f-2cc0-40fe-b97a-4e0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:35.000Z",
            "modified": "2015-09-30T08:53:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratdeneme17.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30f-ba20-48f8-b7ae-4d4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:35.000Z",
            "modified": "2015-09-30T08:53:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e0c2e5f2cad2f6bc2f23fdf6ba61333']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba310-8148-47ec-aa0c-46b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:36.000Z",
            "modified": "2015-09-30T08:53:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e12888d96a3b9440e8f440bc493dd19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba30f-18e0-407f-8a71-4448950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:35.000Z",
            "modified": "2015-09-30T08:53:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratdeneme17.ducksdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba310-d50c-4c98-9dd0-4694950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:36.000Z",
            "modified": "2015-09-30T08:53:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e1361867e0988dcd82cbb6de3df35af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba310-fd9c-4738-9dfd-4d29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:36.000Z",
            "modified": "2015-09-30T08:53:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e14b131043ce1f870cc3b4ca4609fa2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba310-fbf8-4faa-ab49-4f67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:36.000Z",
            "modified": "2015-09-30T08:53:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratdenemesi8.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba310-bc70-43b3-a349-4235950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:36.000Z",
            "modified": "2015-09-30T08:53:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e319d231f632a3059f3e527769c7c28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba310-7fa4-4019-8124-4bcc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:36.000Z",
            "modified": "2015-09-30T08:53:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e331702740febbc232d803e88bdc2f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba310-03d0-4a0d-bea8-4733950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:36.000Z",
            "modified": "2015-09-30T08:53:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rathost123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba311-3940-4464-9e53-4fa4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:36.000Z",
            "modified": "2015-09-30T08:53:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e34209c3b0caa8b1ac9ddb03a5ffb21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba311-a95c-4146-a89e-4605950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:37.000Z",
            "modified": "2015-09-30T08:53:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e3562a0fcafcba9ab5e784272346374']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba311-61c4-454b-8f4d-4944950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:37.000Z",
            "modified": "2015-09-30T08:53:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rathostxd.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba311-8660-488d-a2ec-4cd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:37.000Z",
            "modified": "2015-09-30T08:53:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e489b3efc9cf86622ebccf9341e9db4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba311-6f58-4489-adf0-4b22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:37.000Z",
            "modified": "2015-09-30T08:53:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e58a5128fd5943b9f22498636352d06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba311-d49c-443c-a773-406b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:37.000Z",
            "modified": "2015-09-30T08:53:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratjcb.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba311-c9a4-4ea0-85f7-4485950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:37.000Z",
            "modified": "2015-09-30T08:53:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e5a811491fe13b3ec74237113393f80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba311-0f48-4645-bb28-4b9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:37.000Z",
            "modified": "2015-09-30T08:53:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e5ee786ca775d327ed2841c549e8bd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba311-a768-410b-b451-4206950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:37.000Z",
            "modified": "2015-09-30T08:53:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratmyass101.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba312-d884-4d14-8ace-48d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:38.000Z",
            "modified": "2015-09-30T08:53:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e67ecd2f2eb24f4a8c2ecaf947131a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba312-fcfc-485c-b047-44ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:38.000Z",
            "modified": "2015-09-30T08:53:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e6c58362ae960ec8e67df53acab34ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba312-50dc-43db-8ec4-4c44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:38.000Z",
            "modified": "2015-09-30T08:53:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratnik.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba312-74d4-4a11-9d86-4af2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:38.000Z",
            "modified": "2015-09-30T08:53:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e70079c178f6401a0a15e48d9721c36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba312-f690-42ff-acdd-4c3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:38.000Z",
            "modified": "2015-09-30T08:53:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e73a36a06fbda36dd9419cc5275bfa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba312-5af0-49ec-9f41-46f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:38.000Z",
            "modified": "2015-09-30T08:53:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratserver1.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba312-6790-4339-a25d-496a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:38.000Z",
            "modified": "2015-09-30T08:53:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e7da45f6e594a097b9a06f8dda6f46f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba313-285c-448b-b53b-45d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:39.000Z",
            "modified": "2015-09-30T08:53:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e7fd7cca59c782fc03cc97618643c43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba312-4b8c-45e2-9dff-4473950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:38.000Z",
            "modified": "2015-09-30T08:53:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratserverhack.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba313-0bd0-4e16-9470-4a2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:39.000Z",
            "modified": "2015-09-30T08:53:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e849a1473cec009ea170087c081b11f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba313-5ff0-4a00-8e31-4cff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:39.000Z",
            "modified": "2015-09-30T08:53:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e854e501e81d09be7b334e23668d597']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba313-f530-467b-9957-43ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:39.000Z",
            "modified": "2015-09-30T08:53:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratsrv.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba313-3930-43dc-b2e4-412c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:39.000Z",
            "modified": "2015-09-30T08:53:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4e88180e90c6392ceb04bc288c529ca6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba313-22c8-4586-b678-4106950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:39.000Z",
            "modified": "2015-09-30T08:53:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ea90e158afb1be57f97b6ba20a38682']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba313-2398-4d07-8616-4797950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:39.000Z",
            "modified": "2015-09-30T08:53:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratted12.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba314-f500-495d-a51b-42b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:40.000Z",
            "modified": "2015-09-30T08:53:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4eaa67b5a151e65ba48a9207825ab06f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba314-24f0-4198-a1ce-44fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:40.000Z",
            "modified": "2015-09-30T08:53:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4eae49fda3ff05f4d607d1deb8b80218']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba314-0f74-4427-b04f-46ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:40.000Z",
            "modified": "2015-09-30T08:53:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rattednigga.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba314-2cec-477a-ba0c-4a59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:40.000Z",
            "modified": "2015-09-30T08:53:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4eaf2dc4d2a9c3d16e363c70dc55b1fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba314-e0a8-4ab5-9750-4a18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:40.000Z",
            "modified": "2015-09-30T08:53:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ec1b58203524cbb21643bfb0113b8c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba314-efb4-4234-8315-43e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:40.000Z",
            "modified": "2015-09-30T08:53:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rattify.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba314-98b4-4ec0-b0b8-47c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:40.000Z",
            "modified": "2015-09-30T08:53:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ec33144507766168f7aab196609647f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba314-e570-4127-a971-470d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:40.000Z",
            "modified": "2015-09-30T08:53:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ec832d66894673df346fce63484c620']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba314-f8d4-425e-96ba-4203950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:40.000Z",
            "modified": "2015-09-30T08:53:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rattingfordays.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba315-1b44-42cf-9198-408f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:41.000Z",
            "modified": "2015-09-30T08:53:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ed071398323989b3411a0df9e75e0b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba315-8d0c-4c91-8faa-425a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:41.000Z",
            "modified": "2015-09-30T08:53:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ed27792c3048846c160308e1b39f2c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba315-6278-4dcd-a2b5-400c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:41.000Z",
            "modified": "2015-09-30T08:53:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rattingu123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba315-d604-4e49-a170-44c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:41.000Z",
            "modified": "2015-09-30T08:53:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4eda766eba8fd7871b0c60ea5fa94019']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba315-00b4-42d6-a578-4f2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:41.000Z",
            "modified": "2015-09-30T08:53:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4edb0da798c4e5757514dddae9e7afd0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba315-90c4-4f6d-a934-44ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:41.000Z",
            "modified": "2015-09-30T08:53:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ratvirus.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba315-9020-4435-bfa0-4f69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:41.000Z",
            "modified": "2015-09-30T08:53:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4eddce5bf83f1ae4b71c4cc5ef13b28a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba316-9c08-40f2-8abf-4f83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:42.000Z",
            "modified": "2015-09-30T08:53:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ee48b8174dd3d51322bf1e6a8d83761']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba315-12b4-48d1-8c7a-4fb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:41.000Z",
            "modified": "2015-09-30T08:53:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ravdeepsohi0001.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba316-1c9c-4062-b942-41b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:42.000Z",
            "modified": "2015-09-30T08:53:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ee9bcfedbff94364ac4c5a45bdec7cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba316-73b8-4b7b-aba6-4f09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:42.000Z",
            "modified": "2015-09-30T08:53:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ef42560e89147adca707abeed9ef773']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba316-6654-4405-9727-4732950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:42.000Z",
            "modified": "2015-09-30T08:53:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ravdeepsohi001.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba316-fdec-45ac-bfbf-48b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:42.000Z",
            "modified": "2015-09-30T08:53:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f042fe8018ab1dfcc31a627d24d97e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba316-3f20-4d18-9a7a-433b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:42.000Z",
            "modified": "2015-09-30T08:53:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f052baea327dd2194140402386a3201']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba316-229c-4a12-be83-416b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:42.000Z",
            "modified": "2015-09-30T08:53:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rayenthekiing.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba317-b208-4c35-8bd9-495c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:43.000Z",
            "modified": "2015-09-30T08:53:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f0f1c2a1687c6169f041c17678c9ede']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba317-8528-4fb7-a34c-4a8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:43.000Z",
            "modified": "2015-09-30T08:53:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f141d2507fd50f01d1b591e9610b83f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba317-2f24-40d8-97cb-4e50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:43.000Z",
            "modified": "2015-09-30T08:53:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'razyrp.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba317-e2d4-416e-bf71-4045950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:43.000Z",
            "modified": "2015-09-30T08:53:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f1d8c8e846d8875558ec5ee85e0c2e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba317-c538-4f86-82ea-42e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:43.000Z",
            "modified": "2015-09-30T08:53:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f21017cb5fda89989bc6e6167fd711f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba317-8688-4650-a5a0-4f7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:43.000Z",
            "modified": "2015-09-30T08:53:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'razznt.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba317-c330-4e4d-931e-464f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:43.000Z",
            "modified": "2015-09-30T08:53:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f23457f02729fc52efe26b3d506d35a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba317-bdf8-4862-959f-4b50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:43.000Z",
            "modified": "2015-09-30T08:53:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f28efa01bdec0b906e7ce5e04221e57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba317-7cbc-4a24-94e2-4b7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:43.000Z",
            "modified": "2015-09-30T08:53:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'realjobkingdom.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba318-2f50-47c8-913a-4fd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:44.000Z",
            "modified": "2015-09-30T08:53:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f43ff21bd5bd97975a7396e3feae01d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba318-de78-4510-9408-48c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:44.000Z",
            "modified": "2015-09-30T08:53:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f4688795a930890d2e50eba90b9d1f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba318-f614-4c96-b7a5-44e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:44.000Z",
            "modified": "2015-09-30T08:53:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'realshit11.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba318-6c7c-4a46-8ae4-41c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:44.000Z",
            "modified": "2015-09-30T08:53:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f46dd16826c02b906f24300d153bc2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba318-01ac-4263-a843-4cd1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:44.000Z",
            "modified": "2015-09-30T08:53:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f476d16acb8966a2afa70bb683dc48b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba318-940c-4f5d-85a5-4c7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:44.000Z",
            "modified": "2015-09-30T08:53:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'realstar2.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba318-ee10-4b33-846d-4322950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:44.000Z",
            "modified": "2015-09-30T08:53:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f52593501f2fb18c687984df42c8c55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba319-7310-4b39-8071-4c6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:45.000Z",
            "modified": "2015-09-30T08:53:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f57e80d087764c03d8d77a8661e183c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba319-edf4-4cc8-afe0-4aaa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:45.000Z",
            "modified": "2015-09-30T08:53:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'realstar3.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba319-ef98-4d17-a598-4623950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:45.000Z",
            "modified": "2015-09-30T08:53:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f59bfd00a771e47a0b007a622037b0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba319-9d34-4a80-b30e-4769950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:45.000Z",
            "modified": "2015-09-30T08:53:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f5c94091461cac40b9f0a7dd429a7bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba319-ebb8-43ea-85d1-495a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:45.000Z",
            "modified": "2015-09-30T08:53:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'reaperpro.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba319-fff4-41a4-9650-4eee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:45.000Z",
            "modified": "2015-09-30T08:53:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f688a6b8994fc129e2ba953aa7e21a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba319-65c8-4765-9d95-4ab9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:45.000Z",
            "modified": "2015-09-30T08:53:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f6eb5f95f91ab0c3a29b9f6bbbe4097']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba319-7798-47c3-8542-4480950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:45.000Z",
            "modified": "2015-09-30T08:53:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'recspeed.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31a-9048-4951-b0f7-4fc2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:46.000Z",
            "modified": "2015-09-30T08:53:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f750048f4cb8e8103494959cbcd0be0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31a-62a4-4d55-a2b0-4219950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:46.000Z",
            "modified": "2015-09-30T08:53:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f7d44bd6c821ebafacf2fc36a3c034b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31a-3374-47f1-b675-4e9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:46.000Z",
            "modified": "2015-09-30T08:53:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'reddragos1.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31a-3c1c-4124-b906-4752950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:46.000Z",
            "modified": "2015-09-30T08:53:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4f97466c9fe0c1991468cdbd6b1c93e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31a-d15c-4669-b536-427a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:46.000Z",
            "modified": "2015-09-30T08:53:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4fb403ea2cd97fd7e0b50a8e8bc86741']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31a-6cd8-4e2a-bae9-4d38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:46.000Z",
            "modified": "2015-09-30T08:53:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'redhack007.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31a-b53c-43fa-9349-426d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:46.000Z",
            "modified": "2015-09-30T08:53:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4fd57732d835b8cfd190a2b91b7eebf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31b-0a9c-4761-9fe2-4506950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:47.000Z",
            "modified": "2015-09-30T08:53:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'redhdevil.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31b-5e50-4cbf-8fab-44cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:47.000Z",
            "modified": "2015-09-30T08:53:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rednine7.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31b-8eac-4423-bfb0-411b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:47.000Z",
            "modified": "2015-09-30T08:53:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4fe04441f4b9b1aafd7f3df9ea483a35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31b-57ec-4818-91e0-4c91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:47.000Z",
            "modified": "2015-09-30T08:53:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4fe7906ad9bb717abae0fcdb082b1357']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31b-7aec-4175-b1d2-4dae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:47.000Z",
            "modified": "2015-09-30T08:53:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'redsiilone.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31b-11d4-4b53-a1a6-43b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:47.000Z",
            "modified": "2015-09-30T08:53:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4fefde4cc142c7264e463ec1a1d885b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31b-dca8-4bdd-acdb-40d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:47.000Z",
            "modified": "2015-09-30T08:53:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '4ffebc252023eb90069355e845f45091']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31b-b460-44b6-a2f6-4b0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:47.000Z",
            "modified": "2015-09-30T08:53:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'reflexus.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31c-9758-465a-a736-47e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:48.000Z",
            "modified": "2015-09-30T08:53:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5002b54ecc1b019894c103201345dfd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31c-a4dc-46dd-98dc-4e9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:48.000Z",
            "modified": "2015-09-30T08:53:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '501a78af7c14a12c8ec873c9c64e2774']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31c-e5fc-4ccd-9ae6-4e83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:48.000Z",
            "modified": "2015-09-30T08:53:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rehdhackcid.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31c-bf68-4d4e-a697-465b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:48.000Z",
            "modified": "2015-09-30T08:53:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50250fcfd1f43a3f6cd2dc767a7a8b3d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31c-c968-4889-ba3a-42c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:48.000Z",
            "modified": "2015-09-30T08:53:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5028bca89c19900f0fd218b0a1570e21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31c-aebc-4f74-96a0-42a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:48.000Z",
            "modified": "2015-09-30T08:53:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rehmanmughees.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31c-7998-44f8-af0e-4544950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:48.000Z",
            "modified": "2015-09-30T08:53:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '502e84a885103e319a245435c899c189']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31d-ede0-426f-8dd8-4c3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:49.000Z",
            "modified": "2015-09-30T08:53:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '503089aa02c327f4e9da07c78afc35b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31d-ab08-4eea-9f12-48aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:49.000Z",
            "modified": "2015-09-30T08:53:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rektbyslick.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31d-a4e4-4efc-9a40-407b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:49.000Z",
            "modified": "2015-09-30T08:53:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5043d231df715f2682a977b0a59b0e01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31d-5ce4-4844-8594-40b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:49.000Z",
            "modified": "2015-09-30T08:53:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '504afb30d23601bafe112c6b171eb3e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31d-8248-4327-ae8b-4e6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:49.000Z",
            "modified": "2015-09-30T08:53:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'relax.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31d-dfb8-4451-b72c-4159950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:49.000Z",
            "modified": "2015-09-30T08:53:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '504de79b9f71bac6045290eba77afc94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31d-994c-438c-b3c3-4116950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:49.000Z",
            "modified": "2015-09-30T08:53:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5052f7aaacdbc43a2ed29e29d83ccf78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31d-6894-46d3-8025-4d0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:49.000Z",
            "modified": "2015-09-30T08:53:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'relay1.netangels.ru']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31e-3e34-43b8-9ee6-4ab9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:50.000Z",
            "modified": "2015-09-30T08:53:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'relentless.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31e-0c04-41ec-a636-4667950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:50.000Z",
            "modified": "2015-09-30T08:53:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5054b156f017fdac3cf9fb68196a0db9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31e-c7b8-4ced-9657-4e5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:50.000Z",
            "modified": "2015-09-30T08:53:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'remot.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31e-0878-48de-b7c4-4d1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:50.000Z",
            "modified": "2015-09-30T08:53:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'remoterat.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31e-56a8-48d2-8321-4324950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:50.000Z",
            "modified": "2015-09-30T08:53:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5055a4594d59eddf1e9102bc627d7d85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31e-4ea8-400b-88cb-4bd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:50.000Z",
            "modified": "2015-09-30T08:53:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'remp.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31f-ce84-4d63-847f-4440950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:51.000Z",
            "modified": "2015-09-30T08:53:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rempas.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31e-71c0-4563-b855-42dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:50.000Z",
            "modified": "2015-09-30T08:53:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5056b46014cb1e5db5f41be3a18b3837']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31f-45fc-4426-a130-4fc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:51.000Z",
            "modified": "2015-09-30T08:53:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'renzoprozzz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31f-3bb4-4910-a2ae-4071950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:51.000Z",
            "modified": "2015-09-30T08:53:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'reqon.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31f-2a04-456f-910b-4a7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:51.000Z",
            "modified": "2015-09-30T08:53:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '506e591a96fe2aa330a8425a9229a29e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31f-2b08-4b85-b674-40ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:51.000Z",
            "modified": "2015-09-30T08:53:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'resami1212.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31f-f66c-4e09-9b13-44e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:51.000Z",
            "modified": "2015-09-30T08:53:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'restbrain.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba31f-a5a8-4644-9452-4a0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:51.000Z",
            "modified": "2015-09-30T08:53:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5096740c2596ea42aa9338ca5917d885']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba320-0df8-48dd-93ee-42ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:52.000Z",
            "modified": "2015-09-30T08:53:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'retenet.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba320-9268-41e9-9955-47f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:52.000Z",
            "modified": "2015-09-30T08:53:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'reticonetumicirit.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba320-7370-4ddf-ab02-4650950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:52.000Z",
            "modified": "2015-09-30T08:53:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '509718791881a4ece00360d4a805dc78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba320-8538-43d5-931b-4031950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:52.000Z",
            "modified": "2015-09-30T08:53:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'revolution12.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba320-a654-4566-907c-49df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:52.000Z",
            "modified": "2015-09-30T08:53:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'revwar42.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba320-e314-41d6-8d7a-49bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:52.000Z",
            "modified": "2015-09-30T08:53:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '509ae4bda603be4afe323d6fe575cedd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba320-3744-4992-979c-4a89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:52.000Z",
            "modified": "2015-09-30T08:53:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rewwel.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba321-7ee0-458f-a998-4841950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:53.000Z",
            "modified": "2015-09-30T08:53:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'richardworld.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba320-36d0-46f7-9de8-4cf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:52.000Z",
            "modified": "2015-09-30T08:53:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '509d0d004cbf702e4e15165fa1951f1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba321-a020-4b72-86bf-402a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:53.000Z",
            "modified": "2015-09-30T08:53:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rikhard51.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba321-e734-4bbf-917a-433c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:53.000Z",
            "modified": "2015-09-30T08:53:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rinbut10.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba321-0c58-45f7-8174-4363950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:53.000Z",
            "modified": "2015-09-30T08:53:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50bd413f00389b5cb9d7a1b607dbb8d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba321-7dcc-4846-90d9-4a19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:53.000Z",
            "modified": "2015-09-30T08:53:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'risenshadow.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba321-7284-4db8-973e-4ab8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:53.000Z",
            "modified": "2015-09-30T08:53:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'robuxgivertest.servehttp.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba321-8888-4328-b5e5-4067950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:53.000Z",
            "modified": "2015-09-30T08:53:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50c386edd5040f555aef9717743a37b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba322-9fb4-413c-83e8-48b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:54.000Z",
            "modified": "2015-09-30T08:53:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rocket420.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba322-5b8c-4d0b-a68c-4e98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:54.000Z",
            "modified": "2015-09-30T08:53:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rockrock.myftp.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba322-2034-4e79-8f1c-468f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:54.000Z",
            "modified": "2015-09-30T08:53:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50c5e513f4e4e5471b7942ab553e283c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba322-8320-44f5-9afa-4f2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:54.000Z",
            "modified": "2015-09-30T08:53:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rockthreaper.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba322-69fc-445b-a43e-48af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:54.000Z",
            "modified": "2015-09-30T08:53:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rolooooo.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba322-110c-41ad-952a-4a7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:54.000Z",
            "modified": "2015-09-30T08:53:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50d6925e3033ba39ad86b1ef9791b12b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba322-8d04-4f50-b974-47b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:54.000Z",
            "modified": "2015-09-30T08:53:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rom.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba323-ed10-4139-8718-44e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:55.000Z",
            "modified": "2015-09-30T08:53:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rom111prod.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba322-bc54-4a65-9c8b-4795950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:54.000Z",
            "modified": "2015-09-30T08:53:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50dbe5c3147ff6b1c50cd25fbee6a115']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba323-22fc-4457-8402-4e55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:55.000Z",
            "modified": "2015-09-30T08:53:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'roma17.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba323-7f64-4ef9-a3ba-49eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:55.000Z",
            "modified": "2015-09-30T08:53:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'romaxa.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba323-da84-4daf-a00a-4bee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:55.000Z",
            "modified": "2015-09-30T08:53:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50e501b17ea3820ba64d13fe4e82825a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba323-15ac-45fd-b6c1-44ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:55.000Z",
            "modified": "2015-09-30T08:53:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'romerinotraderpt.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba323-31a0-4fad-b125-4503950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:55.000Z",
            "modified": "2015-09-30T08:53:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'roomtom.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba323-3e80-4c14-855f-4bf2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:55.000Z",
            "modified": "2015-09-30T08:53:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50e9da4ce446dc74b9d82da9a47093c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba323-a794-43b6-a19e-4842950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:55.000Z",
            "modified": "2015-09-30T08:53:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'root34.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba324-a284-47f6-bfbb-492a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:56.000Z",
            "modified": "2015-09-30T08:53:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rootjoy007.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba324-050c-4b35-8b0d-4cd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:56.000Z",
            "modified": "2015-09-30T08:53:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50ed6217475eb2f302f9a0085cb0e7a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba324-7184-4e28-8e89-4ab9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:56.000Z",
            "modified": "2015-09-30T08:53:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rootlight00.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba324-19f0-40bc-bbe1-4acb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:56.000Z",
            "modified": "2015-09-30T08:53:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rootlinee.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba324-a5c4-48c0-b388-46a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:56.000Z",
            "modified": "2015-09-30T08:53:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '50ede766414cfafdbe787677b5fef806']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba324-93c4-489b-802c-4e75950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:56.000Z",
            "modified": "2015-09-30T08:53:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'roottest.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba325-e5bc-4449-b4ab-4ea3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:57.000Z",
            "modified": "2015-09-30T08:53:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'roshanraj.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba324-a4ac-4198-ad2f-4734950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:56.000Z",
            "modified": "2015-09-30T08:53:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5114c1e57f7c59b04e2f0a4ee2ae32c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba325-74a4-4eef-b3c5-4e4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:57.000Z",
            "modified": "2015-09-30T08:53:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rotmg-dupe.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba325-7ddc-4c51-bf69-4182950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:57.000Z",
            "modified": "2015-09-30T08:53:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rotmg.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba325-0638-4c4d-8173-4bca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:57.000Z",
            "modified": "2015-09-30T08:53:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '511978a164152e5f47a1c19300e97483']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba325-4df0-461a-ae6a-40ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:57.000Z",
            "modified": "2015-09-30T08:53:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rpanda.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba325-ef80-4bb8-ab5b-4c16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:57.000Z",
            "modified": "2015-09-30T08:53:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rtv.ddns.ukrtel.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba325-21c8-475f-b233-40de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:57.000Z",
            "modified": "2015-09-30T08:53:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51257bf674e4b1ba955a7f638c97c62d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba325-2b64-4763-a1c7-484b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:57.000Z",
            "modified": "2015-09-30T08:53:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ruak47.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba326-7ca4-4ee9-a75c-44dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:58.000Z",
            "modified": "2015-09-30T08:53:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rubisfight2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba326-0d70-4fef-a2a1-4fa9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:58.000Z",
            "modified": "2015-09-30T08:53:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '512cb6c12c472e12f37c711d18cfaaf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba326-2fc8-4f88-8ed7-4b6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:58.000Z",
            "modified": "2015-09-30T08:53:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rumaraka.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba326-dbc0-4685-96a9-455e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:58.000Z",
            "modified": "2015-09-30T08:53:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'russiancfg.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba326-5c1c-4c81-98de-43b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:58.000Z",
            "modified": "2015-09-30T08:53:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '512e75e36c5dfb10ddc0fec5860125b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba326-cafc-4474-9090-426b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:58.000Z",
            "modified": "2015-09-30T08:53:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'rxttconfia.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba327-55cc-40cf-bfc1-4f05950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:58.000Z",
            "modified": "2015-09-30T08:53:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ryan344.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba326-d3d0-44b3-a097-4286950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:58.000Z",
            "modified": "2015-09-30T08:53:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '512fb6b6f150c336b27226b691a84ca9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba327-55c0-478f-b104-41e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:59.000Z",
            "modified": "2015-09-30T08:53:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ryan88.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba327-e25c-40c6-bca9-48b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:59.000Z",
            "modified": "2015-09-30T08:53:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ryanhaxor1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba327-f784-425e-b61b-4e4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:59.000Z",
            "modified": "2015-09-30T08:53:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '513cff34a785f3fac68a9e95ea29df0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba327-f5f4-4e50-8722-48c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:59.000Z",
            "modified": "2015-09-30T08:53:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ryderman.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba327-ee44-4384-85c9-4086950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:59.000Z",
            "modified": "2015-09-30T08:53:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 's005234.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba327-6958-4089-86d5-4c96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:59.000Z",
            "modified": "2015-09-30T08:53:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5150f0dea57f2f9fdd17eab87c2933db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba327-8d84-4441-943a-4b3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:53:59.000Z",
            "modified": "2015-09-30T08:53:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 's0n1c.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:53:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba328-1108-4c26-8360-4881950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:00.000Z",
            "modified": "2015-09-30T08:54:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 's1lentforce.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba328-f820-4235-b79c-4c5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:00.000Z",
            "modified": "2015-09-30T08:54:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '515418fe073af4f6d935b2575a253117']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba328-7c68-46cb-bdeb-4c19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:00.000Z",
            "modified": "2015-09-30T08:54:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 's4f6g41b6w51d.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba328-2a08-4ed5-aade-4a52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:00.000Z",
            "modified": "2015-09-30T08:54:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 's4l4mi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba328-66e4-4f43-907d-485e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:00.000Z",
            "modified": "2015-09-30T08:54:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '515f06f5380c7bdf18c33ea0020f8584']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba328-1bdc-4311-abb7-42eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:00.000Z",
            "modified": "2015-09-30T08:54:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sabriinadc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba328-f54c-4900-a6bc-4eb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:00.000Z",
            "modified": "2015-09-30T08:54:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sacc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba328-7930-4846-935b-4f65950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:00.000Z",
            "modified": "2015-09-30T08:54:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '516d250173b4c74f05819dbf81cdad85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba329-702c-479a-a418-4248950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:01.000Z",
            "modified": "2015-09-30T08:54:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sadasc12.ddnsking.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba329-cb24-404f-aa79-4e92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:01.000Z",
            "modified": "2015-09-30T08:54:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sadfsdfsd.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba329-8278-46c8-838a-45ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:01.000Z",
            "modified": "2015-09-30T08:54:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5176e8339e81df17168bc21af4ff4fbc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba329-2c48-40b8-ad32-4cf0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:01.000Z",
            "modified": "2015-09-30T08:54:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'saglam.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba329-bfc0-44e4-9f8c-4102950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:01.000Z",
            "modified": "2015-09-30T08:54:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sahanshost.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba329-a6fc-413e-a6ce-47ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:01.000Z",
            "modified": "2015-09-30T08:54:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51785f9a7c9f8eea32db672b8000cb4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba329-3034-42c5-936b-4325950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:01.000Z",
            "modified": "2015-09-30T08:54:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sahut.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32a-e90c-4e37-8e84-48fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:02.000Z",
            "modified": "2015-09-30T08:54:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'saint.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32a-7dcc-4536-9d7d-4ed3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:02.000Z",
            "modified": "2015-09-30T08:54:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '517c69e1e51795826cd48b326c23a0b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32a-1728-48f3-9d7f-4be3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:02.000Z",
            "modified": "2015-09-30T08:54:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sajad1979.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32a-0984-46ff-87f7-4624950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:02.000Z",
            "modified": "2015-09-30T08:54:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sajadali9090.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32a-9e78-4301-aba5-4370950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:02.000Z",
            "modified": "2015-09-30T08:54:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5180d0d580de5a9bd7ca07b3a6e47472']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32a-6a44-4627-8e47-4328950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:02.000Z",
            "modified": "2015-09-30T08:54:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'salam98.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32a-c7b8-4e5e-8faa-49f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:02.000Z",
            "modified": "2015-09-30T08:54:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sallama.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32a-2464-4e76-90bb-4b74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:02.000Z",
            "modified": "2015-09-30T08:54:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51845efcdaa8651a2f39c09c86a5895d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32b-4840-403d-aa46-4e74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:03.000Z",
            "modified": "2015-09-30T08:54:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'saltanatemir124.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32b-c67c-4fa5-b8a5-4d61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:03.000Z",
            "modified": "2015-09-30T08:54:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'salutmax.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32b-2e04-4ccf-810f-43a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:03.000Z",
            "modified": "2015-09-30T08:54:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5191a46142d5ca3af9a6fb708f077f22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32b-b8f8-4977-b5b7-412b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:03.000Z",
            "modified": "2015-09-30T08:54:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'samcreep.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32b-a588-4b86-a83b-4277950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:03.000Z",
            "modified": "2015-09-30T08:54:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sameerchwea.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32b-8510-4f7a-b33d-4c1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:03.000Z",
            "modified": "2015-09-30T08:54:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5197590adf2a0d49210aed827dbd638e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32b-37dc-4718-9aeb-4e4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:03.000Z",
            "modified": "2015-09-30T08:54:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sametcopurr.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32c-67d0-4df4-ade0-490c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:04.000Z",
            "modified": "2015-09-30T08:54:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sametreis125112.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32c-7180-447c-a212-49c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:04.000Z",
            "modified": "2015-09-30T08:54:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '519baba9a218e80431ade47f5f4f231e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32c-b834-448f-b911-450e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:04.000Z",
            "modified": "2015-09-30T08:54:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '519cffc06941e3416fd4bb9cf86e9ec8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32c-1f48-4625-bb02-4954950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:04.000Z",
            "modified": "2015-09-30T08:54:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sami-123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32c-7750-4190-83c2-4535950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:04.000Z",
            "modified": "2015-09-30T08:54:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '519ee162037b792048c98906d0ad293f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32c-9ce4-4c3c-94ed-4219950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:04.000Z",
            "modified": "2015-09-30T08:54:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'samptawer.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32c-669c-414e-9dbb-4ca0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:04.000Z",
            "modified": "2015-09-30T08:54:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'samuhacks.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32c-4fd8-4003-be3d-4198950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:04.000Z",
            "modified": "2015-09-30T08:54:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51c24030e323f950618e94fd3422c0cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32d-2aac-4363-a906-45b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:05.000Z",
            "modified": "2015-09-30T08:54:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sanalpcrat.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32d-fb38-4e56-94c6-49ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:05.000Z",
            "modified": "2015-09-30T08:54:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sanchezdotarat.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32d-7224-43fc-afbb-4184950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:05.000Z",
            "modified": "2015-09-30T08:54:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51cbdd9f59a9bd773ac44fd156b5c3c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32d-46d8-45c4-943a-457d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:05.000Z",
            "modified": "2015-09-30T08:54:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sanek.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32d-97bc-4de7-b256-4c35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:05.000Z",
            "modified": "2015-09-30T08:54:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sanek125366.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32d-a9f8-40bc-8a45-4ad4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:05.000Z",
            "modified": "2015-09-30T08:54:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51cfc99c6b00f4112e02a83cf6471aa2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32d-9a2c-4029-9f3f-4c73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:05.000Z",
            "modified": "2015-09-30T08:54:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'saniaangelend.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32e-2d68-4495-969e-4efc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:06.000Z",
            "modified": "2015-09-30T08:54:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sanliurfa11.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32e-cca4-47d7-be74-4f2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:06.000Z",
            "modified": "2015-09-30T08:54:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51e0423571e770ee65a6f26d6ce9a306']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32e-d7c0-4901-9dea-4edf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:06.000Z",
            "modified": "2015-09-30T08:54:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sara98.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32e-a880-42f0-8c17-448d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:06.000Z",
            "modified": "2015-09-30T08:54:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sarohan4748.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32e-70c8-474f-970d-44d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:06.000Z",
            "modified": "2015-09-30T08:54:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51e3723aca811ae3977a52beb0514255']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32e-6230-4fe1-8d41-4346950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:06.000Z",
            "modified": "2015-09-30T08:54:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sashalogik.servergame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32e-97cc-462e-925d-457e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:06.000Z",
            "modified": "2015-09-30T08:54:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'saske992.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32e-54d8-4b9b-9d08-4abd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:06.000Z",
            "modified": "2015-09-30T08:54:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51f827489346144b444974c8ddc4aa09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32f-b134-4db2-a896-4d01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:07.000Z",
            "modified": "2015-09-30T08:54:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'satdz2323.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32f-8a10-49eb-856c-4c4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:07.000Z",
            "modified": "2015-09-30T08:54:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'satocan134.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32f-1710-4850-b538-4fc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:07.000Z",
            "modified": "2015-09-30T08:54:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '51fc1490ad676c52ce662e211d782d93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32f-9d04-4273-a9bb-4d89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:07.000Z",
            "modified": "2015-09-30T08:54:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sauna21.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32f-52c0-4746-a902-4827950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:07.000Z",
            "modified": "2015-09-30T08:54:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'savage270.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32f-937c-4fa8-a9fc-4835950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:07.000Z",
            "modified": "2015-09-30T08:54:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5203707d5381d75ad015a64279bfbe30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32f-d758-462e-aaaa-4957950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:07.000Z",
            "modified": "2015-09-30T08:54:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '520b97fb7dd5524c18da92e83d2f2d41']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba32f-1658-46b8-a74b-4fc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:07.000Z",
            "modified": "2015-09-30T08:54:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'savehacked.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba330-70bc-44e2-8ded-4f70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:08.000Z",
            "modified": "2015-09-30T08:54:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52180f7c9402eb2121e28e3db202da1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba330-d298-47ec-8a9f-49ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:08.000Z",
            "modified": "2015-09-30T08:54:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5220ac29dc906f65fb72f1649034f12d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba330-92e0-4f3f-809b-40a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:08.000Z",
            "modified": "2015-09-30T08:54:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'saxores.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba330-00e8-4fcd-a6fc-48c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:08.000Z",
            "modified": "2015-09-30T08:54:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5234ae31121faa2c20ea09a1b253681a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba330-44bc-4339-b2be-435f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:08.000Z",
            "modified": "2015-09-30T08:54:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5236309ab381cd17cd3a721328567917']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba330-97d0-463c-8baf-4222950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:08.000Z",
            "modified": "2015-09-30T08:54:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'saxydance.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba330-9da4-4729-a6f8-43de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:08.000Z",
            "modified": "2015-09-30T08:54:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '523991172d83695ec1fce13bd230863a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba331-5898-4b9d-8b85-4af8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:09.000Z",
            "modified": "2015-09-30T08:54:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '524443e0642634aef08c830df0981ecc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba331-7684-4e27-8f0b-406d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:09.000Z",
            "modified": "2015-09-30T08:54:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sboyerrat.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba331-06e8-4f14-a2bf-418b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:09.000Z",
            "modified": "2015-09-30T08:54:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '524556e1e121003b4437999c4c04ed95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba331-ab84-4e57-9082-4d74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:09.000Z",
            "modified": "2015-09-30T08:54:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52534e72006390b1bfe8ca3c024c25d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba331-35dc-41bd-a7ff-410c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:09.000Z",
            "modified": "2015-09-30T08:54:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scailercraft.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba331-aaa8-4537-87dd-4501950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:09.000Z",
            "modified": "2015-09-30T08:54:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52541f4e7388d94552cecdc7aadaf32d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba331-36e8-41b8-b34a-43b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:09.000Z",
            "modified": "2015-09-30T08:54:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5256990919ea719d101f7474cfa0476c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba331-fb7c-4da8-928b-47d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:09.000Z",
            "modified": "2015-09-30T08:54:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scamaple.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba332-de30-4ea1-b453-4bd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:10.000Z",
            "modified": "2015-09-30T08:54:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '525fc38813af98b75e946a30c38426f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba332-7b18-4f34-a0f4-4099950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:10.000Z",
            "modified": "2015-09-30T08:54:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52601f62786933c4735a29cf521e05b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba332-6e0c-4b81-a103-44e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:10.000Z",
            "modified": "2015-09-30T08:54:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scaner1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba332-bd34-46d9-8132-4070950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:10.000Z",
            "modified": "2015-09-30T08:54:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5267f736cd9bd3a21394fbc0f22159e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba332-3e34-452a-a4af-4544950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:10.000Z",
            "modified": "2015-09-30T08:54:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '526ceae1d9c2797ebd9baee94219eae2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba332-a430-495d-999e-4d76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:10.000Z",
            "modified": "2015-09-30T08:54:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scania500.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba332-9208-4ba8-b51b-4933950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:10.000Z",
            "modified": "2015-09-30T08:54:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5275e9c5b442e127e94d55623bbc6b79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba333-2b2c-4b88-bf2f-4f53950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:11.000Z",
            "modified": "2015-09-30T08:54:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '528349cb84eec820dd52b6515b98f5b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba333-246c-4e30-9737-4253950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:11.000Z",
            "modified": "2015-09-30T08:54:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scania80400.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba333-8ac0-4680-b2db-41c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:11.000Z",
            "modified": "2015-09-30T08:54:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '528b136bdefe5168e05acfed406e9fe9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba333-8c54-41b6-9837-4bac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:11.000Z",
            "modified": "2015-09-30T08:54:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5293f5cb3697ce0cb8c7f28d028d8892']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba333-7e38-414d-b3d9-456a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:11.000Z",
            "modified": "2015-09-30T08:54:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scania80500.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba333-2ff8-4fa0-b846-4c2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:11.000Z",
            "modified": "2015-09-30T08:54:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '529b8828a527ac4ca6c79846c5039459']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba333-5e9c-4871-a81b-4cba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:11.000Z",
            "modified": "2015-09-30T08:54:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '529be514edde1cc511759b7ba9bcb649']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba333-d598-46d0-bcfe-43c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:11.000Z",
            "modified": "2015-09-30T08:54:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scarfaceyuz00.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba334-ec40-4dcf-b262-4906950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:12.000Z",
            "modified": "2015-09-30T08:54:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52baeabb356fe1149115fac70b30002e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba334-5770-4866-9463-453b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:12.000Z",
            "modified": "2015-09-30T08:54:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52d5d93edc41c35d204bb7827b7623c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba334-f6e0-4511-804d-4748950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:12.000Z",
            "modified": "2015-09-30T08:54:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scarzrats.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba334-8a94-4f3f-8174-47fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:12.000Z",
            "modified": "2015-09-30T08:54:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52d8c2aa337c9c3c315fb4f5018d354e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba334-8bfc-4ce5-b097-4749950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:12.000Z",
            "modified": "2015-09-30T08:54:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52e1d977be918d3e33931c131866424b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba334-9220-49c9-8aca-43fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:12.000Z",
            "modified": "2015-09-30T08:54:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scarzrats.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba334-cb24-4793-b4c2-43df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:12.000Z",
            "modified": "2015-09-30T08:54:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52ea0e45a99a58b25332555c07379f8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba335-7460-484a-96ca-476d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:13.000Z",
            "modified": "2015-09-30T08:54:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52f89cb550b53d29e8c9055dd7b4b708']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba335-2774-43cc-a0bf-44d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:13.000Z",
            "modified": "2015-09-30T08:54:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scometa.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba335-1320-46dd-b2d7-4db6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:13.000Z",
            "modified": "2015-09-30T08:54:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '52fd2ca5dcb303b1a948b2d0b2e391e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba335-07ec-4934-828e-48a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:13.000Z",
            "modified": "2015-09-30T08:54:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '530278991f3fe488611fcaab944f4cf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba335-8c30-4831-9a96-49c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:13.000Z",
            "modified": "2015-09-30T08:54:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scormonel66.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba335-742c-4fc1-a97b-4559950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:13.000Z",
            "modified": "2015-09-30T08:54:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53093db651fdbad341ba3b43128479fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba335-0b04-4903-bad2-457a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:13.000Z",
            "modified": "2015-09-30T08:54:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '530fa4501ebb2cab81870303e2548059']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba335-9994-426f-911b-4213950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:13.000Z",
            "modified": "2015-09-30T08:54:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scorpiol.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba336-8c28-4a78-9e5b-4f3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:14.000Z",
            "modified": "2015-09-30T08:54:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5317ba8205243cffdce12c1899d66f5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba336-bd54-4918-865d-48c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:14.000Z",
            "modified": "2015-09-30T08:54:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53232e6dfd9b7a5beb1a2d1b2d58daaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba336-c184-48d0-b9e6-4d3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:14.000Z",
            "modified": "2015-09-30T08:54:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scorpiol34.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba336-e9bc-47e1-9e16-478c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:14.000Z",
            "modified": "2015-09-30T08:54:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5331b32683df291e7736dc16ab641667']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba336-e774-4512-a620-4e69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:14.000Z",
            "modified": "2015-09-30T08:54:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53332183acb339b5844d67724e3dd05c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba336-c1bc-4722-9126-49a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:14.000Z",
            "modified": "2015-09-30T08:54:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scorpion2044.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba336-0f50-4239-976c-4c49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:14.000Z",
            "modified": "2015-09-30T08:54:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5356d2196ee780ec8706a6e64415f0fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba337-376c-4d45-ac51-4db3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:15.000Z",
            "modified": "2015-09-30T08:54:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '537569675cdfd3dbf95b5ed141457bb8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba336-a4c0-4dd8-beb1-414b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:14.000Z",
            "modified": "2015-09-30T08:54:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'scrotch.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba337-725c-45b8-860b-44a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:15.000Z",
            "modified": "2015-09-30T08:54:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53789dffeb0ad1380293f1f997bd61fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba337-67c4-4d33-85fa-4b0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:15.000Z",
            "modified": "2015-09-30T08:54:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '538a1084ec6f5856402dee4c035772cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba337-7a28-4eae-b9b9-48a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:15.000Z",
            "modified": "2015-09-30T08:54:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sdaqasdsa.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba337-3048-48d3-9ea3-4b36950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:15.000Z",
            "modified": "2015-09-30T08:54:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53a51ac0ee148742cb27a114a7eb8dd5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba337-d9d0-4f51-a9aa-4ada950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:15.000Z",
            "modified": "2015-09-30T08:54:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53acfe088fba16fd359f50c19d1dff74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba337-2ed8-4433-a07f-4faf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:15.000Z",
            "modified": "2015-09-30T08:54:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sdfsaewesfgs.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba338-fa4c-4404-b6e6-42f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:16.000Z",
            "modified": "2015-09-30T08:54:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53ae8ac030b02c8fe4fc6afd5235fea3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba338-9134-4eb9-a4cf-4167950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:16.000Z",
            "modified": "2015-09-30T08:54:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53aff2cbe3e488565d01574823e53280']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba338-eb88-4282-808f-416c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:16.000Z",
            "modified": "2015-09-30T08:54:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sdfsfdsfdsdf.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba338-5a30-45c6-b14e-45d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:16.000Z",
            "modified": "2015-09-30T08:54:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53b53e3aa4b7edeb19584b8f27936d3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba338-a5d0-4faf-8cfa-45f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:16.000Z",
            "modified": "2015-09-30T08:54:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53b600ade2b20a397dae5185f5d8d694']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba338-7ea4-473e-8ced-4d5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:16.000Z",
            "modified": "2015-09-30T08:54:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sduhfauhdjk.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba338-67d4-43d0-8ef7-40b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:16.000Z",
            "modified": "2015-09-30T08:54:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53b666e4e2d9cec823d4a98761bdd89e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba339-487c-4017-b697-42e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:17.000Z",
            "modified": "2015-09-30T08:54:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53c68c0dfcec17750b269b21150f08f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba338-c040-4706-b39d-4a56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:16.000Z",
            "modified": "2015-09-30T08:54:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sea963.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba339-63a8-4e1e-bb98-49ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:17.000Z",
            "modified": "2015-09-30T08:54:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53c9024cb367845cbf643ae0e9b3cd1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba339-093c-49da-a642-4672950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:17.000Z",
            "modified": "2015-09-30T08:54:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53d66a106d72ea62e2fc3b526145b188']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba339-e5f8-421f-8dc9-45ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:17.000Z",
            "modified": "2015-09-30T08:54:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sec05-path.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba339-9a88-4338-af95-4731950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:17.000Z",
            "modified": "2015-09-30T08:54:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53de0d87fa50a40b16edde1f1c66e2d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba339-a658-4c2f-8d01-4fb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:17.000Z",
            "modified": "2015-09-30T08:54:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53efbb8f45cad471440cf86c448ef996']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba339-7d5c-43dd-bbc9-4961950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:17.000Z",
            "modified": "2015-09-30T08:54:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'securecrack.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33a-fd4c-4b24-9cb9-41a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:18.000Z",
            "modified": "2015-09-30T08:54:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '53fbb1e7e759233dfcf4e46a10c2bff4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33a-fb78-4c29-8d88-4103950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:18.000Z",
            "modified": "2015-09-30T08:54:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54018ce09248712babe3eefb9d326b07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33a-9694-4112-8cb9-4768950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:18.000Z",
            "modified": "2015-09-30T08:54:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'segakinetick.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33a-6dcc-409a-9184-40ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:18.000Z",
            "modified": "2015-09-30T08:54:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54080bf43898420b8f610bf3ce4d1385']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33a-0730-48c5-beab-483b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:18.000Z",
            "modified": "2015-09-30T08:54:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '541b7ad31f80a05ad415b2d571086e2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33a-bda4-483c-95e4-4d3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:18.000Z",
            "modified": "2015-09-30T08:54:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'seik.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33a-cbc4-4b0c-81f6-4a6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:18.000Z",
            "modified": "2015-09-30T08:54:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5442565cd2498a3ea80af96ac76303ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33b-4990-4e9a-b287-4399950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:19.000Z",
            "modified": "2015-09-30T08:54:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54478e69fbc138c33abb49b2c9d9b2c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33a-20b0-41fb-bb20-494d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:18.000Z",
            "modified": "2015-09-30T08:54:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'seiko2013.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33b-fa9c-4c1d-9519-4911950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:19.000Z",
            "modified": "2015-09-30T08:54:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '544ffbf05ba59c0dbf7b9e81af7a851d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33b-3894-4fbb-9c4a-48eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:19.000Z",
            "modified": "2015-09-30T08:54:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5453f46d406a4af23b9918aba112650f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33b-ef44-4b7a-997c-4b40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:19.000Z",
            "modified": "2015-09-30T08:54:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'seismix.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33b-c088-4a93-9467-4bd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:19.000Z",
            "modified": "2015-09-30T08:54:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54581d7cb7918fea370244770fa47c7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33b-caa4-4ec0-b77c-4b3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:19.000Z",
            "modified": "2015-09-30T08:54:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '545e8d663c5495cf0de9e359a747b436']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33b-47bc-4b9c-8746-498e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:19.000Z",
            "modified": "2015-09-30T08:54:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sejwoquvmck.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33c-2bd0-4c8c-b51c-4bb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:20.000Z",
            "modified": "2015-09-30T08:54:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '546168d95de27042aa24adb5098e19b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33c-b2c8-4654-8ada-4e8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:20.000Z",
            "modified": "2015-09-30T08:54:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '546c54f2664176329715d172f600f45b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33c-662c-4c30-896b-42c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:20.000Z",
            "modified": "2015-09-30T08:54:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'selic.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33c-1af4-4a83-8272-46a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:20.000Z",
            "modified": "2015-09-30T08:54:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5473d9c086ab591b0fe0baf1595a592c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33c-8824-4fbe-812d-4906950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:20.000Z",
            "modified": "2015-09-30T08:54:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '547e8c26d38b7ca63dc49826af415f58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33c-b97c-45ee-a2fa-464c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:20.000Z",
            "modified": "2015-09-30T08:54:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sellexted.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33c-2388-49f8-8723-42a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:20.000Z",
            "modified": "2015-09-30T08:54:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '548a3866179cbc10804b709baf19e075']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33d-3c60-4737-ba88-4899950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:21.000Z",
            "modified": "2015-09-30T08:54:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '548e0dd1e7c8591a2af7e8648a6f9dc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33c-fbac-4c91-adbc-44a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:20.000Z",
            "modified": "2015-09-30T08:54:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sellrau.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33d-3240-494a-b983-4360950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:21.000Z",
            "modified": "2015-09-30T08:54:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54936969248973432ff16cc597b30a83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33d-eb5c-420b-b602-4aea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:21.000Z",
            "modified": "2015-09-30T08:54:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5498de731732a83a1b172485b0cfd2b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33d-134c-40f2-91c1-46db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:21.000Z",
            "modified": "2015-09-30T08:54:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'selmakaya.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33d-fdc8-4cd3-85c2-4179950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:21.000Z",
            "modified": "2015-09-30T08:54:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54b2a878661b015070252ed05d29fe6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33d-ea3c-41cb-ab7d-412e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:21.000Z",
            "modified": "2015-09-30T08:54:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54b5041b84c86e6ac99bd50bbae78708']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33d-361c-433c-a9f2-48c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:21.000Z",
            "modified": "2015-09-30T08:54:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'seluze14gaming.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33e-0610-4628-9f66-4e25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:22.000Z",
            "modified": "2015-09-30T08:54:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54bebdf902c584b90b00aea2c4904b5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33e-46c8-4a1c-b919-4c7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:22.000Z",
            "modified": "2015-09-30T08:54:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54bf5e4574b7b712224fee9417e90317']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33e-bbac-45be-a8ba-4e79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:22.000Z",
            "modified": "2015-09-30T08:54:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'semperdao.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33e-c038-42df-a521-4429950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:22.000Z",
            "modified": "2015-09-30T08:54:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54bff23bdc7d1df24255923cc036882a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33e-8c08-46fe-b10c-4b0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:22.000Z",
            "modified": "2015-09-30T08:54:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54c3656a42bb5faa99ac8a797c796c0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33e-d95c-4d1d-8908-44d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:22.000Z",
            "modified": "2015-09-30T08:54:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sergey20021.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33e-3484-4240-86f5-40a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:22.000Z",
            "modified": "2015-09-30T08:54:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54cf8f3c2c203b1f3ff1c1366e9c45f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33f-75fc-40c9-9796-4f5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:23.000Z",
            "modified": "2015-09-30T08:54:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54d3574cfde543e51862cf05b945dd98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33e-0700-4915-b14a-48a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:22.000Z",
            "modified": "2015-09-30T08:54:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'serrat007.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33f-dd98-4c06-b190-4704950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:23.000Z",
            "modified": "2015-09-30T08:54:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54e1059398d9529e3a8ddac86de2a7c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33f-f86c-4391-a725-4b07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:23.000Z",
            "modified": "2015-09-30T08:54:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54ea54358213ed1153c9d2552f2e706c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33f-7390-405c-8cb9-4a7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:23.000Z",
            "modified": "2015-09-30T08:54:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'serverekb.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33f-959c-46e3-a99e-4f72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:23.000Z",
            "modified": "2015-09-30T08:54:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54ec22cdcbc19e336b0a5fb37c500237']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33f-ed10-4343-b92d-444d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:23.000Z",
            "modified": "2015-09-30T08:54:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54ef29a80c65c32525978a16d6fb37df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba33f-ad7c-4515-8554-49c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:23.000Z",
            "modified": "2015-09-30T08:54:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'servidorshadow.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba340-0e94-434f-bb16-413f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:24.000Z",
            "modified": "2015-09-30T08:54:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '54f3976c97954b4482afd330b49496f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba340-d058-4109-b289-47ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:24.000Z",
            "modified": "2015-09-30T08:54:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '55029abbc530b8426c4621068f215727']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba340-9c58-450d-be84-4108950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:24.000Z",
            "modified": "2015-09-30T08:54:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sex.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba340-3190-4ee5-9bcd-4bf9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:24.000Z",
            "modified": "2015-09-30T08:54:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5509e7563ff66dcc935380084de168df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba340-7370-4d9a-a55e-473a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:24.000Z",
            "modified": "2015-09-30T08:54:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '550b45b2cb53f1a02e961a11f22cf3fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba340-25d4-413d-b448-453c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:24.000Z",
            "modified": "2015-09-30T08:54:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sexyisha007.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba340-f540-49b3-b872-432a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:24.000Z",
            "modified": "2015-09-30T08:54:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '55135d63c6b5e038c639c25a0f49a519']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba341-21b8-40e8-bf7b-4ca0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:25.000Z",
            "modified": "2015-09-30T08:54:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '551914d88c42ff5401a3dbef9774987f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba340-a494-4703-9e1e-41b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:24.000Z",
            "modified": "2015-09-30T08:54:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sexyonelndy.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba341-7da4-40a1-a58b-4b6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:25.000Z",
            "modified": "2015-09-30T08:54:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '551d9a52cd6d44372d3c0a3632767fff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba341-893c-4cbe-810f-4224950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:25.000Z",
            "modified": "2015-09-30T08:54:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '553e8175cfdaeb5b9cf83039aee17981']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba341-7980-42e5-b677-4e0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:25.000Z",
            "modified": "2015-09-30T08:54:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sexysarahjacobs.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba341-3c04-4aff-b033-40bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:25.000Z",
            "modified": "2015-09-30T08:54:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '554d8e2cdbf1cdbafc73f103faad55ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba341-7ba8-4569-9183-4548950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:25.000Z",
            "modified": "2015-09-30T08:54:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '554e98f4b08c875e113897b4bde377d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba341-372c-481c-a7ef-41e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:25.000Z",
            "modified": "2015-09-30T08:54:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'seydo21.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba342-f974-4c70-b353-40c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:26.000Z",
            "modified": "2015-09-30T08:54:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '557a3c53603b2d5625f7d5dbcaafb0bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba342-3fb8-4aae-8db3-4f1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:26.000Z",
            "modified": "2015-09-30T08:54:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5588d50a4512d8a17649c8a2e74cdc53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba342-0a28-422f-90a0-4a77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:26.000Z",
            "modified": "2015-09-30T08:54:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'seydo212.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba342-d4c8-4ce3-8b30-48e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:26.000Z",
            "modified": "2015-09-30T08:54:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '558cafac3f3bd04722b81bbda089c8c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba342-40d4-479a-9a60-4296950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:26.000Z",
            "modified": "2015-09-30T08:54:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '55940fe28983bed21476ff11059467b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba342-7224-4f3f-8260-48d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:26.000Z",
            "modified": "2015-09-30T08:54:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sezar99.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba342-97c0-4796-be0d-49e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:26.000Z",
            "modified": "2015-09-30T08:54:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '55b6691b4453bec719deeb42fd3d1a1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba343-b104-4190-ac6d-48f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:27.000Z",
            "modified": "2015-09-30T08:54:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '55b8966d425efed86d3a412a44acbfc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba342-1d2c-4bd8-9829-4fdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:26.000Z",
            "modified": "2015-09-30T08:54:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sh4deb1ack.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba343-d0c0-4092-8511-41e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:27.000Z",
            "modified": "2015-09-30T08:54:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '55d632248a10e25a1ebad45aa5885b4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba343-8940-4a31-9c13-4048950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:27.000Z",
            "modified": "2015-09-30T08:54:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '55efd387dc99cab2add470dcf8687e44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba343-8da4-4b7a-abb9-434e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:27.000Z",
            "modified": "2015-09-30T08:54:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shabbushah.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba343-dc28-4cd1-852b-4102950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:27.000Z",
            "modified": "2015-09-30T08:54:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '55f80ceca1a70a9a392c5f65b0f453ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba343-8a54-418f-8039-4467950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:27.000Z",
            "modified": "2015-09-30T08:54:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5600dd8cae23834b983089e367c3d460']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba343-4e58-40d0-8455-4b29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:27.000Z",
            "modified": "2015-09-30T08:54:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shadowdeath.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba344-a724-469b-93cf-447f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:28.000Z",
            "modified": "2015-09-30T08:54:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5607d490d2c5383cf4590727633364c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba344-3170-47fd-8789-4a00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:28.000Z",
            "modified": "2015-09-30T08:54:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5610481f86fc450ad512931174e8865d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba344-2b2c-404f-bbef-4b39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:28.000Z",
            "modified": "2015-09-30T08:54:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shadowfreak.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba344-9b9c-4bcf-8302-4533950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:28.000Z",
            "modified": "2015-09-30T08:54:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5617c96f972a3b9133fecb725e631ef2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba344-0790-437c-9c53-470b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:28.000Z",
            "modified": "2015-09-30T08:54:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5617f8a5c8a0aca4f9bcc44be3214b62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba344-f600-4b7f-a836-4df6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:28.000Z",
            "modified": "2015-09-30T08:54:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shadowguye12.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba344-5b08-42bf-8500-47d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:28.000Z",
            "modified": "2015-09-30T08:54:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56181cf0f7078c601243cfe465a0244c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba345-e094-48d6-84d6-4a15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:29.000Z",
            "modified": "2015-09-30T08:54:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '561d56578ee4e1337b114ad36b4eb7e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba344-1b20-43d2-a460-429b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:28.000Z",
            "modified": "2015-09-30T08:54:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shadowsploit21.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba345-133c-4d91-94b3-44b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:29.000Z",
            "modified": "2015-09-30T08:54:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '561e4eefd5ae23c6bc768a808063fa84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba345-93c8-41d8-a6bd-41b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:29.000Z",
            "modified": "2015-09-30T08:54:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5625459fad12171eb31f2b49bc6d9375']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba345-4700-43b8-8dde-459c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:29.000Z",
            "modified": "2015-09-30T08:54:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shadringrek.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba345-c68c-4fa7-b7eb-4334950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:29.000Z",
            "modified": "2015-09-30T08:54:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '562ee31e4b4a08e93b16583e9f91a6f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba345-e844-4775-8fd5-415a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:29.000Z",
            "modified": "2015-09-30T08:54:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '563361ac056ba32f283f406e24548a95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba345-c3a4-4607-97fa-44b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:29.000Z",
            "modified": "2015-09-30T08:54:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shaijal.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba346-2d80-48b1-b903-46ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:30.000Z",
            "modified": "2015-09-30T08:54:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '563e2852ce1f1cef455f747ae4d7d341']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba346-9a38-48b5-a519-49a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:30.000Z",
            "modified": "2015-09-30T08:54:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '564261a9d3dd200cbfd4796ce006d9d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba346-b350-4bf0-b027-46a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:30.000Z",
            "modified": "2015-09-30T08:54:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shaiya-hemen.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba346-0278-4e3b-ae1b-414b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:30.000Z",
            "modified": "2015-09-30T08:54:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5651c33988edc253d17e111fba0de53b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba346-630c-4383-8ccb-4c95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:30.000Z",
            "modified": "2015-09-30T08:54:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56583d051df93ca7b36a76bda2a7bdcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba346-4884-4a35-8681-4dcc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:30.000Z",
            "modified": "2015-09-30T08:54:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shakal.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba346-265c-470c-a2f7-429d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:30.000Z",
            "modified": "2015-09-30T08:54:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5659d88c4e1aae321b274211ced98047']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba347-54dc-4b7a-bea4-4900950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:31.000Z",
            "modified": "2015-09-30T08:54:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '566411553172f7f138a122b0468985bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba346-edf0-4889-ac14-4efc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:30.000Z",
            "modified": "2015-09-30T08:54:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shakal2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba347-899c-4c3a-bef5-484c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:31.000Z",
            "modified": "2015-09-30T08:54:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56641b778d74be3c3642279e660812f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba347-5c80-427a-a6b9-430f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:31.000Z",
            "modified": "2015-09-30T08:54:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '566525a76f24be2ba99f32cb99a83d02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba347-0eb8-45df-ae32-49b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:31.000Z",
            "modified": "2015-09-30T08:54:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shalsh.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba347-3d9c-4983-bd97-4fd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:31.000Z",
            "modified": "2015-09-30T08:54:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5672ab26a2c320eaa54945316db07abd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba347-67ec-4404-9496-4343950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:31.000Z",
            "modified": "2015-09-30T08:54:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5679b465e0b8b9578621ee4c2fb5c62f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba347-05d4-4f15-8229-4091950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:31.000Z",
            "modified": "2015-09-30T08:54:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sharblade.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba348-fe68-4a62-ae65-4fff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:31.000Z",
            "modified": "2015-09-30T08:54:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '567aef82c9e7139c61e06a51dc063d5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba348-36ec-4e14-ae8e-4ad3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:32.000Z",
            "modified": "2015-09-30T08:54:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '567c660ba17013b396da12b3a84c4282']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba348-0ca0-489f-a9aa-46a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:32.000Z",
            "modified": "2015-09-30T08:54:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sharma1226.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba348-f6ec-4a08-8407-4557950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:32.000Z",
            "modified": "2015-09-30T08:54:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5683349273668548f561efe5a22d8454']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba348-aba8-4c45-94ab-4178950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:32.000Z",
            "modified": "2015-09-30T08:54:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shawty123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba348-d640-4906-ae16-4bd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:32.000Z",
            "modified": "2015-09-30T08:54:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shawty123.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba348-fdcc-4eac-8f12-463b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:32.000Z",
            "modified": "2015-09-30T08:54:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '568c7ed4e53fd83d6fc567a24c5f6d4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba348-8b50-4224-a882-400c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:32.000Z",
            "modified": "2015-09-30T08:54:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shawty123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba349-2b3c-4206-b7db-4ae1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:33.000Z",
            "modified": "2015-09-30T08:54:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shdfhsdhsdfhhssd.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba349-ce5c-45d7-9447-4fe5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:32.000Z",
            "modified": "2015-09-30T08:54:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5693af960d8beef33cd2192620f11be8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba349-beb8-4c8f-87df-480b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:33.000Z",
            "modified": "2015-09-30T08:54:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shinsilla.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba349-e0c8-44f8-8f60-43a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:33.000Z",
            "modified": "2015-09-30T08:54:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shit007.no-ip.blz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba349-5c78-4cf7-b04a-4f07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:33.000Z",
            "modified": "2015-09-30T08:54:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56a2155f32e161880a43df2ae8474314']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba349-64a4-432d-93f1-471f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:33.000Z",
            "modified": "2015-09-30T08:54:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shit123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba349-31c0-4710-9970-4d98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:33.000Z",
            "modified": "2015-09-30T08:54:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shkodrath.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba349-a5e4-4e84-a6b1-4e8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:33.000Z",
            "modified": "2015-09-30T08:54:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56b19910edf50b86768fad0e09568629']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34a-09bc-4356-a60c-4698950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:34.000Z",
            "modified": "2015-09-30T08:54:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56b8caf42b115b7c448155196611bd82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34a-64e0-4261-b303-407a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:34.000Z",
            "modified": "2015-09-30T08:54:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shojumedance.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34a-b0cc-43bb-9e4f-4be5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:34.000Z",
            "modified": "2015-09-30T08:54:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56c0500069b2d0ae2457491c66c63fd3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34a-dfe0-4288-8fba-45e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:34.000Z",
            "modified": "2015-09-30T08:54:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56cba55628ab54dcf9c315d3d68a2f82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34a-4e84-4828-b18e-4b23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:34.000Z",
            "modified": "2015-09-30T08:54:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shojumerues.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34a-36dc-4b08-a22d-4c08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:34.000Z",
            "modified": "2015-09-30T08:54:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56d60c0ae7804c671b9a1f79da69f7fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34a-702c-404a-b825-44a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:34.000Z",
            "modified": "2015-09-30T08:54:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56d7b4f7a4680e2d23868455add42cdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34a-6334-4114-8671-4d8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:34.000Z",
            "modified": "2015-09-30T08:54:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shoman22.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34b-9cf8-49dd-a15a-410a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:35.000Z",
            "modified": "2015-09-30T08:54:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56dcfc78cac1f5aa538442cf94690b0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34b-2c20-4c7e-8785-4527950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:35.000Z",
            "modified": "2015-09-30T08:54:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'shunamaidan.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34b-5458-4829-b4a0-4012950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:35.000Z",
            "modified": "2015-09-30T08:54:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sia33.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34b-9e20-40e1-b5ef-4ef2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:35.000Z",
            "modified": "2015-09-30T08:54:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56de5d96739111618fc88ddfeb25b39c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34b-ef28-4d89-a350-48b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:35.000Z",
            "modified": "2015-09-30T08:54:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sigma97440.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34b-7004-4cab-8d0f-43a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:35.000Z",
            "modified": "2015-09-30T08:54:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'simplatics.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34b-1684-462a-9e48-4d3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:35.000Z",
            "modified": "2015-09-30T08:54:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56e32fbf73ef46d4d48c3052bede4dcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34c-bf8c-4553-aa84-4c3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:36.000Z",
            "modified": "2015-09-30T08:54:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'simplecraft.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34c-ddb0-439e-925a-4f64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:36.000Z",
            "modified": "2015-09-30T08:54:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sipahi21.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34c-65c0-4349-9dd8-4b7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:36.000Z",
            "modified": "2015-09-30T08:54:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56e70a72205f1b5bb19c84663c36488d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34c-a314-459c-a8d7-427c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:36.000Z",
            "modified": "2015-09-30T08:54:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sirnooxx.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34c-f900-4a2f-b1d2-4831950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:36.000Z",
            "modified": "2015-09-30T08:54:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'siska1180.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34c-a750-4dfa-a4bb-4784950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:36.000Z",
            "modified": "2015-09-30T08:54:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56f3c4e14a1ff943bea4d243dc7d7729']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34c-b280-46a5-b193-440e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:36.000Z",
            "modified": "2015-09-30T08:54:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sistema1233.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34d-5e38-423e-9dda-4a98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:37.000Z",
            "modified": "2015-09-30T08:54:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'six2134.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34c-a408-4f9f-8f15-4290950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:36.000Z",
            "modified": "2015-09-30T08:54:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56f5210a25271e3f517bfc901720852d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34d-848c-47d5-ba17-40bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:37.000Z",
            "modified": "2015-09-30T08:54:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sjksjgsssdfgdddsf01.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34d-be90-43c0-9d8e-4380950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:37.000Z",
            "modified": "2015-09-30T08:54:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'skidrowking04.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34d-2724-4a25-b8eb-44d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:37.000Z",
            "modified": "2015-09-30T08:54:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56f6c72efa6ca1de0b026916e7701627']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34d-1cc8-4418-b236-4fe1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:37.000Z",
            "modified": "2015-09-30T08:54:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'skrilla228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34d-5668-4b89-b7d0-43b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:37.000Z",
            "modified": "2015-09-30T08:54:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'skrillex293.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34d-73fc-4e21-991c-40ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:37.000Z",
            "modified": "2015-09-30T08:54:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56fb29badf0a4ba3d30fd7159bee650d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34e-515c-4794-addc-4ad6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:38.000Z",
            "modified": "2015-09-30T08:54:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '56ffbee40485ab0f5d6770434e51c4b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34e-e180-4ec4-a370-4c1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:38.000Z",
            "modified": "2015-09-30T08:54:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sky-craft.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34e-ffe0-4647-8a24-45c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:38.000Z",
            "modified": "2015-09-30T08:54:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5703dcad840ce1146e039f2afe10449a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34e-ac84-4188-ba9d-4165950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:38.000Z",
            "modified": "2015-09-30T08:54:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '570a6eff43b004df039efb8e2a2f44d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34e-4e04-421d-8baf-445e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:38.000Z",
            "modified": "2015-09-30T08:54:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sky.hackers.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34e-c2ec-41e5-819e-4e84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:38.000Z",
            "modified": "2015-09-30T08:54:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '57134db9dda14f7b7a74bdb361ae3a84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34e-fd2c-4ae4-a8f0-41e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:38.000Z",
            "modified": "2015-09-30T08:54:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'skype200115.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34f-2128-4dd8-b8c7-446e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:39.000Z",
            "modified": "2015-09-30T08:54:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'skype862hack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34e-10b4-4d47-b2f7-4141950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:38.000Z",
            "modified": "2015-09-30T08:54:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5714c3a9a41181cf2a470d057d79e606']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34f-27b8-4ba3-996d-4785950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:39.000Z",
            "modified": "2015-09-30T08:54:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'skyyking.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34f-2028-4ddd-89f2-4b62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:39.000Z",
            "modified": "2015-09-30T08:54:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'slapmewood.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34f-656c-4687-b120-4217950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:39.000Z",
            "modified": "2015-09-30T08:54:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '571bb85dbfb7c00340646173bd2571b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34f-c9a8-4d6c-afe8-4713950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:39.000Z",
            "modified": "2015-09-30T08:54:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'slav3.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34f-f35c-4219-a87b-4a00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:39.000Z",
            "modified": "2015-09-30T08:54:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'slavaukraine322228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba34f-c8b4-407a-900c-4e85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:39.000Z",
            "modified": "2015-09-30T08:54:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '571f34ad569ae3979dc8b577b0effb5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba350-cbdc-4865-9153-4d32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:40.000Z",
            "modified": "2015-09-30T08:54:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'slimeftp.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba350-fd10-46f1-82fc-43bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:40.000Z",
            "modified": "2015-09-30T08:54:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'slimmy.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba350-40bc-49b9-90f1-4993950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:40.000Z",
            "modified": "2015-09-30T08:54:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5728d73d08c273e3457f74ecdab93806']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba350-c248-46c1-9373-49c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:40.000Z",
            "modified": "2015-09-30T08:54:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'slipknotcomet.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba350-8704-469d-a299-4e0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:40.000Z",
            "modified": "2015-09-30T08:54:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'smart111.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba350-a72c-43c5-ad0b-4f8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:40.000Z",
            "modified": "2015-09-30T08:54:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '572f6003d82bd62d481895427a0ae0fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba350-9ae4-4f73-a50b-40dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:40.000Z",
            "modified": "2015-09-30T08:54:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'smartgoldfire.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba351-3204-47f2-af7a-490c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:41.000Z",
            "modified": "2015-09-30T08:54:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'smaxzax.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba350-d65c-4f5f-8f67-4ca8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:40.000Z",
            "modified": "2015-09-30T08:54:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '573206cf949cfa18e81790fd14511842']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba351-4154-45a3-91bc-4047950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:41.000Z",
            "modified": "2015-09-30T08:54:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'smelliw77.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba351-d788-4ad3-9651-4b2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:41.000Z",
            "modified": "2015-09-30T08:54:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'smile123fox.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba351-65f4-4040-abbd-43a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:41.000Z",
            "modified": "2015-09-30T08:54:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '573641e4236631d20b5c6caba6420260']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba351-7b28-4b16-8524-403e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:41.000Z",
            "modified": "2015-09-30T08:54:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'smilersim94123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba351-d334-4964-b840-4208950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:41.000Z",
            "modified": "2015-09-30T08:54:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'smlrttn.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba351-a058-4959-be92-441f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:41.000Z",
            "modified": "2015-09-30T08:54:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5740c1075ec70fa2579734bf06b62d17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba352-7cc0-4b59-9adf-45a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:42.000Z",
            "modified": "2015-09-30T08:54:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'smola.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba352-bb70-4f23-8209-4acf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:42.000Z",
            "modified": "2015-09-30T08:54:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'snaiperochek.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba352-d21c-4881-96c8-46bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:42.000Z",
            "modified": "2015-09-30T08:54:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '575acc070a9ffc1349754f45020b06fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba352-4c4c-4b8a-b315-4d38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:42.000Z",
            "modified": "2015-09-30T08:54:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'snakehack.no-ip.bizi']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba352-b240-4125-a183-455c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:42.000Z",
            "modified": "2015-09-30T08:54:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'snakes5666.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba352-fc34-44af-9c10-4287950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:42.000Z",
            "modified": "2015-09-30T08:54:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '575c0392b10bf0816de3d4d5e56b464e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba352-7ffc-4aad-937a-49bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:42.000Z",
            "modified": "2015-09-30T08:54:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'snakex1n.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba353-fc70-4f91-98f6-4890950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:43.000Z",
            "modified": "2015-09-30T08:54:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'snkreservesrv.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba352-f944-4ccd-be82-44d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:42.000Z",
            "modified": "2015-09-30T08:54:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5765a3172bffccd8f6432d46c8ff667e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba353-f4a4-4746-b9bd-47a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:43.000Z",
            "modified": "2015-09-30T08:54:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'snope.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba353-71fc-4e86-8493-4f79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:43.000Z",
            "modified": "2015-09-30T08:54:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'snoxyfoxyxo.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba353-556c-4239-a5eb-4056950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:43.000Z",
            "modified": "2015-09-30T08:54:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5777426ac41024682526927b69afc6c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba353-415c-4508-aa47-46b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:43.000Z",
            "modified": "2015-09-30T08:54:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'so3123m8.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba353-b230-4b4e-8960-458b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:43.000Z",
            "modified": "2015-09-30T08:54:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '578a3fdaa5bbbefe951ec8e2dd741ea9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba353-f17c-47a2-924a-4ec4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:43.000Z",
            "modified": "2015-09-30T08:54:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '578fceb0caea728d3cf6c4fe84775123']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba353-4134-4c2f-9ad7-4c03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:43.000Z",
            "modified": "2015-09-30T08:54:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'socrababa.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba354-fb8c-44f8-a56a-4d54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:44.000Z",
            "modified": "2015-09-30T08:54:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '57a31870d893294eb5d966447d08af31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba354-88d4-4c2f-b122-4e15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:44.000Z",
            "modified": "2015-09-30T08:54:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'soda123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba354-f394-414d-a8b8-4986950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:44.000Z",
            "modified": "2015-09-30T08:54:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sofeli.myftp.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba354-ebcc-46e2-a729-4931950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:44.000Z",
            "modified": "2015-09-30T08:54:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '57b945611e1029d67657a05105516ecf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba354-b120-43cd-afed-4934950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:44.000Z",
            "modified": "2015-09-30T08:54:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'soka.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba354-c5b8-4aec-b0f6-408c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:44.000Z",
            "modified": "2015-09-30T08:54:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'solrot.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba354-e684-4549-b233-4c34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:44.000Z",
            "modified": "2015-09-30T08:54:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '57d5515c33816fde9a0a25cc4b194da6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba355-19b8-42ef-9f91-4a79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:44.000Z",
            "modified": "2015-09-30T08:54:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'solucan.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba355-3abc-46eb-8b7f-4c1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:45.000Z",
            "modified": "2015-09-30T08:54:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'somenormalguy.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba355-946c-4448-ad2c-44e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:45.000Z",
            "modified": "2015-09-30T08:54:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '57eb0d5f31f80489f85324cf81a3455b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba355-21d4-4b99-90b6-4915950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:45.000Z",
            "modified": "2015-09-30T08:54:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'somethinggoeshere.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba355-6b80-41c6-9083-49a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:45.000Z",
            "modified": "2015-09-30T08:54:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sonikshot.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba355-d448-4a98-91be-4793950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:45.000Z",
            "modified": "2015-09-30T08:54:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '57ec18345dd6732fd40e3221279f4269']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba355-cd00-49d7-9a7d-4fd4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:45.000Z",
            "modified": "2015-09-30T08:54:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sonteen.no-ip.orgt']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba356-2668-4f8e-bc7b-4b24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:46.000Z",
            "modified": "2015-09-30T08:54:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sos.myftp.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba355-c760-4190-bfad-4769950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:45.000Z",
            "modified": "2015-09-30T08:54:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '57ef3f6c46e7a6ed55283979ce543def']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba356-16e0-4922-8353-46f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:46.000Z",
            "modified": "2015-09-30T08:54:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '57f5cbaf1f0794e4c8a4fb59de80f772']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba356-195c-49b6-8da5-44cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:46.000Z",
            "modified": "2015-09-30T08:54:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sosta01.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba356-89d0-4207-a81a-42a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:46.000Z",
            "modified": "2015-09-30T08:54:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '57f727cd7b8919a9b7d5edbeb37f5e27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba356-9cd8-481f-b8f9-4c92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:46.000Z",
            "modified": "2015-09-30T08:54:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58006d1a4444e875bb41d77ae8a67af6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba356-d4d4-4f48-86d3-45cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:46.000Z",
            "modified": "2015-09-30T08:54:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sotirow.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba356-8344-42b0-b1b5-4e32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:46.000Z",
            "modified": "2015-09-30T08:54:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58093d3c4ff77504cafd0239965ebce8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba357-cbcc-485a-a4a0-452c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:47.000Z",
            "modified": "2015-09-30T08:54:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '583676a2a8869413597003535aa2120b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba356-56f4-45a9-95bc-410f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:46.000Z",
            "modified": "2015-09-30T08:54:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'soulsmen2000.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba357-f6f8-49a3-a296-4a22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:47.000Z",
            "modified": "2015-09-30T08:54:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '583f02be634f83d05d1094ebc336bcef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba357-5814-4a60-a264-4d3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:47.000Z",
            "modified": "2015-09-30T08:54:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '583f8029c4558f17c796036f124bfb14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba357-e0ec-4d5b-879f-414c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:47.000Z",
            "modified": "2015-09-30T08:54:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'southchicken.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba357-c89c-4ff0-9604-4cdc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:47.000Z",
            "modified": "2015-09-30T08:54:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '584b45319a24c69abd197ecef8b8c543']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba357-7e98-4391-99b1-4997950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:47.000Z",
            "modified": "2015-09-30T08:54:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58656a012354b630071e3a6ad7c034fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba357-aa70-4d15-b4a0-4050950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:47.000Z",
            "modified": "2015-09-30T08:54:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spacemodsrat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba358-6a28-4a68-9a45-4d15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:48.000Z",
            "modified": "2015-09-30T08:54:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58680801cb44507fef86e7167a24250d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba358-295c-4d36-b575-4937950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:48.000Z",
            "modified": "2015-09-30T08:54:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5868ed0a6d0ae07eb03870b3f39ae57c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba358-b23c-4d87-af99-4adb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:48.000Z",
            "modified": "2015-09-30T08:54:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sparta34.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba358-5ad8-4443-a1e7-43f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:48.000Z",
            "modified": "2015-09-30T08:54:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '587920639d7b1d4d0c88c138a8adee00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba358-d0a0-458a-bde5-4ba5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:48.000Z",
            "modified": "2015-09-30T08:54:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '587b406d1b48be36823f03f8a7b5999a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba358-496c-4ac4-9a20-479f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:48.000Z",
            "modified": "2015-09-30T08:54:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'speakhackingpfvrvai.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba358-98e4-4016-beb4-44c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:48.000Z",
            "modified": "2015-09-30T08:54:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '587b82dcda2ddaf9082f2812b5732246']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba359-e958-48ea-8b92-4052950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:49.000Z",
            "modified": "2015-09-30T08:54:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '587e5c578299b0883f60746f2fdaa4fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba358-182c-44d0-879e-4c14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:48.000Z",
            "modified": "2015-09-30T08:54:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'speedgack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba359-7a98-4af8-856d-4e8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:49.000Z",
            "modified": "2015-09-30T08:54:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '588035139b5d1d98393c0ccef5fd4a59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba359-499c-4aa2-b9a5-485f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:49.000Z",
            "modified": "2015-09-30T08:54:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5886eec98427c1dfcb261886ff69496a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba359-478c-45f2-b7e8-4bad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:49.000Z",
            "modified": "2015-09-30T08:54:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'speekenglish.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba359-c3dc-46b3-a9d8-4a43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:49.000Z",
            "modified": "2015-09-30T08:54:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '588fcee07679a08cf7873650c385d904']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba359-da08-494b-bcf4-4699950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:49.000Z",
            "modified": "2015-09-30T08:54:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '589c2b15028204191e8bb92ae203f6a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba359-ddc8-44de-b98a-4529950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:49.000Z",
            "modified": "2015-09-30T08:54:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spencemod.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35a-de48-47e9-8abf-4fb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:50.000Z",
            "modified": "2015-09-30T08:54:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58a85275ddee9c6b780a185d6a8bc48f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35a-00c8-4267-b0da-4651950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:50.000Z",
            "modified": "2015-09-30T08:54:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58ac2f2e4cc19bd406776678993fc9a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35a-48c0-482c-b338-4d07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:50.000Z",
            "modified": "2015-09-30T08:54:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spencemods.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35a-4d14-410b-b523-4962950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:50.000Z",
            "modified": "2015-09-30T08:54:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58b947722a63e95a8fe526ec0ad7522f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35a-bb5c-45d5-ae01-4c73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:50.000Z",
            "modified": "2015-09-30T08:54:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58cdb479841868ade3be31d5afecdb7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35a-df88-42a3-a77e-4a7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:50.000Z",
            "modified": "2015-09-30T08:54:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spiritckadarkco.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35a-9f40-4adc-ba5c-4e8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:50.000Z",
            "modified": "2015-09-30T08:54:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58d70a631212545bf605a31d9e9df631']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35b-2218-4166-b41c-48bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:51.000Z",
            "modified": "2015-09-30T08:54:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58d9319ad2f5f63f32d7d90dbf0ba4c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35a-c748-428f-ad1d-455b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:50.000Z",
            "modified": "2015-09-30T08:54:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spiritvenom.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35b-5040-42de-aabb-41e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:51.000Z",
            "modified": "2015-09-30T08:54:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58e597f8f485ad4b6da1c3fe0e6a51c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35b-c828-4364-a324-4dba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:51.000Z",
            "modified": "2015-09-30T08:54:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58ee17fed8e056d4f5880397d1f3ae4d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35b-f0e0-4286-9aa6-463f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:51.000Z",
            "modified": "2015-09-30T08:54:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spy1337.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35b-4f38-4031-92c5-418c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:51.000Z",
            "modified": "2015-09-30T08:54:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58ef6c38b617f760c154198112ba46ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35b-adfc-44d2-9386-4eb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:51.000Z",
            "modified": "2015-09-30T08:54:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58f28377bbbffc5fc74df4efb61765a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35b-21b4-415d-bdd6-47fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:51.000Z",
            "modified": "2015-09-30T08:54:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spy98.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35c-b610-4101-a7ab-4545950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:52.000Z",
            "modified": "2015-09-30T08:54:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '58fe7751c63ec41a25922bb804945941']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35c-b57c-48fc-8e2a-4767950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:52.000Z",
            "modified": "2015-09-30T08:54:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59199ddd2f6ade3a4339443199501e18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35c-8c10-4ebf-8947-4d67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:52.000Z",
            "modified": "2015-09-30T08:54:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spycompany.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35c-b5d8-4553-8e96-4a5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:52.000Z",
            "modified": "2015-09-30T08:54:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '592abe5fbea2e209e9ead9c4c350f825']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35c-437c-44f6-82c7-4ea7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:52.000Z",
            "modified": "2015-09-30T08:54:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '592b56999492e05435d0255dffceda93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35c-c5fc-4a44-b6c6-4490950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:52.000Z",
            "modified": "2015-09-30T08:54:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spynet1998.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35c-cde4-41ed-9561-4bf2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:52.000Z",
            "modified": "2015-09-30T08:54:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '592f3cf5895898472c845d8d82a60c10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35d-dfbc-4bd4-a830-47dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:53.000Z",
            "modified": "2015-09-30T08:54:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '592f483819ae2894fe192e1a251a7f90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35c-8608-4da3-93b2-42a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:52.000Z",
            "modified": "2015-09-30T08:54:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spynetik.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35d-ab00-4e86-adc8-44bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:53.000Z",
            "modified": "2015-09-30T08:54:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59529ff2e0a5a5a5f4b559bf92b58dbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35d-f914-4e6a-b87d-4d81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:53.000Z",
            "modified": "2015-09-30T08:54:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '596b3b4f6a76f6fdb5ea8d0e60333358']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35d-a250-4899-9817-4a62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:53.000Z",
            "modified": "2015-09-30T08:54:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'spysawn34.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35d-f2f4-432d-8b73-49b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:53.000Z",
            "modified": "2015-09-30T08:54:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5970967d5f2131d59a7ed880a0740942']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35d-ba04-45bb-af47-4a5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:53.000Z",
            "modified": "2015-09-30T08:54:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5976b64ec844c5ef4196d74fa9806c52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35d-3654-4397-b32b-4f79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:53.000Z",
            "modified": "2015-09-30T08:54:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'squvsts.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35e-6a34-43c5-b458-4912950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:54.000Z",
            "modified": "2015-09-30T08:54:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5979d5ace905260cfbf832125fbb76d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35e-008c-4ee6-95e8-4829950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:54.000Z",
            "modified": "2015-09-30T08:54:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'squvsvpn.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35e-80c4-4798-99fa-4979950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:54.000Z",
            "modified": "2015-09-30T08:54:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sr1.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35e-57fc-4688-af37-4060950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:54.000Z",
            "modified": "2015-09-30T08:54:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '598f60488366f64ae15d100aa80d2816']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35e-5fa0-4657-ab34-4a8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:54.000Z",
            "modified": "2015-09-30T08:54:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'srikate123.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35e-5f40-47b4-9149-42e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:54.000Z",
            "modified": "2015-09-30T08:54:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'srtolmn1230.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35e-1c68-42d3-839f-4a2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:54.000Z",
            "modified": "2015-09-30T08:54:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '598fc2a164c7c311e5dc472ed021b826']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35e-9d70-4e36-b8bb-4fcd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:54.000Z",
            "modified": "2015-09-30T08:54:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ss037.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35f-be0c-4bb3-9231-421f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:55.000Z",
            "modified": "2015-09-30T08:54:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ssxdswe.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35f-cef4-4ea0-a29b-43b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:55.000Z",
            "modified": "2015-09-30T08:54:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59932a3b44b95b25974ae2c8db1667b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35f-63ac-4eb4-a341-4c25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:55.000Z",
            "modified": "2015-09-30T08:54:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stabilbilisim.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35f-e57c-4377-bf78-4c67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:55.000Z",
            "modified": "2015-09-30T08:54:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stails5.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35f-7c4c-4877-b282-4327950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:55.000Z",
            "modified": "2015-09-30T08:54:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59976a782fb3135671134e73220f603e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35f-95a4-4930-bf1c-45a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:55.000Z",
            "modified": "2015-09-30T08:54:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stanluc1231.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35f-7eb0-4454-ba13-49ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:55.000Z",
            "modified": "2015-09-30T08:54:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stas2209.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba35f-4484-4f4a-8fd5-4fab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:55.000Z",
            "modified": "2015-09-30T08:54:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59a42b62471c7deec521495dd8e128a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba360-d858-4b3a-a32b-41fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:56.000Z",
            "modified": "2015-09-30T08:54:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stats7.zzzz.io']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba360-cec8-496b-906f-4771950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:56.000Z",
            "modified": "2015-09-30T08:54:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steam123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba360-1dc8-47d6-a3cc-46a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:56.000Z",
            "modified": "2015-09-30T08:54:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59be8dc9221420e836a5c300f2dd4a3d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba360-68dc-48f5-83bc-44ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:56.000Z",
            "modified": "2015-09-30T08:54:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steam13.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba360-6764-42af-a9e2-4415950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:56.000Z",
            "modified": "2015-09-30T08:54:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steamaccpls.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba360-af4c-44df-8108-4e08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:56.000Z",
            "modified": "2015-09-30T08:54:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59cb3d442878b5ff2d2fce46c16ede60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba360-9864-4e5f-a11a-404f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:56.000Z",
            "modified": "2015-09-30T08:54:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steaminon.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba361-d034-42e2-8ae8-426a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:57.000Z",
            "modified": "2015-09-30T08:54:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steaminon.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba361-e9b0-456c-91c3-410c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:57.000Z",
            "modified": "2015-09-30T08:54:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59cbd2a6060ed0a7e50012f43ceebf04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba361-b028-4a57-ad2e-45ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:57.000Z",
            "modified": "2015-09-30T08:54:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steamitemsloss.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba361-da38-472b-9ef7-4ce5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:57.000Z",
            "modified": "2015-09-30T08:54:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59ccc5ff2839f66a53971b5b3df6e735']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba361-171c-4a44-82b3-424e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:57.000Z",
            "modified": "2015-09-30T08:54:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steamnext99.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba361-1298-49f0-b5a0-4def950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:57.000Z",
            "modified": "2015-09-30T08:54:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59e9719ca98e123ec5df78c13b77fced']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba362-af44-4dee-89f3-4d33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:58.000Z",
            "modified": "2015-09-30T08:54:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steamoffers.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba362-bbf8-4a83-8831-4743950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:58.000Z",
            "modified": "2015-09-30T08:54:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59e9fff10c7ae45b92b027bb7df99ace']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba362-8e04-4313-a5c5-499a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:58.000Z",
            "modified": "2015-09-30T08:54:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steamstealer.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba362-5cd0-4f29-abc2-4195950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:58.000Z",
            "modified": "2015-09-30T08:54:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59f28e59622feec16d71f4c7fc5ac49b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba362-6558-4342-a0ec-4588950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:58.000Z",
            "modified": "2015-09-30T08:54:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steamtrade-weapons.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba362-b5a0-4b27-827d-4808950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:58.000Z",
            "modified": "2015-09-30T08:54:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59f80aea8e59077c283b84fcd5f56324']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba363-0070-4267-abe5-4c9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:59.000Z",
            "modified": "2015-09-30T08:54:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steamupdate.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba363-1b18-43c6-9e34-4db7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:59.000Z",
            "modified": "2015-09-30T08:54:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59f903e0ed1fce89ada1e52103ead148']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba363-dc04-40a3-ac5f-4270950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:59.000Z",
            "modified": "2015-09-30T08:54:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stebs.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba363-688c-4fd5-94a6-4be9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:59.000Z",
            "modified": "2015-09-30T08:54:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59fa20c83f755d1e68cb499c0e0bf8da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba363-b48c-44cc-b094-46bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:59.000Z",
            "modified": "2015-09-30T08:54:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stefanboss.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba363-6208-4e23-af9f-4794950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:54:59.000Z",
            "modified": "2015-09-30T08:54:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '59fa56ad62c1535b3bdbf3300c13faf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:54:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba364-1390-4929-b345-4415950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:00.000Z",
            "modified": "2015-09-30T08:55:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steker16.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba364-2434-48f9-bbdb-498f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:00.000Z",
            "modified": "2015-09-30T08:55:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a03695cff56e34481ddac6a40013a93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba364-37ac-43f5-a0d1-4b48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:00.000Z",
            "modified": "2015-09-30T08:55:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stephfoscam1.dyndns-blog.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba364-3ffc-4697-8190-4238950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:00.000Z",
            "modified": "2015-09-30T08:55:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a07279577ad829451d0aa6dbd88272f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba365-5f88-4d01-8a87-47d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:01.000Z",
            "modified": "2015-09-30T08:55:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'steqa.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba365-debc-4ab2-a796-4863950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:01.000Z",
            "modified": "2015-09-30T08:55:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a11aaedf44e240a95f1a26affe8817a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba365-ec70-4243-8ffb-48da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:01.000Z",
            "modified": "2015-09-30T08:55:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stokezy.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba365-7270-4640-bd25-4ef3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:01.000Z",
            "modified": "2015-09-30T08:55:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a1b24b1293b91629b5278ce146574d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba365-b564-4562-8659-4cde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:01.000Z",
            "modified": "2015-09-30T08:55:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stream2.entrydns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba365-4404-4faf-9da7-4565950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:01.000Z",
            "modified": "2015-09-30T08:55:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a1d93b361d1cb794afd3071a5eacb03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba366-ea98-4eea-be2e-4557950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:02.000Z",
            "modified": "2015-09-30T08:55:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'streetwiseinc.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba366-5844-4a17-844f-45ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:02.000Z",
            "modified": "2015-09-30T08:55:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a20c31dc3138c07c9c8012b6eed53d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba366-6868-47bf-9e2d-4e7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:02.000Z",
            "modified": "2015-09-30T08:55:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stub1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba366-3a9c-4c3a-9c2d-4df7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:02.000Z",
            "modified": "2015-09-30T08:55:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a296486057cdcb358dbc41f368b1562']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba366-a358-4e44-89bf-4242950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:02.000Z",
            "modified": "2015-09-30T08:55:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stuffnstuff.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba367-fe00-4d9d-90c9-4b56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:03.000Z",
            "modified": "2015-09-30T08:55:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a49837dddf27526640957d14341454a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba367-9fc0-42fe-b188-4635950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:03.000Z",
            "modified": "2015-09-30T08:55:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stuffz324325.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba367-c304-47b5-b78e-4c67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:03.000Z",
            "modified": "2015-09-30T08:55:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a54e4ad855d3bc401d45633a7716047']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba367-c5dc-4a15-976e-4fc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:03.000Z",
            "modified": "2015-09-30T08:55:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'styler80.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba367-930c-4b0e-86ca-4f14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:03.000Z",
            "modified": "2015-09-30T08:55:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a60fdcf3f13ce1f50e57b57f67c68f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba368-6178-4950-8c2e-4775950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:04.000Z",
            "modified": "2015-09-30T08:55:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'stylof.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba368-3878-4a03-82c1-46dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:04.000Z",
            "modified": "2015-09-30T08:55:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a62072d1a159c156912fee5f5786582']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba368-9838-46d0-a8bd-446a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:04.000Z",
            "modified": "2015-09-30T08:55:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sugar5.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba368-7294-42c2-8ea3-44bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:04.000Z",
            "modified": "2015-09-30T08:55:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a646f616870f509199bd96cca6c1bb3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba368-f6d4-4d0d-abbc-4b63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:04.000Z",
            "modified": "2015-09-30T08:55:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'suhrab09595.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba368-83d8-4fca-8960-42cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:04.000Z",
            "modified": "2015-09-30T08:55:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a79bcb711f41a2081ffa73ed56a7e79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba369-0790-4261-b3d7-4630950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:05.000Z",
            "modified": "2015-09-30T08:55:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'suikastci.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba369-1340-4c1b-9098-4c29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:05.000Z",
            "modified": "2015-09-30T08:55:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a8cd0132d2470eed52ad478ade60378']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba369-fc64-4fe2-9fbb-469c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:05.000Z",
            "modified": "2015-09-30T08:55:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sultanovmen.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba369-2ff4-469d-b610-4c47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:05.000Z",
            "modified": "2015-09-30T08:55:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a8f1338e24a7955aa64f96de83317fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba369-925c-4c6c-b1b6-4317950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:05.000Z",
            "modified": "2015-09-30T08:55:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sumorockx.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba369-90c4-4bfc-bbf6-4677950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:05.000Z",
            "modified": "2015-09-30T08:55:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a9c26a17aa63da18e2f3301271fe8c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36a-a428-442f-aeb2-4400950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:06.000Z",
            "modified": "2015-09-30T08:55:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sumrak777.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36a-d988-4715-b628-48f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:06.000Z",
            "modified": "2015-09-30T08:55:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a9cd0d4f30ce8c43afaf9041acbe49a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36a-6e34-4744-8888-4578950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:06.000Z",
            "modified": "2015-09-30T08:55:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sunnysunny.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36a-8e60-40b9-93ab-427b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:06.000Z",
            "modified": "2015-09-30T08:55:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5a9e5fb2fe2dae2d8d41e0735893e101']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36a-e20c-4b08-b719-434c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:06.000Z",
            "modified": "2015-09-30T08:55:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sup3rst4r.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36b-432c-4706-b3e1-45c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:07.000Z",
            "modified": "2015-09-30T08:55:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5aaeadb6c85f333a03b14e0118b567e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36b-3c78-4eb9-b6bf-4007950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:07.000Z",
            "modified": "2015-09-30T08:55:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'superdank.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36b-c274-4eca-8c3a-4700950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:07.000Z",
            "modified": "2015-09-30T08:55:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ac0801da07c23fa82b03d407ce46fc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36b-2b1c-49bb-bef7-460e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:07.000Z",
            "modified": "2015-09-30T08:55:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'superman125.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36b-1db4-4867-94aa-4fde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:07.000Z",
            "modified": "2015-09-30T08:55:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ac08cd5947f68bf917ccf0522fa628e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36c-7a24-4852-8fb7-4496950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:08.000Z",
            "modified": "2015-09-30T08:55:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'superseb.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36c-2e9c-44ce-9ecf-4616950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:08.000Z",
            "modified": "2015-09-30T08:55:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ac35d1b7b744c499924fbaad740585f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36c-1948-4fbc-8639-4f62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:08.000Z",
            "modified": "2015-09-30T08:55:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'supleo.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36c-fcf4-4f2f-a5c7-49d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:08.000Z",
            "modified": "2015-09-30T08:55:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ac5c7652373cbb0504445ce1f9199d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36c-a784-4ca0-ba4f-4fa9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:08.000Z",
            "modified": "2015-09-30T08:55:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'surkye.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36c-5d28-43ff-b3d7-4fe1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:08.000Z",
            "modified": "2015-09-30T08:55:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ac93763c7f08ce9fcbdde924ccaf57b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36d-b014-4657-8fdc-4ef7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:09.000Z",
            "modified": "2015-09-30T08:55:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'suskunreyiz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36d-e1fc-443e-a638-4d4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:09.000Z",
            "modified": "2015-09-30T08:55:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5acc50a726362554b19c5a2f25a5fbe8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36d-bc34-4873-a10e-42ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:09.000Z",
            "modified": "2015-09-30T08:55:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'suzy066.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36d-7c88-43a2-814e-495a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:09.000Z",
            "modified": "2015-09-30T08:55:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ae0af50a309905fe7a1358e67d33325']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36d-4de8-4137-8db1-408d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:09.000Z",
            "modified": "2015-09-30T08:55:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sva1412.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36d-4b24-433b-9aab-4323950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:09.000Z",
            "modified": "2015-09-30T08:55:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ae954160fc0e04ae7b7e836b3f34c63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36e-0f58-49ca-a326-4504950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:10.000Z",
            "modified": "2015-09-30T08:55:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'svcs.servecounterstrike.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36e-1d58-4f18-9384-453f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:10.000Z",
            "modified": "2015-09-30T08:55:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ae97d0d3e307d1e7c1825dee8cbe3a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36e-d50c-4eba-96f2-4b1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:10.000Z",
            "modified": "2015-09-30T08:55:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'svengeerits.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36e-0870-4bbb-977c-472d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:10.000Z",
            "modified": "2015-09-30T08:55:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5aea8ea77b9025924f50507eb595ca94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36e-1ca8-4357-9966-41f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:10.000Z",
            "modified": "2015-09-30T08:55:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'svhost.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36f-66a0-46f6-94aa-417a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:11.000Z",
            "modified": "2015-09-30T08:55:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5afe0585f8c8cc70f664e0cda0a23ae4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36f-1474-4e12-bb5f-4050950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:11.000Z",
            "modified": "2015-09-30T08:55:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'svinot.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36f-9344-4214-98f1-4cfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:11.000Z",
            "modified": "2015-09-30T08:55:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b04dbf23ba44ad5bd7506022e601a69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36f-e92c-41b9-bc5d-4aac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:11.000Z",
            "modified": "2015-09-30T08:55:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'svirtok.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba36f-acc4-4994-b675-4150950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:11.000Z",
            "modified": "2015-09-30T08:55:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b09fb8a146223e4814c908d6f542d5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba370-d118-41a8-8cf0-48c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:12.000Z",
            "modified": "2015-09-30T08:55:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'swagbot.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba370-9eb8-4a27-aae3-46f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:12.000Z",
            "modified": "2015-09-30T08:55:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b1234c1ed13b7c63a85e074b07c7b96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba370-fe14-41a8-b4b8-49e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:12.000Z",
            "modified": "2015-09-30T08:55:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'swaggedout.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba370-52dc-46c8-bb12-4944950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:12.000Z",
            "modified": "2015-09-30T08:55:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b15fb90ccec6b1273a0dae20233267d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba370-1af8-4a8b-b098-4ded950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:12.000Z",
            "modified": "2015-09-30T08:55:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'swagkush.servebeer.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba370-96f0-4134-ab51-44b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:12.000Z",
            "modified": "2015-09-30T08:55:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b19712ad7d656084e9346079601ea82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba371-d8f4-4b90-8fff-49dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:13.000Z",
            "modified": "2015-09-30T08:55:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'swordyt1999.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba371-0da0-4ff2-b8c3-40c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:13.000Z",
            "modified": "2015-09-30T08:55:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b1ce48f5de1028ff061ce473715bf35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba371-e8a0-4e49-b69a-47ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:13.000Z",
            "modified": "2015-09-30T08:55:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sykaito.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba371-e918-43ab-b6d4-41b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:13.000Z",
            "modified": "2015-09-30T08:55:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b2722ea44317d7f756b08be04e2f766']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba371-13c8-4120-b455-4c2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:13.000Z",
            "modified": "2015-09-30T08:55:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sympozia.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba372-d120-49ab-aa52-4f6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:14.000Z",
            "modified": "2015-09-30T08:55:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b2f4a14a132bd16ef8745abedd1acb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba372-0e90-4a68-8ecc-4df7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:14.000Z",
            "modified": "2015-09-30T08:55:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sympozia.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba372-d3fc-40ac-a19f-4a39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:14.000Z",
            "modified": "2015-09-30T08:55:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b343e36ad5d2659fa001fd6634bc5dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba372-08a8-4b40-9a08-4f67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:14.000Z",
            "modified": "2015-09-30T08:55:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'syrian.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba372-d17c-4bcd-87b3-4f13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:14.000Z",
            "modified": "2015-09-30T08:55:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b3898dc1236240059dfacbf2280d516']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba373-77c0-4e07-818e-4af2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:15.000Z",
            "modified": "2015-09-30T08:55:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'syrianyasser.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba373-d61c-4271-9aec-436b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:15.000Z",
            "modified": "2015-09-30T08:55:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b3e274fbb4f78035d45337f8c110300']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba373-b438-4d3c-a017-4c75950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:15.000Z",
            "modified": "2015-09-30T08:55:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'system-security-service.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba373-247c-4662-b142-4531950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:15.000Z",
            "modified": "2015-09-30T08:55:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b40bca86b6769ec6abbf5fc53dc2d2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba373-6740-48f7-adcc-44e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:15.000Z",
            "modified": "2015-09-30T08:55:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'system-win7.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba373-59c4-4776-9ad1-48a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:15.000Z",
            "modified": "2015-09-30T08:55:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b46442c60f9dc4510fa24435dd5cb00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba374-3740-4342-8b41-4241950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:16.000Z",
            "modified": "2015-09-30T08:55:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'system32.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba374-3b28-4b92-bde8-4376950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:16.000Z",
            "modified": "2015-09-30T08:55:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b639ff4fb4c446db28e2de498bf7606']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba374-0664-4f92-b36c-4da6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:16.000Z",
            "modified": "2015-09-30T08:55:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'system32process.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba374-65d8-4587-83bb-40aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:16.000Z",
            "modified": "2015-09-30T08:55:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b64d5c24e0bd431abc4e223ce847aa0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba374-aad8-400d-bb29-419e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:16.000Z",
            "modified": "2015-09-30T08:55:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'systemfs.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba374-f8d4-48a8-978a-406d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:16.000Z",
            "modified": "2015-09-30T08:55:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b7076737dac2174ea5ba8ac3d0099b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba375-7014-40d7-bc4e-4180950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:17.000Z",
            "modified": "2015-09-30T08:55:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'sztek16.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba375-c178-4cb1-ba76-440d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:17.000Z",
            "modified": "2015-09-30T08:55:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b77b92bf3efe62d7a6d845486197481']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba375-5518-4280-88e8-4820950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:17.000Z",
            "modified": "2015-09-30T08:55:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 't-rex.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba375-b358-4fab-9b5e-4356950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:17.000Z",
            "modified": "2015-09-30T08:55:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5b8bf25ba4aa6ff70238abc49d5ce897']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba375-3304-437d-b63a-4a12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:17.000Z",
            "modified": "2015-09-30T08:55:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tahsin35.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba376-4d3c-45ed-9d7c-42f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:18.000Z",
            "modified": "2015-09-30T08:55:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ba64272fb3e4ba35dd12ff8dfc6a57a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba376-5e30-41f4-879b-43da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:18.000Z",
            "modified": "2015-09-30T08:55:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'taihost.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba376-3464-4e95-bf6b-4ce1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:18.000Z",
            "modified": "2015-09-30T08:55:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ba9c35a68eefd85609d2d7fc523b7b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba376-3718-40fe-99c8-406f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:18.000Z",
            "modified": "2015-09-30T08:55:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'takutaku.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba376-7f5c-45a0-babf-4a8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:18.000Z",
            "modified": "2015-09-30T08:55:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5bc60a053af6a8faf5393290a6531ddd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba377-780c-423a-8234-4760950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:19.000Z",
            "modified": "2015-09-30T08:55:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5bd02059958f10c286c933cf9e3d2e6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba377-59cc-4956-bd49-4093950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:19.000Z",
            "modified": "2015-09-30T08:55:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'talelboss.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba377-ab04-4451-aa32-4038950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:19.000Z",
            "modified": "2015-09-30T08:55:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5bd0a9dc30a757b4c392484bac9bf75c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba377-6430-4204-91fe-4067950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:19.000Z",
            "modified": "2015-09-30T08:55:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5bdc5570db97caba8581c14a94894c5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba377-754c-4d77-9625-43ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:19.000Z",
            "modified": "2015-09-30T08:55:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tallniggadickshort.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba377-8304-4997-9a22-4c5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:19.000Z",
            "modified": "2015-09-30T08:55:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5be318d396e014fbcdd7a24d970db468']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba378-f100-4883-b386-4f15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:20.000Z",
            "modified": "2015-09-30T08:55:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5be8a731cfbe905ce6c133a7add9d712']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba377-eeb0-4bb0-8f64-4f67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:19.000Z",
            "modified": "2015-09-30T08:55:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tanapat3300.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba378-4528-4d68-afbb-4c91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:20.000Z",
            "modified": "2015-09-30T08:55:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5bf4da8e21dd9c291dc45e2c1bd144d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba378-85a8-4a0f-a6ee-4f2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:20.000Z",
            "modified": "2015-09-30T08:55:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5bf859528a5ae87f18e53e084bd2c38f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba378-de00-4fb1-9c16-40a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:20.000Z",
            "modified": "2015-09-30T08:55:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tankerz.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba378-534c-4589-ae24-43f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:20.000Z",
            "modified": "2015-09-30T08:55:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c0c046748eb67260427f6f34beece1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba378-41a8-4629-a786-43bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:20.000Z",
            "modified": "2015-09-30T08:55:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c0c47a31ee1097f64365a37ccb466d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba378-f900-4ff4-9168-44ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:20.000Z",
            "modified": "2015-09-30T08:55:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tannerisgnar.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba378-e4b8-4c5b-afd0-469a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:20.000Z",
            "modified": "2015-09-30T08:55:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c0e2796a6e957ce2daab0142278624e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba379-edf4-43b2-b0cc-4e78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:21.000Z",
            "modified": "2015-09-30T08:55:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c0f062f831b5cf3cdcd1955a9d3884d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba379-d364-4581-b915-4e1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:21.000Z",
            "modified": "2015-09-30T08:55:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tannirat.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba379-3344-4b6e-a21d-4579950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:21.000Z",
            "modified": "2015-09-30T08:55:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c13514d223608ec5bf73f1d57cf9cec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba379-5d54-4714-9ae2-4fde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:21.000Z",
            "modified": "2015-09-30T08:55:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c26d930e48b02c2ce9ec919f9d83362']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba379-1484-4c61-aa44-4f3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:21.000Z",
            "modified": "2015-09-30T08:55:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'taotaotao416.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba379-79c4-4520-af67-41e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:21.000Z",
            "modified": "2015-09-30T08:55:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c5a51acb06b01cd647d0894845522e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba379-e04c-4dd2-9e25-416b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:21.000Z",
            "modified": "2015-09-30T08:55:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c5d33e438ca049ba90ed6ec4aae5116']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba379-d440-4128-9f12-469a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:21.000Z",
            "modified": "2015-09-30T08:55:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'taouete.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37a-84ac-43ef-8059-4cfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:22.000Z",
            "modified": "2015-09-30T08:55:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c6369ff5ca2ea5a1647cac592fe73c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37a-7f20-4d7d-a133-4630950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:22.000Z",
            "modified": "2015-09-30T08:55:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c66f516465205406511ecc828f5012e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37a-6ae8-4200-a134-485d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:22.000Z",
            "modified": "2015-09-30T08:55:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tarantazic.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37a-f780-4bdf-981d-452e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:22.000Z",
            "modified": "2015-09-30T08:55:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c6aeb33e5ce6921899fd895ab5d656e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37a-2010-4953-9cb2-4008950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:22.000Z",
            "modified": "2015-09-30T08:55:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c6d79ea68476a087bffc0865ed5feb2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37a-caf0-4d10-9bc6-4616950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:22.000Z",
            "modified": "2015-09-30T08:55:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tarasnanko228.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37a-f310-4420-90ae-4150950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:22.000Z",
            "modified": "2015-09-30T08:55:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5c804d409d670e7dd54579cc55dec0bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37b-eb40-4281-a182-4360950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:23.000Z",
            "modified": "2015-09-30T08:55:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ca36dc798f08d114a4edab4c837c544']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37a-25b4-4e1c-a6b1-47e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:22.000Z",
            "modified": "2015-09-30T08:55:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tarrat.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37b-3f8c-4525-b953-42ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:23.000Z",
            "modified": "2015-09-30T08:55:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ca857536061d92f8a64228a15ca7094']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37b-1a34-40c1-bb3b-4a07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:23.000Z",
            "modified": "2015-09-30T08:55:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5cbd6680bd9efa694cf4660c31d58b49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37b-f520-40ff-bfd5-45dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:23.000Z",
            "modified": "2015-09-30T08:55:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5cd9ee3969583d4c42b97d3ddaecc273']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37b-0ef4-44e4-a167-4e81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:23.000Z",
            "modified": "2015-09-30T08:55:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tassi.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37b-cb80-491d-a84b-4bc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:23.000Z",
            "modified": "2015-09-30T08:55:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d061b5243b3589309b7b7d7ad76def6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37c-af0c-419e-97e8-459d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:24.000Z",
            "modified": "2015-09-30T08:55:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d093119897236d00c64b45ac4484789']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37b-e138-40c6-bd80-46ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:23.000Z",
            "modified": "2015-09-30T08:55:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tassy121.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37c-4ca4-41f1-9c2c-4d1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:24.000Z",
            "modified": "2015-09-30T08:55:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d0c5397b7e0e58137af859cd6024a0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37c-ad38-4b50-b5e8-4d58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:24.000Z",
            "modified": "2015-09-30T08:55:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d16027095a8a10cf10b7686a22695f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37c-aa04-4aaa-833c-484f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:24.000Z",
            "modified": "2015-09-30T08:55:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'taupizda.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37c-fba8-4a10-b5ba-4b8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:24.000Z",
            "modified": "2015-09-30T08:55:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d162d605dcca35503ad04d0fac31878']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37c-d3d4-4445-866b-4120950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:24.000Z",
            "modified": "2015-09-30T08:55:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d17247615d4ef5b7e0843af5bc7aa0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37c-cab4-43f6-a408-4b88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:24.000Z",
            "modified": "2015-09-30T08:55:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tayfunkocakdc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37c-50c0-485f-9a36-4828950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:24.000Z",
            "modified": "2015-09-30T08:55:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d1a72571b0a5551767b707cb39aeca2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37d-fbd8-4c82-ad33-4115950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:25.000Z",
            "modified": "2015-09-30T08:55:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d24eda750e251b2dd9fada3edf8f18a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37d-cd5c-4e05-bfaf-469d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:25.000Z",
            "modified": "2015-09-30T08:55:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tcisraelno9.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37d-00ac-4e9b-b925-41be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:25.000Z",
            "modified": "2015-09-30T08:55:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d2f379c16070c0dbd54faa7a91eed9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37d-8118-4a1b-9e0b-421d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:25.000Z",
            "modified": "2015-09-30T08:55:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d3fa6504057222f28bdf40325ae7d29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37d-4904-44bb-a0c4-454c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:25.000Z",
            "modified": "2015-09-30T08:55:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'teammoneyman.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37d-a31c-4928-9f14-4875950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:25.000Z",
            "modified": "2015-09-30T08:55:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d5554fb0dbd32d6edba3cd62fa179e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37d-5f9c-4ab4-b447-479c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:25.000Z",
            "modified": "2015-09-30T08:55:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d592a70cba93fa83e4d0b727b232b0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37d-4b70-4107-90b3-4950950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:25.000Z",
            "modified": "2015-09-30T08:55:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'teamspeak344.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37e-7544-42ec-86c8-4cc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:26.000Z",
            "modified": "2015-09-30T08:55:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d6ccbae50466472a4194a3645cacdb6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37e-acd8-4dc7-8c0b-4481950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:26.000Z",
            "modified": "2015-09-30T08:55:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d7ac7b852ddfee4cab33a2e549473c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37e-25b0-44ab-9935-47ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:26.000Z",
            "modified": "2015-09-30T08:55:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tech300.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37e-d134-41c5-aca6-4435950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:26.000Z",
            "modified": "2015-09-30T08:55:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5d98808e931652df698c014445e82c03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37e-d44c-4f9f-b4fc-483e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:26.000Z",
            "modified": "2015-09-30T08:55:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5da343d03e25d8c11ff9310c497cb032']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37e-5cc4-4a30-88c3-47a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:26.000Z",
            "modified": "2015-09-30T08:55:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'technoman.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37e-6c90-40b8-b0ad-4744950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:26.000Z",
            "modified": "2015-09-30T08:55:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5dac0202e3afe81e15b69c615275f47b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37f-9584-496e-8a5e-464b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:27.000Z",
            "modified": "2015-09-30T08:55:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5db1a5b0abe56eb31859a6133eacf96f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37e-6a14-4c4b-935d-4055950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:26.000Z",
            "modified": "2015-09-30T08:55:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'techtut007.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37f-e4fc-4b87-bd46-4f5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:27.000Z",
            "modified": "2015-09-30T08:55:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5db533c4595847fa8b01dc4ba7a162ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37f-feec-4d5e-8236-48b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:27.000Z",
            "modified": "2015-09-30T08:55:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5db5c1f5e3befda460c4de5a1481d4f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37f-bb98-4afb-9cc2-4b4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:27.000Z",
            "modified": "2015-09-30T08:55:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'teddy484.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37f-904c-4f87-91e2-4d7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:27.000Z",
            "modified": "2015-09-30T08:55:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5db7751f790b563922c80daf6d97ff38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37f-c4e4-460b-8600-441f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:27.000Z",
            "modified": "2015-09-30T08:55:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5dba99ad494f345d70077c05232bdd82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba37f-acec-406c-ad6d-4bc3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:27.000Z",
            "modified": "2015-09-30T08:55:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tehnofic.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba380-5924-4e9f-b65e-4002950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:27.000Z",
            "modified": "2015-09-30T08:55:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5dc07ff6ec990ef03b6ce8848ab46b5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba380-0dd4-483e-a9f0-4674950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:28.000Z",
            "modified": "2015-09-30T08:55:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5dc4e3ef327a67a8c8e18eb671b1cda3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba380-d188-4f38-86cc-4cd4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:28.000Z",
            "modified": "2015-09-30T08:55:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'temafekc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba380-f0fc-486b-868d-40b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:28.000Z",
            "modified": "2015-09-30T08:55:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5dce9f28f819d9b560147db4ba1356a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba380-dd54-46c5-99c0-40a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:28.000Z",
            "modified": "2015-09-30T08:55:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5dfb5432542a63045eb91a3798b7f88a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba380-ae60-45ac-8e80-4b5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:28.000Z",
            "modified": "2015-09-30T08:55:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'temka666.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba380-bc4c-41fb-884f-4c82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:28.000Z",
            "modified": "2015-09-30T08:55:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5dfddf866227708fa6ed4e8e9833acd4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba380-97d0-4209-b11f-4ba6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:28.000Z",
            "modified": "2015-09-30T08:55:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e0046ffd49f92d4a05d0d463c6cc37b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba380-f9b4-4aa2-8b17-4f70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:28.000Z",
            "modified": "2015-09-30T08:55:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tengui.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba381-5080-48f0-9f53-4a84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:29.000Z",
            "modified": "2015-09-30T08:55:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e0cf2242fd48fbfff866e045eb986c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba381-ff60-4ea2-84bf-49a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:29.000Z",
            "modified": "2015-09-30T08:55:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e0ec10d6d1cd655bd50ab74f6bd0523']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba381-85e0-41be-8448-4f18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:29.000Z",
            "modified": "2015-09-30T08:55:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'terminator38.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba381-0094-4700-a363-4c14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:29.000Z",
            "modified": "2015-09-30T08:55:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e1d7f56ccad472b46e4265866a8a4d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba381-f678-4daf-964a-493b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:29.000Z",
            "modified": "2015-09-30T08:55:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e2569b7442f0b355dcdb7cee48e595d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba381-e5d0-495c-8aa4-4720950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:29.000Z",
            "modified": "2015-09-30T08:55:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tesste.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba381-9730-4011-9de7-4e39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:29.000Z",
            "modified": "2015-09-30T08:55:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e2db0759cc52c3381e7a1384694e7fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba382-7d08-4f18-ad10-4526950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:30.000Z",
            "modified": "2015-09-30T08:55:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e32d6a631cbf18488a34727680d9d77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba382-6bfc-4176-9fe6-4ae7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:30.000Z",
            "modified": "2015-09-30T08:55:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'test010.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba382-70f4-4260-a7b1-42d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:30.000Z",
            "modified": "2015-09-30T08:55:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e34d67887904eff19decfa446b7ed05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba382-0020-4a4b-aaf3-431f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:30.000Z",
            "modified": "2015-09-30T08:55:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e4fe76a4db709d76bdd8be6e26e9962']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba382-ba20-4f43-bc6a-4004950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:30.000Z",
            "modified": "2015-09-30T08:55:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'test213.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba382-14dc-4555-bc1c-44b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:30.000Z",
            "modified": "2015-09-30T08:55:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e700a807daf6e5f21d7f85800a5622e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba382-39c4-4a5c-9c6a-4966950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:30.000Z",
            "modified": "2015-09-30T08:55:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e744f8e11488bf5c660013b5fb32210']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba382-c790-4e50-a67a-453d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:30.000Z",
            "modified": "2015-09-30T08:55:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'test23test23.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba383-b138-4628-b10f-4965950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:31.000Z",
            "modified": "2015-09-30T08:55:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e793ada1c8baf38875a30ce2f26dd1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba383-3b74-49b1-ab6c-40f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:31.000Z",
            "modified": "2015-09-30T08:55:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e8d36b27849c5f43f919dd6775c2331']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba383-c6e4-4f24-a8b1-42d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:31.000Z",
            "modified": "2015-09-30T08:55:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'test489.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba383-4b40-4779-a82f-4f10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:31.000Z",
            "modified": "2015-09-30T08:55:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e98791971824b0f634e5e0ceb1fe119']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba383-12d8-46bf-ae30-4cfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:31.000Z",
            "modified": "2015-09-30T08:55:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e9b0e258f9e1399878b364b33203edc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba383-4958-4119-b88d-4032950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:31.000Z",
            "modified": "2015-09-30T08:55:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'test54.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba383-812c-4397-840a-44a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:31.000Z",
            "modified": "2015-09-30T08:55:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5e9f7c88df2035e6777555f649f66ef8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba384-3614-4bd7-8b27-4470950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:32.000Z",
            "modified": "2015-09-30T08:55:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ea8cef9eb306d570b9da811350bae8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba383-67d4-42ef-9bb4-4e70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:31.000Z",
            "modified": "2015-09-30T08:55:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'test60.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba384-6ee4-4fd0-89d4-4bd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:32.000Z",
            "modified": "2015-09-30T08:55:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5eb3ab22036afe33ae8f4cdf230ab823']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba384-a0f8-49bd-a874-4b38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:32.000Z",
            "modified": "2015-09-30T08:55:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5eb9b7e247132a0c081b5d45c97de8dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba384-ceb4-468f-b81c-491c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:32.000Z",
            "modified": "2015-09-30T08:55:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'test7772442.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba384-ae48-46e5-b369-47aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:32.000Z",
            "modified": "2015-09-30T08:55:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ed3035a99ea8cd1ceb86b01d26cbeed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba384-6be4-46e7-97f9-4bf5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:32.000Z",
            "modified": "2015-09-30T08:55:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5eda54d7d4f248541f351a4fb91c2ef4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba384-8ce8-474c-b414-409c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:32.000Z",
            "modified": "2015-09-30T08:55:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'test777test.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba384-0e90-4768-80a4-47c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:32.000Z",
            "modified": "2015-09-30T08:55:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ef44db2bb8744e024c57e050b976533']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba385-ba3c-47c8-a78f-433e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:33.000Z",
            "modified": "2015-09-30T08:55:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testdc123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba385-8f34-4e57-826b-42e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:33.000Z",
            "modified": "2015-09-30T08:55:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testedplz.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba385-ff98-43f8-afbb-4553950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:33.000Z",
            "modified": "2015-09-30T08:55:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5efea506801a50dc8ec96a5258278116']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba385-e6a4-4523-ab20-4d83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:33.000Z",
            "modified": "2015-09-30T08:55:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tester.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba385-808c-47be-955e-413b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:33.000Z",
            "modified": "2015-09-30T08:55:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testerqawerty.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba385-d6dc-4584-b006-466a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:33.000Z",
            "modified": "2015-09-30T08:55:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f01caefbbd2d0b625f35aaad1a08b5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba385-8340-4847-891d-4b06950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:33.000Z",
            "modified": "2015-09-30T08:55:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testing321.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba386-d5f0-455b-a1ef-4b9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:34.000Z",
            "modified": "2015-09-30T08:55:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testinglab.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba385-eda8-42db-bb7b-4db7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:33.000Z",
            "modified": "2015-09-30T08:55:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f08e806b018c0bf6afca580f3557a9e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba386-0794-43ee-af40-4e1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:34.000Z",
            "modified": "2015-09-30T08:55:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testjaa.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba386-93f8-4936-9574-4a2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:34.000Z",
            "modified": "2015-09-30T08:55:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testseeerver.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba386-6dd4-4cd6-a586-418b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:34.000Z",
            "modified": "2015-09-30T08:55:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f299ca4a5ae1aee5b7bd09808066846']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba386-5e7c-40a3-8cb3-4d88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:34.000Z",
            "modified": "2015-09-30T08:55:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testserver.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba386-a688-48bc-87b6-416b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:34.000Z",
            "modified": "2015-09-30T08:55:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testserverzz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba386-f28c-4acd-80f0-4a01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:34.000Z",
            "modified": "2015-09-30T08:55:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f2c44711f300dc3f4dca97192c43020']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba387-46dc-4a0e-8893-4240950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:35.000Z",
            "modified": "2015-09-30T08:55:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'testszeeerver.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba387-cc1c-4013-9dcc-4e2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:35.000Z",
            "modified": "2015-09-30T08:55:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'th3kull.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba387-4f80-4e02-a7ce-4489950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:35.000Z",
            "modified": "2015-09-30T08:55:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f3ad6793b517e78632b607fd15d29bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba387-14cc-44f4-9faa-4f2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:35.000Z",
            "modified": "2015-09-30T08:55:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thatblackdude.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba387-6984-4d52-811e-48af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:35.000Z",
            "modified": "2015-09-30T08:55:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'the3dvis.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba387-e5d4-4d6c-8abb-436e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:35.000Z",
            "modified": "2015-09-30T08:55:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f45e8f30c9509e9b335adf6b6827433']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba387-a95c-4d1b-8937-4ed2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:35.000Z",
            "modified": "2015-09-30T08:55:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thebighacker.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba387-d27c-4a66-a4ea-4f4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:35.000Z",
            "modified": "2015-09-30T08:55:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'theblackhak.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba387-55bc-49af-951c-4a19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:35.000Z",
            "modified": "2015-09-30T08:55:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f4b8965f8a677c2490a4c3573b8ebf6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba388-f184-4440-a219-4ecf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:36.000Z",
            "modified": "2015-09-30T08:55:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thebobgolden.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba388-5f1c-4831-8a20-44c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:36.000Z",
            "modified": "2015-09-30T08:55:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thedarkweed.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba388-66ac-4a44-831f-413d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:36.000Z",
            "modified": "2015-09-30T08:55:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f5714f3f945513cd29fbaf01dc2907c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba388-26c0-497a-81f5-43e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:36.000Z",
            "modified": "2015-09-30T08:55:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thedogsgomoo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba388-af4c-4e4c-b097-472d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:36.000Z",
            "modified": "2015-09-30T08:55:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thedogsgomoo.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba388-e084-422e-9e65-4080950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:36.000Z",
            "modified": "2015-09-30T08:55:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f629eaaf2ca36fc703de787b9adf010']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba388-7fac-48a5-9c87-4d3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:36.000Z",
            "modified": "2015-09-30T08:55:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'theevilqueen.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba389-253c-4d3a-9186-44a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:37.000Z",
            "modified": "2015-09-30T08:55:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thegeek.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba389-7ab4-4137-a672-40e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:37.000Z",
            "modified": "2015-09-30T08:55:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f819e8a9ae7fc40d813f81a244864eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba389-4038-4c52-873a-4af9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:37.000Z",
            "modified": "2015-09-30T08:55:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thegugsbr13.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba389-e790-40a7-abf5-4be6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:37.000Z",
            "modified": "2015-09-30T08:55:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'theguild22.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba389-c368-42e6-9324-42cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:37.000Z",
            "modified": "2015-09-30T08:55:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f83e0c35702af49965d13864517f907']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba389-3e48-440f-b731-49e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:37.000Z",
            "modified": "2015-09-30T08:55:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thehacker00.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba389-7100-4b46-9f95-470f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:37.000Z",
            "modified": "2015-09-30T08:55:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thejohhneyreyiz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba389-2ab8-4ba6-95ab-4284950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:37.000Z",
            "modified": "2015-09-30T08:55:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f8fd9a75d838eab27e53da75c57c7de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38a-4820-4052-84bb-497b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:38.000Z",
            "modified": "2015-09-30T08:55:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thela335.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38a-e914-4b0f-99a3-4735950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:38.000Z",
            "modified": "2015-09-30T08:55:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'themonsterdno1000.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38a-d6ac-4fd9-a437-423b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:38.000Z",
            "modified": "2015-09-30T08:55:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f93c5ba9851c18b4b339942b5dd0507']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38a-5774-4bde-9948-4e1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:38.000Z",
            "modified": "2015-09-30T08:55:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'theneex.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38a-3a04-43fd-89df-45ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:38.000Z",
            "modified": "2015-09-30T08:55:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'theo-kovacevic1961.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38a-4ef8-4f31-a134-4e15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:38.000Z",
            "modified": "2015-09-30T08:55:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5f9b90ee1737309985dd1055751e5239']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38a-d568-47c5-a620-4c34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:38.000Z",
            "modified": "2015-09-30T08:55:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thepancakeguy.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38b-9330-479b-9899-4add950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:39.000Z",
            "modified": "2015-09-30T08:55:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thepro.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38a-5c5c-4b1e-9962-43e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:38.000Z",
            "modified": "2015-09-30T08:55:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5faf95f3f0f0700a21fef46b2f01f919']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38b-7010-4357-ae65-425e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:39.000Z",
            "modified": "2015-09-30T08:55:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'theprofound.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38b-0c1c-40ac-9e65-49ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:39.000Z",
            "modified": "2015-09-30T08:55:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'theratpro..duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38b-a6f8-4681-aa6d-441d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:39.000Z",
            "modified": "2015-09-30T08:55:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fb48e106d885f4c51b68f3412b183a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38b-e1f4-4875-8741-448c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:39.000Z",
            "modified": "2015-09-30T08:55:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'theratpro.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38b-cbec-4d9d-b948-41f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:39.000Z",
            "modified": "2015-09-30T08:55:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'therockstar.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38b-c930-41e5-8c47-4c1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:39.000Z",
            "modified": "2015-09-30T08:55:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fbaf9afcc94f2b0ef70e0d8d80f9d1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38b-a73c-4e79-8981-49f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:39.000Z",
            "modified": "2015-09-30T08:55:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thetroll.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38c-a72c-4fbe-96ba-4ee6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:40.000Z",
            "modified": "2015-09-30T08:55:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'theunleet.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38c-30ac-4c8e-9985-4c25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:40.000Z",
            "modified": "2015-09-30T08:55:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fc2571d9355472a5e7930d7f0a2ab94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38c-11d8-4faf-9067-423b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:40.000Z",
            "modified": "2015-09-30T08:55:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thezer0rat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38c-0c78-43d5-8b22-40b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:40.000Z",
            "modified": "2015-09-30T08:55:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thhk123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38c-37f4-4952-aafe-4571950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:40.000Z",
            "modified": "2015-09-30T08:55:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fc4a4dab0b4456312fae8e959ebd76c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38c-66bc-4e95-a8f3-4f73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:40.000Z",
            "modified": "2015-09-30T08:55:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thisisahostname.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38c-e364-475c-a658-4cac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:40.000Z",
            "modified": "2015-09-30T08:55:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thisismyrat.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38c-2958-4d97-b257-47da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:40.000Z",
            "modified": "2015-09-30T08:55:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fc5a14a9dfa87779b509779112bb686']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38d-0670-4768-8630-44c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:41.000Z",
            "modified": "2015-09-30T08:55:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thraxpaintesting.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38d-b45c-4b22-8602-463c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:41.000Z",
            "modified": "2015-09-30T08:55:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'thtwep.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38d-14c4-41d3-8a75-40a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:41.000Z",
            "modified": "2015-09-30T08:55:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fc760540df4220bb91294b1e05a6f8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38d-0ab8-4e85-8259-4f0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:41.000Z",
            "modified": "2015-09-30T08:55:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tiberhockey.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38d-3c3c-43da-90a5-4c54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:41.000Z",
            "modified": "2015-09-30T08:55:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tiberhockey1.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38d-0428-49fc-8392-42fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:41.000Z",
            "modified": "2015-09-30T08:55:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fd74433fc4903f55f74ad5016167764']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38d-ef90-470a-8672-418e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:41.000Z",
            "modified": "2015-09-30T08:55:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'timo.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38e-9d20-4d4e-ab75-4768950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:42.000Z",
            "modified": "2015-09-30T08:55:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'titic.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38e-697c-4581-b061-4463950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:42.000Z",
            "modified": "2015-09-30T08:55:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fdd8ec1538d6c99ed08959643bf49f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38e-cff0-4881-949a-44d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:42.000Z",
            "modified": "2015-09-30T08:55:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tjoekirman.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38e-02c4-4823-8b59-4e0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:42.000Z",
            "modified": "2015-09-30T08:55:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tjusuf.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38e-47a8-4b44-a991-428e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:42.000Z",
            "modified": "2015-09-30T08:55:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fe26e667a45811f16f33a65b97627a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38e-8738-4eb0-9150-4adc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:42.000Z",
            "modified": "2015-09-30T08:55:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tmpros.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38e-0d68-4641-b8ff-4ecf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:42.000Z",
            "modified": "2015-09-30T08:55:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tms01.codns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38e-50cc-410e-908b-4453950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:42.000Z",
            "modified": "2015-09-30T08:55:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fe4dad924ad83d3fc46bf2c3ffe6aed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38f-03d0-4421-adbf-46cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:43.000Z",
            "modified": "2015-09-30T08:55:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'toastbrotmaker.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38f-7e0c-4105-a6d0-49bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:43.000Z",
            "modified": "2015-09-30T08:55:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fe731c70fdeb3d48bb01827810bb27f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38f-7904-4330-ada2-4a46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:43.000Z",
            "modified": "2015-09-30T08:55:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ff33449fff994f3b2435e64bbbf4545']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38f-b1ac-4c80-9e1d-42d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:43.000Z",
            "modified": "2015-09-30T08:55:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tofitazz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38f-5d50-4b7c-b1e0-4361950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:43.000Z",
            "modified": "2015-09-30T08:55:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5ff7a5b057eeae625b78d3becfe82eec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38f-d1c0-462f-af54-4ff0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:43.000Z",
            "modified": "2015-09-30T08:55:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '5fff005ed15c6e986bd7e940751d63b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38f-d5e4-4ad7-ac4d-46c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:43.000Z",
            "modified": "2015-09-30T08:55:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tomhilyard.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba38f-9e38-43d7-b20b-46c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:43.000Z",
            "modified": "2015-09-30T08:55:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6003e79121f50d49abb1b8fac1ff2065']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba390-cf24-4a94-a31d-427e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:44.000Z",
            "modified": "2015-09-30T08:55:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '601064e0eff4e8f97ac2969a4c21fd24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba390-9d7c-4765-bae7-4031950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:44.000Z",
            "modified": "2015-09-30T08:55:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tommy.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba390-ad54-4995-bc26-41da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:44.000Z",
            "modified": "2015-09-30T08:55:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60220cc6ae6edeeb0c83d8e065cfb7f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba390-1674-4b6b-a3de-47dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:44.000Z",
            "modified": "2015-09-30T08:55:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '602ab350c5e0567417b97d7b6b6c411d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba390-ea74-4074-a1c7-4fc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:44.000Z",
            "modified": "2015-09-30T08:55:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tomtrial.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba390-1380-40f6-b9a9-48ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:44.000Z",
            "modified": "2015-09-30T08:55:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '602c0cd07c3bc6f4c9c087924f30200d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba390-7024-43a1-8a92-49ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:44.000Z",
            "modified": "2015-09-30T08:55:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60443254e57f1d6942f32126928d1ce9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba390-f5f8-4313-8f32-4465950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:44.000Z",
            "modified": "2015-09-30T08:55:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tonykarkal.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba391-bda8-443c-ac36-4fb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:45.000Z",
            "modified": "2015-09-30T08:55:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '605132ff570b3ed0b0e047f5978092d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba391-71a4-4392-b5c1-4e39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:45.000Z",
            "modified": "2015-09-30T08:55:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60551972a9adb0680aae0291224c66db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba391-96ac-4069-864d-4f78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:45.000Z",
            "modified": "2015-09-30T08:55:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tooligram.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba391-7eb4-4e49-9448-4a18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:45.000Z",
            "modified": "2015-09-30T08:55:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6063d327f556ae5f0600eae793385978']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba391-7a34-47d9-82aa-4ea5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:45.000Z",
            "modified": "2015-09-30T08:55:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6064cc39273f5d5342b43a8a51ba6864']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba391-69dc-43a9-8486-46a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:45.000Z",
            "modified": "2015-09-30T08:55:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'toon2539.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba391-8a00-434e-b1a2-4bfa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:45.000Z",
            "modified": "2015-09-30T08:55:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60749013bc03e923a1b2b7ac7f0cd3a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba392-29a4-4daf-8820-4eb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:46.000Z",
            "modified": "2015-09-30T08:55:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6075636b5c7e461eed9fe8bac39ecfc7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba391-5d84-4e6a-9369-43d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:45.000Z",
            "modified": "2015-09-30T08:55:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'toorkeh.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba392-4694-4878-9392-4e99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:46.000Z",
            "modified": "2015-09-30T08:55:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '607ef603812642c56fbabb7059b4f616']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba392-7270-4864-b39d-4a2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:46.000Z",
            "modified": "2015-09-30T08:55:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '608ac43300654ca3b1bff57d9d72a929']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba392-1834-4bd5-806b-4ffe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:46.000Z",
            "modified": "2015-09-30T08:55:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'toota1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba392-dd40-4445-974c-4124950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:46.000Z",
            "modified": "2015-09-30T08:55:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '609ad0cdbf31bc13690c61bb5e149689']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba392-5f58-41b3-ab81-4279950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:46.000Z",
            "modified": "2015-09-30T08:55:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '609e8ed5da22e009d3d7b70b17341e33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba392-d19c-4ce4-92fc-4091950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:46.000Z",
            "modified": "2015-09-30T08:55:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tophack.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba393-a444-4c0a-ad3b-46ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:47.000Z",
            "modified": "2015-09-30T08:55:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60afa3f7d1e14daaeb80f506cbea2218']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba393-d4b0-4a1b-a0c5-4789950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:47.000Z",
            "modified": "2015-09-30T08:55:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60b24e748a64264f4fae9f16b2ca23c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba393-8058-42c1-88fd-462e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:47.000Z",
            "modified": "2015-09-30T08:55:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tornado.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba393-f9f0-4815-8e9e-4d98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:47.000Z",
            "modified": "2015-09-30T08:55:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60b2f1f38484a46f5175f2c33713fe9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba393-96a8-46bb-bd7a-4d4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:47.000Z",
            "modified": "2015-09-30T08:55:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60b5c0f0a1e0637e7dd93741988f5a30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba393-d1c8-49e4-9a38-4f44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:47.000Z",
            "modified": "2015-09-30T08:55:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'torrent.serveblog.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba393-c018-46a6-ba5d-4e3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:47.000Z",
            "modified": "2015-09-30T08:55:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60bb67205c403f49751ce02a8b659fa0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba393-51d8-44c3-a680-4955950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:47.000Z",
            "modified": "2015-09-30T08:55:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60bbcdc22336003f3e559cf7c5a058b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba393-ac38-4d75-9dc5-419a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:47.000Z",
            "modified": "2015-09-30T08:55:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'torrentr.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba394-81ac-4105-9b3d-4f4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:48.000Z",
            "modified": "2015-09-30T08:55:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60c52bfdf91fc71494687cb9ddf9a5bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba394-369c-4c28-9c44-4fa9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:48.000Z",
            "modified": "2015-09-30T08:55:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60d0e01b425cd91f836f0b8a7ad0774e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba394-8678-46c5-a45b-4ffc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:48.000Z",
            "modified": "2015-09-30T08:55:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'toto.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba394-c600-409b-bb5b-44c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:48.000Z",
            "modified": "2015-09-30T08:55:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60d234b92ac3fc4eaa3db85df8d38c1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba394-bfa0-4472-80d2-4f0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:48.000Z",
            "modified": "2015-09-30T08:55:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60ea45747790c621952070abd9a0205c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba394-5ca8-40d8-9832-49f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:48.000Z",
            "modified": "2015-09-30T08:55:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'toynbee.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba394-2774-43ce-a742-4808950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:48.000Z",
            "modified": "2015-09-30T08:55:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60ead4a2cc40ba9d11d1d9991b90ec79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba395-8370-441f-a290-41c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:49.000Z",
            "modified": "2015-09-30T08:55:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60eb1238e01c3687db9f7172f88dff17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba395-9f90-4116-808c-4a12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:49.000Z",
            "modified": "2015-09-30T08:55:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tr4xio.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba395-677c-4165-97aa-45eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:49.000Z",
            "modified": "2015-09-30T08:55:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60ed10f8a65d4d3a1146662ea3764f75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba395-7374-4413-9137-45e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:49.000Z",
            "modified": "2015-09-30T08:55:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60f002b932ca97e096c32e8d7ae4688f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba395-baf0-4ddb-af17-40a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:49.000Z",
            "modified": "2015-09-30T08:55:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trace123123123.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba395-9ebc-4e91-b347-4e97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:49.000Z",
            "modified": "2015-09-30T08:55:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60f186526b101cb7cc7dfeccd2ecea86']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba395-3b64-435e-9746-4ac5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:49.000Z",
            "modified": "2015-09-30T08:55:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60f260aeb96338699858f33e6eaf1e7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba395-34d8-45fb-8f94-4844950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:49.000Z",
            "modified": "2015-09-30T08:55:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'traglahafa.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba396-be90-4e6e-857f-4634950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:50.000Z",
            "modified": "2015-09-30T08:55:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60f807f104845f276e527b5c43198a6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba396-7bdc-4e78-b185-4a77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:50.000Z",
            "modified": "2015-09-30T08:55:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '60fb14723b56aa85555ad2a81d03f2a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba396-032c-4cd3-880f-4d74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:50.000Z",
            "modified": "2015-09-30T08:55:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trap92.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba396-a64c-4430-929c-4b9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:50.000Z",
            "modified": "2015-09-30T08:55:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61030f4ac16cfd9d7c400f38471cc4f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba396-49d8-40f9-aad6-4681950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:50.000Z",
            "modified": "2015-09-30T08:55:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6106ad759de56fc5f90990042c42be29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba396-d904-41b8-8cfa-4293950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:50.000Z",
            "modified": "2015-09-30T08:55:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trapperco.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba396-a0fc-4dc7-b0d9-4b7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:50.000Z",
            "modified": "2015-09-30T08:55:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6107a962643657afb1f01a9ee7285821']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba397-155c-4ed1-ac35-4283950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:51.000Z",
            "modified": "2015-09-30T08:55:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6107e58ed47b5fa9fd11a41640337e5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba396-b5c4-41e8-bd5f-4fe2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:50.000Z",
            "modified": "2015-09-30T08:55:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'traxpowned.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba397-52b8-4738-867d-488f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:51.000Z",
            "modified": "2015-09-30T08:55:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6109753fa81a65b5fc6763e2c2026765']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba397-2530-44bd-b0e6-4bc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:51.000Z",
            "modified": "2015-09-30T08:55:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6117e98e7798fae0452eae0377d9f409']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba397-59c4-4e27-913b-4b1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:51.000Z",
            "modified": "2015-09-30T08:55:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trnquil.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba397-e5cc-4f2b-8282-4275950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:51.000Z",
            "modified": "2015-09-30T08:55:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '611b108c66482a2d386c25534cb2f993']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba397-6b0c-42f1-944a-4813950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:51.000Z",
            "modified": "2015-09-30T08:55:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61239936d5ad1f733e925c71ec280bdb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba397-8e18-49d5-b49a-4ab7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:51.000Z",
            "modified": "2015-09-30T08:55:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trojan.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba397-2c0c-4607-9fa6-4bbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:51.000Z",
            "modified": "2015-09-30T08:55:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6134aad196baf0cca7a1966b95ad3169']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba398-bb24-47dc-976b-49c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:52.000Z",
            "modified": "2015-09-30T08:55:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '613d41aa356cec8442de9898f5db0eb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba398-0bec-4254-b0bc-4c88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:52.000Z",
            "modified": "2015-09-30T08:55:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trojan1643.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba398-39bc-4b08-b849-4393950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:52.000Z",
            "modified": "2015-09-30T08:55:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61406be89474c0a65e62d2e16b4f687d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba398-6ef8-45a4-8e34-4295950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:52.000Z",
            "modified": "2015-09-30T08:55:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '614600e30a185fce00009789f9b9fce0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba398-db90-4a17-9d16-426f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:52.000Z",
            "modified": "2015-09-30T08:55:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trojanguh12.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba398-8ddc-4cf2-91be-4c73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:52.000Z",
            "modified": "2015-09-30T08:55:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61585d25112c90331cc1d90e4e0f7693']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba398-2e20-41f5-893e-430b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:52.000Z",
            "modified": "2015-09-30T08:55:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '616b34d0c28620a9f9b1774b9c17305b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba398-9adc-4193-a73d-4d51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:52.000Z",
            "modified": "2015-09-30T08:55:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'troll19911hack.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba399-2144-4b77-a81c-4952950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:53.000Z",
            "modified": "2015-09-30T08:55:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6171344636619d697a634d9f17f2ec78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba399-4538-4b7a-ba08-4693950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:53.000Z",
            "modified": "2015-09-30T08:55:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61715df14430272c3919c798303c8404']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba399-6e3c-4fec-964b-4071950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:53.000Z",
            "modified": "2015-09-30T08:55:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trollking102.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba399-b87c-4469-8446-488d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:53.000Z",
            "modified": "2015-09-30T08:55:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '617165d1a17b4c7ae9f6e2167e50d9cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba399-c558-4329-b0fe-479f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:53.000Z",
            "modified": "2015-09-30T08:55:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '617dedff32c0c7c83fff03aa6376fd47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba399-a5b4-4329-9f1b-46e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:53.000Z",
            "modified": "2015-09-30T08:55:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trollvany.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba399-5714-4315-8d3d-4796950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:53.000Z",
            "modified": "2015-09-30T08:55:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61855d7984394af22608d72746ef3a29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39a-8050-4fbb-8e1c-4675950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:54.000Z",
            "modified": "2015-09-30T08:55:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61899ae0740bd011b764c0edce2f5ee2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba399-f718-4027-9af2-4676950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:53.000Z",
            "modified": "2015-09-30T08:55:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tronic.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39a-47b4-4e90-9f0c-4763950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:54.000Z",
            "modified": "2015-09-30T08:55:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6191f3616779c330d80a15591d10319d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39a-0830-4856-ba7e-431b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:54.000Z",
            "modified": "2015-09-30T08:55:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6198180a415452adbf6dbd289d3bbdbd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39a-d790-46b9-ae6b-432f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:54.000Z",
            "modified": "2015-09-30T08:55:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tronixe.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39a-4528-4aee-a5ce-448f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:54.000Z",
            "modified": "2015-09-30T08:55:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61adb58a03c3e43222b9e65bbe9e06e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39a-b2b0-49a7-98d8-4770950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:54.000Z",
            "modified": "2015-09-30T08:55:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61b0076ec2acaf78797cbfa64d0bdecf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39a-1bf8-49e8-9dc8-4337950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:54.000Z",
            "modified": "2015-09-30T08:55:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'troyano1.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39b-0828-4b38-bbff-4b59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:55.000Z",
            "modified": "2015-09-30T08:55:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61b59834608edf6b96f17cac0542f733']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39b-1d8c-423b-8506-4dc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:55.000Z",
            "modified": "2015-09-30T08:55:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61c085a4473df1e766a2163e86a6f390']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39b-81b8-4deb-83f6-4504950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:55.000Z",
            "modified": "2015-09-30T08:55:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'trumpscherz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39b-c614-4884-a9c6-4ec1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:55.000Z",
            "modified": "2015-09-30T08:55:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61c7051b4e6fb08fc3651400228aba0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39b-c798-468c-820e-44bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:55.000Z",
            "modified": "2015-09-30T08:55:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61c74731ad6bd63cbb194a93bc5f676d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39b-a7e8-4c39-b616-47e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:55.000Z",
            "modified": "2015-09-30T08:55:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ts-0049.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39b-57e8-48bb-b40f-44a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:55.000Z",
            "modified": "2015-09-30T08:55:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61cd8dfb694a83cb42b8847312cc76f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39b-0c74-4c9e-9fa9-44f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:55.000Z",
            "modified": "2015-09-30T08:55:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61e2f8a01dd4f863faf0c96746c9ea1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39b-7128-4444-a3af-4593950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:55.000Z",
            "modified": "2015-09-30T08:55:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ts-0049.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39c-4b20-451d-850d-4258950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:56.000Z",
            "modified": "2015-09-30T08:55:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '61e3754266be5ba22c59155db6446b52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39c-0820-4524-8968-4f8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:56.000Z",
            "modified": "2015-09-30T08:55:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '620fb066884e3263754f99eef85d067b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39c-3c9c-4e28-9690-4e64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:56.000Z",
            "modified": "2015-09-30T08:55:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ts-049.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39c-3d88-44ff-8d12-49df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:56.000Z",
            "modified": "2015-09-30T08:55:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62153887a44fa2b849892309e68d626a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39c-c7cc-4bb3-a414-4624950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:56.000Z",
            "modified": "2015-09-30T08:55:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6217afecda617a2181ca3b9570a6c8a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39c-061c-492d-be29-4f6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:56.000Z",
            "modified": "2015-09-30T08:55:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ttiny.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39c-314c-4b3a-b9c0-4c92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:56.000Z",
            "modified": "2015-09-30T08:55:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '621a0f863d4a849b78f76669ef2e02cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39d-be54-43e2-a5b4-49ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:57.000Z",
            "modified": "2015-09-30T08:55:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '621b7723b027c2f7703c8459bf213d5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39d-bd24-43dd-8e7d-4f04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:57.000Z",
            "modified": "2015-09-30T08:55:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tufan.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39d-816c-44b6-b27d-4999950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:57.000Z",
            "modified": "2015-09-30T08:55:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6225b671ba0df6abedc36983d33b0326']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39d-fc44-449c-8ee7-4a54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:57.000Z",
            "modified": "2015-09-30T08:55:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '622a94751dafe85726e0b7b9c302075f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39d-cc64-4811-9ded-4009950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:57.000Z",
            "modified": "2015-09-30T08:55:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tufanlahack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39d-b4ec-4133-bfa3-4006950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:57.000Z",
            "modified": "2015-09-30T08:55:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '622e4dc60c063898f9b563054d7e5398']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39d-1480-4907-b81f-4966950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:57.000Z",
            "modified": "2015-09-30T08:55:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6231a944ff3f52c22b67fed3fd5fc084']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39d-b4d4-4c60-af69-4ca5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:57.000Z",
            "modified": "2015-09-30T08:55:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tulkas123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39e-fc50-4429-9f36-4553950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:58.000Z",
            "modified": "2015-09-30T08:55:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '623f212724f7936cf1030592b875feae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39e-7448-445c-9c06-4a03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:58.000Z",
            "modified": "2015-09-30T08:55:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62438ed9bb730bbf9e1e552a112feea5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39e-1de0-49d0-88f8-4d4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:58.000Z",
            "modified": "2015-09-30T08:55:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'turanemre2001.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39e-51cc-4cd0-a786-4bb5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:58.000Z",
            "modified": "2015-09-30T08:55:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62465a99bc0167e4062847b8f92e87db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39e-c4f0-4217-b279-4704950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:58.000Z",
            "modified": "2015-09-30T08:55:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '624a71c8cba40c749c4e7c514cef38f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39e-8fa0-4704-a606-4348950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:58.000Z",
            "modified": "2015-09-30T08:55:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'turaniadc.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39e-1998-4751-a0bf-464d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:58.000Z",
            "modified": "2015-09-30T08:55:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6252fb5c5e71d95437490a3872b0ca87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39f-b8bc-40c3-aacf-4a0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:59.000Z",
            "modified": "2015-09-30T08:55:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '625f170bfeeb61e90caf4ae2a49d3379']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39e-68e8-4464-99b7-4fe6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:58.000Z",
            "modified": "2015-09-30T08:55:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'turboto.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39f-543c-4ac3-b80a-48a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:59.000Z",
            "modified": "2015-09-30T08:55:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '626820b6cc79b04fe207d8fb89dc8e7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39f-dca4-4c2b-be89-4e6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:59.000Z",
            "modified": "2015-09-30T08:55:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62711722512617a63145df4d7bd3ed78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39f-9ef4-4278-b947-43c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:59.000Z",
            "modified": "2015-09-30T08:55:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'turek.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39f-91ec-43c2-9fbe-4d4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:59.000Z",
            "modified": "2015-09-30T08:55:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62711dbc19c8ec7a3655726b50148a9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39f-ee44-458a-9638-43ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:59.000Z",
            "modified": "2015-09-30T08:55:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6276a32e4bbfaad7bbf5f53c576c42a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39f-2c84-4c0f-a86c-42c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:59.000Z",
            "modified": "2015-09-30T08:55:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'turgaydemir.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba39f-39f0-4451-b96a-48ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:55:59.000Z",
            "modified": "2015-09-30T08:55:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6277e26a92f4672b98692d56cebb3f78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:55:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a0-ece4-4463-8548-4d78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:00.000Z",
            "modified": "2015-09-30T08:56:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '627a82bf2a0fe27dfe5b7e19e728fac3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a0-5b70-447e-b777-4a32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:00.000Z",
            "modified": "2015-09-30T08:56:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'turkad.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a0-55c0-4ef2-9e53-4676950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:00.000Z",
            "modified": "2015-09-30T08:56:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '627d2f697129d1bc5a89d56ba5c625c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a0-86f4-401d-a297-40e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:00.000Z",
            "modified": "2015-09-30T08:56:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '628d0ca97d75b4cb3e4809a7d54b1f01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a0-fa38-49c0-8669-4826950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:00.000Z",
            "modified": "2015-09-30T08:56:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tutodownload.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a0-5948-4804-8de3-4869950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:00.000Z",
            "modified": "2015-09-30T08:56:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6290f13673da3a9eb93114a682f40fd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a0-7f88-4f0d-a1ee-404d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:00.000Z",
            "modified": "2015-09-30T08:56:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '629bd4057b782b36951fa56f93054627']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a0-830c-477a-ab87-4cab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:00.000Z",
            "modified": "2015-09-30T08:56:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tutomz.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a1-04a8-4a21-98f5-49b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:01.000Z",
            "modified": "2015-09-30T08:56:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62a2c1d878fee7e2e877bcb053b8eb20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a1-4218-4bb1-8c27-4eb6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:01.000Z",
            "modified": "2015-09-30T08:56:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62a844486cd21c8dd3c82d9d802e365f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a1-6f04-48d2-8417-47b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:01.000Z",
            "modified": "2015-09-30T08:56:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tutowazzy.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a1-c5c4-4238-999a-4cb8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:01.000Z",
            "modified": "2015-09-30T08:56:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62aed248fc596554f9b2aad91325d606']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a1-0c3c-4795-a06d-40fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:01.000Z",
            "modified": "2015-09-30T08:56:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62b06d444fcedb97243f4eda776b9fce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a1-f2cc-4802-91aa-4c27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:01.000Z",
            "modified": "2015-09-30T08:56:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tutoyoutube11.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a1-d6c0-4335-a252-48ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:01.000Z",
            "modified": "2015-09-30T08:56:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62b3baf1ee52325c28828c8e5c590e1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a2-b500-40cb-b49b-4fe5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:02.000Z",
            "modified": "2015-09-30T08:56:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62b8cc6a16aa4d15e5cf6eb10dc3978b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a1-0f38-4e97-8bf7-4a62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:01.000Z",
            "modified": "2015-09-30T08:56:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tutuloic.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a2-8d94-4e45-bee7-46e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:02.000Z",
            "modified": "2015-09-30T08:56:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62c8429e3d9e52330ec8066db8bb2ecc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a2-b3bc-4ef9-bef1-441d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:02.000Z",
            "modified": "2015-09-30T08:56:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62cf202ac0847395d8093d3871a39a63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a2-fd04-4513-beaf-475c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:02.000Z",
            "modified": "2015-09-30T08:56:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tuytytty.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a2-9c94-49a9-ba85-4a82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:02.000Z",
            "modified": "2015-09-30T08:56:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62d03481ac52493b4e91fb2afdeb0734']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a2-d400-40d2-99d8-4953950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:02.000Z",
            "modified": "2015-09-30T08:56:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62d2f6a93da9d0fa731b54e341f2ee5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a2-84cc-46dd-b94f-4bcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:02.000Z",
            "modified": "2015-09-30T08:56:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'twentyone.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a3-7648-4f0f-8de3-4106950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:03.000Z",
            "modified": "2015-09-30T08:56:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62d367d77cf4319d19e970ac7dab4722']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a3-f540-4fbb-91d5-494a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:03.000Z",
            "modified": "2015-09-30T08:56:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62f0ee539de3159c4ddcde635ab997bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a3-a15c-4d7c-a39f-4fbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:03.000Z",
            "modified": "2015-09-30T08:56:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'twitchsupport.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a3-e15c-4871-a05b-4b02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:03.000Z",
            "modified": "2015-09-30T08:56:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62fa5fe07bdbb0ca8b57837b2df1e573']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a3-4670-4264-a4de-4e23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:03.000Z",
            "modified": "2015-09-30T08:56:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '62fa7506a2cf14206c476e124bf1410b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a3-330c-4620-b2dc-4d7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:03.000Z",
            "modified": "2015-09-30T08:56:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'twitchsupport.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a3-38cc-4256-bb52-464b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:03.000Z",
            "modified": "2015-09-30T08:56:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6309611e0bf6d343d1a98fd7875d10b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a4-1430-4daa-ade0-470a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:04.000Z",
            "modified": "2015-09-30T08:56:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '631c193452faa10a6196cd3a0919fdf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a4-f088-49fa-b497-4ee8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:04.000Z",
            "modified": "2015-09-30T08:56:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63303918a5eaaba313fa7db238743de6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a4-713c-469a-aaab-432b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:04.000Z",
            "modified": "2015-09-30T08:56:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'twux01.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a4-bef4-4800-899c-4f98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:04.000Z",
            "modified": "2015-09-30T08:56:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63364147fa6f3357faa38dce8ea3f0d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a4-3cf8-43c0-9b34-4d88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:04.000Z",
            "modified": "2015-09-30T08:56:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63387c03369a0b18008b51ad79557063']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a4-0a94-4316-b32f-4e5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:04.000Z",
            "modified": "2015-09-30T08:56:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tykov.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a4-b424-4977-a23f-4953950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:04.000Z",
            "modified": "2015-09-30T08:56:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '633c2ee4fb881b0ff5529a1a03d730bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a5-0668-4440-b120-47c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:05.000Z",
            "modified": "2015-09-30T08:56:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63428c23faff687d0b1d8d05b30d6954']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a4-b148-4397-8e42-4053950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:04.000Z",
            "modified": "2015-09-30T08:56:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'tyr9n.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a5-d218-4ede-8ee9-4ec2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:05.000Z",
            "modified": "2015-09-30T08:56:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6349cb454827db10bf9e83bba8b55256']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a5-551c-4f7c-9c78-49dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:05.000Z",
            "modified": "2015-09-30T08:56:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '634ff668a88a7c96fe5ad92ff29ccee3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a5-fc9c-4bbf-a39a-4c24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:05.000Z",
            "modified": "2015-09-30T08:56:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ucanadam.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a5-7590-4cd8-a8d9-4e42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:05.000Z",
            "modified": "2015-09-30T08:56:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6350fafe9dbfcd0e926ad177a7929c77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a5-d0f0-449d-aae7-42bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:05.000Z",
            "modified": "2015-09-30T08:56:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6351d22825d6539944ded313ea5f2b08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a5-7690-4b3a-95d0-4023950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:05.000Z",
            "modified": "2015-09-30T08:56:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ugothax3d.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a5-48ec-4975-8bae-485e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:05.000Z",
            "modified": "2015-09-30T08:56:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6356a420f0266c1c884972ea47800a2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a6-f4ec-4ced-8a86-4257950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:06.000Z",
            "modified": "2015-09-30T08:56:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6359c87bd0101b1ea7cd836f6b8d48b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a6-df00-4502-ab69-443c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:06.000Z",
            "modified": "2015-09-30T08:56:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'uiokjnbu.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a6-a92c-402b-96c8-4c10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:06.000Z",
            "modified": "2015-09-30T08:56:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63651be11b292f77d5af711909b6dd4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a6-6b0c-4eb0-a769-4dd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:06.000Z",
            "modified": "2015-09-30T08:56:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '636864bbadb1e6013519d117c50e7756']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a6-5200-4ffa-8986-473d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:06.000Z",
            "modified": "2015-09-30T08:56:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ujrtjkyky.myftp.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a6-2654-4c70-8fd2-4eff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:06.000Z",
            "modified": "2015-09-30T08:56:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '637000b583f80a3813ef304cfa892559']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a6-8af8-4251-9650-463d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:06.000Z",
            "modified": "2015-09-30T08:56:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63753079dc6a5d2fc6d65ef9136bf904']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a6-0348-413b-ac07-4850950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:06.000Z",
            "modified": "2015-09-30T08:56:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ulanjoker55.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a7-c2dc-46e9-8d94-4c11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:07.000Z",
            "modified": "2015-09-30T08:56:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6383dc1dee232dbfa200da864dc23959']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a7-a710-484f-98b4-4464950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:07.000Z",
            "modified": "2015-09-30T08:56:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63862c055e505ebb89561d65be1cf48c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a7-f298-44e1-9689-4d08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:07.000Z",
            "modified": "2015-09-30T08:56:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ulreports.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a7-7dcc-463b-afb1-472a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:07.000Z",
            "modified": "2015-09-30T08:56:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '638968d735082ccf4904e0c9659a1d85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a7-5a10-47a2-bb45-41f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:07.000Z",
            "modified": "2015-09-30T08:56:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63a2a0b33644ee2d93de1dea4dc063a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a7-89f4-4e73-9d13-4b30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:07.000Z",
            "modified": "2015-09-30T08:56:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'umtbey.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a7-5c70-44f9-9feb-46b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:07.000Z",
            "modified": "2015-09-30T08:56:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63a78423be4006a70dacd1d9a23f8c43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a8-93c4-4cb5-a06b-4be3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:08.000Z",
            "modified": "2015-09-30T08:56:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63a8ce96c19e129a58c75db3f7cd575a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a7-0ffc-4300-b3cd-4d2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:07.000Z",
            "modified": "2015-09-30T08:56:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'unknownhost32.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a8-b4dc-4fb6-bd1e-49f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:08.000Z",
            "modified": "2015-09-30T08:56:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63acd72b53acc4621d3485ac8079d237']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a8-3e20-4cc5-9a15-4f58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:08.000Z",
            "modified": "2015-09-30T08:56:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63af464fbd41c44f4cb44749f45f5128']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a8-abf4-44da-b7f2-44aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:08.000Z",
            "modified": "2015-09-30T08:56:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'unksix.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a8-cb1c-4835-8b47-4c65950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:08.000Z",
            "modified": "2015-09-30T08:56:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63afcc988580d0931b5c74c0095700e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a8-1d18-461c-aef9-4060950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:08.000Z",
            "modified": "2015-09-30T08:56:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63b158504636a9fefbd73a9f516353b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a8-4de8-4b4f-bf29-4ab2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:08.000Z",
            "modified": "2015-09-30T08:56:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'unlimitedsendouts.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a9-dbb8-4c99-b8b7-4ac0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:09.000Z",
            "modified": "2015-09-30T08:56:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63c0263fa34b17eb28bb9366eaff740c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a9-4258-4078-b652-4dd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:09.000Z",
            "modified": "2015-09-30T08:56:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63cdc38ffb2a018f6055f41fab71a6fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a9-88a4-4710-ad88-4e99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:09.000Z",
            "modified": "2015-09-30T08:56:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'unmuteforeal.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a9-4b38-4ead-995d-4dbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:09.000Z",
            "modified": "2015-09-30T08:56:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63e2ee254efc0847a877976337ed76ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a9-4054-410f-8bb8-42fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:09.000Z",
            "modified": "2015-09-30T08:56:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63ef6a174f444de00765566a6dcf23ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a9-b528-4a9a-a5f4-4e50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:09.000Z",
            "modified": "2015-09-30T08:56:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'unnombresillo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a9-1158-4992-bb01-4746950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:09.000Z",
            "modified": "2015-09-30T08:56:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '63f2453b68acf7e99064b7e7e70da832']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3aa-2dc4-4fea-acd7-4332950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:10.000Z",
            "modified": "2015-09-30T08:56:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64015a87fb487ff00a603f6e2e041d25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3a9-860c-439a-9d84-40f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:09.000Z",
            "modified": "2015-09-30T08:56:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'unswattables.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3aa-d628-49e3-bfc2-4f9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:10.000Z",
            "modified": "2015-09-30T08:56:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6411d18c8884a39b2e1432455f577c02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3aa-32cc-4da3-9e96-4c43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:10.000Z",
            "modified": "2015-09-30T08:56:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6416f7343a2ec185d90030e1b6e6db40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3aa-faa4-41e4-9df4-4f8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:10.000Z",
            "modified": "2015-09-30T08:56:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'unufri.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3aa-e85c-4276-8484-4e1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:10.000Z",
            "modified": "2015-09-30T08:56:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6419822b0e7c0bfb10aee0723fc190b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3aa-c034-41cc-9a58-4031950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:10.000Z",
            "modified": "2015-09-30T08:56:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'uog.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3aa-aa84-4a6d-bb23-4f6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:10.000Z",
            "modified": "2015-09-30T08:56:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'uoyouyo.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3aa-d794-49a2-bfef-4494950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:10.000Z",
            "modified": "2015-09-30T08:56:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64230a0b5dfabc19bac01a20d2772912']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ab-2230-4a72-89ac-4d48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:11.000Z",
            "modified": "2015-09-30T08:56:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'updaats32.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ab-d4cc-4096-a5f1-4f13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:11.000Z",
            "modified": "2015-09-30T08:56:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'update-ds34.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ab-60e0-428d-b10a-45b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:11.000Z",
            "modified": "2015-09-30T08:56:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6425cf3c0561361551dac23587075ae8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ab-f010-4600-aa81-43af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:11.000Z",
            "modified": "2015-09-30T08:56:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'updatewindow.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ab-98c0-4b29-9b0f-43ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:11.000Z",
            "modified": "2015-09-30T08:56:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'urchman11.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ab-6fe0-4059-b01d-41db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:11.000Z",
            "modified": "2015-09-30T08:56:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6428908970adf820bb09b25bf47f8f8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ab-18cc-4c48-8952-42e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:11.000Z",
            "modified": "2015-09-30T08:56:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ussr1917.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ac-9458-406f-9e14-4360950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:12.000Z",
            "modified": "2015-09-30T08:56:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'utchmoney001.strangled.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ab-6638-4e0a-85a8-4f4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:11.000Z",
            "modified": "2015-09-30T08:56:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6442637433cb91c7dee160600a63bd1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ac-c464-4f2a-8883-4b85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:12.000Z",
            "modified": "2015-09-30T08:56:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'uwilldie1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ac-fe70-4ee8-9c7b-4ec8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:12.000Z",
            "modified": "2015-09-30T08:56:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'uzun.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ac-d26c-4e41-93c7-43d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:12.000Z",
            "modified": "2015-09-30T08:56:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6442a0e60abf3c3bdfce7435e9161e45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ac-9774-4ae4-9475-4cc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:12.000Z",
            "modified": "2015-09-30T08:56:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'v69.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ac-f8a8-4eea-9925-4451950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:12.000Z",
            "modified": "2015-09-30T08:56:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vaaampir.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ac-0594-45cb-aba9-425b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:12.000Z",
            "modified": "2015-09-30T08:56:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64478dd76dbc7cbbfb7cf0298e0929c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ad-56d4-4810-9c14-46b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:12.000Z",
            "modified": "2015-09-30T08:56:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vaas1212.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ad-6818-443b-ba65-4379950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:13.000Z",
            "modified": "2015-09-30T08:56:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vadimka.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ad-ceb8-4e9d-8646-448f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:13.000Z",
            "modified": "2015-09-30T08:56:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '644a994eb0b727552c9548550f93a50f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ad-2a44-4bf3-aef9-48a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:13.000Z",
            "modified": "2015-09-30T08:56:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vadineo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ad-bb6c-4f3c-9d45-43b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:13.000Z",
            "modified": "2015-09-30T08:56:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vaev.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ad-bad0-4c54-bd79-4276950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:13.000Z",
            "modified": "2015-09-30T08:56:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '645d2c84535267e4982e06920d95b4d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ad-e198-4bf0-aaa2-4045950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:13.000Z",
            "modified": "2015-09-30T08:56:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'valera1501.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ad-d51c-4d0b-a7f3-4914950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:13.000Z",
            "modified": "2015-09-30T08:56:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'validivalidi.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ad-1410-428d-a63a-4e08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:13.000Z",
            "modified": "2015-09-30T08:56:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '646a217e1fb2b69bac04afa6dca23afc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ae-ebcc-4c0c-895b-4882950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:14.000Z",
            "modified": "2015-09-30T08:56:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vampir224.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ae-3818-48fa-a067-417e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:14.000Z",
            "modified": "2015-09-30T08:56:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vandreck.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ae-6a7c-45bc-ac4b-465c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:14.000Z",
            "modified": "2015-09-30T08:56:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '649cdfd5ac763df955bb37c196c5310d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ae-6ed0-47cf-8ec5-489f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:14.000Z",
            "modified": "2015-09-30T08:56:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vanishcc.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ae-4220-43bb-8275-497f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:14.000Z",
            "modified": "2015-09-30T08:56:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vannamarie.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ae-185c-4745-b964-4cf8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:14.000Z",
            "modified": "2015-09-30T08:56:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '649e3ab10fd1872a3fc5045786fe976e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ae-2a30-4ffb-9851-4ee7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:14.000Z",
            "modified": "2015-09-30T08:56:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vanomasov.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3af-85f4-4c71-b229-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:15.000Z",
            "modified": "2015-09-30T08:56:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vaporr.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3af-27d0-4236-93f6-4f8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:15.000Z",
            "modified": "2015-09-30T08:56:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64a32d18c0fbafc590c3041bd1b94d64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3af-e334-47ff-9d7c-40f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:15.000Z",
            "modified": "2015-09-30T08:56:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vavan321982.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3af-a3a0-4de6-84a2-4a1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:15.000Z",
            "modified": "2015-09-30T08:56:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vazzzzzz324334.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3af-ece0-4f78-8b8d-470a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:15.000Z",
            "modified": "2015-09-30T08:56:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64cb2c54f83d2f6a71e987debfa2b351']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3af-1a3c-4a39-885f-4149950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:15.000Z",
            "modified": "2015-09-30T08:56:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vcsso.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3af-fc6c-4eff-b2d0-4f6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:15.000Z",
            "modified": "2015-09-30T08:56:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds17.armdns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3af-fd28-4b78-bd66-4ea8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:15.000Z",
            "modified": "2015-09-30T08:56:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64dc8dbdb459d8c8c77168809bd8b2fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b0-7bcc-4229-87ad-446d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:16.000Z",
            "modified": "2015-09-30T08:56:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds17.colantotte.com.tr']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b0-6244-441b-ba27-4cce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:16.000Z",
            "modified": "2015-09-30T08:56:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds17.manyetikguc.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b0-555c-44b6-a7fe-4941950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:16.000Z",
            "modified": "2015-09-30T08:56:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64dccebab36df971b06bbef6087e16c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b0-52ec-4461-96e2-4e94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:16.000Z",
            "modified": "2015-09-30T08:56:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds17.nizamoglusaglik.com.tr']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b0-86f4-4bc4-9cba-47a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:16.000Z",
            "modified": "2015-09-30T08:56:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds17.stesweettr.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b0-d5e4-45c4-89a5-4f51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:16.000Z",
            "modified": "2015-09-30T08:56:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64e19c4d8f85d5b1e91153b57f058a05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b0-2af0-4008-815f-4a20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:16.000Z",
            "modified": "2015-09-30T08:56:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds18.armdns.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b1-78f8-445f-9866-4549950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:17.000Z",
            "modified": "2015-09-30T08:56:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds18.colantotte.com.tr']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b0-7eb8-48a2-bae6-4550950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:16.000Z",
            "modified": "2015-09-30T08:56:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64ea1aea7c9867546c5748e24938acd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b1-9200-49b7-891d-4d2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:17.000Z",
            "modified": "2015-09-30T08:56:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds18.manyetikguc.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b1-79cc-4354-8f88-4cb8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:17.000Z",
            "modified": "2015-09-30T08:56:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds18.nizamoglusaglik.com.tr']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b1-bf40-48a4-928d-4e08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:17.000Z",
            "modified": "2015-09-30T08:56:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64ea5025849387579c44a1ee7304fb78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b1-50ec-487e-ab6a-4a10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:17.000Z",
            "modified": "2015-09-30T08:56:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vds18.stesweettr.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b1-5a64-4a30-aa30-40d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:17.000Z",
            "modified": "2015-09-30T08:56:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'venenum.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b1-cb7c-4202-ab5a-49b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:17.000Z",
            "modified": "2015-09-30T08:56:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64f5cfa09f7b1d0500cf723849bb54bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b1-f110-4b3c-a1d0-4156950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:17.000Z",
            "modified": "2015-09-30T08:56:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'veritasrtd.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b2-9a7c-4638-b154-40a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:18.000Z",
            "modified": "2015-09-30T08:56:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vetason.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b2-1070-490c-99b0-4378950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:18.000Z",
            "modified": "2015-09-30T08:56:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '64fa86a0d292ada923e522df18f973cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b2-c388-4bdd-9363-4c0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:18.000Z",
            "modified": "2015-09-30T08:56:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vexban.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b2-3f34-43a4-bdd2-4a82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:18.000Z",
            "modified": "2015-09-30T08:56:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'victim07.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b2-c244-45ad-8e8c-46cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:18.000Z",
            "modified": "2015-09-30T08:56:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65147bd31dc72c01ed44572c2c9f9ea4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b2-e798-4bcf-b810-4932950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:18.000Z",
            "modified": "2015-09-30T08:56:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'victim1.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b2-76b0-4a87-8a6d-454b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:18.000Z",
            "modified": "2015-09-30T08:56:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'victimrat.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b2-e850-437d-a7b9-4438950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:18.000Z",
            "modified": "2015-09-30T08:56:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6522ac232e0a16f5e35b482598309b49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b3-5a74-44a8-a218-4a51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:19.000Z",
            "modified": "2015-09-30T08:56:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'victork.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b3-6ee4-4f18-a872-4df5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:19.000Z",
            "modified": "2015-09-30T08:56:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'victorlus.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b3-da8c-4227-9856-49d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:19.000Z",
            "modified": "2015-09-30T08:56:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6532e8dff9de396c8af4d2f5f4c87a2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b3-e5ec-4394-aa20-4ef3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:19.000Z",
            "modified": "2015-09-30T08:56:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'viespeukserver.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b3-be74-45bb-8062-42cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:19.000Z",
            "modified": "2015-09-30T08:56:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'viktorxd.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b3-c0a4-46f8-af91-47e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:19.000Z",
            "modified": "2015-09-30T08:56:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65335c3362c2a5af1662e5d596e812c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b3-4088-409e-b962-4b86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:19.000Z",
            "modified": "2015-09-30T08:56:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vinomen.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b4-071c-425e-8659-41f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:20.000Z",
            "modified": "2015-09-30T08:56:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vipcck.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b4-b0e8-43ce-8de3-45c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:20.000Z",
            "modified": "2015-09-30T08:56:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '653e7077e6623b3ec70e6324b579ac28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b4-77e4-44df-91a2-4472950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:20.000Z",
            "modified": "2015-09-30T08:56:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'viphacker31.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b4-a94c-4916-98ca-434b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:20.000Z",
            "modified": "2015-09-30T08:56:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vipkaanvip.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b4-ee9c-496f-aa5c-4512950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:20.000Z",
            "modified": "2015-09-30T08:56:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '654214014886df73d540a9a56ab51e97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b4-a1a0-4564-917b-45b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:20.000Z",
            "modified": "2015-09-30T08:56:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'virus-2015.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b4-5268-4002-b7b1-420d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:20.000Z",
            "modified": "2015-09-30T08:56:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'virus12.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b4-3ab8-4a65-a188-46f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:20.000Z",
            "modified": "2015-09-30T08:56:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65553580bc75d69a6b4499e932a90f75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b5-29ac-4983-bf7d-41d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:21.000Z",
            "modified": "2015-09-30T08:56:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'viruzmodzhd.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b5-9ac4-4921-844a-489a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:21.000Z",
            "modified": "2015-09-30T08:56:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vitalik.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b5-ab7c-4b34-990e-4501950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:21.000Z",
            "modified": "2015-09-30T08:56:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '655f11084a9188063f3b4a588a249cf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b5-a2dc-42a2-9757-4e04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:21.000Z",
            "modified": "2015-09-30T08:56:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vitaliydarc.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b5-4134-4f1d-b483-4841950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:21.000Z",
            "modified": "2015-09-30T08:56:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vitaliylandll.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b5-2ab8-4c5f-81c5-45e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:21.000Z",
            "modified": "2015-09-30T08:56:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6568740c839a3272ec11909071bdd970']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b5-6508-4034-8d75-4160950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:21.000Z",
            "modified": "2015-09-30T08:56:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vitima.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b6-8904-4f91-ab50-465b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:22.000Z",
            "modified": "2015-09-30T08:56:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vkhzone.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b5-4f58-4a0e-95ce-464d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:21.000Z",
            "modified": "2015-09-30T08:56:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '657f0d8565a0113f64877e1be2eb3384']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b6-50f0-48d0-a9a9-4cdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:22.000Z",
            "modified": "2015-09-30T08:56:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vlad00550.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b6-5c80-4806-983c-4984950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:22.000Z",
            "modified": "2015-09-30T08:56:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vlad33393.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b6-ebd0-4cda-bf9b-4a32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:22.000Z",
            "modified": "2015-09-30T08:56:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6584306c1582de374a54f297edadde3d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b6-e134-4718-85d2-4499950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:22.000Z",
            "modified": "2015-09-30T08:56:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vlad50518.servegame.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b6-5918-44f1-9784-4fc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:22.000Z",
            "modified": "2015-09-30T08:56:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vladebord.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b6-d230-4a7f-8cdf-4fe2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:22.000Z",
            "modified": "2015-09-30T08:56:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6584a02e3ea1b9ffa642baacc7aeef32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b6-6730-4374-801e-4eeb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:22.000Z",
            "modified": "2015-09-30T08:56:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vladfox1337.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b7-07e4-4f08-89e9-42c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:23.000Z",
            "modified": "2015-09-30T08:56:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'voided.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b7-5f24-4cd3-a278-4f6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:23.000Z",
            "modified": "2015-09-30T08:56:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6591f3d21b9b7c84a4949a40416f10ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b7-56d4-48d6-86f6-4872950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:23.000Z",
            "modified": "2015-09-30T08:56:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'voidim.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b7-0b34-4783-b177-4822950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:23.000Z",
            "modified": "2015-09-30T08:56:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'volam2.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b7-edf8-4312-8671-4cfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:23.000Z",
            "modified": "2015-09-30T08:56:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '659351d021e216d4329a76fb558da7d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b7-64b0-4eef-ab2e-4662950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:23.000Z",
            "modified": "2015-09-30T08:56:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'volunia.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b7-4ef0-4f7d-9fc6-4a19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:23.000Z",
            "modified": "2015-09-30T08:56:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'volvolvol.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b7-82fc-49b9-95da-4f12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:23.000Z",
            "modified": "2015-09-30T08:56:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65983ff2b3790cc6988e7f1eb129cfad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b8-fccc-4724-bd8c-4740950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:24.000Z",
            "modified": "2015-09-30T08:56:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'voodoo911.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b8-6e0c-4979-a752-4dbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:24.000Z",
            "modified": "2015-09-30T08:56:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vova1996pp.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b8-c358-4716-81f8-407e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:24.000Z",
            "modified": "2015-09-30T08:56:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '659b428c2e968dfe2d3375be3808d8d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b8-f2c0-4f6e-9a8c-451c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:24.000Z",
            "modified": "2015-09-30T08:56:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vovan276.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b8-1f34-405f-895b-4fd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:24.000Z",
            "modified": "2015-09-30T08:56:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vovan895333.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b8-93d0-4c24-8457-49e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:24.000Z",
            "modified": "2015-09-30T08:56:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '659fcd7f92c7606f7d0f55d75643ee0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b8-c328-4b13-8b1f-4a6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:24.000Z",
            "modified": "2015-09-30T08:56:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vovikfox.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b9-1b94-4cc6-83df-4bc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:25.000Z",
            "modified": "2015-09-30T08:56:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vpnhome9999.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b9-427c-4fbc-9810-4381950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:25.000Z",
            "modified": "2015-09-30T08:56:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65a52e16b45d596c89abdf61817bdbf7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b9-4094-43b6-bca7-4dcc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:25.000Z",
            "modified": "2015-09-30T08:56:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vps-1118738-13762.manage.myhosting.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b9-e708-4072-9bf5-486c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:25.000Z",
            "modified": "2015-09-30T08:56:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vps11913.ovh.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b9-64b4-402c-84cc-47c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:25.000Z",
            "modified": "2015-09-30T08:56:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65a78be8e62afc540c27af3e36a99008']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b9-fa50-4060-b5f3-4481950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:25.000Z",
            "modified": "2015-09-30T08:56:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vsanity.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b9-9e7c-40f9-8fa7-487b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:25.000Z",
            "modified": "2015-09-30T08:56:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vsvs.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3b9-1794-4bb0-85a9-4894950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:25.000Z",
            "modified": "2015-09-30T08:56:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65c62aefbebb02a1519119f24f4a124d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ba-e0ac-4dd9-9168-47d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:26.000Z",
            "modified": "2015-09-30T08:56:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vycepiker.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ba-21bc-4ad8-b4ff-4b5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:26.000Z",
            "modified": "2015-09-30T08:56:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vzlom123.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ba-ebb8-42ad-8731-4c1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:26.000Z",
            "modified": "2015-09-30T08:56:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65d3e9b576f9c43863b7ffa986cdde44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ba-f6a8-4f31-a481-4172950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:26.000Z",
            "modified": "2015-09-30T08:56:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'vzlomeve.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ba-9b6c-47ae-9169-41fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:26.000Z",
            "modified": "2015-09-30T08:56:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'w3b-h4ck.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ba-b468-4c09-989d-48b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:26.000Z",
            "modified": "2015-09-30T08:56:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65dc4f8f21a5d40138b76a3c318a0874']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ba-a93c-48cf-a5f9-4294950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:26.000Z",
            "modified": "2015-09-30T08:56:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wa7sheee1000.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bb-3700-4017-a893-4e7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:27.000Z",
            "modified": "2015-09-30T08:56:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'waasuhu.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ba-b104-4af8-bbf4-460f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:26.000Z",
            "modified": "2015-09-30T08:56:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65df3b3149599b799b0ec6df59020a23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bb-bb74-45e0-bb2d-46e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:27.000Z",
            "modified": "2015-09-30T08:56:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'walid4hack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bb-eea4-45b3-ad11-471d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:27.000Z",
            "modified": "2015-09-30T08:56:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wargaming.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bb-1294-48ec-b30c-48e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:27.000Z",
            "modified": "2015-09-30T08:56:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '65e82c099ac7526e1ae8d17c50234a6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bb-c3f4-4eca-b61b-4794950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:27.000Z",
            "modified": "2015-09-30T08:56:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'waroussama.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bb-7424-496b-ae9a-4987950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:27.000Z",
            "modified": "2015-09-30T08:56:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wasihacker.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bb-31fc-4bff-8e94-46a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:27.000Z",
            "modified": "2015-09-30T08:56:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '660537f79c7b168341f45e6d21c48868']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bb-8cec-44d4-9080-4e43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:27.000Z",
            "modified": "2015-09-30T08:56:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wearetogether.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bc-71fc-4db0-98e4-4050950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:28.000Z",
            "modified": "2015-09-30T08:56:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'websiteconst.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bc-1d48-4a51-9c51-41b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:28.000Z",
            "modified": "2015-09-30T08:56:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6614e5484be69c7d234688c3a1697ddf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bc-84a0-4653-97be-41b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:28.000Z",
            "modified": "2015-09-30T08:56:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'weetramada.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bc-d758-4413-8b0b-4ffb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:28.000Z",
            "modified": "2015-09-30T08:56:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'welcometomyrat.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bc-8628-4c64-a25e-419b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:28.000Z",
            "modified": "2015-09-30T08:56:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '661af3ede4240c9320d8aa8132158a89']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bc-ac20-433a-b686-4c13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:28.000Z",
            "modified": "2015-09-30T08:56:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'weliketofucku.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bc-3d3c-4403-8715-41b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:28.000Z",
            "modified": "2015-09-30T08:56:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wellendarckomet.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bc-85e4-492b-94df-4555950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:28.000Z",
            "modified": "2015-09-30T08:56:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66233a75d841443aac9e5b61646ba785']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bd-def4-4cd3-960d-46fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:29.000Z",
            "modified": "2015-09-30T08:56:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wellihar.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bd-abe0-4d1b-8d6c-405d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:29.000Z",
            "modified": "2015-09-30T08:56:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wfblack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bd-67dc-4cb8-8a64-4daf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:29.000Z",
            "modified": "2015-09-30T08:56:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66305e65d0feafa5933c2ade06bb4041']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bd-05dc-43ff-b921-43df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:29.000Z",
            "modified": "2015-09-30T08:56:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wfclack.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bd-6a84-422b-8601-422b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:29.000Z",
            "modified": "2015-09-30T08:56:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wfjuiwhfuweifh.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bd-0c8c-4e06-af59-4fc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:29.000Z",
            "modified": "2015-09-30T08:56:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6633296b62234bb5a0d4dd1a18ad0063']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bd-c9d4-415d-a8eb-4e00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:29.000Z",
            "modified": "2015-09-30T08:56:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whateveryouwant.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3be-0478-4666-942b-4659950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:30.000Z",
            "modified": "2015-09-30T08:56:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whatisredhot.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bd-3960-4b28-bb05-4a3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:29.000Z",
            "modified": "2015-09-30T08:56:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '663ce72c26f31c5dae786ea6ced62b58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3be-18ac-46bd-a6d2-4c77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:30.000Z",
            "modified": "2015-09-30T08:56:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whatmyip.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3be-bb0c-4166-ab5b-448a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:30.000Z",
            "modified": "2015-09-30T08:56:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whatsupdude.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3be-8e38-432d-84ef-4708950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:30.000Z",
            "modified": "2015-09-30T08:56:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6641888ca1332870c3cd4911592d5a92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3be-5154-4462-aedd-4fa9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:30.000Z",
            "modified": "2015-09-30T08:56:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whenthebeatdrops.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3be-06b8-4295-90f3-4526950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:30.000Z",
            "modified": "2015-09-30T08:56:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whitelol.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3be-d69c-42f1-8c2f-4aa5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:30.000Z",
            "modified": "2015-09-30T08:56:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66448eeb1c6175d36e9f094da245f6ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bf-9e90-4f48-bf39-41c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:31.000Z",
            "modified": "2015-09-30T08:56:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whoedie.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bf-b830-4400-a607-45ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:31.000Z",
            "modified": "2015-09-30T08:56:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whoompthereitis.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bf-cbd8-4b10-941b-4075950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:31.000Z",
            "modified": "2015-09-30T08:56:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66451f8de2f90a0833477a2fe36ec67e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bf-67b8-4eb6-beb9-4ff2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:31.000Z",
            "modified": "2015-09-30T08:56:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whoompthereitis.noip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bf-4394-4bb4-94ff-4d41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:31.000Z",
            "modified": "2015-09-30T08:56:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whosawknee.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bf-ad38-4978-bb5f-4e16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:31.000Z",
            "modified": "2015-09-30T08:56:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '664cec0ae7bcf4b3c079b0bfa67d56ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bf-a9d0-458e-ab05-4701950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:31.000Z",
            "modified": "2015-09-30T08:56:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'whpndfgh.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c0-f648-4ec8-bc1c-4271950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:32.000Z",
            "modified": "2015-09-30T08:56:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wiggwiggwigg.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3bf-01c0-4706-898e-4869950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:31.000Z",
            "modified": "2015-09-30T08:56:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66562062cb701680f565a72620b5e755']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c0-93fc-47ce-a366-4e12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:32.000Z",
            "modified": "2015-09-30T08:56:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'willybasm.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c0-6ac8-4da6-83e7-4895950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:32.000Z",
            "modified": "2015-09-30T08:56:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'win10tr.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c0-468c-42d6-a074-4171950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:32.000Z",
            "modified": "2015-09-30T08:56:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '665b87333ab605ed8de5413607d3ae42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c0-c780-46e3-aaf2-4210950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:32.000Z",
            "modified": "2015-09-30T08:56:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'windows614.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c0-4348-42d8-ab19-45fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:32.000Z",
            "modified": "2015-09-30T08:56:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'windowschecker.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c0-2b8c-46a5-996a-44e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:32.000Z",
            "modified": "2015-09-30T08:56:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6660e25213dfca8e51bd9150f548ae0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c0-d584-4cda-92b1-4987950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:32.000Z",
            "modified": "2015-09-30T08:56:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'windowshostprocess.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c1-54e0-47cd-a190-48c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:33.000Z",
            "modified": "2015-09-30T08:56:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'windowslive20125.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c1-ac84-47df-b205-4c13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:33.000Z",
            "modified": "2015-09-30T08:56:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6661365123605cb260b1700cd739b287']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c1-b774-4594-b4e3-48a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:33.000Z",
            "modified": "2015-09-30T08:56:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'windowsty.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c1-41f4-4dfb-956e-4fae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:33.000Z",
            "modified": "2015-09-30T08:56:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'winlogoneh.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c1-e3ac-4d3b-8827-4901950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:33.000Z",
            "modified": "2015-09-30T08:56:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6665cd4b78cd0e720633e6c192432b02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c1-7888-4703-aa55-4e45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:33.000Z",
            "modified": "2015-09-30T08:56:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'winterpi.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c1-99c8-4b85-9d83-44df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:33.000Z",
            "modified": "2015-09-30T08:56:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wiskasbro.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c1-97f8-49e1-8cd3-45d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:33.000Z",
            "modified": "2015-09-30T08:56:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6677317cbb906d419a62c4932423f2fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c2-1608-49cd-93ef-49b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:34.000Z",
            "modified": "2015-09-30T08:56:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wixixiwi.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c2-6158-4e7f-8f22-4945950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:34.000Z",
            "modified": "2015-09-30T08:56:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wmiprop.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c2-9480-4173-afbb-4337950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:34.000Z",
            "modified": "2015-09-30T08:56:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6688a31f46e478717638a09ecee1cc23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c2-d83c-4ab6-9e25-4285950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:34.000Z",
            "modified": "2015-09-30T08:56:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wolf12.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c2-4f9c-46c3-b92b-49b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:34.000Z",
            "modified": "2015-09-30T08:56:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wolfteam.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c2-9ed4-4da6-a527-4204950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:34.000Z",
            "modified": "2015-09-30T08:56:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '669491dda16b3ac078d878575b5ec585']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c2-03f8-4539-8c90-4eb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:34.000Z",
            "modified": "2015-09-30T08:56:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wolfteamcar123.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c3-ef60-4381-a9bf-4a76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:35.000Z",
            "modified": "2015-09-30T08:56:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'womanizinq27.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c3-ae68-4b83-8b46-4d96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:35.000Z",
            "modified": "2015-09-30T08:56:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '669b323d6c3bae182bab76b3b4ed7479']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c3-3210-42a0-9956-48f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:35.000Z",
            "modified": "2015-09-30T08:56:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wooboo.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c3-2600-4806-a00d-4982950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:35.000Z",
            "modified": "2015-09-30T08:56:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'woreshd.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c3-5c70-4509-8891-4fda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:35.000Z",
            "modified": "2015-09-30T08:56:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66a101103be7c220a294000ee10365d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c3-1854-4b16-9e62-49a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:35.000Z",
            "modified": "2015-09-30T08:56:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'world-studio.webhop.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c3-73d8-4e72-b6dc-4348950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:35.000Z",
            "modified": "2015-09-30T08:56:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wotara.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c3-da44-4acb-a53a-47f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:35.000Z",
            "modified": "2015-09-30T08:56:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66aae26b41db39c7fe70705456e9cbee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c4-4430-447a-b60b-4824950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:36.000Z",
            "modified": "2015-09-30T08:56:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'woukieyt.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c4-8fd0-4587-9587-4ce3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:36.000Z",
            "modified": "2015-09-30T08:56:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wowa20166.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c4-fee0-4758-8e92-490a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:36.000Z",
            "modified": "2015-09-30T08:56:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66afadd96140ff0dc4a2a4db93abfb04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c4-43a4-4757-a91b-4f74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:36.000Z",
            "modified": "2015-09-30T08:56:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wsurvive127.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c4-09a0-449e-aead-4334950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:36.000Z",
            "modified": "2015-09-30T08:56:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wsxdidi.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c4-26ec-4a23-8f59-4bfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:36.000Z",
            "modified": "2015-09-30T08:56:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66b271ec0849849ff7b2548af6dd824a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c4-266c-488c-afa9-4b70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:36.000Z",
            "modified": "2015-09-30T08:56:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wukielukie.mooo.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c5-28b8-4f77-87ed-4a90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:37.000Z",
            "modified": "2015-09-30T08:56:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wuza1001.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c4-6cc8-41c2-96ef-44eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:36.000Z",
            "modified": "2015-09-30T08:56:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66b48fd4c1240314e0a65bd4654dc120']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c5-7a40-44e0-a340-404c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:37.000Z",
            "modified": "2015-09-30T08:56:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'wwww1111.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c5-9274-42e1-9ce8-48d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:37.000Z",
            "modified": "2015-09-30T08:56:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'x-sh4d0w.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c5-2fb0-46f9-bc63-4afc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:37.000Z",
            "modified": "2015-09-30T08:56:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66ba3e7364486c42b9f9cb769ab99704']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c5-23e0-45e4-9484-4f3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:37.000Z",
            "modified": "2015-09-30T08:56:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'x03z.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c5-8edc-494f-875a-4e45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:37.000Z",
            "modified": "2015-09-30T08:56:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xa3r0.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c5-ea04-42b5-8775-4889950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:37.000Z",
            "modified": "2015-09-30T08:56:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66bbb374d0b44138aee4ca7d685fb8da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c5-3180-4b25-a6f8-4d3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:37.000Z",
            "modified": "2015-09-30T08:56:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xahmr.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c6-3af0-4b56-9e81-4617950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:38.000Z",
            "modified": "2015-09-30T08:56:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xaixeixou.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c6-bec8-4e30-b4a1-483b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:38.000Z",
            "modified": "2015-09-30T08:56:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66d42e573f53ab9a32a92383fb1046d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c6-4b18-4ae4-805d-43a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:38.000Z",
            "modified": "2015-09-30T08:56:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xat35.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c6-c240-432d-a110-44b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:38.000Z",
            "modified": "2015-09-30T08:56:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xatnubstest.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c6-f684-453f-8c56-4f44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:38.000Z",
            "modified": "2015-09-30T08:56:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66d997c79e6f44a4fbc2209e7a04782d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c6-fee0-446a-9d47-438b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:38.000Z",
            "modified": "2015-09-30T08:56:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xaviius.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c6-17e0-4d6c-ac12-448a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:38.000Z",
            "modified": "2015-09-30T08:56:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xblshady1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c6-80f8-44ac-b531-4868950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:38.000Z",
            "modified": "2015-09-30T08:56:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66dfe95c315c2bca61baa42d2fe4ed22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c7-8790-444f-90e0-4bd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:39.000Z",
            "modified": "2015-09-30T08:56:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xclbr.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c7-3650-454d-adc8-46cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:39.000Z",
            "modified": "2015-09-30T08:56:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xclbr.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c7-8364-4a13-9c84-456d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:39.000Z",
            "modified": "2015-09-30T08:56:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66e4935614107330f6098cb112bc16cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c7-9e4c-43ba-9f56-4f7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:39.000Z",
            "modified": "2015-09-30T08:56:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xdebron.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c7-7e04-4c04-a6b4-4ef7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:39.000Z",
            "modified": "2015-09-30T08:56:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xenils.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c7-6d3c-4662-9a38-4e1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:39.000Z",
            "modified": "2015-09-30T08:56:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66f76ee41967d13342d2f58c189451b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c7-2120-4fa4-be25-4e12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:39.000Z",
            "modified": "2015-09-30T08:56:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xenonbalon.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c8-8da8-454a-a364-4717950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:40.000Z",
            "modified": "2015-09-30T08:56:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xexboost.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c8-def0-43cb-b531-4009950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:40.000Z",
            "modified": "2015-09-30T08:56:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '66f8d18fcd4f2c09fffd0af0c6e10412']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c8-b37c-4411-9535-4379950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:40.000Z",
            "modified": "2015-09-30T08:56:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xgamerelites.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c8-3944-46bd-9e77-4fcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:40.000Z",
            "modified": "2015-09-30T08:56:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xgeneratorx.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c8-e294-4518-b6d1-4063950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:40.000Z",
            "modified": "2015-09-30T08:56:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67022a23e8f0ada140351af166726db5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c8-01e0-4ef7-86ca-4859950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:40.000Z",
            "modified": "2015-09-30T08:56:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xiller.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c8-f908-4b8e-9e49-468d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:40.000Z",
            "modified": "2015-09-30T08:56:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xlskk68.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c8-4494-49c4-9695-49bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:40.000Z",
            "modified": "2015-09-30T08:56:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6707bbf2a1a56ddcc760147d447ec96d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c9-c0dc-493d-87b0-4ffb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:41.000Z",
            "modified": "2015-09-30T08:56:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xmaster123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c9-0e40-46ea-bbb8-4187950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:41.000Z",
            "modified": "2015-09-30T08:56:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xmear.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c9-f9c0-4313-a8b2-4577950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:41.000Z",
            "modified": "2015-09-30T08:56:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6712a7261d2ad967a6fbf7ffc5c762ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c9-1a68-424d-ad31-4a72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:41.000Z",
            "modified": "2015-09-30T08:56:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xploiter.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c9-4db4-4118-aa5e-4e9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:41.000Z",
            "modified": "2015-09-30T08:56:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xratdeneme.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c9-74dc-4695-b6d5-43b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:41.000Z",
            "modified": "2015-09-30T08:56:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '671a2f35d55e9804ceaf651a1d8b7390']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ca-2c90-48df-98fc-4b6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:42.000Z",
            "modified": "2015-09-30T08:56:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '671de63d4960ab7a77acf64c7ebbff21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3c9-eaec-4a63-91fc-4262950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:41.000Z",
            "modified": "2015-09-30T08:56:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xsadchx.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ca-75fc-426c-a2d9-41fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:42.000Z",
            "modified": "2015-09-30T08:56:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '671e74ac8c7e07bc7ade48fff4912ad0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ca-edf4-47bc-aa67-4e03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:42.000Z",
            "modified": "2015-09-30T08:56:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6721b7c9027c96565a1abd5b8798dbb6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ca-366c-49a0-b5b1-484c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:42.000Z",
            "modified": "2015-09-30T08:56:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xsystematic.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ca-f168-407f-aa78-41e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:42.000Z",
            "modified": "2015-09-30T08:56:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6721da847882fa8e4c127f984bcb2f65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ca-f678-495f-8560-4677950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:42.000Z",
            "modified": "2015-09-30T08:56:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67225e9b9d0370a4f48c0e7dcbefe4ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ca-a7f0-43e1-87d3-48c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:42.000Z",
            "modified": "2015-09-30T08:56:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xvhostx.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cb-527c-4765-bed2-4f59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:43.000Z",
            "modified": "2015-09-30T08:56:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '672cf62d00a7fefc4b7b29ff9b31ff61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cb-d93c-45f6-b62f-4054950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:43.000Z",
            "modified": "2015-09-30T08:56:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6737e3e69dd0dd953695c0af84e47f0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cb-5800-472a-a245-4d1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:43.000Z",
            "modified": "2015-09-30T08:56:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xxxdevil.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cb-b794-47a5-9682-4ab7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:43.000Z",
            "modified": "2015-09-30T08:56:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6739304f1db705ec40bb560c84a22b3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cb-ce34-42bf-9851-41ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:43.000Z",
            "modified": "2015-09-30T08:56:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '673ca77633c63bbe37691af02e63ba92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cb-b344-493c-a518-4c5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:43.000Z",
            "modified": "2015-09-30T08:56:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xyber.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cb-65fc-4200-9e54-4297950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:43.000Z",
            "modified": "2015-09-30T08:56:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6744bbf302c735fd7c73e19d805cb018']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cc-dc78-4823-9a3f-4289950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:44.000Z",
            "modified": "2015-09-30T08:56:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67461cbc66a578c1a9cefbbe799648cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cb-1e60-4225-8e11-45da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:43.000Z",
            "modified": "2015-09-30T08:56:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xyz2145.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cc-1e10-41d2-8370-434c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:44.000Z",
            "modified": "2015-09-30T08:56:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67478481b5b749f1c6ad1e0517cba15b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cc-9f68-411a-804d-4141950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:44.000Z",
            "modified": "2015-09-30T08:56:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '674bda89b33c96496bf36fba3755180f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cc-7d74-4edc-bd1f-49ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:44.000Z",
            "modified": "2015-09-30T08:56:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xyz2145.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cc-a70c-426f-a4f7-4846950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:44.000Z",
            "modified": "2015-09-30T08:56:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '675112a6d0807eba5ccf66aeee804d01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cc-7f30-4af6-8479-4999950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:44.000Z",
            "modified": "2015-09-30T08:56:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '675d290c6e707dd589f1a03eda9dfbec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cc-5e68-4016-bd6e-4205950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:44.000Z",
            "modified": "2015-09-30T08:56:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'xzone.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cd-706c-402f-a43d-4530950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:45.000Z",
            "modified": "2015-09-30T08:56:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '676395b6bb8253d113feb602f3b9d7ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cd-7538-429c-a4bf-4e94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:45.000Z",
            "modified": "2015-09-30T08:56:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6770d779fea15d216a64abea9607da2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cd-1b00-4126-b848-4a90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:45.000Z",
            "modified": "2015-09-30T08:56:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'y98.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cd-7164-4c56-b976-46d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:45.000Z",
            "modified": "2015-09-30T08:56:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '677594c48744e1a8035ce52a8798a930']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cd-3e00-4b39-8d70-48c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:45.000Z",
            "modified": "2015-09-30T08:56:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '677d7ac2d1610ed78c7299380b1ba35c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cd-d3e0-42e7-9504-4cc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:45.000Z",
            "modified": "2015-09-30T08:56:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yahooinc.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cd-3324-425a-95d3-439a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:45.000Z",
            "modified": "2015-09-30T08:56:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '677f8ebb51cb1ac13ee32259b57dac58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ce-489c-45e0-9112-461b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:46.000Z",
            "modified": "2015-09-30T08:56:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '678868bcbdd60c4ab05c31802260fd0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cd-986c-4e35-8d71-4076950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:45.000Z",
            "modified": "2015-09-30T08:56:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yahya.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ce-ebf8-4446-adf3-4f68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:46.000Z",
            "modified": "2015-09-30T08:56:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '678e1bb213d1eae55f423d76674c2b0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ce-6494-446c-ab52-4ac6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:46.000Z",
            "modified": "2015-09-30T08:56:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '678e24a12a3ce141834706d764d8fda6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ce-8720-44f1-b9c3-4e4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:46.000Z",
            "modified": "2015-09-30T08:56:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yangkue.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ce-4950-480d-8c4b-493a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:46.000Z",
            "modified": "2015-09-30T08:56:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '679378038e2e4cd9d7e0c5f3b1f044f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ce-25b8-47b6-947d-4b24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:46.000Z",
            "modified": "2015-09-30T08:56:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6793bd48eb1d39e7f8707bfd74c96b48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ce-b5d8-4ff6-8b77-4f3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:46.000Z",
            "modified": "2015-09-30T08:56:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yarrakelo.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ce-e46c-4685-8a18-464f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:46.000Z",
            "modified": "2015-09-30T08:56:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67995772992eefbff6cf02f093c282c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cf-d024-4389-bd61-4ff3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:47.000Z",
            "modified": "2015-09-30T08:56:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '679f27511202235a77fd49e47b6bd8b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cf-8460-4c39-ba3f-49f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:47.000Z",
            "modified": "2015-09-30T08:56:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yasarbolat.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cf-4ae0-42ea-b646-4034950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:47.000Z",
            "modified": "2015-09-30T08:56:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67a6c44bc6656dfb8f407f90a10e015d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cf-b1a0-4aae-9493-46f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:47.000Z",
            "modified": "2015-09-30T08:56:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67b16ed11230f29d67459e8124816656']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cf-882c-4e66-8d78-4e2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:47.000Z",
            "modified": "2015-09-30T08:56:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yashok2033.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cf-12f8-4dd0-a00d-4d2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:47.000Z",
            "modified": "2015-09-30T08:56:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67b76d283e90ccd78ccf538134d3e264']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cf-1708-4e23-a49a-4555950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:47.000Z",
            "modified": "2015-09-30T08:56:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67c4db332435cac040553bba281d5167']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3cf-17c4-49c6-8390-47cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:47.000Z",
            "modified": "2015-09-30T08:56:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ybepro.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d0-365c-48fb-ab8f-41fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:48.000Z",
            "modified": "2015-09-30T08:56:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67c7453b1d068c03816efd4d225dac31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d0-39e0-4799-b10a-4486950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:48.000Z",
            "modified": "2015-09-30T08:56:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67ced206715663946fd800de0f4e9493']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d0-6494-4f7d-9140-4a6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:48.000Z",
            "modified": "2015-09-30T08:56:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yeahrap.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d0-10f0-4764-862e-44b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:48.000Z",
            "modified": "2015-09-30T08:56:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67da68eaf62fa28ce3da99636a4a4baf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d0-4c48-401c-b33a-4b30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:48.000Z",
            "modified": "2015-09-30T08:56:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67db19f9fce55c24730664850f2b3d3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d0-3500-4391-8b17-4b2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:48.000Z",
            "modified": "2015-09-30T08:56:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yeet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d0-c91c-4579-8f3d-40e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:48.000Z",
            "modified": "2015-09-30T08:56:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67f2ac90b82401d76a5226fc76184f7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d1-dad0-4ec0-9db1-4e96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:49.000Z",
            "modified": "2015-09-30T08:56:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67f6fb90b72c740de412fc2821d1a10d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d1-f218-4851-a98e-4612950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:49.000Z",
            "modified": "2015-09-30T08:56:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yehyeh.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d1-dfb8-41cf-9bd2-4183950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:49.000Z",
            "modified": "2015-09-30T08:56:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '67f9a466fc31aae44329b253afe700c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d1-dd90-4f88-b6dd-4054950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:49.000Z",
            "modified": "2015-09-30T08:56:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6801704fc15fd2d800c967ef810fa862']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d1-a0f0-46c1-a4af-4388950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:49.000Z",
            "modified": "2015-09-30T08:56:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yeswecansf.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d1-d148-4557-9b87-4120950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:49.000Z",
            "modified": "2015-09-30T08:56:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6818545a8bb688f0e8ea1f6dbaf593d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d1-0830-4c91-941e-4b5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:49.000Z",
            "modified": "2015-09-30T08:56:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '681887d06d58ffda953cd412e81df1c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d1-fed8-4710-b66d-4cd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:49.000Z",
            "modified": "2015-09-30T08:56:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ymosole.hopto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d2-4194-4841-a081-4434950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:50.000Z",
            "modified": "2015-09-30T08:56:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '681f9d8778995c4f813fddfa79b09b81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d2-f7f8-4c89-ad37-4101950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:50.000Z",
            "modified": "2015-09-30T08:56:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68266bd54d91a7bc1d9416d0409b7fbf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d2-26e0-4bd3-a577-4372950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:50.000Z",
            "modified": "2015-09-30T08:56:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yoichiddserver.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d2-cfac-409b-bc17-48df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:50.000Z",
            "modified": "2015-09-30T08:56:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '682ff081371eeea37e6751204b24acd0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d2-fdc8-458d-a953-4a68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:50.000Z",
            "modified": "2015-09-30T08:56:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6839994fb8be8437998ef6983d898c56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d2-3170-4ee0-99ea-4509950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:50.000Z",
            "modified": "2015-09-30T08:56:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yolopolo.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d2-7ee0-407b-a31e-42bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:50.000Z",
            "modified": "2015-09-30T08:56:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '684c80c90991f035690e79dfc64a4e3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d3-dcb4-472b-b41e-4bc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:51.000Z",
            "modified": "2015-09-30T08:56:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6857e4bdf1011f89defb9909183f440a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d2-d254-4506-943f-4e8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:50.000Z",
            "modified": "2015-09-30T08:56:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yoloswaginz.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d3-152c-4d46-a87a-4230950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:51.000Z",
            "modified": "2015-09-30T08:56:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '686d426c93f570584a30782ee672f436']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d3-3cec-4297-8dae-4941950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:51.000Z",
            "modified": "2015-09-30T08:56:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '687311577dc0a907b32e11e388ba7c09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d3-ef24-47d7-be43-489c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:51.000Z",
            "modified": "2015-09-30T08:56:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'youaregaybastard.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d3-d5bc-47e8-b2b3-4b45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:51.000Z",
            "modified": "2015-09-30T08:56:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6873f32296ad8ecb909c715a0ba910cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d3-a2f0-4170-98a7-4fb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:51.000Z",
            "modified": "2015-09-30T08:56:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6875dce9ec02e5771111e35e504dec5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d3-9f44-4c83-b441-4142950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:51.000Z",
            "modified": "2015-09-30T08:56:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yougothacked.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d4-b3ac-488c-a87d-47f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:52.000Z",
            "modified": "2015-09-30T08:56:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6878b0fb08a6ab535f57ba5ddb703a69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d4-bef0-4f59-a902-4418950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:52.000Z",
            "modified": "2015-09-30T08:56:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '687d19aa80edf5b371359d34cdb386f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d4-70d8-4c62-ad09-4a98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:52.000Z",
            "modified": "2015-09-30T08:56:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yougothacked123.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d4-1300-4072-b285-44bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:52.000Z",
            "modified": "2015-09-30T08:56:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68826cbc64e4b1659ad51b21369ae037']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d4-0430-4ecf-8c97-4dab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:52.000Z",
            "modified": "2015-09-30T08:56:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '688421a476886e9942d42a1940eb6afc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d4-8bc0-413a-ae3f-4751950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:52.000Z",
            "modified": "2015-09-30T08:56:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'youhacked.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d4-3c44-4da9-a3fd-4023950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:52.000Z",
            "modified": "2015-09-30T08:56:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6892e4c3fd8646a31e602e4d64e8b729']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d5-d100-441b-ad1a-45b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:53.000Z",
            "modified": "2015-09-30T08:56:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '689df6a6c7f1cd70e0d5673acec5d3d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d4-f7e0-46aa-889c-4bcd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:52.000Z",
            "modified": "2015-09-30T08:56:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yourmomspenis.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d5-ef8c-4ac9-a459-45cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:53.000Z",
            "modified": "2015-09-30T08:56:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68afdf93231cfab1eeff668216691896']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d5-6f0c-4d5d-a74f-430d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:53.000Z",
            "modified": "2015-09-30T08:56:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68b1020105dcac60be14f9d54fb6ccd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d5-8afc-4cb0-a3bb-4f28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:53.000Z",
            "modified": "2015-09-30T08:56:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yourname.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d5-d514-4fd7-abe0-49b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:53.000Z",
            "modified": "2015-09-30T08:56:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68b6687c28bf2ba97e473e97bd948f19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d5-37c0-4bea-947c-40e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:53.000Z",
            "modified": "2015-09-30T08:56:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68c505df34976e6f4957449273bd5e5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d5-9280-4b0b-b880-4112950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:53.000Z",
            "modified": "2015-09-30T08:56:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'youssefbenazir.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d5-1128-42ad-9323-40f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:53.000Z",
            "modified": "2015-09-30T08:56:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68d2f54210d2e055459fe8d91859cb0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d6-f8a0-4393-a53d-4abe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:54.000Z",
            "modified": "2015-09-30T08:56:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68d7d8c25bbf070b11c181c1f47fa91c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d6-6dfc-44ee-835e-456a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:54.000Z",
            "modified": "2015-09-30T08:56:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'youwilldie1.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d6-4544-4b29-98ed-4298950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:54.000Z",
            "modified": "2015-09-30T08:56:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68da57e2386780c5e0e6aa6572d313b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d6-08dc-4965-8ea0-4fb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:54.000Z",
            "modified": "2015-09-30T08:56:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68dd5ad0df897b8b34054ad0dc2c3fab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d6-5a60-4976-a31d-47a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:54.000Z",
            "modified": "2015-09-30T08:56:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yulia2580.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d6-b558-42f8-96b7-4c8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:54.000Z",
            "modified": "2015-09-30T08:56:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68dee241d735796ed7ca218bc6459e96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d6-488c-4c89-957d-4838950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:54.000Z",
            "modified": "2015-09-30T08:56:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '68ee8c0e9b5470e0800d6ed5397fb6d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d6-8568-48d0-b8f2-486d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:54.000Z",
            "modified": "2015-09-30T08:56:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yumyum.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d7-c738-4354-925e-4d85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:55.000Z",
            "modified": "2015-09-30T08:56:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6913990c4909ec90dc6975960ff8ca62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d7-a81c-4a1b-a6d1-4e85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:55.000Z",
            "modified": "2015-09-30T08:56:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '692451949f9903b896f1b4b1f24398f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d7-27dc-483a-b09f-4f9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:55.000Z",
            "modified": "2015-09-30T08:56:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yunir228.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d7-3eb8-47bb-88d9-4fa8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:55.000Z",
            "modified": "2015-09-30T08:56:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '692b20bb5d4e715efd83465b6e532b06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d7-d354-47c3-8802-4c18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:55.000Z",
            "modified": "2015-09-30T08:56:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69336b735166c073a749bbc9231020d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d7-0b90-4626-9d92-4c2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:55.000Z",
            "modified": "2015-09-30T08:56:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yunusemreprg.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d7-3488-4659-9e13-41c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:55.000Z",
            "modified": "2015-09-30T08:56:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6934be9a5ddc36b4d9745cbb0fad2c7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d8-afa8-47bb-9273-4870950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:56.000Z",
            "modified": "2015-09-30T08:56:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '693ff892601ce081bb0fd6547c77376f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d8-2b84-4d33-b2fb-441a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:56.000Z",
            "modified": "2015-09-30T08:56:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yurigames.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d8-ada4-455c-9898-4aa0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:56.000Z",
            "modified": "2015-09-30T08:56:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '694c6c1be687f7d3c16a8e1d40bc9743']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d8-ace8-4c59-9c2b-4dee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:56.000Z",
            "modified": "2015-09-30T08:56:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '694ef75bb5949dcaabc24a3ed41ed27a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d8-f6e8-4319-ba46-4e0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:56.000Z",
            "modified": "2015-09-30T08:56:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yusufsartk.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d8-5300-499a-83d0-4771950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:56.000Z",
            "modified": "2015-09-30T08:56:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '694fcf4c494375cea82e727d2fca3616']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d8-98dc-48e0-a444-4850950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:56.000Z",
            "modified": "2015-09-30T08:56:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6953f552d08985ef2e8d4deee8c59baf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d8-7d4c-4160-972a-4121950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:56.000Z",
            "modified": "2015-09-30T08:56:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'yuzsuza.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d9-d25c-4dd6-8b97-49b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:57.000Z",
            "modified": "2015-09-30T08:56:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69545b2c067824f1da1edf766d0ca5b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d9-81f8-47a3-b2ac-4116950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:57.000Z",
            "modified": "2015-09-30T08:56:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69593a605c5dc7a7b174fb08cf3156d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d9-5af0-4a0d-aad8-4511950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:57.000Z",
            "modified": "2015-09-30T08:56:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'z26.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d9-bb30-49b5-bf81-402f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:57.000Z",
            "modified": "2015-09-30T08:56:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '695b584279c95b1d759201274b32bb5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d9-5230-4153-b07c-48e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:57.000Z",
            "modified": "2015-09-30T08:56:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '695bf9a1a4dbbeabce230dc7aa96e263']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d9-209c-4375-8f8d-4f08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:57.000Z",
            "modified": "2015-09-30T08:56:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'za3bos.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d9-a384-42bf-bfeb-400b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:57.000Z",
            "modified": "2015-09-30T08:56:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6961cdda210a7eaa32f1ff514ae03e48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3da-4dc0-459a-a49a-4046950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:58.000Z",
            "modified": "2015-09-30T08:56:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6964a24f2b8b55b6066ff484f9b42d60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3d9-8770-4fe1-a914-4033950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:57.000Z",
            "modified": "2015-09-30T08:56:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zaa.noip.me']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3da-3f3c-4514-abec-49a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:58.000Z",
            "modified": "2015-09-30T08:56:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '698013b1d1ca13bb8a0e3cafdac7c1ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3da-1c2c-4248-9ed6-48cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:58.000Z",
            "modified": "2015-09-30T08:56:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6986e53b7d68b0385f5591ff4b590a50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3da-3130-41de-b678-4bfa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:58.000Z",
            "modified": "2015-09-30T08:56:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zaalag1795.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3da-d888-42b0-9b2c-40d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:58.000Z",
            "modified": "2015-09-30T08:56:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '698876ea7d94fa47512c9607d0ad1970']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3da-20a4-4860-a0e8-46f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:58.000Z",
            "modified": "2015-09-30T08:56:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zadrotise.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3da-bcc0-4d53-92a3-4aa0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:58.000Z",
            "modified": "2015-09-30T08:56:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '698cdd525c72da654bc2a2b7dab46054']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3db-74c0-47a8-9f9d-4225950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:59.000Z",
            "modified": "2015-09-30T08:56:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zakichou.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3db-2bd4-4f09-8795-47e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:59.000Z",
            "modified": "2015-09-30T08:56:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6996bd635f7f770c39a7448c26711334']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3db-eee8-45c8-802f-476a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:59.000Z",
            "modified": "2015-09-30T08:56:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zalimsniper.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3db-8b10-42ed-93da-4528950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:59.000Z",
            "modified": "2015-09-30T08:56:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '699f1ebc6fd7881c0b7943930286144d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3db-d8d8-4e29-830c-42b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:59.000Z",
            "modified": "2015-09-30T08:56:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zam512.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3db-f724-44d4-815f-4fd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:56:59.000Z",
            "modified": "2015-09-30T08:56:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69a2dc5fff018b0728f9fada61ffd316']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:56:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dc-bdd8-4040-bbb5-4bae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:00.000Z",
            "modified": "2015-09-30T08:57:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zaptohack21.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dc-1a1c-4c72-bca3-458a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:00.000Z",
            "modified": "2015-09-30T08:57:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69a307fbc878902b8bfbd377d49f59e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dc-1ce8-4551-b069-4109950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:00.000Z",
            "modified": "2015-09-30T08:57:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zarazazaraza.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dc-e100-4f60-8f60-4072950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:00.000Z",
            "modified": "2015-09-30T08:57:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69b2e4bc68e976bdd3c665484621a00b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dc-7838-49b7-9a39-4ed7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:00.000Z",
            "modified": "2015-09-30T08:57:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zaywezer.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dd-8c4c-4966-b529-46cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:01.000Z",
            "modified": "2015-09-30T08:57:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69bc2188c29b1852bc1b376a0116e2a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dd-c5a0-4840-a33d-41f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:01.000Z",
            "modified": "2015-09-30T08:57:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zazagamer.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dd-00a8-4f59-b2d3-48fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:01.000Z",
            "modified": "2015-09-30T08:57:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69e74bdcc7927ad23fe44c2a749c36d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dd-0dfc-40fa-a6dd-4ec6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:01.000Z",
            "modified": "2015-09-30T08:57:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zazagamer.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3dd-45f4-4d36-9151-40e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:01.000Z",
            "modified": "2015-09-30T08:57:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69ea5dcf272d2904b2cd5e5c0e0e11b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3de-2724-454d-b559-436d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:02.000Z",
            "modified": "2015-09-30T08:57:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zd11.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3de-b5f8-459f-81a5-4c08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:02.000Z",
            "modified": "2015-09-30T08:57:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69ece22fd3d80b7cf28f0e989d3f3a4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3de-0060-49ca-ad37-4a56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:02.000Z",
            "modified": "2015-09-30T08:57:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zdremin.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3de-d9c0-4f13-8358-43a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:02.000Z",
            "modified": "2015-09-30T08:57:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '69f346195ec8c4718fcbc593f35e9c42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3de-c1f8-4007-9746-4d28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:02.000Z",
            "modified": "2015-09-30T08:57:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zedc4tz.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3de-0584-49cd-b879-464b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:02.000Z",
            "modified": "2015-09-30T08:57:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a0085f9f00536de5a87a629ee9b2d85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3df-26a8-4c7d-a7a2-4ebb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:03.000Z",
            "modified": "2015-09-30T08:57:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zeeconnet.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3df-57b4-4ebb-a246-438b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:03.000Z",
            "modified": "2015-09-30T08:57:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a0811218dd6a141f4fb3bdc54904f9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3df-016c-4973-921e-4df7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:03.000Z",
            "modified": "2015-09-30T08:57:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zeldarawwk.sytes.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3df-0148-4d19-8d18-429a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:03.000Z",
            "modified": "2015-09-30T08:57:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a0a51eefba731b78b76820900244c72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3df-04b4-4754-91aa-44dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:03.000Z",
            "modified": "2015-09-30T08:57:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zenkanth.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e0-4560-4d06-9985-4aab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:04.000Z",
            "modified": "2015-09-30T08:57:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a1a32a6e5eb4ed325fea5607b92b838']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e0-b7bc-4a4c-91bc-4f42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:04.000Z",
            "modified": "2015-09-30T08:57:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zentic.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e0-54a0-4aab-a2bd-44de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:04.000Z",
            "modified": "2015-09-30T08:57:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a215122bc3601f7b38d3522495e6332']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e0-4484-4347-934c-4231950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:04.000Z",
            "modified": "2015-09-30T08:57:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zeroandone.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e0-db8c-481c-b018-461e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:04.000Z",
            "modified": "2015-09-30T08:57:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a21bf1372a1fa643fc34b0b5f742ecc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e1-b618-4ef2-bcde-463b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:05.000Z",
            "modified": "2015-09-30T08:57:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zhats.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e1-5b54-4be2-9ae6-4c7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:05.000Z",
            "modified": "2015-09-30T08:57:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a23195821c68de443ba6b76448784da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e1-5ddc-4dc5-ae9a-4fda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:05.000Z",
            "modified": "2015-09-30T08:57:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zhbrcbnhfh.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e1-cf00-4552-b00b-4dbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:05.000Z",
            "modified": "2015-09-30T08:57:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a2967889dd42fcd2fb152e1d7b65b55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e1-eacc-4ac4-af34-4fb6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:05.000Z",
            "modified": "2015-09-30T08:57:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zicocabba16.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e1-d1e0-4f0b-a7e3-4ccf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:05.000Z",
            "modified": "2015-09-30T08:57:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a2a9a0aaadf8c95bc02b144914995b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e2-c9dc-4b9a-a053-4d69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:06.000Z",
            "modified": "2015-09-30T08:57:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zicokiller.no-ip.info']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e2-5480-4233-b954-4969950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:06.000Z",
            "modified": "2015-09-30T08:57:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a2c4c0bc08c937d32a9725232c6f636']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e2-a694-4b30-9f31-4492950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:06.000Z",
            "modified": "2015-09-30T08:57:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zidraxdark.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e2-43d4-4722-bf24-444a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:06.000Z",
            "modified": "2015-09-30T08:57:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a3553c23cd8f41b471263c8fec93487']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e2-db30-40b6-ab8d-4743950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:06.000Z",
            "modified": "2015-09-30T08:57:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ziga55.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e2-52a0-4494-ae3b-4765950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:06.000Z",
            "modified": "2015-09-30T08:57:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a36880f76bd62d19eefa1966be19aba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e3-71c8-4d85-b550-4d0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:07.000Z",
            "modified": "2015-09-30T08:57:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ziiion777.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e3-172c-4e65-b170-48d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:07.000Z",
            "modified": "2015-09-30T08:57:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a39e82a5be6790673892ced0f00864e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e3-2160-43ad-ab36-469d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:07.000Z",
            "modified": "2015-09-30T08:57:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zirexlol.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e3-6370-4f49-a609-49b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:07.000Z",
            "modified": "2015-09-30T08:57:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a542c0e575be97338ee12aa2531ac4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e4-7644-442d-9913-418f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:08.000Z",
            "modified": "2015-09-30T08:57:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'ziurek.chickenkiller.com']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e4-6b0c-44e9-bfe6-46c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:08.000Z",
            "modified": "2015-09-30T08:57:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a5567c3727eae3faa7045592770305f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e4-5a0c-4722-8b7c-46e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:08.000Z",
            "modified": "2015-09-30T08:57:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'znorik17.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e4-9ff8-4364-9175-40fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:08.000Z",
            "modified": "2015-09-30T08:57:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a55d0a116002267755d43b1293fc305']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e4-2414-454b-ac34-4452950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:08.000Z",
            "modified": "2015-09-30T08:57:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zodcraftplus.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e4-7910-4e40-8449-4335950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:08.000Z",
            "modified": "2015-09-30T08:57:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a576ba75d9017a35dbca3fbf79509da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e5-0bbc-471f-9717-4866950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:09.000Z",
            "modified": "2015-09-30T08:57:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zodyus.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e5-0518-435d-a386-4edd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:09.000Z",
            "modified": "2015-09-30T08:57:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a5e7704711f4f5eba18b143fd3c29de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e5-e28c-4199-9685-4e11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:09.000Z",
            "modified": "2015-09-30T08:57:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zoloevg.no-ip.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e5-dd4c-4875-9d84-44c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:09.000Z",
            "modified": "2015-09-30T08:57:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a5f0e1dd0f9e2777ddcd47dd64a3725']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e5-392c-4681-936a-4867950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:09.000Z",
            "modified": "2015-09-30T08:57:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zomg6969.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e5-c6f8-404d-b108-4786950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:09.000Z",
            "modified": "2015-09-30T08:57:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a61ed402a6a5eddb9c71be3e0186068']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e6-2c84-4b3f-ae09-4863950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:10.000Z",
            "modified": "2015-09-30T08:57:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zomg69692.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e6-59b0-4921-a250-4b14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:10.000Z",
            "modified": "2015-09-30T08:57:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a6244118378d4f205ceb425743ee6af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e6-ab20-425e-9c7f-4fbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:10.000Z",
            "modified": "2015-09-30T08:57:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zomg69693.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e6-b260-44f4-a3f4-4b50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:10.000Z",
            "modified": "2015-09-30T08:57:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a62a37f5f2575b4f44b5ab694f30e3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e6-2a3c-4a69-840a-46c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:10.000Z",
            "modified": "2015-09-30T08:57:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zone2.zapto.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e7-dae0-46e7-ba19-4f72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:11.000Z",
            "modified": "2015-09-30T08:57:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a70038e787a3f241ecba7002b73843e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e7-e748-480c-8da5-4fea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:11.000Z",
            "modified": "2015-09-30T08:57:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zoosher2.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e7-b2bc-43cc-b612-483a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:11.000Z",
            "modified": "2015-09-30T08:57:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a77238e9a5870adb252489a41ce3aad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e7-8ddc-410b-93da-40bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:11.000Z",
            "modified": "2015-09-30T08:57:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zpasudpas.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e7-6754-4700-8372-4463950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:11.000Z",
            "modified": "2015-09-30T08:57:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a92a719be441c7ec8248246f832a300']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e8-4b90-4085-8228-415d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:12.000Z",
            "modified": "2015-09-30T08:57:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zsilentking.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e8-41bc-46b1-8486-4fbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:12.000Z",
            "modified": "2015-09-30T08:57:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a949bef256b01e90e88c9efa713c85d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e8-b50c-403f-94d9-41f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:12.000Z",
            "modified": "2015-09-30T08:57:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zua.duckdns.org']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e8-ea08-4fbd-8444-42fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:12.000Z",
            "modified": "2015-09-30T08:57:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6a94de4f8bebb556ebe9a21191448f0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e8-5d34-4a38-b654-4d57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:12.000Z",
            "modified": "2015-09-30T08:57:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zubiarthegame.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e8-02fc-4d7d-a206-40ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:12.000Z",
            "modified": "2015-09-30T08:57:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6aab72f6454f46e632c0aa9cc3cba184']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e9-1bf8-42b5-afd3-4447950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:13.000Z",
            "modified": "2015-09-30T08:57:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zxk.no-ip.biz']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e9-45e0-4eb1-9819-4984950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:13.000Z",
            "modified": "2015-09-30T08:57:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6aacdf28a42ed52a34be1b9fe6509f9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e9-7108-45b5-9045-430e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:13.000Z",
            "modified": "2015-09-30T08:57:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[domain-name:value = 'zyger.ddns.net']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Network activity"
                }
            ],
            "labels": [
                "misp:type=\"hostname\"",
                "misp:category=\"Network activity\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3e9-f430-4067-a6a0-43cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:13.000Z",
            "modified": "2015-09-30T08:57:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6abf971cda03529fd5f6510221d4273f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ea-d834-4c9b-b3c6-464b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:14.000Z",
            "modified": "2015-09-30T08:57:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6acad8816f6984b6f540b42a57b451bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ea-f640-4f27-8390-40b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:14.000Z",
            "modified": "2015-09-30T08:57:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ad6618466429bd61ab7217c94f38c73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ea-b148-4f41-9949-47b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:14.000Z",
            "modified": "2015-09-30T08:57:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ada6ffcfe7cb3d26250b3a30af14d18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3eb-a1c8-4af3-befe-45e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:15.000Z",
            "modified": "2015-09-30T08:57:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6aefed96b1d3bcaedbd00844d0da9c6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3eb-c8d0-4d9b-bed8-481d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:15.000Z",
            "modified": "2015-09-30T08:57:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6afb4c35bed012ca3bc7d9f9f990cec5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3eb-060c-44dd-bc4f-4d46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:15.000Z",
            "modified": "2015-09-30T08:57:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b08578cbd6804a19587319b7f0e4b45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ec-97cc-4998-9864-463d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:16.000Z",
            "modified": "2015-09-30T08:57:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b19b87323fff6a590173f5ce0093efe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ec-cfe8-4cd1-87ff-49cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:16.000Z",
            "modified": "2015-09-30T08:57:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b2cb403fce69f3cfd48a220a3efc7b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ed-9cf0-46ee-83d4-4152950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:17.000Z",
            "modified": "2015-09-30T08:57:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b2fe5cd9a3e84bb9a70e2d6966a2a27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ed-c694-4f6e-9dd6-4510950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:17.000Z",
            "modified": "2015-09-30T08:57:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b38cdfbcaf4f9e944ad41ff1d96370a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ed-24ac-4352-a962-4815950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:17.000Z",
            "modified": "2015-09-30T08:57:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b3ac7982cd5a6fee38c3f13dcd6cad2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ee-4b94-403f-b531-40a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:18.000Z",
            "modified": "2015-09-30T08:57:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b4580adfc7bbd35bd63bd4ece77a835']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ee-bc18-47f9-a32c-4204950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:18.000Z",
            "modified": "2015-09-30T08:57:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b4d6e9789992ada96ebe5de4bd41788']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ee-7820-4ab1-bdd7-4144950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:18.000Z",
            "modified": "2015-09-30T08:57:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b59d1fd3b3adc8b08843293adc85c53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ef-72d0-476b-b933-4a79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:19.000Z",
            "modified": "2015-09-30T08:57:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b5cdaf09a00b83ceac915d1ea75c692']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ef-53f0-4904-9761-450b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:19.000Z",
            "modified": "2015-09-30T08:57:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b64f66aa6f8d42e93294d8798f6f922']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f0-bea4-4154-8210-4251950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:20.000Z",
            "modified": "2015-09-30T08:57:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b684c5fbfa92b65cbd1513b1da2b818']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f0-8218-4868-a11d-4548950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:20.000Z",
            "modified": "2015-09-30T08:57:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b7334eadefe60af179591713171ce54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f0-a100-4a55-b8c1-4a4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:20.000Z",
            "modified": "2015-09-30T08:57:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b79ee43d15c4a18305b84fb5988a78b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f1-4878-4dcc-972a-4624950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:21.000Z",
            "modified": "2015-09-30T08:57:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b852b977d26fb32403cc08a522b3679']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f1-0b68-40a4-8dc5-4f3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:21.000Z",
            "modified": "2015-09-30T08:57:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6b859751b69abd9b6e938d0b13dde58b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f1-7b54-45aa-bf03-4fb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:21.000Z",
            "modified": "2015-09-30T08:57:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ba0dfd691358017a8cd070db29def93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f2-67f8-4707-98d0-497d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:22.000Z",
            "modified": "2015-09-30T08:57:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6bb2d745e3cb647e97d0849b916ed9ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f2-9990-4ec7-935b-4188950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:22.000Z",
            "modified": "2015-09-30T08:57:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6bb9194cd2c2837fbce89fa625a479e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f2-23ec-424c-ba68-451c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:22.000Z",
            "modified": "2015-09-30T08:57:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6bc012b67dbe6768e719c3bc44460fd7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f3-2cf4-41c0-b54b-4a15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:23.000Z",
            "modified": "2015-09-30T08:57:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6bc8daa3b179c3126b1bc0334b6706b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f3-5f6c-470e-b5d9-4dbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:23.000Z",
            "modified": "2015-09-30T08:57:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6bd9a67eaff8a93883b76298182ed148']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f4-5578-4406-a495-4c33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:24.000Z",
            "modified": "2015-09-30T08:57:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6bdbbfeb3dfa56f40c54b55fedd75a04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f4-b708-4f62-968d-4e81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:24.000Z",
            "modified": "2015-09-30T08:57:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6bdeee3725c9cef9cc6d9454b8cc3d21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f4-01ac-43bf-a4a9-41b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:24.000Z",
            "modified": "2015-09-30T08:57:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6be5792f8d6bbf5fabeb545236d58118']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f5-01ec-4f46-ad6a-4b9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:25.000Z",
            "modified": "2015-09-30T08:57:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6beb2b7110bbd6b1d9619f361410dd8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f5-3d34-4d94-b419-4702950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:25.000Z",
            "modified": "2015-09-30T08:57:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6bee6b851a87d83b9e8231fdc69ade03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f5-1108-45dc-a37a-438a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:25.000Z",
            "modified": "2015-09-30T08:57:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c04386021128e2c8659c1227fba7910']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f6-d564-4457-8aa5-42a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:26.000Z",
            "modified": "2015-09-30T08:57:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c1e8df569e8b2799ecdd0bc1b390f2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f6-b918-4ab7-adf5-41e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:26.000Z",
            "modified": "2015-09-30T08:57:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c22dd6a3bb2ce05f1d74a82cf0699f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f6-eadc-41fa-8256-4b79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:26.000Z",
            "modified": "2015-09-30T08:57:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c22fe2fa0c7411c24c7f1558c0135a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f7-6820-4a1b-a8e3-45d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:27.000Z",
            "modified": "2015-09-30T08:57:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c250118be198e3abfc6fbb0d7e9966e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f7-8928-4922-85ba-4679950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:27.000Z",
            "modified": "2015-09-30T08:57:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c29ab09f8eee4259287dd72e0964855']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f8-d030-4aa1-a2fe-4e0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:28.000Z",
            "modified": "2015-09-30T08:57:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c3a487be2120aa90c234f2773712893']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f8-5f34-4a6f-911d-4af4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:28.000Z",
            "modified": "2015-09-30T08:57:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c3ad6b7f718713e105cbf8afa3b83c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f8-a658-4874-9e15-40fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:28.000Z",
            "modified": "2015-09-30T08:57:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c5524f5e26c7afa87422660ab424f10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f9-8c54-42cc-bbde-4738950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:29.000Z",
            "modified": "2015-09-30T08:57:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c5ec5d7dff0da7f011a53e7a8a039aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f9-a1ec-413f-a611-494d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:29.000Z",
            "modified": "2015-09-30T08:57:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c722237e30b9e6bfe8371e4d6b274bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3f9-d4b0-42b4-9f71-4e39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:29.000Z",
            "modified": "2015-09-30T08:57:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6c8c2a8d41621868ef4f3b6e5cd387d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fa-c248-445c-af2e-467e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:30.000Z",
            "modified": "2015-09-30T08:57:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6cb00ef4dd80bbe8a2c23b9f3dd7864b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fa-721c-45f1-857f-46e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:30.000Z",
            "modified": "2015-09-30T08:57:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6cb11dbd8420339d7e48d4b1fc2d880b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fa-f0c8-4f34-a565-4337950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:30.000Z",
            "modified": "2015-09-30T08:57:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6cc6f661ea509dc185ee84c610445c2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fb-a364-437d-980c-4a88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:31.000Z",
            "modified": "2015-09-30T08:57:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ce041d3c89622fe24bd3a51e7d3e784']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fb-a4bc-4d7d-a324-4b1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:31.000Z",
            "modified": "2015-09-30T08:57:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ce6701d0ff1bb4ca4819b596a6042e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fc-c100-4d6a-8699-4038950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:32.000Z",
            "modified": "2015-09-30T08:57:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6cea84f14b21e4886d911b87483289f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fc-5730-4e9c-ac4d-497e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:32.000Z",
            "modified": "2015-09-30T08:57:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ceb3c57b3c82aa2831371639a13d5f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fc-ece4-4ede-991b-4f33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:32.000Z",
            "modified": "2015-09-30T08:57:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6cfe573b6df092a46b2bba76cae868cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fd-b38c-4a87-9042-47a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:33.000Z",
            "modified": "2015-09-30T08:57:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d029b7ecd09296440caf7f75d41a6b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fd-aa2c-442f-8f11-4229950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:33.000Z",
            "modified": "2015-09-30T08:57:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d0f75e9d35dd718e2379be464814595']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fd-8c38-47e2-91c1-4383950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:33.000Z",
            "modified": "2015-09-30T08:57:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d1147c617df527f307a6065e1985b53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fe-3338-4edd-969f-4f2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:34.000Z",
            "modified": "2015-09-30T08:57:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d13d968a80ea52d4406de0082133f34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3fe-2770-4874-8e03-403d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:34.000Z",
            "modified": "2015-09-30T08:57:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d22727c341984a5b110e4a449fd4666']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ff-f784-4d03-bee2-47dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:34.000Z",
            "modified": "2015-09-30T08:57:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d2ad1ab4ddc9508834cb0dad9270e82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ff-dc1c-49d7-896d-4b9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:35.000Z",
            "modified": "2015-09-30T08:57:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d2d41fe8e4590a4b5c2ab7b6cc066fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba3ff-49a0-40e0-aadd-4b93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:35.000Z",
            "modified": "2015-09-30T08:57:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d2eb2d310116c48309fac7c3b79cf80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba400-3cac-4da0-9ce3-4dc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:36.000Z",
            "modified": "2015-09-30T08:57:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d2eb90915377390062e964c4889e9c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba400-ab60-4d8e-9e19-4aa0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:36.000Z",
            "modified": "2015-09-30T08:57:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d2ec544969eed8da388a0af84a76992']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba400-4dfc-42e7-8200-4ccc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:36.000Z",
            "modified": "2015-09-30T08:57:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d31bd9369ecd340b728c47458661a71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba401-7280-45a4-a02c-460d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:37.000Z",
            "modified": "2015-09-30T08:57:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d341f94814948b487f998dd2b5e5919']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba401-a3b4-4950-a784-498e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:37.000Z",
            "modified": "2015-09-30T08:57:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d3b735cf6ab54cb25a6e90e23609bd1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba401-2644-4e7a-8a35-4fb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:37.000Z",
            "modified": "2015-09-30T08:57:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d50c0c89f8b8c146a62ea1d43a53f6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba402-1a24-4d51-9123-4c03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:38.000Z",
            "modified": "2015-09-30T08:57:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d5544972cadd3b5b9d19000a5eaec88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba402-0e1c-4c9a-a98e-440f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:38.000Z",
            "modified": "2015-09-30T08:57:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d562a79e0950e9403af91d95af9feb1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba403-074c-44a3-9a7d-42a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:39.000Z",
            "modified": "2015-09-30T08:57:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d5db61ca3af929e10b0b64cb099970a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba403-d5e0-4257-8b2b-4c43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:39.000Z",
            "modified": "2015-09-30T08:57:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d5e1979178a3987ce03ffec309c09cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba403-2e7c-4367-9fb8-4c68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:39.000Z",
            "modified": "2015-09-30T08:57:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d60366693e26781081160ac7f0f5c38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba404-0cf0-48dc-bc85-4a1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:40.000Z",
            "modified": "2015-09-30T08:57:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d635e3973b4214fa03a6f194cced1d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba404-d2c4-4769-a48e-4aeb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:40.000Z",
            "modified": "2015-09-30T08:57:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d65979276414c693fe39f7b1b184fbd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba404-98bc-4f92-8d43-43ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:40.000Z",
            "modified": "2015-09-30T08:57:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d6a84119b7b21d8b6ba371843d5c9dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba405-d004-426c-a906-4146950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:41.000Z",
            "modified": "2015-09-30T08:57:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d706b02601bb116c62d2a32d709bee5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba405-5170-486f-aefe-4861950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:41.000Z",
            "modified": "2015-09-30T08:57:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d7bbeaa4b958f613d98a569f505e053']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba405-5cd0-4291-baae-4964950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:41.000Z",
            "modified": "2015-09-30T08:57:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d8282a88c693ceabe0c61ac1dd8af64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba406-d828-4dac-9a9a-4ca6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:42.000Z",
            "modified": "2015-09-30T08:57:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6d880d59cbe8cc6d8752e7ac5684c7c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba406-90b8-46ee-8419-4c5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:42.000Z",
            "modified": "2015-09-30T08:57:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6db4fb3c304c67faf61d6da568877994']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba407-78d4-4829-b93e-447c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:43.000Z",
            "modified": "2015-09-30T08:57:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6dbc87e00b1d3d3a56b84647c3e24ccd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba407-a3c0-4d06-93da-45be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:43.000Z",
            "modified": "2015-09-30T08:57:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6dbca63b248155875cbe3e946b877a36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba407-55e4-4894-a70c-4a0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:43.000Z",
            "modified": "2015-09-30T08:57:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6dc30cf23d3cd0713e9953dad8ff56aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba408-7b40-4324-83b1-4b25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:44.000Z",
            "modified": "2015-09-30T08:57:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6dc56faa3d05cfe66fdb4295ab11bc3c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba408-2b0c-4841-8c50-4ba4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:44.000Z",
            "modified": "2015-09-30T08:57:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6dcea8b9b25e8522af944323861ce952']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba408-b12c-4c25-96f0-4c7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:44.000Z",
            "modified": "2015-09-30T08:57:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6dd89f94237b824ebdfe1d45469110b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba409-7c28-48a6-a9e5-4c14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:45.000Z",
            "modified": "2015-09-30T08:57:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ddd9107a8548144f5c82e6ca2ff317c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba409-f5b8-4dc8-a9db-4238950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:45.000Z",
            "modified": "2015-09-30T08:57:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6de8c91e4affc1852e1b277035496053']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba409-2fb0-42a6-97d5-431a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:45.000Z",
            "modified": "2015-09-30T08:57:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ded244e76931be71177001fa4c1fc6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40a-7138-4f26-9068-49a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:46.000Z",
            "modified": "2015-09-30T08:57:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e0771dd63570f5f890532764bb29737']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40a-4b18-466d-83d2-48b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:46.000Z",
            "modified": "2015-09-30T08:57:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e16563f58ba162e099f09d54675fbec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40b-c930-4e5d-ac10-4ba1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:47.000Z",
            "modified": "2015-09-30T08:57:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e1748fa0ad8411b5a555d8cb6ca40e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40b-e44c-461d-8e0b-452d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:47.000Z",
            "modified": "2015-09-30T08:57:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e1aa38327f1e08c25684e6cdf5c0be1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40b-35c4-4f1f-b985-4764950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:47.000Z",
            "modified": "2015-09-30T08:57:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e2cca33b0db5905d8cd120bd2e0140f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40c-fa34-4b41-9539-4a84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:48.000Z",
            "modified": "2015-09-30T08:57:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e2faeba9e01af85ffb4fb100e6cb8f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40c-bfa4-4c76-8553-4e95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:48.000Z",
            "modified": "2015-09-30T08:57:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e408cd3b6e32c0ee073aa43bcfd4ea6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40c-42e4-42e2-9f0b-49bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:48.000Z",
            "modified": "2015-09-30T08:57:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e4ccd9bfecfa328c559018c600a1cba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40d-7b4c-45c8-a2eb-4eec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:49.000Z",
            "modified": "2015-09-30T08:57:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e5c2c0fbff27a4c9ef8093d6222105f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40d-d6d0-4822-af20-4591950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:49.000Z",
            "modified": "2015-09-30T08:57:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e673e1830d0fc87cf75a8ff3af7c3ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40e-8f78-47c9-85ab-4c3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:49.000Z",
            "modified": "2015-09-30T08:57:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e7316253b422ad2a96d55bfa5a8442c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40e-46ec-483e-943c-4ec7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:50.000Z",
            "modified": "2015-09-30T08:57:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e8747bfa3f07a0763a4ce12cfbcaee5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40e-e85c-411a-aa4f-444e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:50.000Z",
            "modified": "2015-09-30T08:57:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6e8e36a197e7753a8caed5218eab8640']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40f-281c-4c95-9f74-4363950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:51.000Z",
            "modified": "2015-09-30T08:57:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ea97d6054050ee50038fcd2fb849741']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40f-1934-41fa-aaaf-4aa6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:51.000Z",
            "modified": "2015-09-30T08:57:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ead55f6cce152bf73277da632421376']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba40f-96fc-433e-b832-41d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:51.000Z",
            "modified": "2015-09-30T08:57:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ebab2a561c267479bfe957a709dc932']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba410-a4fc-4cc9-9406-48eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:52.000Z",
            "modified": "2015-09-30T08:57:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6eca60860fdebb9debebdfd421a0c3f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba410-a52c-4471-aab7-4c8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:52.000Z",
            "modified": "2015-09-30T08:57:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ee00ae41ec5d34d801937b42edf7255']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba410-f228-4f4d-a0d4-4f87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:52.000Z",
            "modified": "2015-09-30T08:57:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ee5c4a40353fa8aac53d699a6f0da7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba411-5a9c-4da1-b9cc-4b0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:53.000Z",
            "modified": "2015-09-30T08:57:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ee80b1f795689193fab16554fecfc73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba411-8970-4188-9152-4660950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:53.000Z",
            "modified": "2015-09-30T08:57:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6eea8995915c58c7e11b617c853b3d92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba412-b88c-4dc7-86e0-4bd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:54.000Z",
            "modified": "2015-09-30T08:57:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6eeae25d2a3d605ce5f15a4672ed1798']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba412-23a0-46ed-982e-4f7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:54.000Z",
            "modified": "2015-09-30T08:57:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6eec96f64212cb30b27ce1b818f91fcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba412-8b28-4c74-ac67-47d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:54.000Z",
            "modified": "2015-09-30T08:57:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6eefda2095cbab53cb5ac7eac1a18fcb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba413-6c58-426f-8c75-45e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:55.000Z",
            "modified": "2015-09-30T08:57:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ef2e0616636b09b21d3081534e38a60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba413-0e84-4301-8a3a-4d2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:55.000Z",
            "modified": "2015-09-30T08:57:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ef75c52444b75c6d36acc23bab04a1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba413-58f4-42d8-b236-4078950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:55.000Z",
            "modified": "2015-09-30T08:57:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6efdad3b7bb393425fb020bb9991f31d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba414-0b1c-46cc-b854-48e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:56.000Z",
            "modified": "2015-09-30T08:57:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6efdd11f1d6a32df853bbad840a0dfc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba414-b124-40f4-80b9-4509950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:56.000Z",
            "modified": "2015-09-30T08:57:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f0059c09d2647d36d4040dbe18d9b59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba414-9924-48c3-9c5b-47c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:56.000Z",
            "modified": "2015-09-30T08:57:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f0f1b004f6fddf130b9d6df4aabb711']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba415-8cc4-40f8-8ecc-4801950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:57.000Z",
            "modified": "2015-09-30T08:57:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f193648b03494fa3950cab42b24e1cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba415-c6d0-41fb-b638-474d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:57.000Z",
            "modified": "2015-09-30T08:57:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f2135413ba1e7854ac00a44d7f1d22c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba416-2500-4c84-9f60-4c30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:58.000Z",
            "modified": "2015-09-30T08:57:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f2c2999ac3730725d6c283ea0fb5d50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba416-f440-421b-8c6c-42c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:58.000Z",
            "modified": "2015-09-30T08:57:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f3b992092da7bc4db77434ca4ea80fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba416-9058-4fd3-85f2-4d0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:58.000Z",
            "modified": "2015-09-30T08:57:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f3d87426ea0cdaa40e4f89282fd650f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba417-3708-432e-93c0-4101950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:59.000Z",
            "modified": "2015-09-30T08:57:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f428afba4360037478ecbfd7d3839ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba417-0a00-4d45-868d-42a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:59.000Z",
            "modified": "2015-09-30T08:57:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f4ba5101e475428da2039a439de5098']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba417-32b8-47a1-9bd1-46b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:57:59.000Z",
            "modified": "2015-09-30T08:57:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f5ce260741feb5afc4578740defb513']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:57:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba418-5af8-4653-aaef-4dbb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:00.000Z",
            "modified": "2015-09-30T08:58:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f627dd2f72cb42eb9ca7bc4518cf245']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba418-1f98-4f37-92b0-4461950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:00.000Z",
            "modified": "2015-09-30T08:58:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f66ffacc1011bfdd4a4d0b3abc356c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba419-0e20-477b-bb05-49b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:01.000Z",
            "modified": "2015-09-30T08:58:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f69d5920ee50c025af0a053eceb2bf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba419-6c30-4c8f-85f2-492f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:01.000Z",
            "modified": "2015-09-30T08:58:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f72ccf94893fd17f6730a243fcbabf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba419-7f78-425e-81d4-4ed9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:01.000Z",
            "modified": "2015-09-30T08:58:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f7fc54b43b725e0038d83d005e5984e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41a-95cc-4f8a-81c1-4547950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:02.000Z",
            "modified": "2015-09-30T08:58:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6f85ccf6448dd59d3c95dcc94aabfc33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41a-00b4-4f34-bcbf-40bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:02.000Z",
            "modified": "2015-09-30T08:58:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6fa0c9a5e6ea04e1c8605c1eca625aeb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41a-78c4-4b15-b4f7-4308950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:02.000Z",
            "modified": "2015-09-30T08:58:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6fb7c9362eccd07aed92b588afe34632']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41b-62f4-4e6c-8815-45ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:03.000Z",
            "modified": "2015-09-30T08:58:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6fd1bf1953e1b89626bc956415a5adb8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41b-fd74-4a1c-af74-4e03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:03.000Z",
            "modified": "2015-09-30T08:58:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6fe3eea1c5068bde4aada6dc22988c35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41c-0bdc-4643-af2f-44d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:04.000Z",
            "modified": "2015-09-30T08:58:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ff1426c78003ad8703a8b6dcfa4d56d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41c-9e60-4063-a60f-48ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:04.000Z",
            "modified": "2015-09-30T08:58:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '6ff632ed951f3a01ff1f9e394f011991']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41c-cd34-4804-aef0-4c89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:04.000Z",
            "modified": "2015-09-30T08:58:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70061be0fbd034b0f1ccdb399b1186c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41d-c00c-44a1-aec4-4d10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:05.000Z",
            "modified": "2015-09-30T08:58:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '700ca53925ff577dfec13ccdfbf8d5fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41d-259c-4ef7-9480-4d70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:05.000Z",
            "modified": "2015-09-30T08:58:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7010f3331ce9a775d60f58d7660f9d83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41d-b960-44be-a416-48d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:05.000Z",
            "modified": "2015-09-30T08:58:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7015e0a05aa41466a96afbfc97e59bb3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41e-b214-45b1-bb11-4087950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:06.000Z",
            "modified": "2015-09-30T08:58:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7028292cfd7e95b52b55c80433276e68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41e-4e24-4ffa-b86e-4bab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:06.000Z",
            "modified": "2015-09-30T08:58:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7029a1f66332cb2aea407f7ceeee824c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41e-3644-48e3-be0c-44be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:06.000Z",
            "modified": "2015-09-30T08:58:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '702b24bdd01ac3c7ec02b63d48e47a11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41f-f114-4532-ad85-4749950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:07.000Z",
            "modified": "2015-09-30T08:58:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '702f9e9cb8382fc46ad7fdd5e4f57cc4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba41f-df08-42f8-b59d-40cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:07.000Z",
            "modified": "2015-09-30T08:58:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7031020ba60cc1ce7951828dabafc120']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba420-694c-4a5e-a3ad-4b99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:08.000Z",
            "modified": "2015-09-30T08:58:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '703133cfebec0cc93b24c044d2e13267']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba420-bf94-4dbf-a7b8-4fea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:08.000Z",
            "modified": "2015-09-30T08:58:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '703f56a219fee67d356bafffb8820958']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba420-5b5c-4dfa-bfee-4ead950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:08.000Z",
            "modified": "2015-09-30T08:58:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '704f971a618fb720ab4b477a7e0bfba6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba421-b264-4730-a041-4985950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:09.000Z",
            "modified": "2015-09-30T08:58:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7060471b7df3e4d7e80c6c0e7f82508c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba421-0dec-47a4-8267-4504950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:09.000Z",
            "modified": "2015-09-30T08:58:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '706815c4636c0cc86d1d00cfe27fd018']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba421-29f4-4b78-9234-460e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:09.000Z",
            "modified": "2015-09-30T08:58:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '707ac43ade076e860f1e0df4b1b92333']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba422-0874-4422-bc72-454b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:10.000Z",
            "modified": "2015-09-30T08:58:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '707d1edde3b3bb8ee5957e6683207b98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba422-b684-44a0-96fb-41d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:10.000Z",
            "modified": "2015-09-30T08:58:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7085941559f2af885d7b0a0e10dbd405']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba423-a980-44c9-96be-4eb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:11.000Z",
            "modified": "2015-09-30T08:58:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '708aa9bc9dd0d2e1ead45ac76b0f5d40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba423-8644-4270-83b2-4a3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:11.000Z",
            "modified": "2015-09-30T08:58:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '708cf207a99945238cbe5bcf4bfad2f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba423-8bc4-4f47-bb72-492a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:11.000Z",
            "modified": "2015-09-30T08:58:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '708d1d82093c65bf718b210d8ac97622']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba424-0bd8-4d5f-a567-4a45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:12.000Z",
            "modified": "2015-09-30T08:58:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7092b7cd390d0430fad7396261dbbb50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba424-4068-4a82-880b-4951950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:12.000Z",
            "modified": "2015-09-30T08:58:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7095dca5917bcf021f49dc960cc8d4fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba424-a594-41ff-97f6-4f6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:12.000Z",
            "modified": "2015-09-30T08:58:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70a37a9ee98ac4620ded919616b8164b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba425-5d60-4921-8f3a-42fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:13.000Z",
            "modified": "2015-09-30T08:58:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70a7e408f691a3395c896fec9c115c86']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba425-7b20-4b0c-8116-419a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:13.000Z",
            "modified": "2015-09-30T08:58:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70b1368103f4e3dd22396771c61fc7f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba426-81a8-4647-92a6-4aba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:14.000Z",
            "modified": "2015-09-30T08:58:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70bb8c22f37953e1478c53235c61a979']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba426-f550-450b-96fb-4366950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:14.000Z",
            "modified": "2015-09-30T08:58:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70bd27680e39b219bac6d0d66cba63a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba426-ad98-4a04-b893-460f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:14.000Z",
            "modified": "2015-09-30T08:58:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70be4605e65f484027c4bc60cb5bf7fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba427-35a0-4432-8723-4008950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:15.000Z",
            "modified": "2015-09-30T08:58:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70c35a695609ff29c9b3a7a306328a57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba427-e710-48e6-b694-42c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:15.000Z",
            "modified": "2015-09-30T08:58:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70c943c582bee6bf81b8bbed7189abb8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba427-d808-4a00-a83a-42bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:15.000Z",
            "modified": "2015-09-30T08:58:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70d3f0527532289067568f64889807f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba428-8f4c-4bab-91c7-4ffc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:16.000Z",
            "modified": "2015-09-30T08:58:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70da080542dc9b37c636cb16c16463f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba428-fc24-4767-aa4e-4e25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:16.000Z",
            "modified": "2015-09-30T08:58:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70da1872df7114cf74f882be61578fa3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba428-9cc4-4aaf-b096-4bd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:16.000Z",
            "modified": "2015-09-30T08:58:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70e4943f44bf3bd3f1743303e3a4d0f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba429-010c-4727-bd33-4390950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:17.000Z",
            "modified": "2015-09-30T08:58:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70f3d4218cd186a65e45f21e6d7008ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba429-d56c-4e83-a2bb-491b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:17.000Z",
            "modified": "2015-09-30T08:58:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '70f5c256311538b8bb4874f1a4dd9a6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42a-5fcc-490f-9134-44ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:18.000Z",
            "modified": "2015-09-30T08:58:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7109800503cd92d91a4d47ab7576de60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42a-6ad8-4f14-b452-46f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:18.000Z",
            "modified": "2015-09-30T08:58:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7112f270351c9ea340479b4e2b21bea5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42a-9c2c-4bba-ab33-4475950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:18.000Z",
            "modified": "2015-09-30T08:58:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '711776e583149954f37fb6d3cbcd034f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42b-7380-4cfa-91ef-4fc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:19.000Z",
            "modified": "2015-09-30T08:58:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '711e443ce0fbd3f50bad82c3463ad9c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42b-b88c-4e98-8b0b-4df8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:19.000Z",
            "modified": "2015-09-30T08:58:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71283914974ee568aeada68489ba1743']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42b-3bd0-4435-8c6e-4337950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:19.000Z",
            "modified": "2015-09-30T08:58:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71353b12923878ca3f25f62212923a56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42c-2e70-4637-be36-4b77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:20.000Z",
            "modified": "2015-09-30T08:58:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '713d9d30d1c7f3db3b332e37de83f020']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42c-c99c-45aa-99be-4574950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:20.000Z",
            "modified": "2015-09-30T08:58:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '714f387a692832caaf506b2947b776d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42d-fc98-4bdc-b8af-4953950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:21.000Z",
            "modified": "2015-09-30T08:58:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71694961d165bb0baa76997924c4abda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42d-042c-4df8-9ce9-4f5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:21.000Z",
            "modified": "2015-09-30T08:58:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7174a07271bd1441e9fe5d194eef6631']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42d-84b8-467c-8d40-4026950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:21.000Z",
            "modified": "2015-09-30T08:58:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '717a25d6afc0e3c7e76cfe46012397a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42e-afb4-4fd6-8776-4f79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:22.000Z",
            "modified": "2015-09-30T08:58:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '717f0912cddcfc9be6bd75fb8fac4d67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42e-5128-405d-9be3-4609950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:22.000Z",
            "modified": "2015-09-30T08:58:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '718f88e4ed01b5e047919321c0d0215d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42e-fc50-4e78-9ae1-459c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:22.000Z",
            "modified": "2015-09-30T08:58:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71a2c86f3814a4a238eea14a55ac4a04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42f-977c-41c7-95da-40b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:23.000Z",
            "modified": "2015-09-30T08:58:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71aded88162537d15f095bfa4a6ae6eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba42f-efd4-4cb0-8c4f-48e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:23.000Z",
            "modified": "2015-09-30T08:58:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71b6f20f9ab00828256f291480d70cc2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba430-c4f4-414a-9f0b-496d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:24.000Z",
            "modified": "2015-09-30T08:58:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71c9337aa440174dec4c18adfd7b8d5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba430-40d4-4dfc-b60b-466d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:24.000Z",
            "modified": "2015-09-30T08:58:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71c9e1d8da5d3514635d6d240f2774af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba430-3440-4306-acf7-4e3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:24.000Z",
            "modified": "2015-09-30T08:58:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71cbadef57c7f86bf77415e5616d615e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba431-de20-4d5f-bc11-40c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:25.000Z",
            "modified": "2015-09-30T08:58:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71de4fe56a7f6b4559d56a566e06aeee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba431-dcf0-4eb3-a7ba-427e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:25.000Z",
            "modified": "2015-09-30T08:58:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71e3b775eceb987a1dcf113442795b94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba431-40f8-457a-bc48-4a53950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:25.000Z",
            "modified": "2015-09-30T08:58:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71e537385b2a0ee22c671bbcd2b208cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba432-5504-41f7-8795-491c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:26.000Z",
            "modified": "2015-09-30T08:58:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71ee14f0c57200ed49d0eec9d640be27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba432-f130-4bd0-a8a7-4612950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:26.000Z",
            "modified": "2015-09-30T08:58:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71f5216c0feb9422a2773c9f8a1ae621']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba433-bd78-44df-9d7c-4fe5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:27.000Z",
            "modified": "2015-09-30T08:58:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '71f8e4d1050ff3a120f816621736603a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba433-5114-4ed7-be1b-4069950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:27.000Z",
            "modified": "2015-09-30T08:58:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7210e14dc97f978b056fbe413f7980c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba433-17c0-4a95-99b2-4b39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:27.000Z",
            "modified": "2015-09-30T08:58:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7213898f913645ac168d7c0b10d3bc1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba434-d754-4d1a-b2de-4dc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:28.000Z",
            "modified": "2015-09-30T08:58:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '721dcd256be01a8c59f4229a83bb053c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba434-6c74-476d-8599-4adb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:28.000Z",
            "modified": "2015-09-30T08:58:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72292c582a59446e2390529f4e670c9a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba434-9dd4-4074-b6e4-415d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:28.000Z",
            "modified": "2015-09-30T08:58:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72409a2b049196ca2bba641e7df4bcf7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba435-8f94-437d-99d6-4fb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:29.000Z",
            "modified": "2015-09-30T08:58:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72540b2759da7af56ad36d9c37713ca1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba435-b844-4735-b3fc-4b07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:29.000Z",
            "modified": "2015-09-30T08:58:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72553b9af334a553a6798b8b28f9d0b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba436-6444-4bbd-bfa0-440c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:30.000Z",
            "modified": "2015-09-30T08:58:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '725c03e97e1f33bef9f47021ad8883b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba436-1508-43be-9736-4f51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:30.000Z",
            "modified": "2015-09-30T08:58:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7279452fbc91731b1afdff287298bc9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba436-8814-4e86-8429-40d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:30.000Z",
            "modified": "2015-09-30T08:58:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72804b2d87692db4f4bb1478273c473e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba437-5580-45f3-87ad-4a1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:31.000Z",
            "modified": "2015-09-30T08:58:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72842cc377a138487ec59ed43709170d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba437-eb44-4e30-8a75-45d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:31.000Z",
            "modified": "2015-09-30T08:58:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72936044de5415baa8330cd3348275b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba437-d098-4d0b-b0c7-47c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:31.000Z",
            "modified": "2015-09-30T08:58:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72a5a130fdd7c4032781a1d58fed9af7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba438-dffc-4cd3-a9d6-4562950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:32.000Z",
            "modified": "2015-09-30T08:58:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72a712d9448b8a71b2d75a9735f7b2c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba438-1da4-4317-963e-4fa7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:32.000Z",
            "modified": "2015-09-30T08:58:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72aa176d310d8b6334eba59db4568ee1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba438-4a1c-488a-8779-484f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:32.000Z",
            "modified": "2015-09-30T08:58:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72b103b4df07cbc4330c98176c9b074f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba439-d64c-4727-a27a-4f62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:33.000Z",
            "modified": "2015-09-30T08:58:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72b6121cc8a6da0497a32565e7d28e55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba439-9d60-46d7-9c73-48f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:33.000Z",
            "modified": "2015-09-30T08:58:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72bb58e64d4237434f9d515db0419c46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43a-b6d4-4823-bf22-475c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:34.000Z",
            "modified": "2015-09-30T08:58:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72bf02b2aa06efd261ba74023d61e5df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43a-74e0-4827-a3a4-4b5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:34.000Z",
            "modified": "2015-09-30T08:58:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72c0c02e4099bbf0f2fa9a9ce3b6b606']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43a-0360-4029-b8b6-4d4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:34.000Z",
            "modified": "2015-09-30T08:58:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72d158e880c51b3ec69362292ff521ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43b-0c0c-45b2-b39f-40bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:35.000Z",
            "modified": "2015-09-30T08:58:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72d299fc373a83efda157c5d024f49ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43b-c9a4-49bd-af44-442f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:35.000Z",
            "modified": "2015-09-30T08:58:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72d2bc7237770c11819ac1dcc9516e9a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43b-d760-4872-9e04-4f0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:35.000Z",
            "modified": "2015-09-30T08:58:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72d91dea85e0be1e323616a0f418bcf0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43c-8ed0-4aaa-9087-4d77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:36.000Z",
            "modified": "2015-09-30T08:58:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72db552d8e011a587181a620ec1d578c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43c-bd00-4171-97f1-413b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:36.000Z",
            "modified": "2015-09-30T08:58:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72dbe592fa52e32901f0cf955a255509']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43d-bf44-4911-97cf-40b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:37.000Z",
            "modified": "2015-09-30T08:58:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72f1b61aa8a12d2ce7f9ef94925d9a76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43d-3fa0-462d-a816-4cc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:37.000Z",
            "modified": "2015-09-30T08:58:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72fb38ddc8c19008346523d3238b0504']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43d-5434-43c3-9443-4bef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:37.000Z",
            "modified": "2015-09-30T08:58:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '72fed893746a514f1ccfc7042d45c3df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43e-7a08-48ad-aab1-4415950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:38.000Z",
            "modified": "2015-09-30T08:58:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73084dccc6129c1a7091c8c087228304']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43e-2980-40d5-8701-4757950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:38.000Z",
            "modified": "2015-09-30T08:58:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '730a9a2eaa4a33bf9f0bcccc72e65b5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43e-92d8-4fdc-9ba5-4dd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:38.000Z",
            "modified": "2015-09-30T08:58:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '730e8ea7e25e077db7fde7d7e671d514']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43f-7978-4a46-b78f-456f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:39.000Z",
            "modified": "2015-09-30T08:58:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '731a5c2254453de4808d950b141f9cc2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba43f-7b84-4d3b-a80e-4e18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:39.000Z",
            "modified": "2015-09-30T08:58:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '732dba93be5f38df56c1455db34852cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba440-d0e8-46d7-b74d-4681950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:40.000Z",
            "modified": "2015-09-30T08:58:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '733679a83a0dfe2da4aebb26f237f096']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba440-15a4-4ca8-9926-407c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:40.000Z",
            "modified": "2015-09-30T08:58:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '734449d3707080446fa8eeebc487e35b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba440-9468-4bb4-aab8-422b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:40.000Z",
            "modified": "2015-09-30T08:58:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7346d43e20149fea22d789e6dbe03ed7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba441-3764-4df4-8c8b-4252950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:41.000Z",
            "modified": "2015-09-30T08:58:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73556660c0f2ad42974fb309f01a45a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba441-c9cc-4bb7-b23c-4957950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:41.000Z",
            "modified": "2015-09-30T08:58:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7370695c559823f18105446b76814bc6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba441-aab8-465a-857b-47dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:41.000Z",
            "modified": "2015-09-30T08:58:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '737ad50c27a64287b911a9ecad99a362']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba442-02c4-473d-8847-46f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:42.000Z",
            "modified": "2015-09-30T08:58:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73828a222a41a9d61e482c60dba6f9aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba442-a60c-44a5-bda7-42f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:42.000Z",
            "modified": "2015-09-30T08:58:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73860601876c0db8e8226be6d8e886a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba443-c8e4-4e12-8ecd-4499950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:43.000Z",
            "modified": "2015-09-30T08:58:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '738d6a9ed10051868d025dd638ca0302']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba443-7188-4cf7-a4f0-4d86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:43.000Z",
            "modified": "2015-09-30T08:58:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7391cf47f9fd0803f8bc36c5e51779f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba443-0900-4088-9807-474a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:43.000Z",
            "modified": "2015-09-30T08:58:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '739406d129818f9e7a66514553d8f737']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba444-f260-46df-bd94-4b49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:44.000Z",
            "modified": "2015-09-30T08:58:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73a15d4a5fc9b1de3019b93104d305b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba444-1648-40ad-82a1-406e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:44.000Z",
            "modified": "2015-09-30T08:58:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73a2fd12408b8c895403791a202e984b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba444-29c4-43ee-acce-467f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:44.000Z",
            "modified": "2015-09-30T08:58:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73a4851011c2ead142835fb2b6655842']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba445-c7e0-4f74-97a5-4471950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:45.000Z",
            "modified": "2015-09-30T08:58:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73a7492d85bd99c1283d00a28308320b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba445-64e8-4f29-b147-4520950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:45.000Z",
            "modified": "2015-09-30T08:58:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73a88fbb19ee7d08d7c13a5cf8bbd0a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba446-5a2c-4d3c-9557-4380950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:45.000Z",
            "modified": "2015-09-30T08:58:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73b8271a40cd48b6cdff303d6fc0d018']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba446-0ddc-4bd3-b918-4439950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:46.000Z",
            "modified": "2015-09-30T08:58:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73c7880c08b8250187362a53a274c2dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba446-e7b0-42c0-9861-478c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:46.000Z",
            "modified": "2015-09-30T08:58:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73cbfeb03fff03bcdb07cff1ec85856b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba447-4868-4f7a-adca-4303950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:47.000Z",
            "modified": "2015-09-30T08:58:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73cf613e22b12f7b56286bdcec99ec68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba447-3f3c-456c-801a-4909950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:47.000Z",
            "modified": "2015-09-30T08:58:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73dca0dc075ebed11c3c5de3f9b126ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba447-e8ec-4915-beed-4107950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:47.000Z",
            "modified": "2015-09-30T08:58:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73e868aee64777042a8e08b7be5d0cc0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba448-f6d4-481e-9225-4372950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:48.000Z",
            "modified": "2015-09-30T08:58:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73eccdf56fe061773ed5dac41db17956']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba448-a6d0-45bc-851b-40da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:48.000Z",
            "modified": "2015-09-30T08:58:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73f1a2a06648df370fea877083726ce8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba448-1254-458f-8fdb-4d7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:48.000Z",
            "modified": "2015-09-30T08:58:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73f236607fa813cbec8699a61d57d8be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba449-0bac-43a6-a2d2-46f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:49.000Z",
            "modified": "2015-09-30T08:58:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73faad0af5fa35c692900be1c564455d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba449-ee08-48ba-8225-4ea0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:49.000Z",
            "modified": "2015-09-30T08:58:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '73fbc33b4670da5438f26fb3b233d0b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44a-4c78-4b59-b11c-4e52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:50.000Z",
            "modified": "2015-09-30T08:58:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7402ef8bd55fda99396d636f234d20fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44a-4d18-4d07-8d21-40d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:50.000Z",
            "modified": "2015-09-30T08:58:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74082558fa987465134501a5738b3d94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44a-d5e0-4b5e-b85b-4ab5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:50.000Z",
            "modified": "2015-09-30T08:58:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '740c3124a746594d7ffaa95c3ab71400']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44b-5470-4c3e-85cf-4f4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:51.000Z",
            "modified": "2015-09-30T08:58:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '742ab282f9dfcd0d6bef4df0ac6b9ebf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44b-8fcc-4626-a59b-4448950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:51.000Z",
            "modified": "2015-09-30T08:58:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '743a50b55ef1911d06374efa7fcd7430']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44b-85bc-4d7b-9333-4a44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:51.000Z",
            "modified": "2015-09-30T08:58:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7441100cde7d8cb88f6fa4172ed492c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44c-5e94-42ec-91f3-43b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:52.000Z",
            "modified": "2015-09-30T08:58:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '744e90f00135312bd2fee96096533afd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44c-6214-49f4-9890-4396950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:52.000Z",
            "modified": "2015-09-30T08:58:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7452948372e58f80d9404640f6ea87c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44c-1cd0-4ec4-9f8a-4356950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:52.000Z",
            "modified": "2015-09-30T08:58:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '745450aefc4b6b9d8e039ddd2ea784db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44d-7934-4632-a4a0-4d86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:53.000Z",
            "modified": "2015-09-30T08:58:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '745972b7e4b03aaf4ca606ef443e1d0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44d-ea9c-4ba4-814e-4a74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:53.000Z",
            "modified": "2015-09-30T08:58:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '745bcfa721f6831cdcd8de83da0e7519']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44e-bf28-4547-a647-4437950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:54.000Z",
            "modified": "2015-09-30T08:58:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '745c8cd23b4a967551c6e41eec96d954']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44e-c8c4-44ea-a68f-42b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:54.000Z",
            "modified": "2015-09-30T08:58:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '746cce7a416d0eea509371571513e2f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44e-ace8-4233-ad03-46ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:54.000Z",
            "modified": "2015-09-30T08:58:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7470ec5d0ed9a31d32dbd48ca82e632a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44f-b1c0-4cd9-97cf-49ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:55.000Z",
            "modified": "2015-09-30T08:58:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '747bb5362c25c56fbeea74b69c2c40de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44f-3068-4749-a0d2-4c44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:55.000Z",
            "modified": "2015-09-30T08:58:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74808bba53e060b7bf743785b955c8bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba44f-73dc-43fe-bc3c-4a9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:55.000Z",
            "modified": "2015-09-30T08:58:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74847e98461be03d30eb8bdf88d48136']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba450-6de0-410c-a7dd-497a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:56.000Z",
            "modified": "2015-09-30T08:58:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7489435adccf5344738a3bfb3e0d184c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba450-730c-44e6-b8bd-4fa1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:56.000Z",
            "modified": "2015-09-30T08:58:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74ad7ea39d498e38d29226ea419b8b58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba450-6190-4f3c-9414-4cff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:56.000Z",
            "modified": "2015-09-30T08:58:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74ae65e99546679827e80a24365860c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba451-881c-474f-b0f5-49f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:57.000Z",
            "modified": "2015-09-30T08:58:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74b22d21a1db78e5d446a312cd48782b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba451-c9c0-486d-97ce-4623950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:57.000Z",
            "modified": "2015-09-30T08:58:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74cdcee5b0ecb15e12464ced94d5e5e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba451-b528-46c3-934c-40ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:57.000Z",
            "modified": "2015-09-30T08:58:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74dc44ec5607dab2315b817756283755']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba452-bb14-4533-be24-4e09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:58.000Z",
            "modified": "2015-09-30T08:58:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74e27137203d93b15fd4584d83b20ed2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba452-c36c-478d-b42a-4773950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:58.000Z",
            "modified": "2015-09-30T08:58:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '74e3113f6ac8fbf54461b6eb4fd6b522']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba452-7130-4138-a016-49c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:58.000Z",
            "modified": "2015-09-30T08:58:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '750cd37c0fae61874f09a1f0fd03a5e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba453-7650-439c-a0bf-4447950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:59.000Z",
            "modified": "2015-09-30T08:58:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7514b438f73ee90af12367e92b156e0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba453-4d18-4da1-a5f1-45b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:59.000Z",
            "modified": "2015-09-30T08:58:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75155d4badea2ff14dc48c39540b452a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba453-4304-417b-b2fd-41bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:59.000Z",
            "modified": "2015-09-30T08:58:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75292ddd9756ef49e55d0b5e5cd67238']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba453-b92c-459f-8945-4a38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:59.000Z",
            "modified": "2015-09-30T08:58:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7529ddb7bd0f8d8842ea9b5308808be0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba453-f9d0-4cc5-9dbb-4f65950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:59.000Z",
            "modified": "2015-09-30T08:58:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7529f8c221c4e84e9a0cb5587919a04f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba453-4790-4a19-9b83-4828950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:58:59.000Z",
            "modified": "2015-09-30T08:58:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '752aa4f006ca56049ca15ea1884e3fce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:58:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba454-a1ac-4614-b388-4af7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:00.000Z",
            "modified": "2015-09-30T08:59:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7532697da52249b98773a3f116713e58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba454-281c-4513-baaf-491e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:00.000Z",
            "modified": "2015-09-30T08:59:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7534d5c418f5b0d5b7937f6a8733e28c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba454-78f4-460e-a94d-4359950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:00.000Z",
            "modified": "2015-09-30T08:59:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '755a43bd42b97ceb7753dba7e40ca137']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba454-0ea0-4158-bdc6-4f68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:00.000Z",
            "modified": "2015-09-30T08:59:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75728ffb5f8dad10dd0137ce9162948f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba455-08dc-4fd4-a5be-4cff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:01.000Z",
            "modified": "2015-09-30T08:59:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75745a9cc37b2784889edad0ce8fff9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba455-2390-47c4-ace8-4388950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:01.000Z",
            "modified": "2015-09-30T08:59:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '757f45ed8ea484349668ff0adb0c055c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba455-cd0c-4115-82ec-4575950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:01.000Z",
            "modified": "2015-09-30T08:59:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '758cf8989e2fe3c6d9b78545c9b6702a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba455-2a5c-4885-a50c-4591950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:01.000Z",
            "modified": "2015-09-30T08:59:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7593817eb50e95193cde139c2fa26743']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba455-33b0-4642-a635-41db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:01.000Z",
            "modified": "2015-09-30T08:59:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '759d970ef6e3600488906a933e415319']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba456-7d9c-44eb-8301-47e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:02.000Z",
            "modified": "2015-09-30T08:59:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '759fc9c2e2bc2a538244072f3b570daf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba456-db50-4d3d-9421-437e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:02.000Z",
            "modified": "2015-09-30T08:59:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75a0b10c25ce38f78f93cfff2f1269b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba456-ebac-481c-8f13-4d4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:02.000Z",
            "modified": "2015-09-30T08:59:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75ad7e90a7f0c99328ff64f42d62d49d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba456-8010-45bc-b997-44f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:02.000Z",
            "modified": "2015-09-30T08:59:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75b1d29be5e53925d29ed3c197e11992']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba456-80cc-4758-82c6-48eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:02.000Z",
            "modified": "2015-09-30T08:59:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75be6fd319183e9eeff7247ce44de97f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba457-b6b8-472d-90d2-4fad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:03.000Z",
            "modified": "2015-09-30T08:59:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75c4730da035b411232f3c831192ac70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba457-6548-4059-bba5-4a2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:03.000Z",
            "modified": "2015-09-30T08:59:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75d32d9c9f22292cb8332cf692aeebf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba457-1d80-4984-b76a-44d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:03.000Z",
            "modified": "2015-09-30T08:59:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75d88cb49045b030026c923fbc0132b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba457-9a74-4dcd-9585-4d62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:03.000Z",
            "modified": "2015-09-30T08:59:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75e4603d3cd9a203c3f1112bae176b9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba457-4bc0-4b3d-9e0b-451c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:03.000Z",
            "modified": "2015-09-30T08:59:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '75f2916c0b0586bdcb9e65ef46cd5c65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba458-f19c-4ba0-8b4b-4ee0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:04.000Z",
            "modified": "2015-09-30T08:59:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7612d898c684dfa6555247c580db2d4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba458-91dc-4c99-9304-4f5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:04.000Z",
            "modified": "2015-09-30T08:59:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7620bbe66cf40b821bc39475066814d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba458-aad0-44ba-a36d-4f24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:04.000Z",
            "modified": "2015-09-30T08:59:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '76323429e9469ead889347091637d126']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba458-efe8-4812-af59-45ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:04.000Z",
            "modified": "2015-09-30T08:59:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '763e339c948e1aa23968913cd9527785']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba458-9d0c-4d13-8985-42fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:04.000Z",
            "modified": "2015-09-30T08:59:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '76402e5f7b65508628b1493be4f5e16f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba458-e224-4eb3-8727-48f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:04.000Z",
            "modified": "2015-09-30T08:59:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7655ec3fa6aed0bd76e1c79074a509a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba459-ee58-4838-99f7-4436950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:05.000Z",
            "modified": "2015-09-30T08:59:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '765a9827459ac4c4206e995997503644']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba459-1454-4842-af2a-4ea4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:05.000Z",
            "modified": "2015-09-30T08:59:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '765e57d1f7cb8798b8ad5bee8b57b836']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba459-aa2c-42c5-aec4-4921950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:05.000Z",
            "modified": "2015-09-30T08:59:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7667ca9ed6154684ec3f12cef816bb1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba459-340c-4379-b94e-4742950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:05.000Z",
            "modified": "2015-09-30T08:59:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7679d62cd6496818afc25451165112fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba459-606c-4dd7-9e14-4647950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:05.000Z",
            "modified": "2015-09-30T08:59:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '76804ea756d06bb8e1d7bbc6afc3d86b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45a-ef60-4433-8d46-4a2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:06.000Z",
            "modified": "2015-09-30T08:59:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7682df7353f7cf9da191a87ece873b73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45a-c5ac-4155-9183-4a48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:06.000Z",
            "modified": "2015-09-30T08:59:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '768a3aafc22a344e7b94aebcb95e701a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45a-3c84-4832-84b5-466b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:06.000Z",
            "modified": "2015-09-30T08:59:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7692954653629fc2212eacb43d32d666']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45a-a420-4729-8687-4cae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:06.000Z",
            "modified": "2015-09-30T08:59:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '76b3213c987e483e2fe58cf761475618']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45a-0d8c-403e-8592-48cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:06.000Z",
            "modified": "2015-09-30T08:59:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '76ba292cfbc95d4cc4b657903cab1e06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45b-d5a4-48aa-a5e0-4d93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:07.000Z",
            "modified": "2015-09-30T08:59:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '76e96e61bd9f1d1932ca1fa72b7bc10f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45b-4ce0-43f2-84f1-45ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:07.000Z",
            "modified": "2015-09-30T08:59:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '76e9c389b1c0add80df7bbe3595498fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45b-d54c-428e-9530-49c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:07.000Z",
            "modified": "2015-09-30T08:59:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '76f03ec50176eb9d0bf67ce2d409be62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45b-34f4-41c0-ba08-45aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:07.000Z",
            "modified": "2015-09-30T08:59:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77014601da5648514ee3174d35a5fb77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45b-99b0-4232-a541-49ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:07.000Z",
            "modified": "2015-09-30T08:59:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77023687ae526fc1675d0d411474c4ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45c-d58c-44a2-a939-4263950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:08.000Z",
            "modified": "2015-09-30T08:59:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '770aba44da25939d7fc8095ac5a26c25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45c-0eb8-4c75-8aa5-433b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:08.000Z",
            "modified": "2015-09-30T08:59:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '770f364cf3902557421b21d7e8924c90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45c-bcc0-4349-8a87-4bf8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:08.000Z",
            "modified": "2015-09-30T08:59:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77168bf29834da960563f960ad9d6d6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45c-0188-41c0-9f25-42cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:08.000Z",
            "modified": "2015-09-30T08:59:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '771e65f7cc15e3a989efdaa5019ea2ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45c-0f18-4fdd-80fc-49de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:08.000Z",
            "modified": "2015-09-30T08:59:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77205d349c0238009776dfc7606c4832']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45c-4a00-4f38-bc83-40d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:08.000Z",
            "modified": "2015-09-30T08:59:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '772976a4f960e436e44c2453669297a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45d-e678-41c1-a139-481b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:09.000Z",
            "modified": "2015-09-30T08:59:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '772d08acdd14cd7a3e935361b0837173']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45d-0f34-44b4-b701-40f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:09.000Z",
            "modified": "2015-09-30T08:59:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77339b88ab30c8822e4e01813a053414']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45d-45f0-415b-ad70-4342950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:09.000Z",
            "modified": "2015-09-30T08:59:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7737d8de32fdc1ef06d6cddda9d55419']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45d-3710-456c-9780-4ed7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:09.000Z",
            "modified": "2015-09-30T08:59:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '773def9fb27607b6174c9c6ccf800e83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45d-0144-44ab-a55a-4495950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:09.000Z",
            "modified": "2015-09-30T08:59:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '773f17d4b499978ebc3504b4a175e09c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45e-ac14-49e0-9dc5-4e9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:10.000Z",
            "modified": "2015-09-30T08:59:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '774557290582a4f145f734896de23123']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45e-9f34-4606-8de5-4b68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:10.000Z",
            "modified": "2015-09-30T08:59:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77538c93a4b609482a44d8ddf5077768']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45e-19f4-4b42-b5f9-401f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:10.000Z",
            "modified": "2015-09-30T08:59:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7758eaef43648c02a60b816f2b7fd93f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45f-0398-43c9-9a78-4c2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:11.000Z",
            "modified": "2015-09-30T08:59:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '775b199d3c558d3f32d6407ea7c45c1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45f-cdcc-4ac5-93f0-4b1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:11.000Z",
            "modified": "2015-09-30T08:59:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '775bf30117b411863bf85ce2c2c09a7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45f-8f04-4d62-8cfc-4e86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:11.000Z",
            "modified": "2015-09-30T08:59:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '775ec3a77a9e1bdcc05ea5d94a3ba96b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45f-770c-4225-8727-443a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:11.000Z",
            "modified": "2015-09-30T08:59:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77720d63de3b9d634a4cf2d7a8310e59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba45f-840c-44f9-baec-4215950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:11.000Z",
            "modified": "2015-09-30T08:59:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77729989be3993ad3b11c5fe83238993']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba460-8248-4fe8-a468-4fc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:12.000Z",
            "modified": "2015-09-30T08:59:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '777ccafdc2786ac510c436e07a24281f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba460-777c-4077-98f5-4806950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:12.000Z",
            "modified": "2015-09-30T08:59:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77823a1c5c8f4dc8e8e9625b3f3f9a27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba460-1e10-4f09-847c-42a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:12.000Z",
            "modified": "2015-09-30T08:59:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77894801c973068f8b93bdcbc5c459ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba461-e1b0-4227-bb29-45a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:13.000Z",
            "modified": "2015-09-30T08:59:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '779330b95f8e850dfb15aa23a94e8071']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba461-570c-4823-b213-449b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:13.000Z",
            "modified": "2015-09-30T08:59:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '779f34340f93d6b36450139c72a6fabf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba462-5694-43da-8da5-4569950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:14.000Z",
            "modified": "2015-09-30T08:59:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '779f5275a7a5b6960108f5a1120ea974']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba462-8c64-4b1a-98dc-4e06950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:14.000Z",
            "modified": "2015-09-30T08:59:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77a2e8bff7c785602a010d3cc1784d2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba462-dcc4-4f27-ad14-43ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:14.000Z",
            "modified": "2015-09-30T08:59:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77b628862edd749619aba842a1a3afc2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba463-3cd8-4c2b-8a57-4d1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:15.000Z",
            "modified": "2015-09-30T08:59:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77c676eb656e67a539344c0e25aa5654']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba463-7234-48f8-9bc1-41ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:15.000Z",
            "modified": "2015-09-30T08:59:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77c7824246a507f7d0a8de949dd90837']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba464-f3fc-4801-b55a-4945950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:16.000Z",
            "modified": "2015-09-30T08:59:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77cf8f7f17566ff5118789c301e9e1b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba464-5420-4cdf-85c4-44ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:16.000Z",
            "modified": "2015-09-30T08:59:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77d0fa1b82cd7f83fa56589364f83347']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba464-5698-431c-ae86-4078950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:16.000Z",
            "modified": "2015-09-30T08:59:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77d6d8d37d8dbd96e7e02101410e91d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba465-a4d8-424b-8d22-4aa6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:17.000Z",
            "modified": "2015-09-30T08:59:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77e532aa468667533a0d01ee8f8d6e35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba465-01a8-433f-a673-4d1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:17.000Z",
            "modified": "2015-09-30T08:59:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77e7e4f9d9e8f1483078e9a0fb297ad2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba466-59ac-4a61-9e22-40de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:17.000Z",
            "modified": "2015-09-30T08:59:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '77f1cb3ad78782c211a9b543fa528b14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba466-86e0-4fac-9104-453d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:18.000Z",
            "modified": "2015-09-30T08:59:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78023e74bc853a289878d0a615506252']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba466-48f8-4278-b0b1-4ea4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:18.000Z",
            "modified": "2015-09-30T08:59:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78094299ddfd2471f521d310efbbbb1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba467-56b4-4395-9876-4cd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:19.000Z",
            "modified": "2015-09-30T08:59:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7810fdbd1e4ecc5fe85d3f2fef5268fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba467-44c4-46da-a60e-4a9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:19.000Z",
            "modified": "2015-09-30T08:59:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78194b23bc1da5628174b6a476baa837']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba467-97c0-4f08-8401-4de8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:19.000Z",
            "modified": "2015-09-30T08:59:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '781c7fc1f90fe71af5cbf2a041c2818d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba468-3fd4-42e8-b25b-4a6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:20.000Z",
            "modified": "2015-09-30T08:59:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78209d703383dedde36ffdbbb3f39d43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba468-5570-4d5d-a4e4-4aaf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:20.000Z",
            "modified": "2015-09-30T08:59:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '782474060a53f4989b926f3364f4eecd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba469-af60-4344-bf43-42db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:21.000Z",
            "modified": "2015-09-30T08:59:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7824f5e9e9d88a5dfbbc5b5ff706d2de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba469-69b8-4ef2-9a92-4f3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:21.000Z",
            "modified": "2015-09-30T08:59:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '783265dc5e43f1287d8ab6a76bc008a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba469-71e8-4f93-bde7-4472950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:21.000Z",
            "modified": "2015-09-30T08:59:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '783835d89b5fba832c430a9683c6a5c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46a-1b84-43dc-a76c-4f15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:22.000Z",
            "modified": "2015-09-30T08:59:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7841128cbd64a5dc43728ca21faeaa09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46a-83f8-4b76-be39-47c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:22.000Z",
            "modified": "2015-09-30T08:59:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7841bcd960b683f9535855b6b31cd4e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46b-e82c-411b-9ef7-4b4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:23.000Z",
            "modified": "2015-09-30T08:59:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78512c7e55ebd458295bfcbc39bfd3c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46b-5de4-4b37-b92d-40b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:23.000Z",
            "modified": "2015-09-30T08:59:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7854aead1153716c72bab9dfac551429']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46b-c3d4-425e-a8b1-4dd4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:23.000Z",
            "modified": "2015-09-30T08:59:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '786245c2017421edb3348fd98ff68b04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46c-e9a0-4a76-bdc2-4ea2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:24.000Z",
            "modified": "2015-09-30T08:59:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '786696a589dc323712f1efd044f39788']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46c-1928-4037-a9da-477e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:24.000Z",
            "modified": "2015-09-30T08:59:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78742ded3c737440c615c5cc5cf1dba0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46c-251c-45d4-8a36-4705950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:24.000Z",
            "modified": "2015-09-30T08:59:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7897405f2d2f193b39f79161c6131fe8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46d-4ec0-4900-9815-495d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:25.000Z",
            "modified": "2015-09-30T08:59:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78a0e765dab05219834e5b4841f2ba62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46d-3ce0-47c9-bd50-4ed1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:25.000Z",
            "modified": "2015-09-30T08:59:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78ac6205f3bdfc67cc3e0cd337bde945']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46e-4ad0-4177-8cf7-4475950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:26.000Z",
            "modified": "2015-09-30T08:59:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78b13d57b3cc4cbcf0a260cdd079f4c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46e-4250-4210-a267-42e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:26.000Z",
            "modified": "2015-09-30T08:59:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78b5978c7ea05bc9b2dcb8ab14342aa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46e-2798-4605-87eb-4d18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:26.000Z",
            "modified": "2015-09-30T08:59:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78be81777132ccb3c5588970b11fed72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46f-c9e8-4cc2-b198-4666950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:27.000Z",
            "modified": "2015-09-30T08:59:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78cb2b48acc04000177a4cedd1ca799f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba46f-6d48-4c98-a6ee-4249950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:27.000Z",
            "modified": "2015-09-30T08:59:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78cd7436ff0a7a396a8b91036e7702e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba470-f120-471a-9af3-455f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:28.000Z",
            "modified": "2015-09-30T08:59:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78da7170dc5261472e3a736b6b6c9070']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba470-3d14-4493-ac96-4b54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:28.000Z",
            "modified": "2015-09-30T08:59:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78e3f26e697cc339d0cd573c44782d85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba470-b6bc-4aa4-98d5-4c0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:28.000Z",
            "modified": "2015-09-30T08:59:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78f0099ba21a566d270f795094d81b0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba471-99b4-4c44-9639-44c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:29.000Z",
            "modified": "2015-09-30T08:59:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '78ff34c61778f58c41a23084d0e785fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba471-343c-47bd-8005-4228950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:29.000Z",
            "modified": "2015-09-30T08:59:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7904c534885d3f4b7c51a016170633e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba472-5ac0-4c89-ab09-40d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:30.000Z",
            "modified": "2015-09-30T08:59:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7908b2f36149798dce31c54439b5333f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba472-4928-4e2e-8bfc-458b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:30.000Z",
            "modified": "2015-09-30T08:59:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '790b014405418edd4fe800dc0cb2135d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba472-a4c4-4d48-a908-4d0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:30.000Z",
            "modified": "2015-09-30T08:59:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '792901daae5cf54b3be5790339d2c2bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba473-8330-434b-bbda-47cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:31.000Z",
            "modified": "2015-09-30T08:59:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '792935c9d9363565e632fd4de13f8020']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba473-3694-4430-98f4-42e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:31.000Z",
            "modified": "2015-09-30T08:59:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '792a01cfc3f9dc45f82ed0f02831904d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba473-268c-4506-9713-4b71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:31.000Z",
            "modified": "2015-09-30T08:59:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7934ad47736324f3532a63218407f0c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba474-2580-46df-ad4f-4652950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:32.000Z",
            "modified": "2015-09-30T08:59:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7936b5104ad893ca1d17cb85bd3ab6a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba474-2534-49a3-a319-4376950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:32.000Z",
            "modified": "2015-09-30T08:59:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '793d9663637d5f0a562fe60c349618ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba475-5c54-4bae-be91-4dee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:33.000Z",
            "modified": "2015-09-30T08:59:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7958f0da78a975c7c50e1314562b1b30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba475-5464-4869-9934-430e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:33.000Z",
            "modified": "2015-09-30T08:59:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '795fe5ae510d5919b801452b7cee97f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba475-2174-4b0c-9713-401c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:33.000Z",
            "modified": "2015-09-30T08:59:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7965e36a7d2d90fbea40914f73b54518']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba476-5ef0-4bc2-a7fd-4042950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:34.000Z",
            "modified": "2015-09-30T08:59:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7969bd5f1f9dee9d2a0bd6f197f15cdb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba476-1814-40fd-b505-4a39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:34.000Z",
            "modified": "2015-09-30T08:59:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '796ffb891cf6f6bbeb0ff1ec18082576']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba477-85d4-4049-b41e-4a00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:35.000Z",
            "modified": "2015-09-30T08:59:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7974e0a94265a39c32d3259ed1d6b0b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba477-96d0-4064-bb60-46b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:35.000Z",
            "modified": "2015-09-30T08:59:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7975f42749911dcae893d09a19d8d9dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba477-c1e0-4781-8854-4841950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:35.000Z",
            "modified": "2015-09-30T08:59:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7979a338fdbdde2255361a20b50dcd61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba478-6d28-41e3-8f62-4c28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:36.000Z",
            "modified": "2015-09-30T08:59:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7982f07ae2bf2f1d420b23ea93dcd116']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba478-e7dc-4743-b1b5-4b82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:36.000Z",
            "modified": "2015-09-30T08:59:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '798d95f8c9735e9a6461a468d7f728e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba478-c074-4317-b24f-4210950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:36.000Z",
            "modified": "2015-09-30T08:59:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '799159b25b2b844f21c316597d38e874']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba479-28a0-410d-998b-4786950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:37.000Z",
            "modified": "2015-09-30T08:59:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79999e1fb80152fae33eb0a43af6134d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba479-8a70-4948-a15f-4705950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:37.000Z",
            "modified": "2015-09-30T08:59:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79bac638c3476426b17b3de7b96dc7db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47a-4684-4508-8026-409c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:38.000Z",
            "modified": "2015-09-30T08:59:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79c563e515c82de4668659763378138c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47a-8ff8-4380-bfe2-4e88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:38.000Z",
            "modified": "2015-09-30T08:59:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79cd095c7945bdbb044806da79ab0f13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47a-edfc-4685-913b-4c7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:38.000Z",
            "modified": "2015-09-30T08:59:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79d50c9cb64acd84326c0c7522ce61ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47b-7320-4012-92b4-43e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:39.000Z",
            "modified": "2015-09-30T08:59:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79d9bbd7dc5d5e6a0f8507f1dbae611a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47b-9bf8-42fe-b660-4391950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:39.000Z",
            "modified": "2015-09-30T08:59:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79dabfed07b820795561a09e65455c99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47c-b5bc-490c-aede-48f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:40.000Z",
            "modified": "2015-09-30T08:59:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79ee5c83da1e1633787e388e34781c2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47c-c4d0-47c1-a8a0-47af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:40.000Z",
            "modified": "2015-09-30T08:59:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79f9f32931559f10132c4258613208d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47c-3d5c-44d2-a8c0-4b2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:40.000Z",
            "modified": "2015-09-30T08:59:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '79f9f3c0cdf687d2ba55c4c1193049a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47d-af8c-4526-a721-48b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:41.000Z",
            "modified": "2015-09-30T08:59:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a0a0d432159a6e700e2f0b661a82a17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47d-2cac-47e0-8fdb-471d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:41.000Z",
            "modified": "2015-09-30T08:59:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a0b2b3a55b71e5d7edcdb62aca0fbca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47e-2ce8-409d-9cb1-4f21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:42.000Z",
            "modified": "2015-09-30T08:59:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a1a1ea1913970d8675e097c6dae525f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47e-cfc8-487b-834f-484d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:42.000Z",
            "modified": "2015-09-30T08:59:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a2bd76a30de468001cc8c3f38892e96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47e-7790-4b2e-b443-4344950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:42.000Z",
            "modified": "2015-09-30T08:59:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a2c105a6d0724467588d10ed02b384d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47f-bb04-4ecd-b048-475c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:43.000Z",
            "modified": "2015-09-30T08:59:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a3a6a5e45f9808f2d99f8ada034c7c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47f-efe8-4dbf-8d97-47a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:43.000Z",
            "modified": "2015-09-30T08:59:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a410443c8ad05b1b2173e4f7da91ff9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba47f-c8c0-4ea5-adaf-49b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:43.000Z",
            "modified": "2015-09-30T08:59:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a4678e8dbb9d3b0996d1fc82ad1eceb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba480-9d44-4a35-887a-410b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:44.000Z",
            "modified": "2015-09-30T08:59:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a4806acc96c25e1db97745e17ee8257']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba480-8a00-4695-a2dd-4b09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:44.000Z",
            "modified": "2015-09-30T08:59:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a4fc22e6fba81042ac47d42a04f4b86']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba481-1244-4b24-8f47-4f49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:45.000Z",
            "modified": "2015-09-30T08:59:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a6409ad73854547fb6f506c96549e68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba481-0134-47d0-a433-495e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:45.000Z",
            "modified": "2015-09-30T08:59:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a6ceae552f107dbfe87146054aae472']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba481-0a6c-4dd2-8925-4f27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:45.000Z",
            "modified": "2015-09-30T08:59:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a70d23f48520d0140e73fde4d2ec843']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba482-f1c4-4e62-93b1-47c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:46.000Z",
            "modified": "2015-09-30T08:59:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7a7ccf319c8fea617358d68a00d548d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba482-1630-42dc-90bb-4d51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:46.000Z",
            "modified": "2015-09-30T08:59:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7aa9732700cb116458a70ce50bd380b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba483-e520-4600-87dd-4c08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:47.000Z",
            "modified": "2015-09-30T08:59:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ab7c4e4b3b59f8b361ed30b7ff56610']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba483-985c-4de6-ab80-434c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:47.000Z",
            "modified": "2015-09-30T08:59:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7abc1a8f8a37cd6f636f83b29196d832']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba483-cf00-41bc-bbe3-4c5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:47.000Z",
            "modified": "2015-09-30T08:59:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7aca62360498ff2343a65ad035548d9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba484-a37c-40a1-b30c-4102950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:48.000Z",
            "modified": "2015-09-30T08:59:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ad16ca71797f7282d3902195097295c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba484-e394-4250-9a49-4b7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:48.000Z",
            "modified": "2015-09-30T08:59:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7aebfe60190220637bb666283d4be0ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba484-7bb4-4e88-803f-4ebf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:48.000Z",
            "modified": "2015-09-30T08:59:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7af1b6184ab223cd2b32c9d911af4e56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba485-58ac-48ec-8a37-450d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:49.000Z",
            "modified": "2015-09-30T08:59:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7af2d24c92f74686ebd71b8d2e0b23c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba485-2d04-4658-b3c4-40cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:49.000Z",
            "modified": "2015-09-30T08:59:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7af5db103b577160f114060030a8c3fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba486-56e0-458c-a9e5-47c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:50.000Z",
            "modified": "2015-09-30T08:59:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7afd69ff3d2b921c4d6012d6338fbb69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba486-2444-491c-85bc-43a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:50.000Z",
            "modified": "2015-09-30T08:59:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b00eebeddd4e246910697fbff5fd033']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba486-f96c-4de9-b39b-4274950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:50.000Z",
            "modified": "2015-09-30T08:59:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b05362a5ab6b761f07e1917b439c692']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba487-2abc-4584-9c9f-4c28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:51.000Z",
            "modified": "2015-09-30T08:59:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b0ebc3de709c658c4c81d1b68469839']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba487-0950-406a-b2b6-4248950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:51.000Z",
            "modified": "2015-09-30T08:59:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b11c7ca7088a6075a1305fcc935debc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba488-7d74-4963-8d8c-4fb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:52.000Z",
            "modified": "2015-09-30T08:59:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b1f6177ef72432494a8d0ddd74f692d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba488-a870-4436-b15a-45c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:52.000Z",
            "modified": "2015-09-30T08:59:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b2d08953bbe885a77ce3f873ad1ad05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba488-bda0-48f9-a429-4871950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:52.000Z",
            "modified": "2015-09-30T08:59:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b306778dda8fc56b6d5435b83d30803']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba489-b700-4319-b603-4365950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:53.000Z",
            "modified": "2015-09-30T08:59:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b336eb50576bb8c6d7eebb4aa3ce25d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba489-9c50-461a-9c46-4a3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:53.000Z",
            "modified": "2015-09-30T08:59:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b34e2a48203ca737883e219d7dfd986']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba489-fdb4-4d45-b57a-4d48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:53.000Z",
            "modified": "2015-09-30T08:59:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b383732c367f69a94091abd839e194a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48a-2c2c-465b-9e1f-47ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:54.000Z",
            "modified": "2015-09-30T08:59:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b387fbc9e323e08804677ae8f279c25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48a-d6d0-4dfe-8266-4f25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:54.000Z",
            "modified": "2015-09-30T08:59:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b3a06815c9b8d47c402949e032ba291']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48b-530c-4dd8-9d05-44e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:55.000Z",
            "modified": "2015-09-30T08:59:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b459411283cc4211aa99b0f098dafa8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48b-f370-4d57-97c7-449a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:55.000Z",
            "modified": "2015-09-30T08:59:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b459da23984f9a7835efc52b223a692']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48b-4744-4295-868f-47e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:55.000Z",
            "modified": "2015-09-30T08:59:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b4d24f001da2e30999f6f7c0fc5afbf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48c-7d28-454b-b969-4a69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:56.000Z",
            "modified": "2015-09-30T08:59:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b4fde31f3a1146835c9099e1694e945']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48c-42e8-4b94-853e-43b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:56.000Z",
            "modified": "2015-09-30T08:59:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b519989ae2b31595711be0de0051984']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48d-1418-4a0d-ab03-41a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:57.000Z",
            "modified": "2015-09-30T08:59:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b54d14598a7b808131676359f4e8fc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48d-f5a8-4ec9-b785-49a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:57.000Z",
            "modified": "2015-09-30T08:59:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b562f4d6e9e7f7d5f6e599f45ca895a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48d-4fe4-4a27-b1a0-4a2f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:57.000Z",
            "modified": "2015-09-30T08:59:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b5f570bde189d8e797ab97bea9878ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48e-b418-477c-9aef-4bb6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:58.000Z",
            "modified": "2015-09-30T08:59:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b63058d85695d2edcef0bf923baa33b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48e-437c-43f0-a91d-4798950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:58.000Z",
            "modified": "2015-09-30T08:59:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b699c7873f05fcc3e75e11f79274dc0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48f-9234-46d5-86ec-4037950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:59.000Z",
            "modified": "2015-09-30T08:59:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b73022900b503e3f189a428341ea73b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48f-21bc-4466-8779-4ff2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:59.000Z",
            "modified": "2015-09-30T08:59:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b7c0ac9434a829dc72f0de4e7a35051']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba48f-cfe0-41f1-9ef0-4ebc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T08:59:59.000Z",
            "modified": "2015-09-30T08:59:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b910d8497ff46dc80c6c1765dcbc008']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T08:59:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba490-9410-40dc-ae3b-4fc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:00.000Z",
            "modified": "2015-09-30T09:00:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7b9bbf0abb53b405570fbac9385ee1df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba490-d2bc-4a58-b42f-479b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:00.000Z",
            "modified": "2015-09-30T09:00:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ba2d629b94beb638386e8666e1d732e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba490-9d38-4a71-8a5e-46f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:00.000Z",
            "modified": "2015-09-30T09:00:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7bb64267b4073795c114dbf1eec3f0d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba491-ec8c-40db-ae82-4d0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:01.000Z",
            "modified": "2015-09-30T09:00:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7bb75d3e4faeeb925edcb3d6d2304620']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba491-a168-406f-a6f1-4a81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:01.000Z",
            "modified": "2015-09-30T09:00:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7bcb5e9ad6bc56c263db052483306aa6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba492-3bbc-43f3-a1ba-424b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:02.000Z",
            "modified": "2015-09-30T09:00:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7bd1b2711c7e51db335c055e31730f34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba492-1b20-417f-936f-48f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:02.000Z",
            "modified": "2015-09-30T09:00:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7bedcb21178032876ed145840a29a0ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba492-5048-469b-9ab5-4a42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:02.000Z",
            "modified": "2015-09-30T09:00:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7bf239b985e74f0b6d15dbd422b584ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba493-a508-4f7d-ba70-45af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:03.000Z",
            "modified": "2015-09-30T09:00:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7bf3a8938df5c7d758d4ad0de08541f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba493-680c-4e53-b270-4fd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:03.000Z",
            "modified": "2015-09-30T09:00:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7bf9ea7cfe4bd9072636908a7428cc73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba494-3f94-4a66-9c6c-4543950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:04.000Z",
            "modified": "2015-09-30T09:00:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7bff0893d478434c3bc5663ec0fb7d60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba494-8fb8-417c-a0dd-4985950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:04.000Z",
            "modified": "2015-09-30T09:00:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c01ec39be4de00c7725d3dd5d5d6b43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba494-aedc-49af-8e6d-4654950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:04.000Z",
            "modified": "2015-09-30T09:00:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c097f71e0261a0458f9ec01a60dc098']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba495-2c18-42fb-b91d-46d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:05.000Z",
            "modified": "2015-09-30T09:00:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c175c687e8e2d6c3cebd69c40bb5201']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba495-4f7c-4cf2-8d76-4406950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:05.000Z",
            "modified": "2015-09-30T09:00:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c1a7f9ae8852f856778abb810c59e8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba496-f6e8-4277-9fcf-4cfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:06.000Z",
            "modified": "2015-09-30T09:00:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c27a32c16f496b79e15c22d98a3140e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba496-105c-4f17-a25f-4a55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:06.000Z",
            "modified": "2015-09-30T09:00:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c2befab44b0f9c0f798a809de25de92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba496-7fc8-47b9-a09b-4296950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:06.000Z",
            "modified": "2015-09-30T09:00:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c338ee6a714bc6d6f3d24419c219ab4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba497-a574-4318-8169-4a21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:07.000Z",
            "modified": "2015-09-30T09:00:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c38b356cbc3c1e46eb2a95bde4e5f4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba497-6edc-4cd6-8b00-4583950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:07.000Z",
            "modified": "2015-09-30T09:00:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c41c35e7687a03489f265ed45d063af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba497-bd38-4719-bc6d-4bea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:07.000Z",
            "modified": "2015-09-30T09:00:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c4cbda475a06aeb9edf6b7275ff7257']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba498-d9f8-4b0e-995f-4e1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:08.000Z",
            "modified": "2015-09-30T09:00:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c5f07adb5e21c329b94fc5e9451a825']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba498-c9f0-4227-abc6-4296950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:08.000Z",
            "modified": "2015-09-30T09:00:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c677e61ec6fb06f82e390987eea098d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba499-d01c-4829-a9e5-4cf6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:09.000Z",
            "modified": "2015-09-30T09:00:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c6a804e722bba6e823e84fdb0abbaf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba499-d624-41fc-a628-4f1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:09.000Z",
            "modified": "2015-09-30T09:00:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c7143f2b2404a4770db1c5e3044dbd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba499-43a0-431f-90a8-4aec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:09.000Z",
            "modified": "2015-09-30T09:00:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c723ebdd25a78fabf7fc564a1a35780']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49a-26ac-4861-a4a6-48af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:10.000Z",
            "modified": "2015-09-30T09:00:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c7399d84ac6db30afab51ae2870d29c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49a-527c-48a0-8186-4cea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:10.000Z",
            "modified": "2015-09-30T09:00:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c7c981867d5cbc6d4ff1c29ebd2ffa6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49b-9878-4ff9-aec3-4d7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:11.000Z",
            "modified": "2015-09-30T09:00:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c7ca33c85384399e036be2bec4c2a8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49b-43c4-40ae-9d6f-48ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:11.000Z",
            "modified": "2015-09-30T09:00:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c8b4abb4a1ec44ab6e623e46a4faa9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49b-23d0-4aba-b70f-49f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:11.000Z",
            "modified": "2015-09-30T09:00:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c943652b7240eecab33f8d602ee3a8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49c-2e6c-44ea-add2-4a19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:12.000Z",
            "modified": "2015-09-30T09:00:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c94711ca83eec1da285d8174796cb24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49c-4528-4274-8140-4343950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:12.000Z",
            "modified": "2015-09-30T09:00:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7c9e554c147613e7b3c96efb6b928e3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49d-f524-4967-b71f-47e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:13.000Z",
            "modified": "2015-09-30T09:00:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7cb3cc8b74d23ab2635453432a9fdb7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49d-5cb0-42ac-94b1-418f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:13.000Z",
            "modified": "2015-09-30T09:00:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7cb6ef8f5f759b325cd966ed88f4fc8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49d-ff9c-4370-9a7a-4b32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:13.000Z",
            "modified": "2015-09-30T09:00:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7cc6c1c945d33ec1095e89a7e276b9ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49e-7394-43f7-a9ca-4525950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:14.000Z",
            "modified": "2015-09-30T09:00:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7cc7910d6cbd9e10f3c15996ffc1ddd0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49e-84f8-43a1-bd70-498a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:14.000Z",
            "modified": "2015-09-30T09:00:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7cdcd8af097a08e944c973f1033c98c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49f-7748-45a3-8cb8-4d35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:15.000Z",
            "modified": "2015-09-30T09:00:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ce07395c5e381831a7aa6ca4541604b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49f-527c-4149-ad50-4fdf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:15.000Z",
            "modified": "2015-09-30T09:00:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ceab62f84af7795b76c49006bef07ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba49f-5a30-4801-a578-4b53950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:15.000Z",
            "modified": "2015-09-30T09:00:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ced5c565b93bbe49f0a9f1e242857e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a0-031c-4e9a-8af2-4617950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:16.000Z",
            "modified": "2015-09-30T09:00:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d092a418929252c1e67ed4154de9194']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a0-c518-4964-b3e4-4bf5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:16.000Z",
            "modified": "2015-09-30T09:00:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d16604b910d09e630287661c287f13c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a0-d020-460f-8e1d-47dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:16.000Z",
            "modified": "2015-09-30T09:00:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d206f173155a715737a9ca4c43dad27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a1-8eb4-405b-9864-444d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:17.000Z",
            "modified": "2015-09-30T09:00:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d32f40d19f9948daba516a1b7347baf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a1-c480-4619-aefe-4b00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:17.000Z",
            "modified": "2015-09-30T09:00:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d341d85018991a0e40891fdb52e02bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a2-7b18-4075-8e78-4b6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:18.000Z",
            "modified": "2015-09-30T09:00:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d422651a4aaa06d1f666aa7f989a89e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a2-5f90-4c7f-95eb-4c27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:18.000Z",
            "modified": "2015-09-30T09:00:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d527d3c977ce280afd7fee160dd3b6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a2-9624-4797-8b84-4c60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:18.000Z",
            "modified": "2015-09-30T09:00:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d91b1659dfaa9ff2eec6e6c093b9341']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a3-9010-4939-bf1d-4969950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:19.000Z",
            "modified": "2015-09-30T09:00:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d942ecb57808f59a0b8c4e1868082ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a3-dc60-49e1-8695-44c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:19.000Z",
            "modified": "2015-09-30T09:00:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d9454f2f4b7a0b5358e72e363cb10bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a4-7ff8-4f4f-b682-4d33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:20.000Z",
            "modified": "2015-09-30T09:00:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d95a67a08a63771c69e2457a0c6570c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a4-5bec-41d2-9df3-4ac6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:20.000Z",
            "modified": "2015-09-30T09:00:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7d9d0e8173da43cae95726bd43c85dda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a4-6eb4-478f-9add-46ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:20.000Z",
            "modified": "2015-09-30T09:00:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7dd0baab3659ed3e8f5236ad025ee1dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a5-2ed0-4d6c-a87e-4a9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:21.000Z",
            "modified": "2015-09-30T09:00:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ddc6bf617dba26a3d7ef643737a5be1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a5-7c70-40ac-b341-4fb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:21.000Z",
            "modified": "2015-09-30T09:00:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7dff3038cf74a03e320700626dd63ca4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a6-8814-4353-831c-43b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:22.000Z",
            "modified": "2015-09-30T09:00:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e05e1bc47591b21e1b29ae1f6357354']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a6-ee7c-42db-bd86-4ac0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:22.000Z",
            "modified": "2015-09-30T09:00:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e1330913d79c8669f5f9274d1fd6cd4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a6-81c8-4919-8e36-4ba9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:22.000Z",
            "modified": "2015-09-30T09:00:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e1b590772353435706587e1fdb20917']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a7-0b58-47a2-b2ac-43df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:23.000Z",
            "modified": "2015-09-30T09:00:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e244a13b4332750709b62d8a6efea68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a7-ba20-4326-8159-4ec7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:23.000Z",
            "modified": "2015-09-30T09:00:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e2c3b7d2fe373dcbbc9aca780cdbed0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a8-7208-4131-93ed-4bb6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:24.000Z",
            "modified": "2015-09-30T09:00:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e2f9e36ca5392c9ba6bf13ab6a78a9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a8-bbe4-4feb-90c2-4ee1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:24.000Z",
            "modified": "2015-09-30T09:00:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e36c8b4a19a9c4afb4d37defb79b7ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a8-e590-4ef7-8e3a-4a60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:24.000Z",
            "modified": "2015-09-30T09:00:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e3ca730d658b57525b3ed8cc96c08b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a9-49cc-4177-9156-4a8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:25.000Z",
            "modified": "2015-09-30T09:00:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e4176000a38daa5579ac2cd2f6ccc2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a9-2f44-4873-820c-488c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:25.000Z",
            "modified": "2015-09-30T09:00:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e432701b6c4db26c7915b42edc36e77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4a9-b588-44d9-b126-433c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:25.000Z",
            "modified": "2015-09-30T09:00:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e44e91d787c906003043b646447ac8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4aa-0fc4-4710-a0a9-477b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:26.000Z",
            "modified": "2015-09-30T09:00:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e5599a3d9fe939fdadccccccdef2a48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4aa-f490-4510-abcb-4301950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:26.000Z",
            "modified": "2015-09-30T09:00:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e63c8402b7c87f80874879bcc19a16e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ab-e538-4083-bc63-402c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:27.000Z",
            "modified": "2015-09-30T09:00:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e64ada99de09763b9707c296ffc4921']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ab-8088-48ff-ba03-4007950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:27.000Z",
            "modified": "2015-09-30T09:00:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e6f16acc882367e3cb991ad4c57e18f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ab-1480-4d83-af7b-4861950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:27.000Z",
            "modified": "2015-09-30T09:00:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e7d6303c6d5c8f531d4ffd4eac78d90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ac-eaa8-4bc2-b282-4a09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:28.000Z",
            "modified": "2015-09-30T09:00:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e7eaee5c2b90a62691f2d5c0a6f4064']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ac-5024-4a80-9a15-440e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:28.000Z",
            "modified": "2015-09-30T09:00:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e89c065219e02d8be3840c4ea30c677']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ad-f810-47d3-972f-4455950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:29.000Z",
            "modified": "2015-09-30T09:00:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e8ac37410c7c7688cab3852c37e114e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ad-c7d4-4ccc-bc7c-4af8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:29.000Z",
            "modified": "2015-09-30T09:00:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e8b46859dc8acd1f11de7cdffbb4c95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ad-d340-4e98-9e49-49f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:29.000Z",
            "modified": "2015-09-30T09:00:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7e90d3723c146285edae0aef252751ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ae-1a4c-4a0b-847f-4cd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:30.000Z",
            "modified": "2015-09-30T09:00:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7eaa9fa68ac3e513062683a918da77ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ae-c840-4898-865e-45a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:30.000Z",
            "modified": "2015-09-30T09:00:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7eb1b374ed0cb20fb63ce1aaffc971e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4af-5ebc-46c7-8e6b-479d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:31.000Z",
            "modified": "2015-09-30T09:00:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7eb4b6850bfae2604f8cde1e6f254a22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4af-9900-4b76-827b-4082950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:31.000Z",
            "modified": "2015-09-30T09:00:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7eba7a61ac32261892570d41a683419b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4af-44b0-4a28-b3a8-41f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:31.000Z",
            "modified": "2015-09-30T09:00:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ebef31195339d349872af3bc83508ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b0-2e28-465d-b15a-4fc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:32.000Z",
            "modified": "2015-09-30T09:00:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ec1056dbd4d223925fd49aa3ea997c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b0-3868-4933-a745-4dbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:32.000Z",
            "modified": "2015-09-30T09:00:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ec58a20c73808f06d592917e0167d0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b1-e7bc-4bd4-818d-4bbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:33.000Z",
            "modified": "2015-09-30T09:00:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ec6a2b418c23b58ea3b3865589a3df8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b1-a0a4-4f40-bee5-4f22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:33.000Z",
            "modified": "2015-09-30T09:00:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ecd2261cba7c92ca439e9e5f6a10cf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b1-e4f4-4d5e-ad21-4be8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:33.000Z",
            "modified": "2015-09-30T09:00:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ed44ab9f4d39c128c59bece6915bf3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b2-57ac-4ec8-a4fb-42f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:34.000Z",
            "modified": "2015-09-30T09:00:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ed4a2b3536dd99ad421ee0342dd61e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b2-b154-4182-9f44-4fab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:34.000Z",
            "modified": "2015-09-30T09:00:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ee1675939d35a3f00ddd05b23d4623d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b2-dac0-4abf-9815-467c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:34.000Z",
            "modified": "2015-09-30T09:00:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ee3ec60e58f2821ef6a4089f8db438a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b3-c384-4131-820b-46dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:35.000Z",
            "modified": "2015-09-30T09:00:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ef39d23c3ea54b2f32b20499f2a183d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b3-2b28-43f5-8b2b-44a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:35.000Z",
            "modified": "2015-09-30T09:00:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ef7b21088bdd55b1797c74666774ad8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b4-0ed8-4c7c-a59c-4f24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:36.000Z",
            "modified": "2015-09-30T09:00:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7efdc0fdfb9ea24efa986e8575c308bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b4-b4f4-43f8-b764-4b11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:36.000Z",
            "modified": "2015-09-30T09:00:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f028a99e33ae63f79dd80cb2a3d82ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b4-9398-43d7-83f3-4cd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:36.000Z",
            "modified": "2015-09-30T09:00:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f09e5efb7754eb5330a9586c74b3024']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b5-1a10-431b-a100-43a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:37.000Z",
            "modified": "2015-09-30T09:00:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f10ab23616b17df9782bc57626cf6d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b5-d68c-4d40-86ac-482c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:37.000Z",
            "modified": "2015-09-30T09:00:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f16dc5c7427f2d3f2161078bff5a9dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b6-d7f4-467b-8688-4b93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:38.000Z",
            "modified": "2015-09-30T09:00:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f22402fc67cfd2010ceba47b127be93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b6-a388-48f8-96e1-4764950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:38.000Z",
            "modified": "2015-09-30T09:00:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f27c1dc65662064331d3318871d28eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b6-8394-4897-8cdb-422f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:38.000Z",
            "modified": "2015-09-30T09:00:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f2fc53c86ed4d69fd998f4b1213b0fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b7-917c-4613-84cc-469e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:39.000Z",
            "modified": "2015-09-30T09:00:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f427fe43b20c296b28315840cd73f72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b7-c55c-41a1-80ed-4ed1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:39.000Z",
            "modified": "2015-09-30T09:00:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f6268574d0183966a6f1a4f23c2e88a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b8-8a60-4295-a83c-4828950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:40.000Z",
            "modified": "2015-09-30T09:00:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f66c0befc8782b7041a177ee51410b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b8-6248-480a-bae1-4ad3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:40.000Z",
            "modified": "2015-09-30T09:00:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f6ddc1b6f3a9cbfe7f6b8cac636ea22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b8-4e38-4cb0-b428-4c65950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:40.000Z",
            "modified": "2015-09-30T09:00:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f7fd3d9e70b6323dfe42609afabedcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b9-a48c-4b01-8354-46b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:41.000Z",
            "modified": "2015-09-30T09:00:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7f8a70bb8bb93714a617a636c11e55eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4b9-5b38-4753-8fd1-4e14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:41.000Z",
            "modified": "2015-09-30T09:00:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fa7162d90a6be089927768bb0717b80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ba-e268-4287-91e7-43a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:42.000Z",
            "modified": "2015-09-30T09:00:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7faa183c3d5690b3963e3e45a6a85d0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ba-9a08-495b-b8c4-495c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:42.000Z",
            "modified": "2015-09-30T09:00:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fab2fb2b68582bf158ad8285259352d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ba-5ca4-4b41-b045-4556950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:42.000Z",
            "modified": "2015-09-30T09:00:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fb3dcdf6eb13b5f8e9954f712cdb6f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bb-beb8-4c5b-8806-461b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:43.000Z",
            "modified": "2015-09-30T09:00:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fb5c62291f359d41e1a659856f64e6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bb-26a8-483d-924f-44c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:43.000Z",
            "modified": "2015-09-30T09:00:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fb72ed02e53216b13fc486581567160']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bc-43a0-4048-a276-480d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:44.000Z",
            "modified": "2015-09-30T09:00:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fc1eab2cbdf49e7f45627e5a548ac57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bc-e7e8-4425-bccc-4309950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:44.000Z",
            "modified": "2015-09-30T09:00:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fc34f971d98c9adda7862512c72dd7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bc-c004-4cc5-bdf6-4304950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:44.000Z",
            "modified": "2015-09-30T09:00:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fcaea3f346c4342ba1a7132e95ee60e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bd-3fd0-469f-bd22-4483950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:45.000Z",
            "modified": "2015-09-30T09:00:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fd364031618c690a9ac8bfad1f0a165']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bd-2574-462b-bff5-4f1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:45.000Z",
            "modified": "2015-09-30T09:00:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7fe4c5234de922ad6bb633a3aeac571f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bd-ef78-4db3-b5d3-42c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:45.000Z",
            "modified": "2015-09-30T09:00:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '7ff4e0fc279b24fe6773cbaf73a20311']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4be-6b5c-434a-996e-4fed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:46.000Z",
            "modified": "2015-09-30T09:00:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80118957d7e1ddf16f2743e8e3953bdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4be-b508-40c5-8006-4012950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:46.000Z",
            "modified": "2015-09-30T09:00:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '801c0514d1f7450cd81037f75562c482']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bf-9d30-448d-9b3c-468e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:47.000Z",
            "modified": "2015-09-30T09:00:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80201986189b1e57f98d7c917af6ba54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bf-5e38-49ed-ab55-4e6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:47.000Z",
            "modified": "2015-09-30T09:00:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '802f4cf4e76968a476b930730cbeb9e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4bf-dfd4-4e70-9b21-4fb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:47.000Z",
            "modified": "2015-09-30T09:00:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8031f865526b37bdffe9c53d9a78068c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c0-a960-443a-8cf5-4779950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:48.000Z",
            "modified": "2015-09-30T09:00:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80341317efd64241f4eea0725b6fdda3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c0-dd10-45f9-8a5c-42af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:48.000Z",
            "modified": "2015-09-30T09:00:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '803586bec91130ea57cce9bd06bcad93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c1-8d70-4573-a718-4575950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:49.000Z",
            "modified": "2015-09-30T09:00:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80369064a47c877c1ae790452794d106']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c1-3044-4c3d-920e-470f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:49.000Z",
            "modified": "2015-09-30T09:00:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8044d383bc28c3c18e10a8eb98e463dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c1-0524-4c30-9933-40c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:49.000Z",
            "modified": "2015-09-30T09:00:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8047814e95f2ffe216ca7c0046c5602f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c2-3c9c-4094-988d-409e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:50.000Z",
            "modified": "2015-09-30T09:00:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '804c0224d79f65416c005b0d89f84c16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c2-9f78-4f8c-9384-43ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:50.000Z",
            "modified": "2015-09-30T09:00:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '805144a8b056c2f4ba0bad52ac227450']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c3-1e34-41d3-8813-4260950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:51.000Z",
            "modified": "2015-09-30T09:00:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80582d0610701e7159676cd3416a2dd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c3-6774-4f09-87a1-4381950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:51.000Z",
            "modified": "2015-09-30T09:00:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8065a98137bea83455e82fcbf387d7bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c3-110c-482e-906d-41ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:51.000Z",
            "modified": "2015-09-30T09:00:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '807d52e288c352e7c5809a0e6ba4806f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c4-60c4-4198-b657-42f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:52.000Z",
            "modified": "2015-09-30T09:00:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '807d5b3a57866f2fe4606d236256fc98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c4-ae54-4485-9008-4218950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:52.000Z",
            "modified": "2015-09-30T09:00:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '807d8f33606aba3034a7250718eb89c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c5-a1e4-47fa-b1f3-4e9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:53.000Z",
            "modified": "2015-09-30T09:00:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80897c8eb33aefe42299e77e3a99c56d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c5-6934-4fe8-bcb1-452e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:53.000Z",
            "modified": "2015-09-30T09:00:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '808de9807cd992bee558de234441f619']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c5-65d4-4778-81d7-4447950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:53.000Z",
            "modified": "2015-09-30T09:00:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '808f1c7245cfc4319d9020ddfbb82c80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c6-4940-4134-a960-47d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:54.000Z",
            "modified": "2015-09-30T09:00:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '809d2b1ac648076b169ff9aaa7eeee47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c6-e86c-421e-b3b4-402f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:54.000Z",
            "modified": "2015-09-30T09:00:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80abd0ea03a04c3946901bfd7862e6b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c7-a48c-4752-a66a-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:55.000Z",
            "modified": "2015-09-30T09:00:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80b227435915a5f3d649c303ce9f70e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c7-ccb8-4b45-a35a-4662950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:55.000Z",
            "modified": "2015-09-30T09:00:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80b56e04e9088997750908f3555039da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c7-df54-4b62-933d-4c94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:55.000Z",
            "modified": "2015-09-30T09:00:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80b7be0fd87907bb6ef4555d523b41b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c8-1750-4dc6-adec-40fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:56.000Z",
            "modified": "2015-09-30T09:00:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80bbff082e469d515e790e479576b111']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c8-8e40-4ef1-b320-4729950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:56.000Z",
            "modified": "2015-09-30T09:00:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80cfc195b386c3f4464ba35ff755f8a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c9-3458-4147-80f6-445f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:57.000Z",
            "modified": "2015-09-30T09:00:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80d248ae42d82fdd737d621ce3755afb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c9-3f30-4ae0-ad5b-4b36950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:57.000Z",
            "modified": "2015-09-30T09:00:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80d401f6a6e8e7d6b52d92d109f7ecf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4c9-2a74-4045-aff2-43b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:57.000Z",
            "modified": "2015-09-30T09:00:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80d5e8ebd2d804dfe78ea3a681897c32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ca-ae80-4f89-ab4b-473a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:58.000Z",
            "modified": "2015-09-30T09:00:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80e41cab83a474fd7402b1bc019a18b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ca-a75c-4927-90e8-438e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:58.000Z",
            "modified": "2015-09-30T09:00:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80ed3c0771dccc3e05f3f3a04ecaf91c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cb-82f0-4818-ba92-45a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:59.000Z",
            "modified": "2015-09-30T09:00:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '80f6da55d2125deeacdd060cb49c8339']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cb-88b4-4fe5-b793-46ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:59.000Z",
            "modified": "2015-09-30T09:00:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81011eaa8c71e7c5884b0fa27baa066b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cb-5f8c-42f3-a36a-405a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:00:59.000Z",
            "modified": "2015-09-30T09:00:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '810203cb1b823be2983199047cee2fc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:00:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cc-9360-4df4-bd2a-4d9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:00.000Z",
            "modified": "2015-09-30T09:01:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '810937eced4d1dbc5a9a92c4dff6b407']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cc-eef0-443e-b53f-4d7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:00.000Z",
            "modified": "2015-09-30T09:01:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '810d86924ff1a7e0d0dce2f052693517']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cd-2ac8-4ba5-a4d9-4e72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:01.000Z",
            "modified": "2015-09-30T09:01:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81111fc11ca5bfa1685f11351094df0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cd-fd0c-4b51-8811-4f3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:01.000Z",
            "modified": "2015-09-30T09:01:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8130903ccfe3fca24e9dfdc91c95b19b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cd-0688-4cab-b710-47a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:01.000Z",
            "modified": "2015-09-30T09:01:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '813178bb9bf9b085b01bcecb062722e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ce-c80c-421c-9130-47ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:02.000Z",
            "modified": "2015-09-30T09:01:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8133c73c9f650fc46cdd798aa2a76bf8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ce-3538-429b-9c51-4a56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:02.000Z",
            "modified": "2015-09-30T09:01:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '813458da8f310c7b8a3245886d581fde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cf-ec28-4f5a-8aa8-44e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:03.000Z",
            "modified": "2015-09-30T09:01:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81485f2711a2936b3c283dda0cb139b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cf-ad04-47b2-a6c5-4866950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:03.000Z",
            "modified": "2015-09-30T09:01:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8149bf4e9659cd262c60517826aa8f3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4cf-30a4-4e4d-8e41-4a76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:03.000Z",
            "modified": "2015-09-30T09:01:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81581cae943151e12fc6de843cb235bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d0-96ac-4784-924c-4c48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:04.000Z",
            "modified": "2015-09-30T09:01:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '815db081c8238581eb47c8dacf62de1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d0-a36c-4dca-90b1-4680950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:04.000Z",
            "modified": "2015-09-30T09:01:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81617339e119e34a41b2fc4f82d676e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d1-a564-47f1-ad7a-4692950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:05.000Z",
            "modified": "2015-09-30T09:01:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8176901c3640f6c6db3ce03395664e06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d1-63a0-41a4-b805-4ae2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:05.000Z",
            "modified": "2015-09-30T09:01:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '817d81df46803e908ca25dc72c562f9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d1-c154-4415-9a8c-4fb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:05.000Z",
            "modified": "2015-09-30T09:01:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '819816cc49af1a9a2da0b2b849ef5311']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d2-4304-4af2-b4ac-4ec5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:06.000Z",
            "modified": "2015-09-30T09:01:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81a50e459ba73c3da72875b186c9e7c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d2-5768-4635-9b86-499b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:06.000Z",
            "modified": "2015-09-30T09:01:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81b04aedd452cdd99643a5896726b094']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d3-cc58-4ae8-965f-4c28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:07.000Z",
            "modified": "2015-09-30T09:01:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81b0ff96628ba79193b826a2a6bbee06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d3-7ea8-412f-b22a-44f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:07.000Z",
            "modified": "2015-09-30T09:01:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81c0b42956872dcc6d3edb893c7938a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d3-dbb0-4ebc-b664-4e5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:07.000Z",
            "modified": "2015-09-30T09:01:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81d034fba6c124bcf34a0b9a96ce94b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d4-cba8-4556-9fea-44ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:08.000Z",
            "modified": "2015-09-30T09:01:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '81d76b1736dc50649c213ea81199b469']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d4-e1ec-4c01-ab7a-462f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:08.000Z",
            "modified": "2015-09-30T09:01:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8212b5aa4d447bfe216b6cef044d3b83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d5-78b0-43cc-9539-41b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:09.000Z",
            "modified": "2015-09-30T09:01:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8215044ed8e2e270666e999cfbeda6cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d5-bf7c-4115-b89a-4968950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:09.000Z",
            "modified": "2015-09-30T09:01:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8222af57d0330c6fee6ff97e5134c5f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d5-f538-430f-bffa-4d8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:09.000Z",
            "modified": "2015-09-30T09:01:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '822de47be03617a06827a93daf03411b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d6-d538-4fc1-8cc7-4b9c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:10.000Z",
            "modified": "2015-09-30T09:01:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8230b48a7ac9144d17cd67a5516f7605']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d6-e0c4-4171-b8e3-485a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:10.000Z",
            "modified": "2015-09-30T09:01:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '823a1a167940007292e757d07b991857']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d7-8918-46fc-8bc7-4332950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:11.000Z",
            "modified": "2015-09-30T09:01:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '823ab89c8fdc7301e3d35ff38241f76e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d7-0e98-4f39-9a51-4e02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:11.000Z",
            "modified": "2015-09-30T09:01:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82402d7a79c043939087b4c100e2b1e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d7-ea7c-44ea-a532-4751950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:11.000Z",
            "modified": "2015-09-30T09:01:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '824755900a20d5c9207fb6f217fb90d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d8-5340-41e7-96d3-452a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:12.000Z",
            "modified": "2015-09-30T09:01:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '824eb1bc4dbf9907b9f238c4a1fc8f6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d8-9ca4-4baa-8105-4b83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:12.000Z",
            "modified": "2015-09-30T09:01:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '824fbce5d592326c9edeb25c18562500']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d9-edcc-4593-8341-4649950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:13.000Z",
            "modified": "2015-09-30T09:01:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '825bc7d16ca10d38081fb76eac597287']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d9-eae0-486c-a9e2-443a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:13.000Z",
            "modified": "2015-09-30T09:01:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8260c5ed352ca95eec2be5513f191817']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4d9-ff8c-4918-9ba4-4f56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:13.000Z",
            "modified": "2015-09-30T09:01:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8270f7170ff5379a950757ec0ec9b806']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4da-c270-4c8b-821e-457e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:14.000Z",
            "modified": "2015-09-30T09:01:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8282eff027e50c7cdb1b67e0d4bbc56b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4da-a074-46a2-9287-4c9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:14.000Z",
            "modified": "2015-09-30T09:01:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8284ebdf38342f7be30f72c112542b7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4db-e374-4a4e-83c8-471c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:15.000Z",
            "modified": "2015-09-30T09:01:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '829787fb94736d80cbd66e417b68d33f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4db-ee94-4324-9335-464e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:15.000Z",
            "modified": "2015-09-30T09:01:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '829d40cbaead8e1c3d765e05c2c4632c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4db-9318-4b15-b493-4651950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:15.000Z",
            "modified": "2015-09-30T09:01:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82a3d16933b2234e0454e8ac4f13acfb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4dc-deb0-4643-b6c8-4e4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:16.000Z",
            "modified": "2015-09-30T09:01:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82a92b686154edcb2771941f1e59309e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4dc-ca94-4bcf-9520-4070950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:16.000Z",
            "modified": "2015-09-30T09:01:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82bcdd539502f8376521231bb10e49d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4dd-cc6c-4b65-9ed2-477f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:17.000Z",
            "modified": "2015-09-30T09:01:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82bfddbf858376b5b7212758fe0e3116']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4dd-00c0-4bda-a839-43cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:17.000Z",
            "modified": "2015-09-30T09:01:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82d2fe00bd8bf627c6017e75a968d245']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4dd-e228-4529-b3ba-4f26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:17.000Z",
            "modified": "2015-09-30T09:01:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82d4756d59bf2702124f8cf4b2837d84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4de-c1fc-419f-a45a-474e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:18.000Z",
            "modified": "2015-09-30T09:01:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82d7fb6f8eac4e9de4b56956763f3e20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4de-75e8-4096-87f1-41a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:18.000Z",
            "modified": "2015-09-30T09:01:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82e5e742aa85a35339af929f2f55e18a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4df-2530-4796-b906-4d71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:19.000Z",
            "modified": "2015-09-30T09:01:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82e6f66cb070fe2dd62378ccd2668a2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4df-ef3c-4598-a8c5-4189950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:19.000Z",
            "modified": "2015-09-30T09:01:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82e782afd99cf555c6156da9a92e936d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4df-a6c8-4fb3-8dc1-448d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:19.000Z",
            "modified": "2015-09-30T09:01:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82f52f27ce9ec09dccc6afeb42c612eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e0-40f4-4fde-b5f6-424f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:20.000Z",
            "modified": "2015-09-30T09:01:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82f578aab32fec7d9408147ad7916016']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e0-de4c-4d01-bb5c-4ca1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:20.000Z",
            "modified": "2015-09-30T09:01:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '82ff14c033a6513b15b134a350e58cb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e0-70bc-4a2b-b661-4805950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:20.000Z",
            "modified": "2015-09-30T09:01:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83173b5222f40699927b80c44ea49a25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e1-714c-4b3c-b3eb-43b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:21.000Z",
            "modified": "2015-09-30T09:01:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '832bca88570c7adb1c0d7ca4f46d6cea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e1-a56c-45ab-960f-46fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:21.000Z",
            "modified": "2015-09-30T09:01:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8335336c1526074f6a83454088d7f319']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e2-ae84-43f6-bf04-42e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:22.000Z",
            "modified": "2015-09-30T09:01:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '833db0bcd9bc30206039fed3524e0e3c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e2-75bc-4ae0-8809-44dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:22.000Z",
            "modified": "2015-09-30T09:01:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8340593dd8578df04611fd09d1c03016']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e2-806c-4ba7-afa2-4a0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:22.000Z",
            "modified": "2015-09-30T09:01:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '834e0606d9ee8f5bdb598ded42ee101f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e3-0d00-4892-ad70-42f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:23.000Z",
            "modified": "2015-09-30T09:01:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83553587e2a1b294883e647e77bd1a62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e3-8fc8-4964-8903-4661950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:23.000Z",
            "modified": "2015-09-30T09:01:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8361c6f3c80c58aee50ad3fef3645d92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e4-3578-4c3c-86dd-4296950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:24.000Z",
            "modified": "2015-09-30T09:01:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83701556da94ea8f5aca91aa0f13341d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e4-d15c-417b-817d-4d04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:24.000Z",
            "modified": "2015-09-30T09:01:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8371ad149df4b7a0dfafffadf6e061c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e4-a17c-42bb-8ad0-4439950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:24.000Z",
            "modified": "2015-09-30T09:01:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8371b57c74cec565dd44711e4632ccc7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e5-9348-41f7-81cd-4ecb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:25.000Z",
            "modified": "2015-09-30T09:01:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '837a6ab526da3acea88f8dd22d81d0f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e5-bc44-4130-b78d-440d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:25.000Z",
            "modified": "2015-09-30T09:01:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '837ef586dda3f4aa5551cf129be671c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e6-ab00-4027-a151-4a2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:26.000Z",
            "modified": "2015-09-30T09:01:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8383e0d6e1545ef43ae1fb0e307d3bba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e6-d594-4bdb-a153-4716950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:26.000Z",
            "modified": "2015-09-30T09:01:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8386a2ed9024e1cb8ef8a0025a1f8d7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e6-c130-48d2-8020-4c6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:26.000Z",
            "modified": "2015-09-30T09:01:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8387c1ee2750e63b53a4352806612911']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e7-a9dc-49a1-a721-4b38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:27.000Z",
            "modified": "2015-09-30T09:01:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8397a5b5110f8cfc125869dafd7cecf0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e7-0320-46db-953f-4a0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:27.000Z",
            "modified": "2015-09-30T09:01:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '839a0bd10bb4b8af2556ee23a09e9bd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e8-19ec-4728-b36f-4d03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:28.000Z",
            "modified": "2015-09-30T09:01:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '839f4c979e9eee3aa80ab814f1d7cfcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e8-a524-4755-8c42-4dad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:28.000Z",
            "modified": "2015-09-30T09:01:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83a926d5ef8c557842b5be7d0a6a1cd3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e8-ecfc-4022-b6c7-4215950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:28.000Z",
            "modified": "2015-09-30T09:01:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83a957e85bf48153366c992de3f7dc17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e9-7594-4a8d-959f-42cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:29.000Z",
            "modified": "2015-09-30T09:01:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83ad9cf4380635593e82c4800a0dccc6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4e9-a08c-4bd8-9f1e-4a00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:29.000Z",
            "modified": "2015-09-30T09:01:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83afd1c0b781ad9effcbb84f5e5bc6de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ea-09fc-453d-b4f3-4143950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:30.000Z",
            "modified": "2015-09-30T09:01:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83c9ee512dce59368361d2905329b7f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ea-7e90-4737-af6b-48c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:30.000Z",
            "modified": "2015-09-30T09:01:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83d4bc883069c6bf653cd882e67deb1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ea-bafc-4494-83c6-4c43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:30.000Z",
            "modified": "2015-09-30T09:01:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83da6bdf31988a4f92c328b49192842a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4eb-01dc-402f-bd36-4f3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:31.000Z",
            "modified": "2015-09-30T09:01:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83e720abc7d177baed7877b390669d0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4eb-7f40-4683-846b-4533950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:31.000Z",
            "modified": "2015-09-30T09:01:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83ef443976d8eacccc1746469e6fdc90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ec-1bf8-4079-9136-4f89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:32.000Z",
            "modified": "2015-09-30T09:01:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83f129fc458f9c1a3a168002254d8314']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ec-492c-40ba-bbd9-4eb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:32.000Z",
            "modified": "2015-09-30T09:01:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '83f661be7f1e929a79715557479bb721']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ec-ea6c-4cc5-b6b8-45ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:32.000Z",
            "modified": "2015-09-30T09:01:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84095b1f8bce23257cd984c540e4dd14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ed-50f8-48b7-9ec6-48aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:33.000Z",
            "modified": "2015-09-30T09:01:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '840e1dfda9f72b0f004f97fc54d7e709']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ed-f16c-4752-abcc-4614950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:33.000Z",
            "modified": "2015-09-30T09:01:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '841f03eff19742c24b231c05116d8c3c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ee-a174-43da-9e78-4aa0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:34.000Z",
            "modified": "2015-09-30T09:01:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84237776e73bc24ee6162e7bcf7e116d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ee-c700-453c-8b6e-4ee4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:34.000Z",
            "modified": "2015-09-30T09:01:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '842d0090bcd2a95f758b4929f39ded9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ee-e008-40bd-86ee-426c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:34.000Z",
            "modified": "2015-09-30T09:01:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84413f31b187bf17d0431cf5830aa52e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ef-3b64-4744-9331-417e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:35.000Z",
            "modified": "2015-09-30T09:01:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84498812f8bf0b5e3fa31f2b3e05143c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ef-df18-4dd1-91f2-45a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:35.000Z",
            "modified": "2015-09-30T09:01:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '844bddcdc15d77d7251f537ddd08a098']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f0-5994-4595-b8c0-4d46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:36.000Z",
            "modified": "2015-09-30T09:01:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8453f4f01db7d3f7c7893e2854c4e0cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f0-a034-481f-9913-4fc3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:36.000Z",
            "modified": "2015-09-30T09:01:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '845ea506f3b384c8135b8a11d09c84cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f0-17e0-4a3b-9e8e-4464950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:36.000Z",
            "modified": "2015-09-30T09:01:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84615686e1ac574c25f59e1421eb52ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f1-e214-4544-afa6-4614950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:37.000Z",
            "modified": "2015-09-30T09:01:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '846cc2634caa324063b6cadff4ea4fa2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f1-86ac-41d5-ac97-490c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:37.000Z",
            "modified": "2015-09-30T09:01:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84849cafada351a31c01223185d54252']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f2-fa4c-4da8-8db6-4540950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:38.000Z",
            "modified": "2015-09-30T09:01:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8487067f57a25d3a7faf69461322aaf8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f2-e534-4196-a917-40e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:38.000Z",
            "modified": "2015-09-30T09:01:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8488148dae3737105a15eb5dbbd06eb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f2-3f30-4592-9967-4e74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:38.000Z",
            "modified": "2015-09-30T09:01:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '849f6ce8618961b429e163701372250c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f3-0d38-48db-99d6-4d96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:39.000Z",
            "modified": "2015-09-30T09:01:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84a05f470fbb860feb0ae25d52fef9b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f3-4b38-4c73-8e93-4604950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:39.000Z",
            "modified": "2015-09-30T09:01:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84a1905da0feb74c6024163b2829d1af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f4-ea98-46fa-ac8b-4d39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:39.000Z",
            "modified": "2015-09-30T09:01:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84a98f97416e566989950e84319143e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f4-cda8-46c2-93d2-4e7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:40.000Z",
            "modified": "2015-09-30T09:01:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84ab5dab4dc4f9e276e26721cfcf8a60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f4-79c0-49bb-8c49-484b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:40.000Z",
            "modified": "2015-09-30T09:01:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84c12590f1382de6fa88f97c4d7a296e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f5-18a8-43fe-a6d7-4a8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:41.000Z",
            "modified": "2015-09-30T09:01:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84c1954e0b3591f59462ddbe89afc1b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f5-8e8c-4110-a568-4c06950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:41.000Z",
            "modified": "2015-09-30T09:01:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84ce1cad34e1692c577d484eaf2f413e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f5-6e30-410e-a467-463b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:41.000Z",
            "modified": "2015-09-30T09:01:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84d75aa65c8eb744d76c023fdc9e24d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f6-d264-4aae-a1bb-4853950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:42.000Z",
            "modified": "2015-09-30T09:01:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84e1353dc2077a1509419516f69d9dd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f6-74e4-429b-918a-47ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:42.000Z",
            "modified": "2015-09-30T09:01:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84e8ec54213189271f63aa2b4cfb12c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f7-f584-4e7b-bf37-46af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:43.000Z",
            "modified": "2015-09-30T09:01:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84f60adefed6d278dc8191760e8e27a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f7-7fa0-4c6a-9041-4c04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:43.000Z",
            "modified": "2015-09-30T09:01:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84f7fc4cd5935e6ba682733bb89286b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f7-69ec-4ed0-ad24-4d20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:43.000Z",
            "modified": "2015-09-30T09:01:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '84f96b948c98f975f757a43d40c82a9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f8-7560-4e72-b71f-4e91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:44.000Z",
            "modified": "2015-09-30T09:01:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85197d369441f9814cad9d7320fdd4cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f8-5aa8-467d-83f0-4e92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:44.000Z",
            "modified": "2015-09-30T09:01:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8519d210d2d6fe88379f8055ca55a4fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f9-94cc-421c-9d1d-4228950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:45.000Z",
            "modified": "2015-09-30T09:01:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8525575eed8b053cbe0a62ba1506bf15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f9-1878-482d-bb04-4727950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:45.000Z",
            "modified": "2015-09-30T09:01:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8535322ba3cdcebea370c850d5a6e127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4f9-c8bc-4009-93b5-4032950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:45.000Z",
            "modified": "2015-09-30T09:01:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8543e6f80fe3759c027a672dbe1e335a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fa-b628-481b-b1bb-4659950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:46.000Z",
            "modified": "2015-09-30T09:01:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8546736b2531b5a69e40f2cfc62eb236']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fa-f2e0-4580-a47b-4ed3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:46.000Z",
            "modified": "2015-09-30T09:01:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85487173379d676857eaf0e4082c36ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fb-ce1c-4a10-9cfc-4125950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:47.000Z",
            "modified": "2015-09-30T09:01:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '854d4c7d3280ede95c885ffa76ad5a6b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fb-e82c-4ad6-89b5-4d7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:47.000Z",
            "modified": "2015-09-30T09:01:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '856086243ff5411bcc341d89f3627cf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fb-59a8-4a0b-b020-4d89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:47.000Z",
            "modified": "2015-09-30T09:01:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '856564a0faad2b3d545fff5f11cceccc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fc-c220-49ff-be13-4ab5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:48.000Z",
            "modified": "2015-09-30T09:01:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '857dd5a86904b9a5c4d4bda47e37adfa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fc-fd54-43af-8929-45d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:48.000Z",
            "modified": "2015-09-30T09:01:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '858b2e273dab7c879c26a1ad8dddb7e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fc-3108-4f26-9fd9-453f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:48.000Z",
            "modified": "2015-09-30T09:01:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8597911ba34f5d31e3dbc157761a8fb2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fd-b41c-4884-b44c-4d9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:49.000Z",
            "modified": "2015-09-30T09:01:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8599853f9d39d591d057edafe1965ee0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fd-c12c-45c1-b85b-40f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:49.000Z",
            "modified": "2015-09-30T09:01:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '859c548331894d67d7170e24458a18e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fe-dfb0-4bf7-aa36-4d81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:50.000Z",
            "modified": "2015-09-30T09:01:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85a3561562a7cab776136458306a8c76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4fe-0438-42b4-8b21-4fe5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:50.000Z",
            "modified": "2015-09-30T09:01:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85a9266e21e46a48ca45a86fc2e556b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ff-c870-4396-bc7f-4d84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:51.000Z",
            "modified": "2015-09-30T09:01:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85b8d1e5bac613a70d0cf842197f0256']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ff-81e8-48a4-b95c-4f29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:51.000Z",
            "modified": "2015-09-30T09:01:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85ca63dd8faeaadff7c3b42afeabde29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba4ff-a4fc-46f3-9b03-4539950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:51.000Z",
            "modified": "2015-09-30T09:01:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85d12431cf199116975fb4bd7fc082c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba500-9080-46fb-9122-4c7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:52.000Z",
            "modified": "2015-09-30T09:01:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85e21cc7f9fb653ddca50925f730d5fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba500-233c-4d61-a046-4ff2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:52.000Z",
            "modified": "2015-09-30T09:01:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85e6d74f614876049da01c3b3dd5a7b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba501-9edc-4b33-b0d8-40c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:53.000Z",
            "modified": "2015-09-30T09:01:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85f7f2388707dadf5cfb356694f7ffad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba501-6be0-4afb-bccd-4aff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:53.000Z",
            "modified": "2015-09-30T09:01:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '85fcd14bcb9ddf6d369ec04c9db89f7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba501-6434-4d61-94b7-4ab2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:53.000Z",
            "modified": "2015-09-30T09:01:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8600d085dd605803c275726a2a84935a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba502-496c-4866-bbf6-4cbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:54.000Z",
            "modified": "2015-09-30T09:01:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '860f16d08a13ad982c1be480633d5e97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba502-6150-4f9c-a513-4653950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:54.000Z",
            "modified": "2015-09-30T09:01:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '861817144802986223a237580e136368']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba503-eccc-49a8-9447-436c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:55.000Z",
            "modified": "2015-09-30T09:01:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '861d0e6b13c097d8288acc0b1cc78d16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba503-02bc-4629-ae1b-4143950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:55.000Z",
            "modified": "2015-09-30T09:01:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8622fffb91993af802c42e5cd0607f54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba503-6bc4-4637-9e0b-428e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:55.000Z",
            "modified": "2015-09-30T09:01:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '862a48eeb1433e8abf0d384f1ac57abc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba504-3590-4dd8-a157-4126950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:56.000Z",
            "modified": "2015-09-30T09:01:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '86352343c4869b278a8e3464805f062f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba504-22a0-458e-a43a-44a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:56.000Z",
            "modified": "2015-09-30T09:01:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8637ab7084bc9ce54db808990d1ff0c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba504-0030-42b7-b031-4f16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:56.000Z",
            "modified": "2015-09-30T09:01:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '864305bec8a3b3a12d56e71bcee1b37c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba505-b39c-4a69-a511-4c45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:57.000Z",
            "modified": "2015-09-30T09:01:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '865cf54b71bc71b3ae8a2408e88ce253']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba505-1364-4aa6-8f98-4b7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:57.000Z",
            "modified": "2015-09-30T09:01:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '865e54b41d31e111eddcfb7021d2cd2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba506-5e18-42c5-962e-41c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:58.000Z",
            "modified": "2015-09-30T09:01:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8665ad3aceb9521ef4b1b1287bca9aca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba506-aff4-4a9c-9a07-4598950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:58.000Z",
            "modified": "2015-09-30T09:01:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8668cce2101956ad70f2694b3dba6707']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba506-0700-4c0f-abca-4518950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:58.000Z",
            "modified": "2015-09-30T09:01:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '866d47b6cfa5092480df403a365df534']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba506-ab30-4f60-a341-480e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:58.000Z",
            "modified": "2015-09-30T09:01:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '867d5be056532baad87977ef0675d300']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba506-6e84-4b9e-b96e-4888950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:58.000Z",
            "modified": "2015-09-30T09:01:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '867e9321e8758263b5c70777c20b4213']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba507-d834-44fb-904b-4843950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:59.000Z",
            "modified": "2015-09-30T09:01:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '868f4612bbbfe3f57fefe76ea979f452']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba507-4540-44c8-8827-4f4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:59.000Z",
            "modified": "2015-09-30T09:01:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8698861ddeb3fe71b833b0e227aa5d49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba507-935c-471e-a64b-49c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:01:59.000Z",
            "modified": "2015-09-30T09:01:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '869a14da7461881b460cf936b2336520']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:01:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba508-ab24-43c3-830f-4e29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:00.000Z",
            "modified": "2015-09-30T09:02:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '86ad62924f0205a91b4d189f1d30d0c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba508-3520-4257-8066-4a10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:00.000Z",
            "modified": "2015-09-30T09:02:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '86c7388a3e141ffe1265c949fb1a8d80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba509-aa94-4fbb-89c7-4f05950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:01.000Z",
            "modified": "2015-09-30T09:02:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '86d739c2915fc1458f449f2ec8d185b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba509-973c-4c85-afd6-4df3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:01.000Z",
            "modified": "2015-09-30T09:02:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '86df6d084125c445b5bf4e60c810df85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba509-c964-4c04-9980-44ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:01.000Z",
            "modified": "2015-09-30T09:02:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '86e9aab9907d53c5fae34e661aff640b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba509-467c-477f-b1fe-4a6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:01.000Z",
            "modified": "2015-09-30T09:02:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '86ff0ffd2a3f0bfe66d46db7c92317e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50a-0a48-4c5e-b2db-4813950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:02.000Z",
            "modified": "2015-09-30T09:02:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '870284b33a9144048cdad061239a8070']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50a-1d50-4bcb-a249-4cae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:02.000Z",
            "modified": "2015-09-30T09:02:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '870e5fd1ce7562443862f33930ac1497']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50b-7e2c-4644-a891-46f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:03.000Z",
            "modified": "2015-09-30T09:02:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '870fc5a65f53a20bd87754ef532ec88f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50b-043c-451c-9207-4610950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:03.000Z",
            "modified": "2015-09-30T09:02:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8720ebd2f4a9700981993277464eab57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50b-b5a0-4d3d-ab34-4753950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:03.000Z",
            "modified": "2015-09-30T09:02:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '872a4a695b4b222f455b9e9478dfc02d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50b-6644-45af-843d-4514950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:03.000Z",
            "modified": "2015-09-30T09:02:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '872d462522ba704e7fd8d90ec23686a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50b-3498-462c-a417-45e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:03.000Z",
            "modified": "2015-09-30T09:02:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '872f54e8374f25af190024c511286cec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50c-37c4-4fd0-bb28-4067950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:04.000Z",
            "modified": "2015-09-30T09:02:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8732462a2c153c588afda530741727f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50c-3e7c-4c4c-b4b9-4f27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:04.000Z",
            "modified": "2015-09-30T09:02:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '87387a1ce4a84977074a8690b66e8b0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50c-9600-404f-b45d-49ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:04.000Z",
            "modified": "2015-09-30T09:02:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8738ff49219eda01daa8a33ebdff6910']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50c-be84-49e7-99f2-4a15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:04.000Z",
            "modified": "2015-09-30T09:02:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '873b0e349b1f5296ba19bd8d09f68b85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50d-94b4-4a3b-a465-40fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:05.000Z",
            "modified": "2015-09-30T09:02:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '873df90edbd72776a63c48a91c879e90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50d-a290-49ed-bc8e-4a32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:05.000Z",
            "modified": "2015-09-30T09:02:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '874f30e57383772fad6a6f957f3107c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50d-bb5c-4a0a-965c-4020950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:05.000Z",
            "modified": "2015-09-30T09:02:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '875811a45d8ba2134a442d2367638dae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50e-ffbc-464e-902e-46b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:06.000Z",
            "modified": "2015-09-30T09:02:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '875c37d8d067c398b1d15e54ced16ec8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50e-60b8-4e25-bc59-4053950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:06.000Z",
            "modified": "2015-09-30T09:02:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8767d3f480fa4e40cf985b0affe9abca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50e-a700-4f3a-a0f1-4a21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:06.000Z",
            "modified": "2015-09-30T09:02:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '877a49878b368e408e103c50bcd32e81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50e-f144-43d7-9e45-41bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:06.000Z",
            "modified": "2015-09-30T09:02:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '877de7ff89b2f0d2bc26710ddc74bc72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50e-9ee4-4030-a7c3-417c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:06.000Z",
            "modified": "2015-09-30T09:02:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '877f1bc8fd9bb45a6b365f85286ae8ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50f-6bf0-4688-b01b-4c6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:07.000Z",
            "modified": "2015-09-30T09:02:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '878162c4ff4f06c0a3dd4375c1f6e657']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50f-1374-4580-a7b0-4c70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:07.000Z",
            "modified": "2015-09-30T09:02:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8784233b828b43002959710a7c5e50bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50f-2f58-478f-a9ac-45cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:07.000Z",
            "modified": "2015-09-30T09:02:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '878d2df3052bbca50ddc66f63b6e1bba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50f-0424-47ab-b4eb-483f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:07.000Z",
            "modified": "2015-09-30T09:02:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '878dac199089360eabecbc7e90c324ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba50f-0344-49fe-a291-4bc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:07.000Z",
            "modified": "2015-09-30T09:02:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '87921c1ac7c3301315a1583d830f90f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba510-0544-4db1-be30-425f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:08.000Z",
            "modified": "2015-09-30T09:02:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8797374af6eec6b9fc6dec8aa9b94205']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba510-601c-4111-8964-4e8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:08.000Z",
            "modified": "2015-09-30T09:02:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '87a9cd89121b51affbf34cdd5c930b55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba510-267c-444b-b475-4f17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:08.000Z",
            "modified": "2015-09-30T09:02:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '87c12b558390e30fb82938249d0a55fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba510-b430-4d3b-a1bb-42ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:08.000Z",
            "modified": "2015-09-30T09:02:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '87dc61e638c94154bb51fcdedafa805f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba510-36bc-4b5d-a85a-4f95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:08.000Z",
            "modified": "2015-09-30T09:02:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '87f3e871d0c0410070583f646029ce96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba511-88b4-4a41-baee-412e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:09.000Z",
            "modified": "2015-09-30T09:02:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '880cdbf6056eb66db12203dd3aba5762']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba511-a078-4b7b-b29e-4b41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:09.000Z",
            "modified": "2015-09-30T09:02:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88108832f7c021a047c098d8279f4a09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba511-9594-42ee-a6d7-410e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:09.000Z",
            "modified": "2015-09-30T09:02:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '881b435b742a60e62c829e0238635ce4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba511-91c0-47bf-ae80-465e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:09.000Z",
            "modified": "2015-09-30T09:02:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88235b4a8525c59d0cb8379fdee8eebd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba511-309c-44eb-b504-4f55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:09.000Z",
            "modified": "2015-09-30T09:02:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88244bcc335cc19dc2b63268d6e61bae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba512-1cfc-427d-9371-435a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:10.000Z",
            "modified": "2015-09-30T09:02:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88314f44005b168c0414c97c06dae828']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba512-8cdc-4d37-88f4-496b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:10.000Z",
            "modified": "2015-09-30T09:02:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88487e8f838611b2855096b188791bd5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba512-1eb0-459c-b784-45e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:10.000Z",
            "modified": "2015-09-30T09:02:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8851997ce627f8b9362b3ad49819dc07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba513-947c-484a-8fc3-4103950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:11.000Z",
            "modified": "2015-09-30T09:02:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88549c8fe561f3f0fef7db80dd2f2f72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba513-d4bc-438b-a312-41f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:11.000Z",
            "modified": "2015-09-30T09:02:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8864550e7e568f581141107eb8601f95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba513-aea4-4820-b4d0-448d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:11.000Z",
            "modified": "2015-09-30T09:02:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88699119da4580c183be1eb61f280a37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba513-7724-47e8-ba6a-47b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:11.000Z",
            "modified": "2015-09-30T09:02:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8870fffe3212a11befcdf104737842a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba513-7aa0-4a79-a03b-4854950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:11.000Z",
            "modified": "2015-09-30T09:02:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8877680600b62ce6138b0daf931b1538']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba514-8fa8-4b36-b846-457a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:12.000Z",
            "modified": "2015-09-30T09:02:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '887918592620fba37039e69110ba0010']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba514-7c58-4066-9862-4c74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:12.000Z",
            "modified": "2015-09-30T09:02:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8886b344098fa0c29c0709db214663a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba514-8e00-45f7-9692-4fd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:12.000Z",
            "modified": "2015-09-30T09:02:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '888dd7524e34810dda505daf026a578c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba514-167c-47ec-b597-4fb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:12.000Z",
            "modified": "2015-09-30T09:02:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '889d6685194cd4ab2569987adc8d5fa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba514-7f78-4769-be13-4987950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:12.000Z",
            "modified": "2015-09-30T09:02:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88a0184de31d1e0d0ced986310373295']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba515-cf60-474b-8032-40d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:13.000Z",
            "modified": "2015-09-30T09:02:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88a2b5164a26e9c900359c50ec194cd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba515-7000-403e-9e45-4cf7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:13.000Z",
            "modified": "2015-09-30T09:02:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88a4838e72953698e59da7d3f1353728']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba515-2308-4804-b3a7-4e19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:13.000Z",
            "modified": "2015-09-30T09:02:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88abbaa3730b6a2fa2af06a0f550141e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba515-c368-4c09-84eb-4299950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:13.000Z",
            "modified": "2015-09-30T09:02:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88acf305185a6822232b1f57b7464048']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba515-2804-4699-8fb1-4494950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:13.000Z",
            "modified": "2015-09-30T09:02:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88afed37f1e430e081b13f3c7b479282']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba516-4ab8-4713-8402-4434950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:14.000Z",
            "modified": "2015-09-30T09:02:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88ba20ad00b14a03fdd3f988a6dea88d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba516-8050-450b-bdbe-4679950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:14.000Z",
            "modified": "2015-09-30T09:02:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88c04df0752a7511652b17cea29f85dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba516-58f0-4b6a-9a3f-446a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:14.000Z",
            "modified": "2015-09-30T09:02:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88c912ddf605e85dce1f2d508299b0d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba516-87e0-47ba-88ca-429d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:14.000Z",
            "modified": "2015-09-30T09:02:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88ce3c3f965fd353c74891fa09c69fd4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba517-0bb4-4319-8051-4b5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:15.000Z",
            "modified": "2015-09-30T09:02:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88e63e8add414f29682f7a230dfda354']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba517-a570-4ff6-81c7-4393950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:15.000Z",
            "modified": "2015-09-30T09:02:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88e7dc147e601b21fb53611ea2cef5d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba517-a32c-4819-8a5d-4ced950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:15.000Z",
            "modified": "2015-09-30T09:02:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '88f963e4f18d89d072f52b8bce36118c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba517-7e1c-4f18-8afd-4e56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:15.000Z",
            "modified": "2015-09-30T09:02:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8905d3d384bf33a73b4080cd803fd3d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba517-4d5c-4fa5-af22-4cf7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:15.000Z",
            "modified": "2015-09-30T09:02:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '89064bcf121ed7c7fea6f7d6bb3ff884']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba518-dd70-4108-a239-4ef8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:16.000Z",
            "modified": "2015-09-30T09:02:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '89150201cdddad5c3b0e5b413148ede6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba518-dc08-4f0b-bed9-42a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:16.000Z",
            "modified": "2015-09-30T09:02:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '891a7c1b2a79ff5947fbe30d21265088']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba518-7814-4c9c-8a56-4619950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:16.000Z",
            "modified": "2015-09-30T09:02:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '891e648472cd4ef343cf5fa5c01f1d0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba518-fd5c-49f2-80e5-456c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:16.000Z",
            "modified": "2015-09-30T09:02:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '891f991baa577a7a1e510f1fbd106dcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba518-7dd0-46c4-9be1-4a1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:16.000Z",
            "modified": "2015-09-30T09:02:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '89336cd4a403f4d3681145787f721ff5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba519-18f0-45d8-9ac4-430e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:17.000Z",
            "modified": "2015-09-30T09:02:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '89361fdd8c7582188b6a46b168a4688e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba519-d9a0-4b8f-86ca-41ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:17.000Z",
            "modified": "2015-09-30T09:02:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '894dae31c3fd9007d63d08a6375677a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba519-0cc0-48e3-8bfe-44b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:17.000Z",
            "modified": "2015-09-30T09:02:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '895a7773837871984f5c08d5b56be49f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba519-0ee4-4285-b30d-4904950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:17.000Z",
            "modified": "2015-09-30T09:02:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '899539032e6d97d812c89aa0f4078065']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51a-d314-4343-86ab-4140950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:18.000Z",
            "modified": "2015-09-30T09:02:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '899dc4b401af615bd2ad9d2ca88b4a8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51a-8e18-4784-8ba9-4de4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:18.000Z",
            "modified": "2015-09-30T09:02:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '89afd9e1470ce423d8eefbaaa009e15d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51a-60b8-45d8-b00d-4ed2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:18.000Z",
            "modified": "2015-09-30T09:02:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '89b2eca809dbfedfb5e98efa121852f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51a-af50-4e16-a825-4dbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:18.000Z",
            "modified": "2015-09-30T09:02:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '89b8998f121f7402e7a242aacf793891']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51a-6ae4-4997-a939-43dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:18.000Z",
            "modified": "2015-09-30T09:02:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '89ca1c1db5b0a82243780ac0e380d5c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51b-211c-4255-bf7b-4fbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:19.000Z",
            "modified": "2015-09-30T09:02:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '89cb0d096cf011d1c3f052aba3066bf0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51b-3858-40fc-8708-48ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:19.000Z",
            "modified": "2015-09-30T09:02:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a023250c25b9b765bde112d07b6f090']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51b-d9dc-4aa9-a7be-4502950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:19.000Z",
            "modified": "2015-09-30T09:02:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a0d60d4d9aae63531178a43649bb229']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51b-08a4-499e-8ca6-44cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:19.000Z",
            "modified": "2015-09-30T09:02:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a15dcd884c25c8e0c77ac33efeb82bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51b-ee8c-4937-adfe-4893950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:19.000Z",
            "modified": "2015-09-30T09:02:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a1b9ed687da00e7216990194905ca5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51c-182c-49a5-ba86-4b98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:20.000Z",
            "modified": "2015-09-30T09:02:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a1c0a543ad2273b55dbe9d92a62d691']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51c-1e5c-4507-ba99-49a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:20.000Z",
            "modified": "2015-09-30T09:02:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a230590deedd4ed3b111e205712971a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51c-0d1c-4dd7-9d45-48bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:20.000Z",
            "modified": "2015-09-30T09:02:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a25415a464939ae4cd4281376caa3f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51c-cd60-4b7e-83d7-44fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:20.000Z",
            "modified": "2015-09-30T09:02:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a2fdd101583f36f5e078e5635e3bd2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51c-a258-411a-b0e4-45a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:20.000Z",
            "modified": "2015-09-30T09:02:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a4a9a445afe0b727767903fb3ff341d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51d-71d0-4c92-8597-4261950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:21.000Z",
            "modified": "2015-09-30T09:02:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a58342ccd43a0e71bd8510f017eeef1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51d-8128-46f1-9ffe-43dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:21.000Z",
            "modified": "2015-09-30T09:02:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a5a670c15a587749e73c329b076e253']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51d-ee30-423c-9f71-47f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:21.000Z",
            "modified": "2015-09-30T09:02:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a6b34f5051bb12ee5561ff4713cccee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51e-f218-4cf6-a26e-4253950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:22.000Z",
            "modified": "2015-09-30T09:02:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a7f075508a7e1f32302d80a53517e26']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51e-086c-463f-b19b-4fde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:22.000Z",
            "modified": "2015-09-30T09:02:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a8c7d1a7e0a419488d6e0947f8669e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51f-ab60-46c9-a9a9-4aef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:23.000Z",
            "modified": "2015-09-30T09:02:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a94213f074ac0f6dd0ed70dd53fc03d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51f-a020-401d-a6bf-4e6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:23.000Z",
            "modified": "2015-09-30T09:02:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8a95dc780a3ed800da6a1a327358e184']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51f-672c-48d0-8a3c-43f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:23.000Z",
            "modified": "2015-09-30T09:02:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8aa41647bb03bc822bb88e084f78c3e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51f-5ee0-465c-b575-43e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:23.000Z",
            "modified": "2015-09-30T09:02:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8aa88d479fbca702bae6a51aef84dec6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba51f-ebf8-49e9-a191-4cee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:23.000Z",
            "modified": "2015-09-30T09:02:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8aad30ca8b4bdb8eefec626202d847a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba520-a238-43f0-910e-46ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:24.000Z",
            "modified": "2015-09-30T09:02:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ab123a83d6ea63265c5cd92d6c46484']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba520-63a0-45c6-aad1-49d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:24.000Z",
            "modified": "2015-09-30T09:02:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ab5f5a9e314aab00097ecc725e72df7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba520-9da0-4216-8ebd-48b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:24.000Z",
            "modified": "2015-09-30T09:02:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8abb225ebafe839c7489e45514516d47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba520-adf8-4b0d-b09c-4ded950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:24.000Z",
            "modified": "2015-09-30T09:02:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8abd61e9e64c56e976bf063a7369b57e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba520-6968-4f89-82dd-4de2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:24.000Z",
            "modified": "2015-09-30T09:02:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ac04e84c89d930257a4a011a052d894']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba521-5f98-4f79-a5cf-4904950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:25.000Z",
            "modified": "2015-09-30T09:02:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ace3c07d2afeff4c1195c1f3c2b9c54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba521-2fe0-4e28-a5ab-4124950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:25.000Z",
            "modified": "2015-09-30T09:02:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8acfd51f5e2ddcbe5f63699d906daaf7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba521-64cc-4d59-9963-47cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:25.000Z",
            "modified": "2015-09-30T09:02:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ad57560dfa1859941e38f3a811dd707']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba521-8830-4309-a5db-4b8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:25.000Z",
            "modified": "2015-09-30T09:02:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8adfeac68896b72399913f259583731e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba521-3ce4-4b61-8145-4722950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:25.000Z",
            "modified": "2015-09-30T09:02:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8af4812f40ba8d4e77f5f86084df7f18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba522-a794-4577-a8bd-4890950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:26.000Z",
            "modified": "2015-09-30T09:02:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8af4ad3b99cf18d23567c7504888ddcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba522-d258-40c6-a8b9-46d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:26.000Z",
            "modified": "2015-09-30T09:02:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8aface89813a3233f36b65cb851c1390']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba522-8e90-436c-9c2a-4bc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:26.000Z",
            "modified": "2015-09-30T09:02:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b24d39ac0e60a2b85e8e463778f5869']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba522-3678-464f-b24c-4ecc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:26.000Z",
            "modified": "2015-09-30T09:02:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b25072042541517f3750a52cb2145c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba522-232c-45f5-86a9-4fb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:26.000Z",
            "modified": "2015-09-30T09:02:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b3d24791c33b2b12a350cdfbfb08ce2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba523-22c4-4f67-ad0d-464d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:27.000Z",
            "modified": "2015-09-30T09:02:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b3ede55f8d3fe6d383294e235cf38f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba523-1f94-4562-99b1-4845950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:27.000Z",
            "modified": "2015-09-30T09:02:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b525895e3131afb4fb278765028cdf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba523-68b4-44ed-b027-42fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:27.000Z",
            "modified": "2015-09-30T09:02:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b55d171b8522758b689dfc381362e85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba523-05c8-48ce-a04e-4fef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:27.000Z",
            "modified": "2015-09-30T09:02:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b614249c3ef30b43d3dbcb9f101069c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba523-61c4-4bd0-81eb-48f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:27.000Z",
            "modified": "2015-09-30T09:02:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b680cb985baa7266d4b26729fcf7a7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba524-f7ec-4318-a390-4dc2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:28.000Z",
            "modified": "2015-09-30T09:02:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b85b9c0882d740d34655bc810d9164d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba524-f5a0-42bb-81bf-4c55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:28.000Z",
            "modified": "2015-09-30T09:02:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8b9fcf56e58c2b437f04dbf0e4d09717']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba524-0d00-47f0-9245-462d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:28.000Z",
            "modified": "2015-09-30T09:02:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bb515d548de94cec570ccad46a3f097']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba524-20b0-4b0f-8f55-4474950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:28.000Z",
            "modified": "2015-09-30T09:02:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bbda3c0fe5bf68ae6081109ad05b23b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba524-9360-44c2-94c4-42a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:28.000Z",
            "modified": "2015-09-30T09:02:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bc12f61a923a54115754e606a69aa68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba525-4630-4390-aa15-4663950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:29.000Z",
            "modified": "2015-09-30T09:02:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bc89b86788c3d3740665c8fadc0e6bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba525-a078-41d9-b834-433d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:29.000Z",
            "modified": "2015-09-30T09:02:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bd4c7782e5403920a1ebc40c6be06b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba525-5bc4-48ce-af68-4fe6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:29.000Z",
            "modified": "2015-09-30T09:02:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bdc5a89b73c31a97f744a4bcff92f63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba525-61a4-4c5d-a45c-4c6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:29.000Z",
            "modified": "2015-09-30T09:02:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bea1f599e9d3d1275b58a6a5109d329']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba525-6838-4b5e-8f82-44c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:29.000Z",
            "modified": "2015-09-30T09:02:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bed0c756c4b8afb7a8728f930f1f0b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba526-3264-4ba1-97a2-4602950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:30.000Z",
            "modified": "2015-09-30T09:02:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bf22204fff336907a0d061b8915418e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba526-e15c-4943-9bd9-4c22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:30.000Z",
            "modified": "2015-09-30T09:02:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8bf9cc74038ff5013531ce95612dc1c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba526-669c-494f-9213-424a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:30.000Z",
            "modified": "2015-09-30T09:02:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c036236a08de3afa30f0189556eebc6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba526-ffd0-4a9f-bd45-4a5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:30.000Z",
            "modified": "2015-09-30T09:02:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c1ffa470d51534898fd012985472bdb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba526-874c-4345-814a-488a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:30.000Z",
            "modified": "2015-09-30T09:02:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c2b09a3f7dcd1ad12d67cb980c15862']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba527-578c-4546-a856-429e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:31.000Z",
            "modified": "2015-09-30T09:02:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c2d94fc2a9b4a995fe56ad55b79252e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba527-00c4-4355-a317-45fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:31.000Z",
            "modified": "2015-09-30T09:02:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c2f3dad2f9f7bfe0a51392e770a9afc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba527-f36c-478d-b78d-4131950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:31.000Z",
            "modified": "2015-09-30T09:02:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c333b397d015f6e48741eb6cdab0791']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba527-c4f0-4e9a-b880-45c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:31.000Z",
            "modified": "2015-09-30T09:02:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c375e7863889129305fb4962900a18e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba527-4868-4ebe-b3c8-4ac5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:31.000Z",
            "modified": "2015-09-30T09:02:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c3c2c822145efe575d524be67d10a76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba528-35f0-4dbe-abf7-476d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:32.000Z",
            "modified": "2015-09-30T09:02:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c450fdd88088077028419d0d2cb14bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba528-aa1c-49f5-8cdb-4846950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:32.000Z",
            "modified": "2015-09-30T09:02:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c4a85bb7ebc8aa14c5247719075be56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba528-ba08-480a-8c49-4ffa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:32.000Z",
            "modified": "2015-09-30T09:02:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c4d645a11f17e2c8dfa869f75a4e652']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba528-1b58-45bf-a70a-44a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:32.000Z",
            "modified": "2015-09-30T09:02:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c507458a59be59b7ff826c94661ca0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba529-07dc-4e1b-b32f-4133950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:33.000Z",
            "modified": "2015-09-30T09:02:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c53e3efab3f257c8cf085f7d98f6da8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba529-5d90-43ce-88fb-4214950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:33.000Z",
            "modified": "2015-09-30T09:02:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c56649136f9fa767afd456d4f0cb128']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba529-808c-4df7-85d7-4ea5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:33.000Z",
            "modified": "2015-09-30T09:02:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c6466ae285f7df3a6621e5e91f54389']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba529-aca8-405d-b261-4e14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:33.000Z",
            "modified": "2015-09-30T09:02:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c6486ede9a1ce85ba2ec3d56ad5fa5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba529-1c90-4099-96f0-4649950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:33.000Z",
            "modified": "2015-09-30T09:02:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c7192eca05805ffcfabe3639ade4097']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52a-74f4-45a0-9618-4d5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:34.000Z",
            "modified": "2015-09-30T09:02:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c7ed35a871eda2e5db4dc1a32bf3db4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52a-2168-4e13-80f0-4b58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:34.000Z",
            "modified": "2015-09-30T09:02:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c81e91da309cd7a227550c5aa9e44b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52a-ef48-453a-9d09-4ce1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:34.000Z",
            "modified": "2015-09-30T09:02:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c866a9bcc80e59f0b9b308a88e7fc19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52a-d164-4f8d-9be7-4f85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:34.000Z",
            "modified": "2015-09-30T09:02:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8c88a2aac4903e838b3b898176134371']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52a-86b8-444f-b269-46e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:34.000Z",
            "modified": "2015-09-30T09:02:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ca36df5fe05ed53af93a0b2e73cca1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52b-2b1c-4a65-b148-4cd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:35.000Z",
            "modified": "2015-09-30T09:02:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8cae675abcd96bc9c359280372ef6f0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52b-cb50-48e9-8cd5-47cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:35.000Z",
            "modified": "2015-09-30T09:02:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8caee22b1b7a798950ea49dc6740a185']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52b-bfac-4bfc-9dfe-4219950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:35.000Z",
            "modified": "2015-09-30T09:02:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8cafa7d700cc93df6e70a8331218c16f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52b-bbd8-42b9-968a-4969950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:35.000Z",
            "modified": "2015-09-30T09:02:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8cb4a110fb7af193a3fab057f1f6a1e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52b-4414-4374-b6ac-40cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:35.000Z",
            "modified": "2015-09-30T09:02:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8cc0192d56bad8d61993e63804c1304a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52c-5814-4fe5-bcd8-4fd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:36.000Z",
            "modified": "2015-09-30T09:02:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8cc3e825d297f1a6f8e9cbd96e85fc4d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52c-d014-4417-876b-4d32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:36.000Z",
            "modified": "2015-09-30T09:02:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ccf4a8d953fd6571df5bb1b5793d779']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52c-4378-49fd-8d54-48ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:36.000Z",
            "modified": "2015-09-30T09:02:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8cd457febf968fc87bc5d02f14289af5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52c-3020-49ed-a01a-4d21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:36.000Z",
            "modified": "2015-09-30T09:02:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8cd60411bf14376006f2487428c572c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52c-c0bc-409c-ab85-418d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:36.000Z",
            "modified": "2015-09-30T09:02:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ce7f280bca5e551b887a22707a8faac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52d-5cd0-4caf-96f4-4ed6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:37.000Z",
            "modified": "2015-09-30T09:02:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8cecbb6a16d3bb869306fba001bf0c3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52d-8b6c-491d-91f3-49e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:37.000Z",
            "modified": "2015-09-30T09:02:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d05e3462a45d538f46d63e6bb8839b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52d-e7f0-43d7-9e3a-47fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:37.000Z",
            "modified": "2015-09-30T09:02:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d0bc6bd32850befd83239b5be9b4d7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52d-a27c-4dc2-b406-45a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:37.000Z",
            "modified": "2015-09-30T09:02:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d0d44039c6ad7925c49b14b125bbb6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52d-6c7c-4561-a871-4fb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:37.000Z",
            "modified": "2015-09-30T09:02:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d0fc383efa8f8122d1c9805a4228332']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52e-6a38-49e5-b8fe-4cf9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:38.000Z",
            "modified": "2015-09-30T09:02:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d11b29f9daf136a4c7b2cf132925d2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52e-ea6c-4a7d-af22-411f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:38.000Z",
            "modified": "2015-09-30T09:02:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d16b7c5a43d1c13ab6e66753addc718']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52e-e2e8-49d8-8817-4614950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:38.000Z",
            "modified": "2015-09-30T09:02:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d1c1815568e4100fe4522911e16070a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52e-99c4-419f-b0ce-4320950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:38.000Z",
            "modified": "2015-09-30T09:02:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d36a6c92cb851082215c1236c1c6f5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52e-bd24-465a-943c-4ee4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:38.000Z",
            "modified": "2015-09-30T09:02:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d392c2203e8d9a91f0d7589e252d026']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52f-fd50-40ae-94d4-49e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:39.000Z",
            "modified": "2015-09-30T09:02:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d39adfcc9621ac588097282b662260f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52f-42e4-43e9-8647-4899950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:39.000Z",
            "modified": "2015-09-30T09:02:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d482320e1a0a292b93b56c0d1f2d20a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52f-8db8-46d5-98d9-4a69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:39.000Z",
            "modified": "2015-09-30T09:02:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d58abe634f63d1f0c2416290ecfc6c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52f-8ecc-4a66-944c-4ae4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:39.000Z",
            "modified": "2015-09-30T09:02:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d7192db8981e85aa2243839720591d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba52f-8e2c-470c-aa9b-4ce0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:39.000Z",
            "modified": "2015-09-30T09:02:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d762a19a969abf14dc88b5f954c8af4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba530-a54c-477e-acb4-4948950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:40.000Z",
            "modified": "2015-09-30T09:02:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d86f52b0e88589c080641376d5743ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba530-dff8-4599-8485-4eb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:40.000Z",
            "modified": "2015-09-30T09:02:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d8d9aa3f6ee3a256f224fc7c545483c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba530-ea20-4f09-a747-44bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:40.000Z",
            "modified": "2015-09-30T09:02:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d91909267d89d1fbd2dee9c1a0a46d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba531-7f74-4d98-a07e-466f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:41.000Z",
            "modified": "2015-09-30T09:02:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8d9cc4f1b0d8bdfc93a3439da2027f7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba531-7388-411d-ade9-4e7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:41.000Z",
            "modified": "2015-09-30T09:02:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8da04623690bbc5b73b984ae29d53b30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba531-5cd0-4183-915a-4e9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:41.000Z",
            "modified": "2015-09-30T09:02:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8dabb782d5536995c3378614e4d401c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba532-08a0-4016-a187-4608950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:42.000Z",
            "modified": "2015-09-30T09:02:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8dad0d8fd753fa045eb29a325cf4ca74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba532-4c30-4893-b0b6-4a51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:42.000Z",
            "modified": "2015-09-30T09:02:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8db4433f9b3a9494214608a2a35109a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba532-c328-4b80-9625-4e0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:42.000Z",
            "modified": "2015-09-30T09:02:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8dbb0ccc01ca0fbafe28e4e527721f40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba533-b4b4-46b2-a4aa-40e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:43.000Z",
            "modified": "2015-09-30T09:02:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8dbea848dfa8049ba1dff567d85fd933']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba533-0098-4b3e-96da-4dd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:43.000Z",
            "modified": "2015-09-30T09:02:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8dc57c1cf08d675372e169323e0be7b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba533-d5ec-4dbf-aff4-4800950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:43.000Z",
            "modified": "2015-09-30T09:02:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8dcceace0c989c79d44c514e19b44582']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba534-b998-4c59-a1a9-4168950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:44.000Z",
            "modified": "2015-09-30T09:02:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8dce17dec11d49f806732cce35e6e935']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba534-4390-4dba-8dea-4365950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:44.000Z",
            "modified": "2015-09-30T09:02:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8dce7b64024d8b0a51c39fa2366b84a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba534-2704-4127-9df3-4ecd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:44.000Z",
            "modified": "2015-09-30T09:02:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ddd7b6a4e352e1a13d167ad2f48d56c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba534-8cf0-45c2-b901-437f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:44.000Z",
            "modified": "2015-09-30T09:02:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ddec7ae25ba5c8ea8515826626c2d16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba534-ac4c-4bce-b2d9-448e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:44.000Z",
            "modified": "2015-09-30T09:02:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8de8f37e82d0415fbaf17eac919f1283']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba535-7ed8-4abf-8a5b-4a89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:45.000Z",
            "modified": "2015-09-30T09:02:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8dff9568b263208ad97aee72dce8d927']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba535-7cdc-4086-af80-4a9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:45.000Z",
            "modified": "2015-09-30T09:02:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e012cabe26e0ce42b65f21e553eef58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba535-6588-424e-a56b-4599950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:45.000Z",
            "modified": "2015-09-30T09:02:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e077461395033cb918ba343aeb6aa80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba535-2b4c-4214-8d36-4dfd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:45.000Z",
            "modified": "2015-09-30T09:02:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e07fead92046d333e942172ecae7672']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba535-9f40-4f74-9754-4de3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:45.000Z",
            "modified": "2015-09-30T09:02:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e0d1f8f36ca127d8fa1684048af2ff0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba536-5524-4aa6-ad36-4922950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:46.000Z",
            "modified": "2015-09-30T09:02:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e0f520f1bb753a57ce6474b088d534f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba536-0e90-4b84-817a-4252950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:46.000Z",
            "modified": "2015-09-30T09:02:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e192e3c1a42d6c361fb0353a4b29a7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba536-c7c8-4439-8d65-48cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:46.000Z",
            "modified": "2015-09-30T09:02:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e20db46fbffd9876195604979b8e16d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba537-b388-4fc7-ab4a-4511950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:47.000Z",
            "modified": "2015-09-30T09:02:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e2dcae2cf92edb61487cb1d0dc5779a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba537-9c68-4ef8-a663-46f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:47.000Z",
            "modified": "2015-09-30T09:02:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e2dffe1dafb731fcd1afe461edbe852']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba537-f428-4c47-bf0f-42af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:47.000Z",
            "modified": "2015-09-30T09:02:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e2e0fd8e0c203811264b9775756309d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba538-1128-445e-ac17-4536950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:48.000Z",
            "modified": "2015-09-30T09:02:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e3170e9d1a12a9fe9275af428d86104']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba538-6d98-41c2-8756-46b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:48.000Z",
            "modified": "2015-09-30T09:02:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e390fb708f55ed8aa93c833d329603b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba539-50f4-4562-8a97-4589950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:49.000Z",
            "modified": "2015-09-30T09:02:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e3db21b8c3d64683a07578d167de52a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba539-50bc-4394-84fd-426b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:49.000Z",
            "modified": "2015-09-30T09:02:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e3f5812b109303862161ca3516f1fe0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba539-0c94-4f6c-af1f-4c19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:49.000Z",
            "modified": "2015-09-30T09:02:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e486d01205cc709b665828d6c5ceca1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53a-6628-4e6e-8837-4ce6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:50.000Z",
            "modified": "2015-09-30T09:02:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e4eb9f374e2a566067dcab66b2f2117']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53a-6790-4ef0-8cda-41a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:50.000Z",
            "modified": "2015-09-30T09:02:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e5048ab2b912b24b5f4168772b9bcd5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53a-3a38-474d-8de0-489b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:50.000Z",
            "modified": "2015-09-30T09:02:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e541e2bfaecd004f2287fb893b43768']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53b-4410-4b05-8134-40d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:51.000Z",
            "modified": "2015-09-30T09:02:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e5cd1fd3bfda190e27f52887e9b34fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53b-fd94-46fa-ab84-4d96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:51.000Z",
            "modified": "2015-09-30T09:02:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e5e9d5b3aafe341260107fe1804ff04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53b-ea8c-4b1e-a9fb-4265950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:51.000Z",
            "modified": "2015-09-30T09:02:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e5f95e5263a6067d37780ea26ba1829']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53b-4f70-4be6-957d-4bb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:51.000Z",
            "modified": "2015-09-30T09:02:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e5fe70fd7cb9102db35b74ba4d20602']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53b-a534-4518-bc0a-4089950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:51.000Z",
            "modified": "2015-09-30T09:02:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e63c0076de155c877eb170f70f40564']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53c-1ef0-49c4-9893-44c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:52.000Z",
            "modified": "2015-09-30T09:02:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e709d04f8cb346abfd31a2e323ca391']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53c-7d44-42f9-a56c-4bc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:52.000Z",
            "modified": "2015-09-30T09:02:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e74788a7a1ca9d55ca29cfcc557cfa4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53c-8910-4b83-95d0-44e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:52.000Z",
            "modified": "2015-09-30T09:02:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e7648c8f7876f26ecd3f8ecab0a801c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53c-f948-4837-8204-48ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:52.000Z",
            "modified": "2015-09-30T09:02:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e7937b0733686a41959a9a1e43300d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53c-3ddc-4b8a-9dda-4b87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:52.000Z",
            "modified": "2015-09-30T09:02:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e79778ab11bff9799560435b4c75db8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53d-426c-4407-88c1-4789950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:53.000Z",
            "modified": "2015-09-30T09:02:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e940e8602e91e0fd0f24611cc8c76d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53d-77dc-4062-a5e2-46e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:53.000Z",
            "modified": "2015-09-30T09:02:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8e98eea52d308d6e0b5bdeba658093fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53d-9138-46cd-99f0-49c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:53.000Z",
            "modified": "2015-09-30T09:02:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ea01c13e58356986848b97fefc23011']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53d-c928-4830-9f84-4a74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:53.000Z",
            "modified": "2015-09-30T09:02:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8eaee26bcf95ba22a0f67c87e0f9ebca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53e-7548-4166-8e7a-420a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:54.000Z",
            "modified": "2015-09-30T09:02:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8eb3da9fcee461576f61109aee37de77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53e-4bd8-4af9-a09f-40de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:54.000Z",
            "modified": "2015-09-30T09:02:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8eb585892b8a4b3af67b50c839a4850e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53e-c6dc-40e0-90bd-4519950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:54.000Z",
            "modified": "2015-09-30T09:02:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ebabd3c772e3f7674bd3646b5911c1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53e-ef90-4cdf-bbec-4ce0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:54.000Z",
            "modified": "2015-09-30T09:02:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ec64da065441edcbacb08568bae9416']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53e-cc60-435a-ad57-4df2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:54.000Z",
            "modified": "2015-09-30T09:02:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ecd226008a62f3ec3577d0c145d405f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53f-e940-4ba3-961f-4b24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:55.000Z",
            "modified": "2015-09-30T09:02:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ede8a566df6a10a30943751718c7290']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53f-cda0-480c-ae3e-4887950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:55.000Z",
            "modified": "2015-09-30T09:02:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ee4746ed19c99fd00c4e160fb035a71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53f-f348-4fe9-99f6-403d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:55.000Z",
            "modified": "2015-09-30T09:02:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ee69428882252dd40f616229e82ebe4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba53f-cb30-4f90-8cc7-4ebe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:55.000Z",
            "modified": "2015-09-30T09:02:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ef14d0a96aa4fab4a82d60c52145eb3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba540-7de4-4d97-a2a5-483f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:56.000Z",
            "modified": "2015-09-30T09:02:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ef97a2d5a6ea32825455605d34c756c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba540-3bec-477d-8b0a-4b91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:56.000Z",
            "modified": "2015-09-30T09:02:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8efbfc2e8ffda9c82ae0d792624955dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba540-b608-4cd9-bfd8-42dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:56.000Z",
            "modified": "2015-09-30T09:02:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f03617d460ff0caf0d075d6240014fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba540-e6cc-469e-89be-4479950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:56.000Z",
            "modified": "2015-09-30T09:02:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f0995be35fbb984fd3ffe9964937742']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba540-6788-4f23-a8d0-4d81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:56.000Z",
            "modified": "2015-09-30T09:02:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f0a1ca4a7bb2420e5ffa6ad53e7a468']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba541-ca38-4d9f-8fa1-4e5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:57.000Z",
            "modified": "2015-09-30T09:02:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f1dc93589575f32fea64a79e10b3edb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba541-4af4-4f75-a93f-4b6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:57.000Z",
            "modified": "2015-09-30T09:02:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f2150501ee3687f9db4d658db11b2f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba541-3638-4b5b-ac7a-40df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:57.000Z",
            "modified": "2015-09-30T09:02:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f26ee843499e45b83ec3b0bb0007247']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba541-48e4-4564-b63b-4c4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:57.000Z",
            "modified": "2015-09-30T09:02:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f3f068336e8f7243d4ff2c5fa569f51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba542-0bd8-46f0-8c03-4d9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:58.000Z",
            "modified": "2015-09-30T09:02:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f4d7d7f964d8e6a9492cc1e6ae60a57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba542-a934-4ab6-ba45-4ec2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:58.000Z",
            "modified": "2015-09-30T09:02:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f50a3ac91b944bf7c69d497f522146f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba543-4ed8-468d-9730-4c7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:59.000Z",
            "modified": "2015-09-30T09:02:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f5b647991fff46c2f8d971cc916e191']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba543-33f4-4b29-8ef0-4e3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:59.000Z",
            "modified": "2015-09-30T09:02:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f5e216f4dab65c428c14b2a262e04b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba543-c150-4227-b949-4da2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:02:59.000Z",
            "modified": "2015-09-30T09:02:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f5e9a3cd6bda1724da7426801058167']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:02:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba544-a6a0-4d5f-b194-4df1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:00.000Z",
            "modified": "2015-09-30T09:03:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f677d4d5faabfd28c5efa9fa0137141']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba544-51d4-41b6-af83-41f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:00.000Z",
            "modified": "2015-09-30T09:03:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f81deefe4e52aa6b310a1e97cd44f42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba544-5b50-4e93-bfc1-4328950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:00.000Z",
            "modified": "2015-09-30T09:03:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f84c4ba409eafd30f26158af04b6a7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba544-6f90-415b-875b-4b0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:00.000Z",
            "modified": "2015-09-30T09:03:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f85fd93db1b811a208be58b429c9550']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba545-6840-4fee-86cf-4658950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:01.000Z",
            "modified": "2015-09-30T09:03:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f86109c5548064e109d9acde1046623']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba545-9198-43a1-a1ba-4d6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:01.000Z",
            "modified": "2015-09-30T09:03:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8f903c4126566e56b09c87f7d3bcdfa2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba545-24f8-43f5-b309-4804950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:01.000Z",
            "modified": "2015-09-30T09:03:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8fa17e3a99251294d443019967f62a0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba545-b47c-4ebb-b37f-4cd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:01.000Z",
            "modified": "2015-09-30T09:03:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8fa1c040076a9326f2f33d5c755e8a44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba545-57e8-47b2-81a4-4874950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:01.000Z",
            "modified": "2015-09-30T09:03:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8fa9a56603cbbb6b06adb894e50778ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba546-73bc-48be-b958-410d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:02.000Z",
            "modified": "2015-09-30T09:03:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8fb34abd2e079c397a5cd05638c1f1c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba546-fc84-4dfd-9ffd-487b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:02.000Z",
            "modified": "2015-09-30T09:03:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8fba2b325741a7974a0d68db19ea00ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba547-b458-4086-85de-474f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:03.000Z",
            "modified": "2015-09-30T09:03:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8fe4e770f45cc8292b7811d5ea17bdbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba547-5a14-4a20-8f65-4bde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:03.000Z",
            "modified": "2015-09-30T09:03:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8feb22fa1a5d449f458235f2a7db8ec7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba547-e904-4e1e-9a5d-4bb6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:03.000Z",
            "modified": "2015-09-30T09:03:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ff010c24d2f49b595dc3b8e20bb680f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba547-2b94-42d8-a1b2-4fd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:03.000Z",
            "modified": "2015-09-30T09:03:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ff236302828b28f6fe1fc839a77294a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba548-f30c-4f40-92da-4fcb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:04.000Z",
            "modified": "2015-09-30T09:03:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '8ff56cebfb56a891f7d820cdd37490e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba548-4374-4cf7-80b6-4fe3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:04.000Z",
            "modified": "2015-09-30T09:03:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90132c80085d926549c673ab1bf24d66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba548-fef8-4e48-a8cc-48ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:04.000Z",
            "modified": "2015-09-30T09:03:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9019d5d059b3edff81c4647da103c756']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba548-6b88-43af-a8a0-4e92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:04.000Z",
            "modified": "2015-09-30T09:03:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '901a0a64d58fc9235d73c37b4c6fdb21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba548-e458-4397-aa74-4847950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:04.000Z",
            "modified": "2015-09-30T09:03:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '901e63dacafdca67b05a7c852aa402de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba549-5294-441f-b75e-4230950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:05.000Z",
            "modified": "2015-09-30T09:03:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90202361ce831926408950103e3256bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba549-0e94-4657-9658-4f0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:05.000Z",
            "modified": "2015-09-30T09:03:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9030f08617463553eac55cd40296dac8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba549-baf4-4f61-8ea5-46c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:05.000Z",
            "modified": "2015-09-30T09:03:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90368e3c0d9c7b0df91a2e5394db5a8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba549-de9c-4c91-b92e-4460950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:05.000Z",
            "modified": "2015-09-30T09:03:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '903957e3cd1981bb7d9d96fa1327fefe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba549-d448-432a-84d3-4bd6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:05.000Z",
            "modified": "2015-09-30T09:03:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '903d8603f274677a64123294ddc4f91b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54a-5e88-4b53-8a3d-4788950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:06.000Z",
            "modified": "2015-09-30T09:03:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90505f7e146f9b33b0ae26b1ae790f49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54a-fc34-4346-afe1-456d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:06.000Z",
            "modified": "2015-09-30T09:03:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90675c147e14a0ca90f7f97e0519439b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54a-31d4-45b8-8572-4476950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:06.000Z",
            "modified": "2015-09-30T09:03:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '906b119b4b7098c4167b3baf5b57c196']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54a-e388-4a29-bee0-4bfc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:06.000Z",
            "modified": "2015-09-30T09:03:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90731f599d665b2905fcf734a37e2fda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54a-4b44-4f58-83f4-4b9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:06.000Z",
            "modified": "2015-09-30T09:03:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '909791d11823bafd61a2cec7aa87795a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54b-a8e0-4a81-acdb-4c7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:07.000Z",
            "modified": "2015-09-30T09:03:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90982f501ce637a4ac85a4590cbfb224']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54b-c48c-43a8-9a2f-4c73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:07.000Z",
            "modified": "2015-09-30T09:03:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '909a6cdf0b557f3fe4713e30466ac051']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54b-84e0-481e-a24c-4574950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:07.000Z",
            "modified": "2015-09-30T09:03:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '909e2cc88e9c2595e4b9c360af49e77a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54b-90b4-469a-90c1-4b41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:07.000Z",
            "modified": "2015-09-30T09:03:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90a4193d2c24400883439ba3b3c95399']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54b-d228-4886-b583-45b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:07.000Z",
            "modified": "2015-09-30T09:03:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90a7a78407cd8440803263a59d3f6d47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54c-c754-4332-ba4e-44d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:08.000Z",
            "modified": "2015-09-30T09:03:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90afb6bdd1903f2d046e0e80fe8a4ba3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54c-8de0-4cff-90cd-464f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:08.000Z",
            "modified": "2015-09-30T09:03:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90b9bcf600124526c331de752f0d3a24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54c-3fb0-408b-8332-422f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:08.000Z",
            "modified": "2015-09-30T09:03:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90c2dea264870f9941e4f4bdd15ece59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54c-1388-4623-afe4-4a1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:08.000Z",
            "modified": "2015-09-30T09:03:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90c6c4c825c693cf069e6a4ba705b1d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54d-6c38-487c-9521-4a7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:09.000Z",
            "modified": "2015-09-30T09:03:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90c7a0ba831e3e354600101788916097']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54d-7c98-4616-a38d-4128950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:09.000Z",
            "modified": "2015-09-30T09:03:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90d044924c8da224f2afc031d485cfa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54d-a698-4a9c-af51-436c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:09.000Z",
            "modified": "2015-09-30T09:03:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90d2f21b7cc4e76d7b94ae381f7a5df4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54e-cb70-432a-a81d-4d9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:10.000Z",
            "modified": "2015-09-30T09:03:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90d86b3aabcd7a077a707cbec93a2408']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54e-d2f8-4374-bd65-4285950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:10.000Z",
            "modified": "2015-09-30T09:03:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90ef41b098e4a541b1afee82f4b216da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54e-bd74-4ade-80aa-4a55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:10.000Z",
            "modified": "2015-09-30T09:03:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '90f5afa259907c0bd08b405599639279']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54f-5f88-4e60-b230-45fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:11.000Z",
            "modified": "2015-09-30T09:03:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9109c3f439fc59387bacb9982f134093']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54f-266c-4a9b-9a51-44be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:11.000Z",
            "modified": "2015-09-30T09:03:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '910f5989494b9be46aa9ca057a32eae2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba54f-95e4-44a0-90ab-4b97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:11.000Z",
            "modified": "2015-09-30T09:03:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9115186660efe70af58b52ad75ca4de8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba550-62b8-4b17-ae63-4c31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:12.000Z",
            "modified": "2015-09-30T09:03:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9121116908ac35552fd9b07abdd456c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba550-08b4-4a7b-b998-4b8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:12.000Z",
            "modified": "2015-09-30T09:03:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '912db905564c7bca46b2cc04678f5b57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba550-2d00-474d-8452-4d00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:12.000Z",
            "modified": "2015-09-30T09:03:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '913e861852a5c6c0cdd13e4198dd4bd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba550-fa30-4e52-93dd-4229950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:12.000Z",
            "modified": "2015-09-30T09:03:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9145cb28866228b585eb8df080c5e4d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba551-b928-422d-988a-4a7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:13.000Z",
            "modified": "2015-09-30T09:03:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '914c250d52afa036925d1d690ac68ef5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba551-9780-419b-9709-4e1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:13.000Z",
            "modified": "2015-09-30T09:03:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '914f0f2d9d78ae4dd55c29c96eb46ada']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba551-6f34-4043-a46d-43f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:13.000Z",
            "modified": "2015-09-30T09:03:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91553a98edd9ed98e25e23b955173a73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba551-f1e4-4ece-99d4-4d54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:13.000Z",
            "modified": "2015-09-30T09:03:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '915e9dcd10e80a1490eb0f869be48c42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba551-00f4-4214-94aa-4c1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:13.000Z",
            "modified": "2015-09-30T09:03:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9171999e06c7a1f92c46e00c30eae357']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba552-3e1c-4a22-bcb1-48cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:14.000Z",
            "modified": "2015-09-30T09:03:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91734059868a7f1cf03920ef71402c12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba552-0ed8-4372-a5c2-4b43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:14.000Z",
            "modified": "2015-09-30T09:03:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9189ccbf90fa8cb1c4a98588dcb77a24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba552-ac78-43a1-b35f-4ccb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:14.000Z",
            "modified": "2015-09-30T09:03:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91929600053c8c3f7ed5c7d1b576a89d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba552-d7a0-4fab-a4cf-4a34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:14.000Z",
            "modified": "2015-09-30T09:03:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '919376d030279c3986705ac8f007012a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba553-fff8-4e9d-855e-42f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:14.000Z",
            "modified": "2015-09-30T09:03:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9197a4aadd3384e3fad8c1b1cfdd725d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba553-ef9c-4460-8212-4711950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:15.000Z",
            "modified": "2015-09-30T09:03:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '919e894cd789148bd0ebbb1405c5fce8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba553-0dbc-4aff-bba4-41ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:15.000Z",
            "modified": "2015-09-30T09:03:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91b784b9228cd5d4b386f22e20c83e93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba553-8a64-4ebc-8bbb-4a77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:15.000Z",
            "modified": "2015-09-30T09:03:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91b89635ef51583199e52731ded3ff9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba553-15e4-401e-bde6-4579950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:15.000Z",
            "modified": "2015-09-30T09:03:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91ba6101b132baffb51833dae817179d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba553-a5b0-48ed-aa11-4a93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:15.000Z",
            "modified": "2015-09-30T09:03:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91bf593a846405a72b93e4ae06107976']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba554-bb14-4b90-bfc4-40a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:16.000Z",
            "modified": "2015-09-30T09:03:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91d0f0ea1e3309e7d911d3d854ec106a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba554-394c-4891-a3a5-49ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:16.000Z",
            "modified": "2015-09-30T09:03:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91d4597ca33fbaba84e6180c97f8ba81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba554-ced0-4144-80d2-4e0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:16.000Z",
            "modified": "2015-09-30T09:03:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91d6958010ef5bb38cf1f53de0db4707']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba554-d8a0-48b9-9530-467a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:16.000Z",
            "modified": "2015-09-30T09:03:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '91f7eafdcfeb064e5bb5e909a7a8525f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba554-fcf8-4e24-825c-4450950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:16.000Z",
            "modified": "2015-09-30T09:03:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '920536656f9b3d457b0a3b27d70661ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba555-8494-43f9-b81a-4115950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:17.000Z",
            "modified": "2015-09-30T09:03:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '920b3490c5bcb02f987b1747d23f21f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba555-5be0-43b3-a4d1-47ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:17.000Z",
            "modified": "2015-09-30T09:03:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9212f4ee1d0f604e3e5e1304fc9726e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba555-97b0-4f7f-99aa-457f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:17.000Z",
            "modified": "2015-09-30T09:03:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '921d46f5a41b2e8552162c1f0ea3dc63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba555-b160-4c1f-85d9-4035950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:17.000Z",
            "modified": "2015-09-30T09:03:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '921ed7084c76121dcb0b3740a2a3544f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba555-bc5c-41a1-95b9-4812950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:17.000Z",
            "modified": "2015-09-30T09:03:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '921f27e9a14f1ec3e8d7883b97825f2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba555-4240-4458-9f77-4cbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:17.000Z",
            "modified": "2015-09-30T09:03:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9220a028266ccac8515251dafb01ec66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba556-8f58-4b3f-b30d-4da6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:18.000Z",
            "modified": "2015-09-30T09:03:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9221eb026e75f80d14a8cd98c417d702']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba556-14b4-4a3b-9ed4-48aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:18.000Z",
            "modified": "2015-09-30T09:03:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '922d85549edb4d675984d67dee45fed8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba556-c14c-4430-85ae-4179950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:18.000Z",
            "modified": "2015-09-30T09:03:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '922e0c3429adbfc3fe2722e44a1207a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba557-cd74-4aa2-8ce9-4c09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:19.000Z",
            "modified": "2015-09-30T09:03:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '923239cab855fdff87eba465ff5b0046']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba557-8be0-4c71-9a91-4fae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:19.000Z",
            "modified": "2015-09-30T09:03:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92492520b562249a50c0b053cec28fa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba557-50cc-423f-8d16-4abf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:19.000Z",
            "modified": "2015-09-30T09:03:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '924b54074ef9eedc3efc28cd9cfd832d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba557-0294-4c9d-83e8-4827950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:19.000Z",
            "modified": "2015-09-30T09:03:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '925e086120884896edd409611c2687f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba557-f74c-4562-8c52-4979950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:19.000Z",
            "modified": "2015-09-30T09:03:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '926455e5dabce351761a23101c1c7568']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba558-00dc-4f68-8b7e-4d12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:20.000Z",
            "modified": "2015-09-30T09:03:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9270e4f738ca81f63e4a3fef174caa0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba558-8960-492a-a643-47fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:20.000Z",
            "modified": "2015-09-30T09:03:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '928a8edecaae3c10727cd4cc8cbbc6af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba558-6ad0-4ef9-8b3d-4409950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:20.000Z",
            "modified": "2015-09-30T09:03:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9291ad30707ef88ee857ea10be86d2d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba558-dba8-4cdb-b734-4331950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:20.000Z",
            "modified": "2015-09-30T09:03:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9294f25e22087c113a1bfafdf81f047c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba559-bf20-4bdf-829a-434d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:21.000Z",
            "modified": "2015-09-30T09:03:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92968c1b4b74cfea497c2c0e117af67f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba559-f660-4d7c-b8af-4152950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:21.000Z",
            "modified": "2015-09-30T09:03:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92984d114927554daa456611dcf1e4e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba559-1e60-4914-998a-480f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:21.000Z",
            "modified": "2015-09-30T09:03:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92a1320e69f461d5c6198afd1094615d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55a-a900-4f6f-ac0f-4a57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:22.000Z",
            "modified": "2015-09-30T09:03:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92a8160cb96937d5609a0b2cd9a3ffbf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55a-8a9c-4b8e-8f90-448b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:22.000Z",
            "modified": "2015-09-30T09:03:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92acca6878b84c9247751e7a98e7711f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55a-879c-42e9-9462-4a75950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:22.000Z",
            "modified": "2015-09-30T09:03:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92b3ce4be0e926582058070060d3512c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55b-a278-4aa3-8825-42ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:23.000Z",
            "modified": "2015-09-30T09:03:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92b6023799844e58a8e85f6417b31750']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55b-29c8-4187-a4a8-400c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:23.000Z",
            "modified": "2015-09-30T09:03:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92c06ea7bc7cd6b599b26088ede4c2a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55b-3628-4963-830c-43d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:23.000Z",
            "modified": "2015-09-30T09:03:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92d0c60cd8e158a88e0310de19ea4b2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55b-ddd0-42e3-abed-438f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:23.000Z",
            "modified": "2015-09-30T09:03:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92ddb1a15dca1b3b3839673e8829ba4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55c-f948-4f12-ae60-43b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:24.000Z",
            "modified": "2015-09-30T09:03:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '92eb1ff35cd4299ce3f938b4e78ac9f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55c-5fd0-49ef-833b-41a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:24.000Z",
            "modified": "2015-09-30T09:03:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93087bd40c4e1550f856510c08a5f332']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55d-62c4-469d-9e74-4817950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:25.000Z",
            "modified": "2015-09-30T09:03:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9308c75ccb49fef396db19db1736d9cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55d-82c8-4650-ba9e-4ea1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:25.000Z",
            "modified": "2015-09-30T09:03:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93093d6cb444cd10bb954579899f8ad7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55d-cd8c-4e24-95ef-4eb6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:25.000Z",
            "modified": "2015-09-30T09:03:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93151f39272521247e8dc84659ab4493']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55e-15e4-48e4-8f62-4016950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:26.000Z",
            "modified": "2015-09-30T09:03:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '932d2ece6fe8ac0881732ef8035efacb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55e-1fd0-403d-b6f6-441a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:26.000Z",
            "modified": "2015-09-30T09:03:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '933244ece4f49cf6d81e494079e1e6ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55e-e3c8-48f4-9637-4bd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:26.000Z",
            "modified": "2015-09-30T09:03:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '933de2c1f93f764a816fd336896cf2c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55f-4c18-4aa6-a4e4-4850950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:27.000Z",
            "modified": "2015-09-30T09:03:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '934cad80000739ce0d9c7e11ce7ad37e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55f-04e0-410d-bc85-492a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:27.000Z",
            "modified": "2015-09-30T09:03:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '934f695ed4d5de0d8fc78e5a9685ed17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba55f-eedc-404d-a251-4d9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:27.000Z",
            "modified": "2015-09-30T09:03:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '935146407f450aeccad15833067e3f92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba560-b7b4-493f-9989-47de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:28.000Z",
            "modified": "2015-09-30T09:03:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9364eac22e69f21442d387a65f8334e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba560-fd1c-4535-9e12-4692950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:28.000Z",
            "modified": "2015-09-30T09:03:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9374b53ad59d7423b1bca295c0dcb602']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba561-08a0-4917-ab46-4a12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:29.000Z",
            "modified": "2015-09-30T09:03:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93757b0a95a79b0dbdc31a16b05d0c82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba561-7ba0-4446-a7d1-4c85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:29.000Z",
            "modified": "2015-09-30T09:03:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93845d9920b0abf37788cbf5ac9b10b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba561-ee28-43dd-acda-461e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:29.000Z",
            "modified": "2015-09-30T09:03:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9393d423018c0bdddff2db322d7e4f39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba562-1f48-41c6-aa11-4dd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:30.000Z",
            "modified": "2015-09-30T09:03:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '939841620a1e42c19e1c21f1f1053bb5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba562-fc40-4718-9406-4ce5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:30.000Z",
            "modified": "2015-09-30T09:03:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '939c2998dcf5ad1b2cff4ef5bf005873']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba562-4b18-4485-9eba-499c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:30.000Z",
            "modified": "2015-09-30T09:03:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93a4a59dd4ae5019d373456c0db321e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba563-03e8-4d1d-8329-43e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:31.000Z",
            "modified": "2015-09-30T09:03:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93a7357a9d27ea6b190b21b3e7ef568e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba563-c658-4c05-97fd-4511950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:31.000Z",
            "modified": "2015-09-30T09:03:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93ac5fab0e413db14b5cc4427b746659']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba564-252c-42d8-849a-4653950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:32.000Z",
            "modified": "2015-09-30T09:03:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93ae9e599785652a7711619f9c8405aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba564-d2a8-40a8-b1e9-4734950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:32.000Z",
            "modified": "2015-09-30T09:03:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93b39bb91e15a87109c4d55468d1c9d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba564-a904-4599-97ed-4765950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:32.000Z",
            "modified": "2015-09-30T09:03:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93cdcf7cc84b2dac5bacd370db4ab238']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba565-1934-40fc-8eae-4f9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:33.000Z",
            "modified": "2015-09-30T09:03:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93d52470fb528b60056614bb6fe41231']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba565-fcd8-4c5f-b21c-41a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:33.000Z",
            "modified": "2015-09-30T09:03:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93e41ecf672dce47eb11c9e20027b48b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba565-dddc-4ff1-9262-4ff8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:33.000Z",
            "modified": "2015-09-30T09:03:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93e7362f5587b83971fafbfd603dcc94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba566-edc0-440e-a508-418c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:34.000Z",
            "modified": "2015-09-30T09:03:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93e8487fee3ee7d837b81ded24075612']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba566-260c-46c5-aff5-458a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:34.000Z",
            "modified": "2015-09-30T09:03:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '93fdb98883b64fb1e7486b6ccb74e6c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba566-6874-41a6-bbea-4ad2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:34.000Z",
            "modified": "2015-09-30T09:03:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '940177d224de266277fd610f7be3f67b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba567-aa70-4b38-9d53-40da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:35.000Z",
            "modified": "2015-09-30T09:03:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '941932368005709a2fece9bbe0856411']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba567-0798-452a-802f-4475950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:35.000Z",
            "modified": "2015-09-30T09:03:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '941e3ea82c53f20f25db1a3958fe7fb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba568-6084-4ce1-9386-4670950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:36.000Z",
            "modified": "2015-09-30T09:03:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9427d3fe79712b7ab58b6e113e5cf66f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba568-ddcc-4c41-a946-4d4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:36.000Z",
            "modified": "2015-09-30T09:03:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '942dcaf35ad56131be1dcad24cc693c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba568-3cdc-406c-b8fa-4832950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:36.000Z",
            "modified": "2015-09-30T09:03:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9443dc350f8b3503274131851647993e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba569-365c-4214-b979-475d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:37.000Z",
            "modified": "2015-09-30T09:03:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94488cfebb8f3d5fd9235f5a9621b90e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba569-d3c0-4b1e-88e0-459d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:37.000Z",
            "modified": "2015-09-30T09:03:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '946b466ab8f194fe9c4edfa13a414571']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba569-8158-4235-a56f-4e07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:37.000Z",
            "modified": "2015-09-30T09:03:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '946f5ae25f34c51e66e601e037d4af3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56a-1064-4194-afb4-4473950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:38.000Z",
            "modified": "2015-09-30T09:03:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94726bb3489afa60430616be4c3ab5f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56a-de78-40c6-a600-452b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:38.000Z",
            "modified": "2015-09-30T09:03:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9474d88831398f51a2f2f4865c07af01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56a-695c-49b8-8af3-442f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:38.000Z",
            "modified": "2015-09-30T09:03:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '947535ec015a03bbf9bb0065862be6b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56b-4f28-4bc8-b36e-497d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:39.000Z",
            "modified": "2015-09-30T09:03:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9476645176f4541c83b41a292fff7070']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56b-fff8-42fb-9d0f-4e58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:39.000Z",
            "modified": "2015-09-30T09:03:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '947b3fda93bb61b3abba842e7a375d27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56c-db30-45a9-b571-47f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:40.000Z",
            "modified": "2015-09-30T09:03:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94807ff8f6001a39eb2fd6f08f74691d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56c-96b0-4414-98f8-45ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:40.000Z",
            "modified": "2015-09-30T09:03:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94887a429862c0a987fa7afa58320eee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56c-2778-4e87-8f99-4d79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:40.000Z",
            "modified": "2015-09-30T09:03:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9492abc32932b30c4024b1a0636d2851']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56d-e52c-467e-8b9b-4ad6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:41.000Z",
            "modified": "2015-09-30T09:03:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9495ab598a8756ef1d2802ac03845a65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56d-7090-4b97-b161-4b16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:41.000Z",
            "modified": "2015-09-30T09:03:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94a28c69cea5e965357dc5f3e68a6154']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56d-f4d8-40ca-92c7-42a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:41.000Z",
            "modified": "2015-09-30T09:03:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94ad263dadd991df1057e4ac5662b7f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56e-afec-455f-91ea-46a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:42.000Z",
            "modified": "2015-09-30T09:03:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94b23e31eda1057dda15118d8c06a5b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56e-b048-45b9-8a08-418a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:42.000Z",
            "modified": "2015-09-30T09:03:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94b3723a0aa1882ba634f3ebd391010b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56e-fa5c-42bf-9e51-47dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:42.000Z",
            "modified": "2015-09-30T09:03:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94b569ce46b47f355269e4ee0d6d80f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56f-c89c-45ab-87be-4efa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:43.000Z",
            "modified": "2015-09-30T09:03:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94c40d0f1b7026e1719c7dcea293155d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba56f-4fe0-4463-b779-4bfd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:43.000Z",
            "modified": "2015-09-30T09:03:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94c5b3199414b8fca9f134724acdd88e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba570-f538-404c-a9ad-42a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:44.000Z",
            "modified": "2015-09-30T09:03:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94c86600896c9e087cdf26cbd31800bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba570-f7c8-4312-84fb-4bc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:44.000Z",
            "modified": "2015-09-30T09:03:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94c896613604d4d5445e09bc90314755']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba570-6fe4-4d8d-9e67-457b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:44.000Z",
            "modified": "2015-09-30T09:03:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94d2023208e8b9950be7cfe9ff111332']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba571-3f00-4d8e-a41b-4e9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:45.000Z",
            "modified": "2015-09-30T09:03:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94db6af7d7812acd00d7de6288efbfcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba571-dd74-4125-8811-4a59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:45.000Z",
            "modified": "2015-09-30T09:03:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94e1a166fb29f051f40c3abdef1412d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba571-7940-4e44-88b7-4394950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:45.000Z",
            "modified": "2015-09-30T09:03:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94e233b77184dd8d7d3f1356f7cc98a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba572-08f0-4ead-b85b-4197950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:46.000Z",
            "modified": "2015-09-30T09:03:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94ebca4720bb0df7c2c9054b3f8b91f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba572-49b0-4888-8d20-4069950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:46.000Z",
            "modified": "2015-09-30T09:03:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94ec9cfa1f35886d465c2c41f77cb513']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba572-cd84-42b2-a383-4343950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:46.000Z",
            "modified": "2015-09-30T09:03:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94fae21b4212fe9868e61d63aee76181']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba573-0280-40a1-b324-4db1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:47.000Z",
            "modified": "2015-09-30T09:03:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '94feb16ad48435e44dd49a402c363a06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba573-6088-4f23-8ebf-471f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:47.000Z",
            "modified": "2015-09-30T09:03:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95001062ecfc5d823680520c28f379bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba574-dacc-4fb2-9dc1-41fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:48.000Z",
            "modified": "2015-09-30T09:03:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95052fe91ea8c79ffd3a77ad02b39f7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba574-35a4-46fd-b490-4ac3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:48.000Z",
            "modified": "2015-09-30T09:03:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '950a67c546e987c768e26da136e58296']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba574-1a94-4586-9978-46c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:48.000Z",
            "modified": "2015-09-30T09:03:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '950b8aca28a5d2895aca029800cdf9c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba575-4d9c-4934-a327-4342950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:49.000Z",
            "modified": "2015-09-30T09:03:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '950cdf9b4758a0443f7b56c7ebd2081e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba575-847c-4a1d-a18e-4a27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:49.000Z",
            "modified": "2015-09-30T09:03:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9513799e3fa93949c4e09f2fc216843d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba575-4e30-41b7-ba7e-4c39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:49.000Z",
            "modified": "2015-09-30T09:03:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95222f2516d748a5f06a2664bb4d4cdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba576-4728-49b3-90a6-4521950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:50.000Z",
            "modified": "2015-09-30T09:03:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '952ae74a7c773d5ed820fe013548b64a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba576-6768-4680-86cc-4a94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:50.000Z",
            "modified": "2015-09-30T09:03:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9533dbe1ab5545dc6e93649a815df299']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba577-02b4-4cfc-9ffb-4e15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:50.000Z",
            "modified": "2015-09-30T09:03:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9538a2539c985c38e82c559d5dca6a59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba577-d890-488b-b351-4b27950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:51.000Z",
            "modified": "2015-09-30T09:03:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '954616f6d9fc183565bea7a37adb08fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba577-77e0-463c-9e72-4f79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:51.000Z",
            "modified": "2015-09-30T09:03:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95488823be3d25796b19eb8e0b39b238']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba578-eff0-4b3a-8c6b-4d84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:52.000Z",
            "modified": "2015-09-30T09:03:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '954bb1e69368ab532317916beec3b8ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba578-03b0-430f-bb92-497d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:52.000Z",
            "modified": "2015-09-30T09:03:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '954bbf319e5c1df80d200ae7b7a16e4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba578-309c-494f-b0b6-4712950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:52.000Z",
            "modified": "2015-09-30T09:03:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95628612c4a3f1c3a9bd96a329e28999']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba579-3348-4d78-bb6f-4ae4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:53.000Z",
            "modified": "2015-09-30T09:03:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95677a10a28859911bb1f0f0f0f10bbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba579-a870-4aab-8331-4e3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:53.000Z",
            "modified": "2015-09-30T09:03:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '956e72de131cc6e140b2216b074af061']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba579-1d6c-4e14-841b-4b19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:53.000Z",
            "modified": "2015-09-30T09:03:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9570eb6936b7b20e320258cd77e02be5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57a-f2a4-402a-b973-47c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:54.000Z",
            "modified": "2015-09-30T09:03:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9571b99e2d449d52a324a8929805135c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57a-5b14-4f71-87f3-42e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:54.000Z",
            "modified": "2015-09-30T09:03:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '957a2065bd78814e52f53bc06ae0473d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57b-0a44-41b6-a60d-4676950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:54.000Z",
            "modified": "2015-09-30T09:03:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '958bf86a82d4384c3ab62b6ddb14a6c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57b-0ca8-4a4a-a02e-4012950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:55.000Z",
            "modified": "2015-09-30T09:03:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '958c1fe223e964216f9aa25c1901fe70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57b-c1a4-4c13-bd4f-4d92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:55.000Z",
            "modified": "2015-09-30T09:03:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95902363383fc708983ee0745d7ff77c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57c-51a8-4119-ac48-4aab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:56.000Z",
            "modified": "2015-09-30T09:03:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '959a97905ef7bfbb71dc904e588c4345']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57c-da08-47f0-99ba-4952950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:56.000Z",
            "modified": "2015-09-30T09:03:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95b78804a101b081d854d74ec0a40151']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57c-07a4-48df-a2d8-4ebc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:56.000Z",
            "modified": "2015-09-30T09:03:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95ba3f8e8e14cc3d7dcc76bc9e648678']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57d-afe0-442a-8676-4521950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:57.000Z",
            "modified": "2015-09-30T09:03:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95ca0c827f451c1a4c3ee451f219297d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57d-7abc-4cb9-ae9c-4b7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:57.000Z",
            "modified": "2015-09-30T09:03:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95ca11ed57081235b46dc93054b83444']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57d-dc70-4f57-b698-47fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:57.000Z",
            "modified": "2015-09-30T09:03:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95ca3cb71b7ca5f71dda382ece87e848']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57e-5040-49db-9c28-4189950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:58.000Z",
            "modified": "2015-09-30T09:03:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95e8725651b6725c812eaf4d2075260b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57e-e214-4fb8-a8f6-4f37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:58.000Z",
            "modified": "2015-09-30T09:03:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95e8dd6ead75bffadd9972d9326b9d9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57f-6178-498f-8ede-4bd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:59.000Z",
            "modified": "2015-09-30T09:03:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95e9f62411bf1477909cf57dfef7bb2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57f-fba4-42a9-9050-4450950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:59.000Z",
            "modified": "2015-09-30T09:03:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95ec59b903aa88034e9af44fd0feeb18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba57f-edf4-413b-b6e3-4e74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:03:59.000Z",
            "modified": "2015-09-30T09:03:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95eec4ea07e5f52d43cdafae72ebe61b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:03:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba580-52fc-4779-b419-4471950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:00.000Z",
            "modified": "2015-09-30T09:04:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '95f95834a1c3aad6d0dc94afe6ca98c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba580-1bf8-45f9-ae1e-4cd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:00.000Z",
            "modified": "2015-09-30T09:04:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '960f33d8e98f5528f326c96621c89ab2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba580-ad34-4041-8871-4b47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:00.000Z",
            "modified": "2015-09-30T09:04:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '960ff48eeba531ba64e86a7e4c5f207c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba581-2e5c-44b1-af1a-4bec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:01.000Z",
            "modified": "2015-09-30T09:04:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9615461d8777cfb9022abac3454621ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba581-3cc8-433a-982f-4cf8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:01.000Z",
            "modified": "2015-09-30T09:04:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '961733b9eaddcd0a3c36654aadcf413b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba581-54dc-4ce9-b8fe-4d01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:01.000Z",
            "modified": "2015-09-30T09:04:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9617b5949c0e5d9816183ea6efcc9107']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba582-b270-44b0-bdbb-471d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:02.000Z",
            "modified": "2015-09-30T09:04:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96187eb0c185199595ae193d0d0388eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba582-40d0-44d8-90ab-4039950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:02.000Z",
            "modified": "2015-09-30T09:04:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '963e103d1b113d90d35a4dde9b0195a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba583-7fec-467c-a8bf-4185950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:03.000Z",
            "modified": "2015-09-30T09:04:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96584fcbd559dd14aa5560f495f62f70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba583-0c28-49d1-80b8-421f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:03.000Z",
            "modified": "2015-09-30T09:04:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9658b428875c3bc72784aae919e07a16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba583-08f8-4b34-abc2-48e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:03.000Z",
            "modified": "2015-09-30T09:04:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '965b2981a0b8df0bb51f57ce8afc7805']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba584-9618-4d2d-813c-43f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:04.000Z",
            "modified": "2015-09-30T09:04:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9678bdba1a96cb06afb12bfabfd16cf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba584-bc08-4e54-8ed9-44b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:04.000Z",
            "modified": "2015-09-30T09:04:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96822e0bfca3a399f9faf2d85bedd6f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba584-011c-46ad-9ade-4f67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:04.000Z",
            "modified": "2015-09-30T09:04:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96893c2c5e4e3e44630068530bf19a52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba585-a060-4d5d-93b9-48b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:05.000Z",
            "modified": "2015-09-30T09:04:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '969d71533f2b2a2db4fa9e861c14e7b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba585-b5b0-47a8-a24c-4c09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:05.000Z",
            "modified": "2015-09-30T09:04:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96aeab8e49bcd83219a07d5b9f024458']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba586-6674-44ce-afa9-43bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:05.000Z",
            "modified": "2015-09-30T09:04:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96b35af343221715a0fd96e141c5f159']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba586-86cc-4497-9647-4010950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:06.000Z",
            "modified": "2015-09-30T09:04:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96b3e030fdda847b92dcf8d12256af06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba586-3a74-4b94-90ee-401e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:06.000Z",
            "modified": "2015-09-30T09:04:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96b42d9119a04dcc72364c61d0ea5aa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba587-e418-4653-9a75-4208950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:07.000Z",
            "modified": "2015-09-30T09:04:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96b6e7b50b6af8286020a74a579bbb7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba587-7ca8-4be7-98a1-4011950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:07.000Z",
            "modified": "2015-09-30T09:04:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96b97837f421d999df02fb93f39a289d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba587-4950-42ef-8da6-469e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:07.000Z",
            "modified": "2015-09-30T09:04:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96c15e9bf5f330e5aa0901f664b2262b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba588-0d58-4237-8fbf-4adf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:08.000Z",
            "modified": "2015-09-30T09:04:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96ca994f3df356296ba6a7ff13664305']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba588-6f78-48d9-8108-4307950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:08.000Z",
            "modified": "2015-09-30T09:04:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96e371bd35b7f2734e956ba7951bec94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba588-829c-48e0-9b35-4ec7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:08.000Z",
            "modified": "2015-09-30T09:04:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '96e9f5b31f351b4ae83ac7e566710858']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba589-0e08-47a1-a1aa-403d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:09.000Z",
            "modified": "2015-09-30T09:04:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '970d5f81342320478d84fb5c39d7f624']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba589-232c-47ef-b51b-494f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:09.000Z",
            "modified": "2015-09-30T09:04:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9713785a658f82e917a277ef45aad8a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58a-6e08-4690-96dd-4950950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:10.000Z",
            "modified": "2015-09-30T09:04:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '971a4772b858b3435d34f4131710d0b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58a-84a8-4db3-9bfa-48b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:10.000Z",
            "modified": "2015-09-30T09:04:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '972223a793acf1395f5c2b4d2ff2f766']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58a-f7e4-4e7b-9477-4877950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:10.000Z",
            "modified": "2015-09-30T09:04:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9722bc5bf4b380f322c3d0371d4739e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58b-c7b4-41df-8446-4eb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:11.000Z",
            "modified": "2015-09-30T09:04:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97253ac7be6ac2f63b9e190b17e329f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58b-7d20-4df1-b8ad-4115950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:11.000Z",
            "modified": "2015-09-30T09:04:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97255cbf05ac268abf967122c1bce16a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58b-f5ec-46c6-b144-4d28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:11.000Z",
            "modified": "2015-09-30T09:04:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9728871ef7dc41e96d42d2127c71b1c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58c-a6bc-4c37-b9f7-42f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:12.000Z",
            "modified": "2015-09-30T09:04:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '974be89a8809d066cc4910f8d5811b23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58c-753c-4c65-9352-4888950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:12.000Z",
            "modified": "2015-09-30T09:04:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '974c54a1ffe64545d2c2cc0c4f4d11c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58c-de14-4e12-b272-41f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:12.000Z",
            "modified": "2015-09-30T09:04:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '974e2373211f8b5db15ec44244cc9743']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58d-f894-4aa4-9f79-49fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:13.000Z",
            "modified": "2015-09-30T09:04:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9751e3208dca8897cb997cb2a20c3d1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58d-4b94-4d4a-a034-4267950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:13.000Z",
            "modified": "2015-09-30T09:04:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9752a087e08c324a55d8dc790b995832']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58e-07f8-4d17-b5ab-432e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:14.000Z",
            "modified": "2015-09-30T09:04:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9755a5e3a0a507406a74d471a15e5946']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58e-3d2c-4a98-82e4-4a0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:14.000Z",
            "modified": "2015-09-30T09:04:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '975f954cc58b94d17944afa3a1e30190']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58e-b3c0-4f9b-b89a-4502950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:14.000Z",
            "modified": "2015-09-30T09:04:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9760f0cf9d614784f1aefa185dcbc84d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58f-d854-46cc-8ca4-4f7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:15.000Z",
            "modified": "2015-09-30T09:04:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '976e9136369547220e5693ed7918eee5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58f-4e7c-4c4d-ab3c-4fd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:15.000Z",
            "modified": "2015-09-30T09:04:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '977178114426bd745d410609ee5ff3a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba58f-d1f0-4337-bd1a-4c7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:15.000Z",
            "modified": "2015-09-30T09:04:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9777272faed713a95c90450ce7e9e690']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba590-be08-402f-b13a-475e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:16.000Z",
            "modified": "2015-09-30T09:04:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9778b5d3f623ccbdcde593177028a76c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba590-dbfc-4da9-a707-4fbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:16.000Z",
            "modified": "2015-09-30T09:04:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97879e919f8549da1ef6c1b03eaa210d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba590-45ac-4c46-bbe3-410c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:16.000Z",
            "modified": "2015-09-30T09:04:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97a327a176aee2bd6c0681a2d537f947']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba591-512c-4e15-a58a-4d43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:17.000Z",
            "modified": "2015-09-30T09:04:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97ab454005dd442756a6bca836809a71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba591-fa0c-4ab8-9a3a-4e7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:17.000Z",
            "modified": "2015-09-30T09:04:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97b183b3974c21155f32cbce8221d16b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba592-18fc-46b4-be80-4ecb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:18.000Z",
            "modified": "2015-09-30T09:04:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97bd59523c9cb6ad4ea4c16611ca8646']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba592-bdb0-4115-bd31-42e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:18.000Z",
            "modified": "2015-09-30T09:04:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97be91970167bb8c318c210cc763ab2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba592-cf10-4c14-9a61-4437950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:18.000Z",
            "modified": "2015-09-30T09:04:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97c2a7df445512ae7a4ea48d0f3b12da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba593-129c-422b-a607-432c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:19.000Z",
            "modified": "2015-09-30T09:04:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97ce6d3309aaf60ff34f444ef1e94e47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba593-af0c-4268-93b5-4c0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:19.000Z",
            "modified": "2015-09-30T09:04:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97df25af276d19071dc03db512021510']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba593-be5c-45f7-b46d-4a92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:19.000Z",
            "modified": "2015-09-30T09:04:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97eba4312d2125b4502b822217f21f3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba594-0a38-466a-9132-43de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:20.000Z",
            "modified": "2015-09-30T09:04:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97f3accbe8cd8d210ea6f805aa46ca83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba594-d1bc-44de-b399-4882950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:20.000Z",
            "modified": "2015-09-30T09:04:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97f6027ca706f9b41907b72d2a005ff7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba594-7d34-4a46-94e6-4aa4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:20.000Z",
            "modified": "2015-09-30T09:04:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '97ff5f764a4bd443b71f2b82046dcb42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba595-1804-494a-b5bb-481b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:21.000Z",
            "modified": "2015-09-30T09:04:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9804db9791031df0f2ffe206f1c8e116']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba595-85a8-49a9-b181-4b03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:21.000Z",
            "modified": "2015-09-30T09:04:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '980c2d4ad9446955574827447a3d20c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba596-10a8-4289-829d-4176950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:22.000Z",
            "modified": "2015-09-30T09:04:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '980c3109e3eeb2f2df1da7a5542e5efe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba596-177c-4e6d-8679-42a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:22.000Z",
            "modified": "2015-09-30T09:04:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '980d28a23a23412dee07ee38693c2681']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba596-a2c8-479e-ad7a-445b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:22.000Z",
            "modified": "2015-09-30T09:04:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '980f9e15190530545d437f8e5bf9f10a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba597-94d8-4bf6-8c4f-45e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:23.000Z",
            "modified": "2015-09-30T09:04:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '981b61cbfc3faea5fbec1ec777ddaf61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba597-e3f0-433b-97fc-4a88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:23.000Z",
            "modified": "2015-09-30T09:04:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '982ab081394b9cbc01d8ef5c2bca248b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba597-c070-4c79-b5c4-479e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:23.000Z",
            "modified": "2015-09-30T09:04:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '982c08ef05101bca02aede10fd00ccf4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba598-50f4-437d-b974-4982950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:24.000Z",
            "modified": "2015-09-30T09:04:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9844913de4fc89fc9ee11735050594f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba598-17f8-4e79-9e04-4fc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:24.000Z",
            "modified": "2015-09-30T09:04:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '985b2fe37ed88505f0c248b9f22149b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba599-0408-4608-b10e-4a28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:25.000Z",
            "modified": "2015-09-30T09:04:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '985c12b0059ec0cb0f430c5cfd3ab4a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba599-68c0-44ea-8876-41f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:25.000Z",
            "modified": "2015-09-30T09:04:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '986b30d5bea6fb148400402b521531b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba599-fbd0-4d2e-9dba-41d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:25.000Z",
            "modified": "2015-09-30T09:04:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9870f628fc4fb683f5398ad016530317']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59a-12a8-4060-bdc7-44df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:26.000Z",
            "modified": "2015-09-30T09:04:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98870ac99b66884eca196b793303d7d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59a-4550-43e6-9025-4d73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:26.000Z",
            "modified": "2015-09-30T09:04:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '988b4cb6fa591cea9b1880e801285604']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59a-cae4-4f85-ac91-47d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:26.000Z",
            "modified": "2015-09-30T09:04:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98a7ca41c2b4c4a0e5a2c692aeb0057a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59b-ea20-4d13-aa10-47e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:27.000Z",
            "modified": "2015-09-30T09:04:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98b11c13d60b8f41cb6e87b936de810c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59b-0cd0-44f6-a6ea-41d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:27.000Z",
            "modified": "2015-09-30T09:04:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98b23d12e9fcc075366dec1c259e4e58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59c-f85c-47e5-9dec-4307950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:28.000Z",
            "modified": "2015-09-30T09:04:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98b7932f2f954f72bc04d49a35d6135b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59c-a1f8-4a05-9df2-4047950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:28.000Z",
            "modified": "2015-09-30T09:04:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98b98c0bcdffa37100a9151f17ed3f0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59c-57cc-4a1a-ad9a-4724950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:28.000Z",
            "modified": "2015-09-30T09:04:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98bce8638445f3fde8e731503bd9470d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59d-74dc-4615-b6c7-48fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:29.000Z",
            "modified": "2015-09-30T09:04:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98c1d0d37a8874cdf45605170c573c21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59d-059c-4bc7-b759-46b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:29.000Z",
            "modified": "2015-09-30T09:04:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98e0fe0d2c68b4510b6ffca6c12f64d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59d-e18c-4a2c-8013-4aeb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:29.000Z",
            "modified": "2015-09-30T09:04:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98eab863b578c684722da215cf4f8a53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59e-9724-483a-8025-47ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:30.000Z",
            "modified": "2015-09-30T09:04:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '98ff31ad4d1202293ec975fb604fe27d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59e-4b60-45c0-884f-40ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:30.000Z",
            "modified": "2015-09-30T09:04:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9907a74cbde334e4d7479fdd97cf0c62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59e-c37c-45cb-ae57-4801950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:30.000Z",
            "modified": "2015-09-30T09:04:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99080ef9f299789f6e1d40ec3d3ab18c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59f-d928-4fa1-bd58-4700950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:31.000Z",
            "modified": "2015-09-30T09:04:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99159ea7dd99bcb7bfc7b883076ce5ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba59f-eae4-4130-9f06-4870950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:31.000Z",
            "modified": "2015-09-30T09:04:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '991c7d64fdd831c55b72c941fd72cf53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a0-7428-4045-8a17-4ae6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:32.000Z",
            "modified": "2015-09-30T09:04:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '992044d3cbb447452dcd45e856306d60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a0-8860-4d06-bfb1-4f49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:32.000Z",
            "modified": "2015-09-30T09:04:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '992685604af61a0603d1cc1da9bfebe9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a0-9f30-4bb2-a7d9-45a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:32.000Z",
            "modified": "2015-09-30T09:04:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9930c02c20b066379de445d8c1c5b5ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a1-e158-4913-ba25-4beb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:33.000Z",
            "modified": "2015-09-30T09:04:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '996852b929bd2925d75c4aaf6110ec67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a1-a614-47d2-9365-4b22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:33.000Z",
            "modified": "2015-09-30T09:04:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '996a9dc753dbdb0a40cfb324d71e2514']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a1-2e80-493e-9a23-4e1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:33.000Z",
            "modified": "2015-09-30T09:04:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '996ddd45b4696dcc9aab0c0bf74d97f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a2-1b58-42fd-873e-4ec7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:34.000Z",
            "modified": "2015-09-30T09:04:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9973619f42571e3477cca2677a8371b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a2-86b4-4fe9-89c7-4a00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:34.000Z",
            "modified": "2015-09-30T09:04:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9979dd404dcc542a4a10537eabc93ac0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a3-a834-4dba-aabb-44a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:35.000Z",
            "modified": "2015-09-30T09:04:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '997d974015962bfa576bc792807e0354']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a3-a644-4185-9f2b-437e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:35.000Z",
            "modified": "2015-09-30T09:04:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '998ba85914558455e4f8bfe1e1d65b34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a3-6d5c-47a3-b690-4dbb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:35.000Z",
            "modified": "2015-09-30T09:04:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9995eef9f45e38fd16136a11a9a2d18b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a4-6ef8-417a-8458-4ea2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:36.000Z",
            "modified": "2015-09-30T09:04:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9999aaa6916393482695270d9f5d4d82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a4-aee8-47f7-98bc-4f56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:36.000Z",
            "modified": "2015-09-30T09:04:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '999b35e2e3702ee12e3199db8b9538e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a4-0538-4072-a03a-42b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:36.000Z",
            "modified": "2015-09-30T09:04:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '999f75e9aa806c758cef315490f44f31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a5-4fb4-449d-b37e-4b07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:37.000Z",
            "modified": "2015-09-30T09:04:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99a92aca35cb7a4e799f26bdc2fc242c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a5-71ac-4978-a573-4c61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:37.000Z",
            "modified": "2015-09-30T09:04:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99a96b74c0026f41cc71acfedb1f07a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a5-68f4-401e-bdc0-497c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:37.000Z",
            "modified": "2015-09-30T09:04:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99ad143f65f356e53d43665fbe61b2a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a6-8e30-49d9-99b7-499b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:38.000Z",
            "modified": "2015-09-30T09:04:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99ae8788265aa6b5e52c955780bd3b7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a6-8b40-46d9-b2e5-45cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:38.000Z",
            "modified": "2015-09-30T09:04:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99b01d617947d856e281a55adff3031d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a7-6d28-4fd0-ae7c-443a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:39.000Z",
            "modified": "2015-09-30T09:04:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99be31ec1cfea5b1a173859b0a7eb321']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a7-0998-409d-9f7a-4e2f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:39.000Z",
            "modified": "2015-09-30T09:04:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99c2e4a23a6cfa4409f5101c03358eb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a7-dae0-4882-8f47-4260950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:39.000Z",
            "modified": "2015-09-30T09:04:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99c2fb7f08d9a1280c74775a799136da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a8-75c8-4bc4-91d7-472a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:40.000Z",
            "modified": "2015-09-30T09:04:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99c7ad144b1c733ac102fb7bd6422251']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a8-11a0-4b3b-bef8-4a45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:40.000Z",
            "modified": "2015-09-30T09:04:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99dad2d8b07e673a07383ade5546710b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a8-69c8-492d-9474-4c6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:40.000Z",
            "modified": "2015-09-30T09:04:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99db44ef0ea27226d7ad303280df25c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a9-b038-4a4f-a2de-4cf0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:41.000Z",
            "modified": "2015-09-30T09:04:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99df1c29e33dbf733eb8c57e2635f8c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5a9-e23c-468e-bf43-4f44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:41.000Z",
            "modified": "2015-09-30T09:04:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99e2ec9027b1bda31e7e6efe130267e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5aa-dcc4-465b-b36a-43f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:42.000Z",
            "modified": "2015-09-30T09:04:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99e3d3f9a850ec1d7f317ac801f0d688']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5aa-2df4-4af3-8cde-4f5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:42.000Z",
            "modified": "2015-09-30T09:04:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99e819ee597fedea06f230675dd8ab00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5aa-bbb8-4187-b53f-4054950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:42.000Z",
            "modified": "2015-09-30T09:04:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99ef56a84e7bb5f8a9e4d4e191cfb790']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ab-4aa8-4424-ba7d-46c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:43.000Z",
            "modified": "2015-09-30T09:04:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99fc1ea1def014ca6017733a75029677']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ab-419c-4826-9b92-4503950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:43.000Z",
            "modified": "2015-09-30T09:04:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '99fce7d78d7b4ca41ca40d27801ae74e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ab-5960-4b04-85b5-465f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:43.000Z",
            "modified": "2015-09-30T09:04:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a0ab4b1eeb26b468086b0aef00694fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ac-696c-48a6-8744-4c0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:44.000Z",
            "modified": "2015-09-30T09:04:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a0b41581ed114eb3dbfbd84c3594541']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ac-87a8-429e-a9c7-4897950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:44.000Z",
            "modified": "2015-09-30T09:04:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a3c31a57da8e1fdc90fae0e3bfff022']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ac-db30-496a-978f-46c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:44.000Z",
            "modified": "2015-09-30T09:04:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a5070319e4b8ecdf88e43f3cce6ec6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ad-cd60-4559-bd6d-48bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:45.000Z",
            "modified": "2015-09-30T09:04:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a5ea115e3f4738ad501c64cd1a89a8d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ad-6374-4a9c-9ee2-4f42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:45.000Z",
            "modified": "2015-09-30T09:04:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a61453da67aa25ffee20b95ea94238d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ae-0e28-4dc2-9d51-40a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:46.000Z",
            "modified": "2015-09-30T09:04:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a73322b62f78cab1664790350e7d563']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ae-09b8-4467-94b9-4755950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:46.000Z",
            "modified": "2015-09-30T09:04:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a91a363e3783ecf98c3068ecc2eb59e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ae-4828-44ff-985b-4c4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:46.000Z",
            "modified": "2015-09-30T09:04:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a9951bb0b03979b4b9876ec1174f671']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5af-e0a4-4d09-b131-447d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:47.000Z",
            "modified": "2015-09-30T09:04:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9a9987d87b227a9492ea8d3db6ec3d05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5af-c29c-4103-bd29-4b1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:47.000Z",
            "modified": "2015-09-30T09:04:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9aa1b68571c5aedd99d5ce5c71f7a2e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5af-56e0-44e2-94b8-4868950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:47.000Z",
            "modified": "2015-09-30T09:04:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9aadbd6fde974b0f59f043615b8a4f8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b0-c83c-45c8-b463-4125950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:48.000Z",
            "modified": "2015-09-30T09:04:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9aaedaa76ae188840f95de6ff997742b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b0-da88-4bf3-9ba4-43ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:48.000Z",
            "modified": "2015-09-30T09:04:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ab04131cd850123ebaaaa53026daff0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b0-0430-4156-a73c-4444950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:48.000Z",
            "modified": "2015-09-30T09:04:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ab4eb080f46b235139381ea4152e716']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b1-52c0-48a5-b15c-45a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:49.000Z",
            "modified": "2015-09-30T09:04:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ac1a59a25eef5ad2a3c18199263e36d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b1-1e60-409a-b807-4f44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:49.000Z",
            "modified": "2015-09-30T09:04:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ac76d110ab8a9d47c5eeb624b1dfb21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b2-984c-477c-8cc6-4685950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:50.000Z",
            "modified": "2015-09-30T09:04:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9addb59894d99b02543aeefcd462599f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b2-6f38-4e54-bf8a-46b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:50.000Z",
            "modified": "2015-09-30T09:04:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ae5400e3ac800a2a1c7e0aac3d381e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b2-3ac8-4e17-aa17-4d5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:50.000Z",
            "modified": "2015-09-30T09:04:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9aef873cd315fe1c27d2b3674bb429b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b3-897c-4702-ac46-45da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:51.000Z",
            "modified": "2015-09-30T09:04:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9af054cd13e6452720a34e35454aedb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b3-f7f8-4cff-9652-4048950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:51.000Z",
            "modified": "2015-09-30T09:04:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b06bbbd0d160a7887ef6b6de2b05f24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b3-b934-4e8c-9f9d-43cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:51.000Z",
            "modified": "2015-09-30T09:04:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b09670a56750d8a9d8c4e6635d4985a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b4-7b14-4f00-a43b-40f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:52.000Z",
            "modified": "2015-09-30T09:04:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b19885defafec37beee780eb8ca6721']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b4-6470-47fe-9573-4d15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:52.000Z",
            "modified": "2015-09-30T09:04:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b2233faae7541a0e5bc7aaeb22b6aca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b4-16f0-41b7-bdd3-4efa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:52.000Z",
            "modified": "2015-09-30T09:04:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b248de276cd433212e9871ba203ab90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b5-f614-47d8-b5af-4c9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:53.000Z",
            "modified": "2015-09-30T09:04:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b25181c2783a5c346723a406b46ecdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b5-8ec8-49c5-b066-47f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:53.000Z",
            "modified": "2015-09-30T09:04:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b25eeb5e60db1e60d816d82680ba97e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b6-3ee4-4f3a-9420-4354950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:54.000Z",
            "modified": "2015-09-30T09:04:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b27dc3f2167adc59bfd4f6f850522d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b6-124c-4f74-9049-4d87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:54.000Z",
            "modified": "2015-09-30T09:04:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b3983030663e9d97692415cb920649d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b6-0d58-4253-9472-4322950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:54.000Z",
            "modified": "2015-09-30T09:04:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b4e86ff82418f16fb253cf261fa319e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b7-de94-4d68-a092-4088950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:55.000Z",
            "modified": "2015-09-30T09:04:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b533fdf00c070834d95b2452563b759']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b7-cf90-421f-b296-451d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:55.000Z",
            "modified": "2015-09-30T09:04:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b64d67ebe5c6efb14016fbec59fbaed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b7-98ac-4985-ac3f-42b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:55.000Z",
            "modified": "2015-09-30T09:04:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b6ca3a84ecda8bddd6b56e14b044a25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b8-ac78-499e-ace1-4127950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:56.000Z",
            "modified": "2015-09-30T09:04:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b704904b89438220a2e0afb9c624a7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b8-4dbc-4876-b930-4518950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:56.000Z",
            "modified": "2015-09-30T09:04:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b7632c9a6959f024094965d07e2bdf7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b9-d860-45f1-85cb-4575950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:57.000Z",
            "modified": "2015-09-30T09:04:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b7af45dbd9f7da8abcf2b75deb86b48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b9-7070-45fe-a35e-4174950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:57.000Z",
            "modified": "2015-09-30T09:04:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b7b3aa2e19176622199474c51a40a84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5b9-9310-40f4-a5a7-4d69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:57.000Z",
            "modified": "2015-09-30T09:04:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b7df5a396693bf3ca2c302368d18d87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ba-7114-4732-b327-4222950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:58.000Z",
            "modified": "2015-09-30T09:04:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b843fb8b9c2b6e4c165f57fb4bded39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ba-08d4-4951-acdd-45d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:58.000Z",
            "modified": "2015-09-30T09:04:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b8a78f2abe3ace2488da9c408d453b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ba-6510-4c6a-ba36-41be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:58.000Z",
            "modified": "2015-09-30T09:04:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b8c8e97b383dcadc2318574692e506d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bb-b024-4f8e-8cfc-496d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:59.000Z",
            "modified": "2015-09-30T09:04:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b95232111cf09f453b8db4057956d08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bb-a370-4fba-b265-4e96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:59.000Z",
            "modified": "2015-09-30T09:04:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b98aebd679b7de32d52896293d73135']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bb-7820-49b8-90b5-4fa4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:04:59.000Z",
            "modified": "2015-09-30T09:04:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b9ad42d3dbdc96578255c4e052357b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:04:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bc-0b84-47d2-ba68-4686950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:00.000Z",
            "modified": "2015-09-30T09:05:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9b9d3835ba7cd479320466d0ee7567a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bc-2bcc-4dfb-b946-4024950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:00.000Z",
            "modified": "2015-09-30T09:05:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ba9323e117c2876e1b5cb4bcbe66687']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bd-df90-4e13-9faa-4526950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:01.000Z",
            "modified": "2015-09-30T09:05:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9bb69416f45369662ba158f07f65d962']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bd-9204-4971-9ef3-4e50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:01.000Z",
            "modified": "2015-09-30T09:05:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9bb85c3a7f1d566895a2debfdb31751c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bd-1dcc-4583-986b-4dc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:01.000Z",
            "modified": "2015-09-30T09:05:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9bbd1783af17ca8bc6c1ef6dd8680dc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5be-48d0-43ca-aced-453d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:02.000Z",
            "modified": "2015-09-30T09:05:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9bbfa7d43ba406487036ffe13c21d293']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5be-1368-45bc-bd87-41f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:02.000Z",
            "modified": "2015-09-30T09:05:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9bd2bba31a453f7dd9b98ae56bd0e89a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5be-c33c-4b95-ba52-4642950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:02.000Z",
            "modified": "2015-09-30T09:05:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9bd665d7784d2228d6c96c2a7a213c4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bf-d12c-46b7-a6a0-42d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:03.000Z",
            "modified": "2015-09-30T09:05:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9be913dfb13e04e45a050cb18f3bb020']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5bf-04ac-458e-8a28-47a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:03.000Z",
            "modified": "2015-09-30T09:05:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9bf04b19204d0b0031c647102159ef9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c0-d594-4c11-9469-4386950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:04.000Z",
            "modified": "2015-09-30T09:05:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9bfa7059fb8a3428662a69620f07f36b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c0-a938-46d4-8f2f-48bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:04.000Z",
            "modified": "2015-09-30T09:05:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c012b3fc8f3f0b1eeb16bec0e057f07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c0-2bf0-4e3d-933f-44a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:04.000Z",
            "modified": "2015-09-30T09:05:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c1f04c4fd29eca0b62272a0115c328b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c1-9088-4288-993e-4603950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:05.000Z",
            "modified": "2015-09-30T09:05:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c26922a27a87c840de26da990830387']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c1-3c64-458d-8b3c-4f7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:05.000Z",
            "modified": "2015-09-30T09:05:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c29b1dcf116a33ae7d8b308b28901c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c1-e428-4589-87d3-4f16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:05.000Z",
            "modified": "2015-09-30T09:05:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c35705cc2a7a81b5769c0006a85ab3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c2-32d8-4465-b24e-4820950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:06.000Z",
            "modified": "2015-09-30T09:05:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c58f85c9a96e0d8b2ab57d7ecdf72ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c2-467c-462e-b963-42da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:06.000Z",
            "modified": "2015-09-30T09:05:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c5aa8c6ba58bce3b33f596ccfe667eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c3-28c0-4052-9275-4683950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:07.000Z",
            "modified": "2015-09-30T09:05:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c5f07b09e26561a778c6b203fd48504']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c3-672c-458d-b7f1-4119950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:07.000Z",
            "modified": "2015-09-30T09:05:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c77cd798f3c8bae793d91f2c1b5e85e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c3-0150-49c0-a6e6-48ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:07.000Z",
            "modified": "2015-09-30T09:05:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c7b329f162317b2a022b50ff62bee07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c4-2cb8-4855-95b7-491a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:08.000Z",
            "modified": "2015-09-30T09:05:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c8d3af56e615a1f6b135add2edf6713']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c4-e664-4852-bcc5-4c94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:08.000Z",
            "modified": "2015-09-30T09:05:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9c94593f8baee46a9e0415b6b9247c13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c4-269c-4348-a85d-41c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:08.000Z",
            "modified": "2015-09-30T09:05:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ca35895d137f6a7ccfa7f991a404146']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c5-3080-481a-a14b-4032950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:09.000Z",
            "modified": "2015-09-30T09:05:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ca89d2a8bc2008eed9cbed418aa77b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c5-dba4-4ece-b0fb-4c24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:09.000Z",
            "modified": "2015-09-30T09:05:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cc5201469e4367b96b6faeb94c1bad6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c5-1918-446f-9f7b-4e09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:09.000Z",
            "modified": "2015-09-30T09:05:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cc78bf1cb4be1e133a894c35f9c65bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c6-bb6c-48cc-adda-4514950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:10.000Z",
            "modified": "2015-09-30T09:05:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cc952984ae7de0382efb913cffea15a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c6-497c-49cc-bc2a-4569950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:10.000Z",
            "modified": "2015-09-30T09:05:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cd581949ea6ea0b160529dbf169df2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c7-5a94-48cb-b58b-4943950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:11.000Z",
            "modified": "2015-09-30T09:05:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cd769815fbd579a5966f622ea81fa2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c7-b304-4089-83f7-480c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:11.000Z",
            "modified": "2015-09-30T09:05:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cdad2f804f359549342d17c61632b1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c7-f210-40c0-a2a5-4143950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:11.000Z",
            "modified": "2015-09-30T09:05:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cdb6600a6f201edd1722882b0f2555e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c8-e098-45e7-90a8-43e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:12.000Z",
            "modified": "2015-09-30T09:05:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cdbd95ca41f8abdd632e072c08f4aa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c8-32c8-49d4-ac57-4707950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:12.000Z",
            "modified": "2015-09-30T09:05:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cde5548c1020b86c3013e725f7f5c53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c8-2298-402a-aae9-45d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:12.000Z",
            "modified": "2015-09-30T09:05:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ce00665092ec301648d7636dc295ea0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c9-d764-48a4-bab7-47c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:13.000Z",
            "modified": "2015-09-30T09:05:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ce0a9468a42002f7465c840be0b1189']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5c9-0618-403f-9079-49ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:13.000Z",
            "modified": "2015-09-30T09:05:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cf0ad5d9a7506ab8089f371f5ca306c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ca-3290-4f3b-b3c4-4cdd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:14.000Z",
            "modified": "2015-09-30T09:05:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cf46420eff255b78cdab5325b42f34a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ca-7f18-44b8-81ad-4a58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:14.000Z",
            "modified": "2015-09-30T09:05:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cf79d8a017cdb11f46e1e7d52ed23b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ca-7d1c-4e5d-8068-4520950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:14.000Z",
            "modified": "2015-09-30T09:05:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cfbe05e15852ad2ef477dce06aec6e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cb-e980-4bb9-bbda-4012950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:15.000Z",
            "modified": "2015-09-30T09:05:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9cfd0949fde870cc254d4172a6aabbb1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cb-fd04-4244-bfc3-42db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:15.000Z",
            "modified": "2015-09-30T09:05:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d0a4738e4606995f56ba87c7c9956e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cb-34d8-473d-af2c-4fdf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:15.000Z",
            "modified": "2015-09-30T09:05:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d0a71851596e3136be154a05fc11d72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cc-665c-425d-91d9-4f43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:16.000Z",
            "modified": "2015-09-30T09:05:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d150c60b89a968be7d880076fdec0de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cc-ccc0-4cba-b8b9-4e99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:16.000Z",
            "modified": "2015-09-30T09:05:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d188d9d168505595859d2c663d25732']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cc-d828-44cd-9243-4fda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:16.000Z",
            "modified": "2015-09-30T09:05:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d19009775b62d6cfde06669c4be092b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cd-e990-4563-9af9-4bc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:17.000Z",
            "modified": "2015-09-30T09:05:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d1ccf79ada140ea4db429cd98b6285e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cd-6b28-4287-9fd2-4759950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:17.000Z",
            "modified": "2015-09-30T09:05:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d22ce973dd1ed0dae33aa850bbe803f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ce-99b0-4568-910a-4bc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:18.000Z",
            "modified": "2015-09-30T09:05:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d2bac74cc5078440d754ef869eb3834']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ce-e240-4d0e-a30b-4ea4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:18.000Z",
            "modified": "2015-09-30T09:05:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d32f650d9a6feaeb6e832546915307c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ce-e034-49c1-a935-4712950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:18.000Z",
            "modified": "2015-09-30T09:05:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d383afbabbcdc19c2a0998eeea87588']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cf-dfd0-4f8b-9e8e-47db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:19.000Z",
            "modified": "2015-09-30T09:05:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d4a7106aa8ca214bcef41cef2abd4c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cf-db34-42f2-a653-4e98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:19.000Z",
            "modified": "2015-09-30T09:05:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d507ef22aba3c540cdff2f8a8a21ed3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5cf-2428-402c-b6b6-4875950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:19.000Z",
            "modified": "2015-09-30T09:05:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d589d3142151fc86e72c20d5b4da0c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d0-378c-4aba-8cc0-4c32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:20.000Z",
            "modified": "2015-09-30T09:05:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d59b5f82b8d60b9ef61948507d7a9af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d0-7fc0-4ba5-9ced-4c43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:20.000Z",
            "modified": "2015-09-30T09:05:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d5a25cbaee783ef9c66b963313cbe45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d0-d46c-4912-8666-4a83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:20.000Z",
            "modified": "2015-09-30T09:05:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d5bbd3545f41ada6c5eb0dc5fb9da05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d1-e964-485e-a5fb-4240950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:21.000Z",
            "modified": "2015-09-30T09:05:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d5d59535e24b8471fec914276464a27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d1-7c18-401a-8627-4058950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:21.000Z",
            "modified": "2015-09-30T09:05:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d70aceee4fa70db14b2ecacf85110c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d2-f1a4-4a99-a2f7-4f3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:22.000Z",
            "modified": "2015-09-30T09:05:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d7e345e4e9c942759fca4bc2a2c8628']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d2-45ec-4275-ab5a-45b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:22.000Z",
            "modified": "2015-09-30T09:05:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d8ac354f31e2ee8fa09eddfb047ee31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d2-8b2c-40ba-bae6-4370950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:22.000Z",
            "modified": "2015-09-30T09:05:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d965d5e041e86bf7edbb6c7d8ad97f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d3-f610-468b-9ae1-4ac8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:23.000Z",
            "modified": "2015-09-30T09:05:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d99145130c3dcdb42869432ba4da500']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d3-0728-4629-b1ba-4981950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:23.000Z",
            "modified": "2015-09-30T09:05:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9d99657dcdf077271b3460abe7196865']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d3-8730-47b3-8e75-489b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:23.000Z",
            "modified": "2015-09-30T09:05:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9da5a46df175b56b919dbc3472199288']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d4-5850-4db5-a622-4d71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:24.000Z",
            "modified": "2015-09-30T09:05:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9dab54e34ea5a6351590e745ffb8deb0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d4-aa48-4b3e-8739-42ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:24.000Z",
            "modified": "2015-09-30T09:05:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9db6bdf08acf07c891b8d52bf482437d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d4-e6f8-4c5b-ba2e-408b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:24.000Z",
            "modified": "2015-09-30T09:05:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9dc5b3835ef2194e43b35aa64a661761']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d5-6d44-4320-8e21-4c6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:25.000Z",
            "modified": "2015-09-30T09:05:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9dc8054f9e988c4a7c7c0a51a3afb8a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d5-bc90-4c37-b214-48d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:25.000Z",
            "modified": "2015-09-30T09:05:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9dc8ab42cd80c1dbf0a0c00712744c8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d6-b9d4-4b71-a341-4c9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:26.000Z",
            "modified": "2015-09-30T09:05:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9dd124cc4555bd30dbad22a302ea4eef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d6-32b4-4d5d-8b62-447a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:26.000Z",
            "modified": "2015-09-30T09:05:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9dd859cfa73228804880e311b7275aed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d6-5328-46c4-b361-4df8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:26.000Z",
            "modified": "2015-09-30T09:05:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9dd8e777e1e860311f83b1e6b79c3bae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d7-67b8-45da-ba7d-43af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:27.000Z",
            "modified": "2015-09-30T09:05:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ddf033abcdb1c75ef9eb676de9ac601']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d7-4de8-4dcf-83ea-4f5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:27.000Z",
            "modified": "2015-09-30T09:05:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9de74df3ac4e2788002c899b5bb6a049']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d7-f130-412f-9f09-4a72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:27.000Z",
            "modified": "2015-09-30T09:05:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9df71396c13054c18017e31684323581']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d8-4e14-4a5c-8747-4a7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:28.000Z",
            "modified": "2015-09-30T09:05:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e05a81ee105f2f44f6cb84eb186231e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d8-d9d0-4004-a51f-4799950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:28.000Z",
            "modified": "2015-09-30T09:05:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e0e1e1b4cc0539620b00905051d8420']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d8-d1a4-43fa-9100-497f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:28.000Z",
            "modified": "2015-09-30T09:05:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e0f436494c2d27653c3378629465f0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d9-281c-4a1e-945d-4636950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:29.000Z",
            "modified": "2015-09-30T09:05:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e12988710cf4ed7dafabc86987d4d7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d9-79c8-4111-b402-4d09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:29.000Z",
            "modified": "2015-09-30T09:05:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e1fa7371201c27ce2fc82b30009c8f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5d9-da8c-4f7b-8ed9-4fc2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:29.000Z",
            "modified": "2015-09-30T09:05:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e213b58be4cff2583e1b78dd48e0736']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5da-b640-4922-82e0-404e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:30.000Z",
            "modified": "2015-09-30T09:05:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e331a34b32ab1e91e1cdf4f2fb4d284']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5da-6fc4-416a-a05d-46d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:30.000Z",
            "modified": "2015-09-30T09:05:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e3e42c11eab959816dcd90223c8565a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5db-0cd8-444e-86a1-4d41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:31.000Z",
            "modified": "2015-09-30T09:05:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e59dfd49106a013a6df5ec422d52c0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5db-dadc-49ba-be5f-49e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:31.000Z",
            "modified": "2015-09-30T09:05:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e5f55a1f9856a0a62905b4acdebbf43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5db-1008-47b0-946f-4cb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:31.000Z",
            "modified": "2015-09-30T09:05:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e6dac1b125c125ef1e00dbeeb5fe02c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5dc-8ee4-482b-863f-4d8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:32.000Z",
            "modified": "2015-09-30T09:05:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e7119255a573ca2f8ef8ca5cfe649cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5dc-d984-4ca9-93b2-430b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:32.000Z",
            "modified": "2015-09-30T09:05:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e739aa9588d0a0ed16cf4dc21273082']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5dc-3f3c-4ed6-a8f6-4f2f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:32.000Z",
            "modified": "2015-09-30T09:05:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e8c2b9f3643feac5190a76be3ea0fc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5dd-ca84-405e-b9bb-4a19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:33.000Z",
            "modified": "2015-09-30T09:05:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e9bdbb2fe3a6eebca2db7adb3bf5e40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5dd-abb4-48b3-a1c9-4cd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:33.000Z",
            "modified": "2015-09-30T09:05:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9e9bf27e4323ba37c6fb276b67ddb877']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5de-f9cc-496e-b3c9-4c31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:34.000Z",
            "modified": "2015-09-30T09:05:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9eacaeef4ff928e0b5d58b6007fc2f9e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5de-7634-4406-a046-402f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:34.000Z",
            "modified": "2015-09-30T09:05:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ec06fd0695f2cf5442f2c37ebd640e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5de-d99c-4b83-84c9-4244950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:34.000Z",
            "modified": "2015-09-30T09:05:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ec0aae13aba0c12c7605cae49acdc61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5de-a938-4792-b728-4ec0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:34.000Z",
            "modified": "2015-09-30T09:05:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ecbce4a34a5336abb86d3f83fd480a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5de-3860-44f1-9ca7-4e2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:34.000Z",
            "modified": "2015-09-30T09:05:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ee1278b61a3a2f3844c73bbd1c83219']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5df-68c0-4ed3-8bda-4e1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:35.000Z",
            "modified": "2015-09-30T09:05:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ee6a4d8406a4f1248de6a5ba21c6397']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5df-515c-4641-ba00-4f13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:35.000Z",
            "modified": "2015-09-30T09:05:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9eebdd2a38fb616ab0ceb442fa5e3d62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5df-2d94-4640-9016-48e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:35.000Z",
            "modified": "2015-09-30T09:05:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ef040e6883084d52ef19663547aaf0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5df-1694-4e74-89f4-4731950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:35.000Z",
            "modified": "2015-09-30T09:05:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9efa2aea3c1243e2e353539386d37ae2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5df-5ccc-4b78-8c6a-4e78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:35.000Z",
            "modified": "2015-09-30T09:05:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9efbb5bcd078055a9f604ecd1d25e6fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5df-7464-46a5-a9dd-4717950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:35.000Z",
            "modified": "2015-09-30T09:05:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f06c4e5d60e05c4d024f3a305ff3127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e0-0e34-426a-a30f-4bad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:36.000Z",
            "modified": "2015-09-30T09:05:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f077e3bd78a36d957fea67c42335460']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e0-373c-49b8-a747-480d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:36.000Z",
            "modified": "2015-09-30T09:05:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f14a66cb5de32424eecb6d1bcdd85f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e0-0190-412f-addb-4d24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:36.000Z",
            "modified": "2015-09-30T09:05:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f1bc60c4d374ebf729da89bb42d73f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e0-c144-4e7d-b96a-493e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:36.000Z",
            "modified": "2015-09-30T09:05:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f1d5dd496857f20a101395c7848ca13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e0-32fc-4248-82bf-4925950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:36.000Z",
            "modified": "2015-09-30T09:05:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f4766eee25044a8b01570005c121928']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e1-6954-458c-822e-4319950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:37.000Z",
            "modified": "2015-09-30T09:05:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f5a2117cd10ca40933c51d331a66901']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e1-4974-4778-965e-4bc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:37.000Z",
            "modified": "2015-09-30T09:05:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f659bd7866bd20d4a0b4510c393852d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e1-dd8c-455d-8de8-4821950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:37.000Z",
            "modified": "2015-09-30T09:05:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f68b46251c54694154726df759a6500']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e1-5120-4c8c-b997-43a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:37.000Z",
            "modified": "2015-09-30T09:05:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f6949509dd155658726ebd816016c0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e2-3c88-41d9-9940-4dbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:38.000Z",
            "modified": "2015-09-30T09:05:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f6c3c44a4113a9f1e12b65e2f1197a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e2-a5e8-407b-a619-4c9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:38.000Z",
            "modified": "2015-09-30T09:05:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f6fc09e53b15d037e900d332f9d3686']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e2-7180-41cf-b978-4d7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:38.000Z",
            "modified": "2015-09-30T09:05:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f7b7932db8e89ac609a02aeb383a9b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e3-74cc-4246-b777-4eb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:39.000Z",
            "modified": "2015-09-30T09:05:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f8c8ee9974ee45c494b37c962109737']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e3-fe84-4695-bd6e-44b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:39.000Z",
            "modified": "2015-09-30T09:05:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f8d81f54836839fdd77f036d78d5f92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e3-33f4-4c23-9778-4e5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:39.000Z",
            "modified": "2015-09-30T09:05:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f8e45d2293f4596394a20a7ba90722b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e4-483c-4eb3-8632-463d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:40.000Z",
            "modified": "2015-09-30T09:05:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f9b3b2bddfb22aeaf4615d7e75d904c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e4-7310-4322-9746-4b3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:40.000Z",
            "modified": "2015-09-30T09:05:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9f9b8d27bcdefad9ac6201e42c08b852']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e5-91b4-44c9-8382-45cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:41.000Z",
            "modified": "2015-09-30T09:05:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9fa70e2f0740d3ee5d8ce1c696134b7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e5-33c8-4bbd-93a6-4c24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:41.000Z",
            "modified": "2015-09-30T09:05:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9fc08ae67feeedb60853332540b8a593']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e5-2b94-41a0-82a6-42a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:41.000Z",
            "modified": "2015-09-30T09:05:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9fc2089a09511be0283fe91689f9c95d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e6-be2c-458d-a40f-48c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:42.000Z",
            "modified": "2015-09-30T09:05:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9fc93a8d9d45cbc105b141be50c2a34f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e6-76cc-41cd-8e59-4b58950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:42.000Z",
            "modified": "2015-09-30T09:05:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9fd3c92c32d5d239a466b1842cfa1925']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e6-76d4-4a36-99a9-499c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:42.000Z",
            "modified": "2015-09-30T09:05:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9fd55d3e5ad1905c679aabfffd0efa33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e7-324c-42ec-9223-4231950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:43.000Z",
            "modified": "2015-09-30T09:05:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9fd8c07cbda0f386228ebd157749784d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e7-d47c-4dfb-9dca-46fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:43.000Z",
            "modified": "2015-09-30T09:05:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9feba34dbc17d10310001616f90d19a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e7-7d68-4c62-bdbd-43da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:43.000Z",
            "modified": "2015-09-30T09:05:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ffa230c86095787e55d1b281444bda2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e8-6ce4-415a-b27c-47d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:44.000Z",
            "modified": "2015-09-30T09:05:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ffcef9450b4527f578aa2f07eb0b577']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e8-5ce0-48f4-9071-4b7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:44.000Z",
            "modified": "2015-09-30T09:05:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = '9ffec1a0da9a28585e9220a25dff9666']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e9-518c-41b7-b71d-4adf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:45.000Z",
            "modified": "2015-09-30T09:05:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0040a40dd9047ee6ad6a2dea96e831f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e9-ba00-494c-9f30-46a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:45.000Z",
            "modified": "2015-09-30T09:05:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a009a0ad11c084c717715a364b7e2b02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e9-139c-4377-a163-4454950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:45.000Z",
            "modified": "2015-09-30T09:05:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a00c82cd655869e3e6f7554a713d8a15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e9-1dac-491b-8e90-407a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:45.000Z",
            "modified": "2015-09-30T09:05:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a00ea6c1b8730e672fe09ff0e81ddafc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e9-870c-453b-8b0e-421d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:45.000Z",
            "modified": "2015-09-30T09:05:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a012e8b4235f0b420abc6995f97a5e57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5e9-9180-4cc8-bfaa-4ffa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:45.000Z",
            "modified": "2015-09-30T09:05:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a013f7702a3796fae20f35ec1a25da46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ea-b830-4fdb-9034-4229950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:46.000Z",
            "modified": "2015-09-30T09:05:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a019504f88e066e8691ba1288e2402d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ea-885c-4cf3-901c-4452950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:46.000Z",
            "modified": "2015-09-30T09:05:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0231a19c5fb32662837fece5775f398']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ea-bde8-4274-bea1-491d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:46.000Z",
            "modified": "2015-09-30T09:05:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a02df67f98a22df33e2e9bdc77dea9e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5eb-b844-45e9-9c8e-4cdc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:47.000Z",
            "modified": "2015-09-30T09:05:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0473abe61c5593a5f201c1da03c8076']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5eb-f3a4-45e6-aad6-4a37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:47.000Z",
            "modified": "2015-09-30T09:05:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a04776bca6d2edca8d6e8ca2fb2d3a41']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ec-0420-40c9-9eb8-4931950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:48.000Z",
            "modified": "2015-09-30T09:05:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0572390b193094cbcb04261c63b0fb3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ec-6ea8-4957-afac-4c30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:48.000Z",
            "modified": "2015-09-30T09:05:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a058cf8037af4d44354ce9bbebebadf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ec-0e1c-49f1-bb1f-49ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:48.000Z",
            "modified": "2015-09-30T09:05:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a05e63e370132124ae36e08206b0bcba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ed-94b4-4c22-ae95-48a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:49.000Z",
            "modified": "2015-09-30T09:05:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a068200f824c8764b1f1e192466ec95a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ed-ea80-4e58-b61d-462d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:49.000Z",
            "modified": "2015-09-30T09:05:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a06a502cfec6539357250842b9eecbf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ed-be14-45d6-9eaa-47ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:49.000Z",
            "modified": "2015-09-30T09:05:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a08347b710704fa0e952b81ef46004bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ee-9b6c-4fb1-b843-4e5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:50.000Z",
            "modified": "2015-09-30T09:05:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0841af184d274bea9df247733337978']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ee-da74-4f07-9702-487f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:50.000Z",
            "modified": "2015-09-30T09:05:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a09aeec3c6e52784504e94f7fb78913d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ee-090c-4472-af3b-4ae4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:50.000Z",
            "modified": "2015-09-30T09:05:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0a2282f4ab2eb6283efe7477d430227']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ef-ebdc-44f8-b20a-4902950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:51.000Z",
            "modified": "2015-09-30T09:05:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0a713f9e31bbed30ef3e046d46faf57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ef-d1f0-4b1e-868d-4b16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:51.000Z",
            "modified": "2015-09-30T09:05:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0acead0b30a72eabddbcc6809d51b40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ef-6f54-41ae-a1ed-4d2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:51.000Z",
            "modified": "2015-09-30T09:05:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0acf513e2c3e540dfc86387b7a3557e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f0-cc44-4e97-9b2a-4c6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:52.000Z",
            "modified": "2015-09-30T09:05:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0ad85607dc76b2d34201200150ee152']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f0-f554-46b8-9a62-43bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:52.000Z",
            "modified": "2015-09-30T09:05:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0ae72b44a024b46aec41bafc5012685']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f0-0198-4c93-becc-4de1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:52.000Z",
            "modified": "2015-09-30T09:05:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0b538d8aa837007d51fbf48b73c794e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f1-68a0-4940-8e68-4cbb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:53.000Z",
            "modified": "2015-09-30T09:05:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0bcf5e7335cf43541d6679c326849d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f1-0294-4a70-b27a-4839950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:53.000Z",
            "modified": "2015-09-30T09:05:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0beaae0061e17a82ce391cd0bb5a09d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f1-870c-4b08-8dbe-4af0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:53.000Z",
            "modified": "2015-09-30T09:05:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0d24f1c0230e88359e749f0c33381cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f1-7be0-435e-8efe-49fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:53.000Z",
            "modified": "2015-09-30T09:05:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0d7490a45831bfbfa0b9238a0858c68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f1-84a0-49b3-8cf1-4a79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:53.000Z",
            "modified": "2015-09-30T09:05:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0d85979f5ab2f8479a5ddf629b6bc3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f2-f52c-4e3c-995b-472d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:54.000Z",
            "modified": "2015-09-30T09:05:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0e46ca515689c9970438d542df1053e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f2-5440-497d-8ea0-413c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:54.000Z",
            "modified": "2015-09-30T09:05:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0ebf82db54eb8ccf38ca7aa6b67b9fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f2-bb48-4e98-89e1-4250950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:54.000Z",
            "modified": "2015-09-30T09:05:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0eccac2d02e444a76d04926a367130c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f2-e8a4-423b-b56f-4b33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:54.000Z",
            "modified": "2015-09-30T09:05:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a0f916207df39e1ed836d0b52bf9c17b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f2-fdc8-41f1-a54d-42a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:54.000Z",
            "modified": "2015-09-30T09:05:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1012a9e28db3a834901bf6ac90b81e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f3-f754-4eb1-9486-4e6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:55.000Z",
            "modified": "2015-09-30T09:05:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a103033328593f8bc5bd7e75b98601fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f3-7fa8-4249-9f0e-4ad4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:55.000Z",
            "modified": "2015-09-30T09:05:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a104ee396d9bb32df14070e9b58827c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f3-c108-4bb9-aab2-4369950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:55.000Z",
            "modified": "2015-09-30T09:05:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a107ffcadfa41a7a1157e82a0e5323b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f4-1cb8-484b-b459-4d15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:56.000Z",
            "modified": "2015-09-30T09:05:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a10e64f747378d36c5d3b7eb0e2570fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f4-4b50-4dd5-9f1e-4adb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:56.000Z",
            "modified": "2015-09-30T09:05:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a11242be3c5a178b12303bc50205856b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f4-bd3c-42c5-9a45-4486950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:56.000Z",
            "modified": "2015-09-30T09:05:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a11b841c726bd08c26bbf02a56f0db75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f5-aeec-44d3-bba1-4c94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:57.000Z",
            "modified": "2015-09-30T09:05:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a11fb5e3256439e89b9cf0006c89fd98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f5-7a70-47ac-99f8-4768950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:57.000Z",
            "modified": "2015-09-30T09:05:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1231c83c3bc96d9d33b80e9e6e21f43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f5-4610-46f4-97a4-42ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:57.000Z",
            "modified": "2015-09-30T09:05:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1250b58298c7d496534d5055ba128a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f6-65d8-4a7c-bee9-4364950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:58.000Z",
            "modified": "2015-09-30T09:05:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a140dda035eee21ed3228ba0b8dd0c8d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f6-5cc4-4a38-a3be-439d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:58.000Z",
            "modified": "2015-09-30T09:05:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a14c88cb40430b31c60f3c3e1cf72e59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f6-6a18-4d13-8372-412d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:58.000Z",
            "modified": "2015-09-30T09:05:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1504827b2f4a1c61bd51f8e77dfaa57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f7-4590-467b-b41d-4d1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:59.000Z",
            "modified": "2015-09-30T09:05:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a15647846065d88fa27ee5acefcf1d25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f7-d008-416f-878c-4e8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:59.000Z",
            "modified": "2015-09-30T09:05:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a15dc851122fa730ad48ed0bfa7a462b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f7-c204-48b6-92f9-48bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:59.000Z",
            "modified": "2015-09-30T09:05:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a15e5c0922b4083883e24a662990d6d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f7-bde0-4e4a-b824-431e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:59.000Z",
            "modified": "2015-09-30T09:05:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a182f4b5ffa12c67b922a45923665c20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f7-63f0-455a-a5e0-4b82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:05:59.000Z",
            "modified": "2015-09-30T09:05:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a18b6ebc08b9d83077f8a3e13d55ff23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:05:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f8-e7e0-48ba-b8a4-4ef3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:00.000Z",
            "modified": "2015-09-30T09:06:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1995977408c95ec6e6e2e1770198aaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f8-53fc-4ad0-8dbf-4015950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:00.000Z",
            "modified": "2015-09-30T09:06:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a19d27a406eba2500b0cc1f90273de6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f8-94e8-4dd9-9f6c-4e39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:00.000Z",
            "modified": "2015-09-30T09:06:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1a63f15e4650db314bf477f3e17ab35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f9-1c1c-432c-a794-4b29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:01.000Z",
            "modified": "2015-09-30T09:06:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1a837a3702538a93ae30b5bb3d17c8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f9-26f4-4aea-a3e0-4554950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:01.000Z",
            "modified": "2015-09-30T09:06:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1ac4e336d483ce8744779262fe4aa05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f9-1718-4e0d-9e96-4d92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:01.000Z",
            "modified": "2015-09-30T09:06:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1b582ff888de2be023e472515406921']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f9-8e64-4b53-b820-4eb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:01.000Z",
            "modified": "2015-09-30T09:06:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1b73f64b36f7182bbc355b6654aa981']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5f9-79d8-4730-9e9b-4b6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:01.000Z",
            "modified": "2015-09-30T09:06:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1be5d6fc1af00f8747329906fea2e77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fa-ad2c-462c-9b74-42ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:02.000Z",
            "modified": "2015-09-30T09:06:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1c6c3f7ffba645465ded0b853ea802f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fa-dbe4-4464-a7dd-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:02.000Z",
            "modified": "2015-09-30T09:06:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1d12e501047b16cfdb97d098fc4b52d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fa-6654-491e-afcc-4048950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:02.000Z",
            "modified": "2015-09-30T09:06:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1e78bd1da7db859d681e448c1095307']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fa-0d90-4768-9c2f-4deb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:02.000Z",
            "modified": "2015-09-30T09:06:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a1efb7371c16fe15957378c627d396f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fa-1f0c-4186-b816-44f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:02.000Z",
            "modified": "2015-09-30T09:06:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a21465a6620ae481368ef616ae73d68a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fa-dad8-48fd-9dca-46f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:02.000Z",
            "modified": "2015-09-30T09:06:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2162d7926e52f286be79050f9b18ec8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fb-f8f8-4cbe-b210-4bb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:03.000Z",
            "modified": "2015-09-30T09:06:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a21f702badfc498119ba789095820192']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fb-c4b8-4eaf-83cc-49a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:03.000Z",
            "modified": "2015-09-30T09:06:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a22965a94be67514dc256e4d8918037f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fb-dbe4-4017-901d-41b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:03.000Z",
            "modified": "2015-09-30T09:06:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a22cd5fa4d9ef666ec589a762c430c46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fb-1960-4574-a6d3-471e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:03.000Z",
            "modified": "2015-09-30T09:06:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a232b6a83400207568c0b968de532370']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fb-2370-4e71-8179-422d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:03.000Z",
            "modified": "2015-09-30T09:06:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a23aa6b6408ad888dd3943a3cfe0bdc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fc-8970-43e6-bd15-4487950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:04.000Z",
            "modified": "2015-09-30T09:06:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a23ffa194b68335c88303404a32a3ec4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fc-2938-4ccd-81fd-4adb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:04.000Z",
            "modified": "2015-09-30T09:06:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a24ac0e5c1af45e5f8636a20fdc03aca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fc-e798-449f-a69a-4ee5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:04.000Z",
            "modified": "2015-09-30T09:06:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2519438084a19af61f0c06c2554ac4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fd-4df0-4e0a-9e1b-4a2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:05.000Z",
            "modified": "2015-09-30T09:06:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a261745fded5841b920f84e623deccab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fd-c198-4456-8a73-4e73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:05.000Z",
            "modified": "2015-09-30T09:06:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a26738288464841eea187fc6166d371b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fd-e83c-4648-a2a8-4d1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:05.000Z",
            "modified": "2015-09-30T09:06:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2696e8c264f96f883a87854d0f712ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fe-cbc0-4270-a33f-4b40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:06.000Z",
            "modified": "2015-09-30T09:06:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a26b752bc36c6191f5937593aea79f85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fe-39e8-48b5-b7fc-4b76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:06.000Z",
            "modified": "2015-09-30T09:06:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a27acf23793e4e3156bba6ca8ce688b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5fe-23dc-499d-b463-459d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:06.000Z",
            "modified": "2015-09-30T09:06:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a28274c61aca2278d24b6db275cececf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ff-b1e0-4b30-a573-4f71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:07.000Z",
            "modified": "2015-09-30T09:06:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a282ac6e0dceecbea88bbdff288cdc47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba5ff-e5f0-4108-8469-4dde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:07.000Z",
            "modified": "2015-09-30T09:06:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a286ab5baf131d9161edea02f680848c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba600-899c-45d0-bcef-4c33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:08.000Z",
            "modified": "2015-09-30T09:06:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a28ac2ac225e4f22f1f4a2a4de96166b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba600-28f8-4d08-b213-429c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:08.000Z",
            "modified": "2015-09-30T09:06:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a296fe0bc5b9656a66d0f1295f85c2b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba600-f138-47c8-ac14-4ea1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:08.000Z",
            "modified": "2015-09-30T09:06:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2c320499423cf7fd86db8aeb781a54c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba601-6bd8-47ec-9deb-4c87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:09.000Z",
            "modified": "2015-09-30T09:06:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2c36427eeb6a21b1ab917003daeb992']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba601-8550-473e-8dfd-498a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:09.000Z",
            "modified": "2015-09-30T09:06:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2d1caa712ee3e9a7d2550746ad70a3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba601-5c90-4bb2-8ec6-4d3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:09.000Z",
            "modified": "2015-09-30T09:06:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2d328c9ca2839a8f8376e165364ba70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba602-3c80-4626-b36b-4ff5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:10.000Z",
            "modified": "2015-09-30T09:06:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2dd38ce5f4bf761fe74b402794f5e12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba602-ebc8-4406-b251-4722950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:10.000Z",
            "modified": "2015-09-30T09:06:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2e48cf7f9f6d3b9c0a7764268da820c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba602-e62c-4172-96f4-405a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:10.000Z",
            "modified": "2015-09-30T09:06:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2fae7d5357b33cc625e9450ab52768d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba603-8ffc-4ff9-b382-4d86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:11.000Z",
            "modified": "2015-09-30T09:06:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a2fe0f510813b1657fa9a241ad02debe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba603-4900-4950-b260-4fb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:11.000Z",
            "modified": "2015-09-30T09:06:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a306b5988e3192922146c75327baf133']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba604-cd48-4fe6-8c08-41fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:12.000Z",
            "modified": "2015-09-30T09:06:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a30e68d9fdb8c95d6e56da0b12fe56b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba604-8188-4807-8f55-4b3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:12.000Z",
            "modified": "2015-09-30T09:06:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a316afd7dca410d6e0ee34fdf15439a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba604-2ac0-422c-9246-4174950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:12.000Z",
            "modified": "2015-09-30T09:06:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a31af272b61237ac9bf0e7d7aed5bbb8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba605-4d48-429c-8bce-4b97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:13.000Z",
            "modified": "2015-09-30T09:06:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a341186fed049114cc993d013bf1ea4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba605-b084-4422-8751-4ec8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:13.000Z",
            "modified": "2015-09-30T09:06:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a34708ce571ed0a2a458e151d96b69be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba605-55b0-4d91-9c60-4d6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:13.000Z",
            "modified": "2015-09-30T09:06:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a34cca407bee8be26de943cc6bd35658']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba606-d5ec-4854-ae27-4ddb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:14.000Z",
            "modified": "2015-09-30T09:06:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3537d06c330b13171a34ce949a9772c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba606-e3d8-497e-9289-428e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:14.000Z",
            "modified": "2015-09-30T09:06:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a379d36dc7c729cf1af7df243be8bd6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba606-6a80-4cec-b395-447c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:14.000Z",
            "modified": "2015-09-30T09:06:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a383252b1a2532e7cec2ec8e7185d039']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba607-05d4-4f7a-92f5-44aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:15.000Z",
            "modified": "2015-09-30T09:06:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a38a321108d0bfedea6956d2384c19e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba607-bd50-45b6-9efb-400e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:15.000Z",
            "modified": "2015-09-30T09:06:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3925d9553113b659c4656328abe7d7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba608-0b68-48b7-ada7-4d35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:16.000Z",
            "modified": "2015-09-30T09:06:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3996f74cd8a9622e74cb2ce1230d9c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba608-8970-4fd0-bfa1-4a2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:16.000Z",
            "modified": "2015-09-30T09:06:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a39f8bc8eecbc743a843f2ae59363cbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba608-6d58-41b4-ae56-4159950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:16.000Z",
            "modified": "2015-09-30T09:06:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3a9554d723f03db65fc1b5956c89979']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba609-7250-4c63-bf23-4e1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:17.000Z",
            "modified": "2015-09-30T09:06:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3b750e8b525ecbf55e31a9be6c15c58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba609-3924-4317-b053-4744950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:17.000Z",
            "modified": "2015-09-30T09:06:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3bba8e33f33adef7a319047e7f35f05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba609-54e0-49c2-a482-45af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:17.000Z",
            "modified": "2015-09-30T09:06:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3c20e985b8e83365988d504b9731332']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60a-6160-444a-9cc2-4660950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:18.000Z",
            "modified": "2015-09-30T09:06:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3c472bf330e88795f3e5a791bde781a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60a-a118-448e-bd67-4d4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:18.000Z",
            "modified": "2015-09-30T09:06:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3c78f9423b72df4131555905dc86249']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60a-f770-4a7a-b08d-4788950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:18.000Z",
            "modified": "2015-09-30T09:06:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3ca628223d56f3b03d054a4c4794629']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60b-5eb8-453c-aaee-45b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:19.000Z",
            "modified": "2015-09-30T09:06:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3cb548ea839f76c2ce7b52d877eccf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60b-4ba0-4894-9835-4f85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:19.000Z",
            "modified": "2015-09-30T09:06:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3d521d08048f45cf9c5d9ca282a960b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60c-1f00-4b8b-b0ab-4510950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:20.000Z",
            "modified": "2015-09-30T09:06:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3d847ff264f1394f9fa80ea1b49d5e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60c-e658-48d8-8678-424a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:20.000Z",
            "modified": "2015-09-30T09:06:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3e83bfaa8b20c4c0ba17c1e050c7c2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60c-5f98-434b-9836-4a0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:20.000Z",
            "modified": "2015-09-30T09:06:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3ede46d47d4e49c4031e8a86dbc8640']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60d-0a20-4f71-a599-418d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:21.000Z",
            "modified": "2015-09-30T09:06:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3f0bdfbc2eec2e2fbe8593951b2c9c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60d-ab80-4f8e-98c3-406f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:21.000Z",
            "modified": "2015-09-30T09:06:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3f3b2994984d0b8f7a238185d11783c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60d-a520-429b-96d8-45cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:21.000Z",
            "modified": "2015-09-30T09:06:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a3fced9c093b8102d134d0b1ef2b27f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60e-d0dc-4078-bbb5-4ada950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:22.000Z",
            "modified": "2015-09-30T09:06:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a40284fe03249045003a76eb498e11b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60e-dac4-4597-b2d8-4df9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:22.000Z",
            "modified": "2015-09-30T09:06:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a405a87b14d4921bb45eab5b6d5ae162']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60e-afc8-439e-aeb7-41e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:22.000Z",
            "modified": "2015-09-30T09:06:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a40666c3acf12aef2fb66ff472b8f2b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60f-9644-4c7c-a491-442a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:23.000Z",
            "modified": "2015-09-30T09:06:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a40b1126000d3be780ba337e10902b80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba60f-9218-43f4-9d36-4211950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:23.000Z",
            "modified": "2015-09-30T09:06:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a413a87eb9ff81b1624505bffc90a93d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba610-17fc-4a62-b8f4-430d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:24.000Z",
            "modified": "2015-09-30T09:06:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4161f8da08d3abc4ca654fc7cddd1aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba610-189c-4178-bae6-4404950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:24.000Z",
            "modified": "2015-09-30T09:06:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a41de81f7f4e438f94d1e1548f044460']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba610-6484-4ad0-bc01-4f0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:24.000Z",
            "modified": "2015-09-30T09:06:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a41e3b7c409f3a1c2a2db9197517e2ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba611-7f60-4cf8-89f3-4d22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:25.000Z",
            "modified": "2015-09-30T09:06:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a42465cc576184826a340cc528420946']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba611-7138-465c-a1a5-4e03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:25.000Z",
            "modified": "2015-09-30T09:06:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a42dfeaa6f8a6d0e7c3d753ace5a7de7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba611-c9cc-4d86-853c-40b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:25.000Z",
            "modified": "2015-09-30T09:06:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a43f95c30ee389bee085124bc032e8a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba612-78c4-4656-b3a4-43f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:26.000Z",
            "modified": "2015-09-30T09:06:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a450334188da5d2083180510d7785ccb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba612-bf84-4bfc-bac7-426b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:26.000Z",
            "modified": "2015-09-30T09:06:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a45215f30a06bb2e317c8302bee5b822']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba613-0584-4229-a198-4149950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:27.000Z",
            "modified": "2015-09-30T09:06:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a453e2c22b20667be571baee60b6e754']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba613-5fb0-46f4-801a-41d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:27.000Z",
            "modified": "2015-09-30T09:06:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a45630b050e3e55c7f5fdfafc0f4bfa4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba613-f388-47d7-9b8e-45bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:27.000Z",
            "modified": "2015-09-30T09:06:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a45c8953451cc179a476d8bfea20b9e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba614-40f0-497a-bcee-4969950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:28.000Z",
            "modified": "2015-09-30T09:06:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4638c1197c662ffec0fcb63ec0e834a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba614-9108-4a33-ad5a-4722950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:28.000Z",
            "modified": "2015-09-30T09:06:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a46593a35e996044d82e01dfbd11f03b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba614-2a7c-4701-9f62-47e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:28.000Z",
            "modified": "2015-09-30T09:06:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4794a2f7a9bc8bb16711aa4d011f1d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba615-90a8-4bf4-b902-4088950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:29.000Z",
            "modified": "2015-09-30T09:06:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a487fb9afb3571270e7c52e0eba667a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba615-b0fc-41d5-8db5-4377950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:29.000Z",
            "modified": "2015-09-30T09:06:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a49b75218595a809cff2688ae1cc4c85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba615-8ee0-4b1a-9ff3-4e46950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:29.000Z",
            "modified": "2015-09-30T09:06:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a49b7cf5c787e31e6af7db72fdd98dd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba616-c810-4d44-92b5-46c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:30.000Z",
            "modified": "2015-09-30T09:06:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a49dd0cc44f57d0c62dc563d4499455e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba616-0ff4-4aa5-8c23-42f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:30.000Z",
            "modified": "2015-09-30T09:06:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4a5ab88b33c535c5eb6013b1044feb0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba617-aa54-4ce2-b5a7-443c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:31.000Z",
            "modified": "2015-09-30T09:06:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4b1a888498090530d2377b9b0d40c2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba617-8194-4273-bdf7-476e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:31.000Z",
            "modified": "2015-09-30T09:06:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4bfe3792b7f938d56dfe9efc2529574']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba617-8540-4c5b-8637-4fd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:31.000Z",
            "modified": "2015-09-30T09:06:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4c188e7ef349dedb6f091c822bd753b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba618-c1bc-4d64-89e1-4bc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:32.000Z",
            "modified": "2015-09-30T09:06:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4d4457f5783870be6f7265bfc2f5884']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba618-1cc4-4a82-bfdb-4195950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:32.000Z",
            "modified": "2015-09-30T09:06:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4dee49689b6028886cd0b4785af7f27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba618-c768-4137-8771-4112950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:32.000Z",
            "modified": "2015-09-30T09:06:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4df54ae941ebc8c96ab34fb20b5e22f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba619-0f80-430f-9dbd-4e3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:33.000Z",
            "modified": "2015-09-30T09:06:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4e2f5194d1299af1a4b4b3802f6b55b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba619-06e8-4ab5-b17e-4524950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:33.000Z",
            "modified": "2015-09-30T09:06:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4e34017afb831da122d1cd5df8ba0e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba619-ef14-472e-8d05-4c30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:33.000Z",
            "modified": "2015-09-30T09:06:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4ec5f70e43ef192b8d8fa7cf4f5503a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61a-9ad0-4c73-b60d-4d83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:34.000Z",
            "modified": "2015-09-30T09:06:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a4f950c759af9ccf3d654e799f870ed6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61a-f2a8-4deb-8558-4353950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:34.000Z",
            "modified": "2015-09-30T09:06:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a500d6050de19df8ff41fcff93ac3f0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61b-982c-455e-8418-484a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:35.000Z",
            "modified": "2015-09-30T09:06:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a502e90a4a3c3766646451a085410dfc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61b-7738-4a7c-aac2-4608950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:35.000Z",
            "modified": "2015-09-30T09:06:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a50ca6a4317b69db32fa860897409946']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61b-65a4-4bd8-9455-448f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:35.000Z",
            "modified": "2015-09-30T09:06:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a51511d07bf5fcce34556b0a3345a000']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61c-0958-4292-b46f-435d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:36.000Z",
            "modified": "2015-09-30T09:06:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a51908869c1c255657b944bd8553de4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61c-91d0-4e06-859a-4e89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:36.000Z",
            "modified": "2015-09-30T09:06:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a51c3b38709900ed7dc3c395b86b8d33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61c-6b64-424a-9068-4067950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:36.000Z",
            "modified": "2015-09-30T09:06:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5206d8b6474103dc293c8c327e9c2fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61d-b34c-4262-83b7-484d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:37.000Z",
            "modified": "2015-09-30T09:06:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a524f604cb96ed4fdcc1ae29bfb3630f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61d-38b8-409a-8962-4058950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:37.000Z",
            "modified": "2015-09-30T09:06:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5265a1a2a61cfaf450a6d9491b37637']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61d-3060-42b5-880e-43c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:37.000Z",
            "modified": "2015-09-30T09:06:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5291e4499575fe51853f55af7f75932']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61e-399c-452b-8014-467f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:38.000Z",
            "modified": "2015-09-30T09:06:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a52d45a5106445f63f09b169f208e6ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61e-2e70-4e31-95be-41fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:38.000Z",
            "modified": "2015-09-30T09:06:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a53e0b5f099e3ce911982ebcd3b24385']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61f-87c8-4b8a-b920-4e91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:39.000Z",
            "modified": "2015-09-30T09:06:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a54115cd454d5ef754a6d13b76ac6565']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61f-2b90-4d25-bae7-4be1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:39.000Z",
            "modified": "2015-09-30T09:06:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a55093c7e27e8dbe30803519136278bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba61f-1a60-48cb-be66-4cdc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:39.000Z",
            "modified": "2015-09-30T09:06:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a55d6934937dbcd85b71c4e906332782']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba620-d154-4723-9790-443a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:40.000Z",
            "modified": "2015-09-30T09:06:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a57ef9ded196bedeb8eeb740c6f956e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba620-2804-40a1-ae7b-4541950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:40.000Z",
            "modified": "2015-09-30T09:06:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a58ec5bcdcc4635f05e5538a1982bae0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba620-8ab4-43ca-9c5e-48b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:40.000Z",
            "modified": "2015-09-30T09:06:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a59280211db18ba746eae705d7be1aff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba621-8d04-491c-8d6d-473a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:41.000Z",
            "modified": "2015-09-30T09:06:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5a8b69be617604873f5d3cd2ff8dc13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba621-6ff4-4d82-9c53-4669950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:41.000Z",
            "modified": "2015-09-30T09:06:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5a8ba6dd4ec7607cbaab72afecf92fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba621-aba0-45e4-8643-4ee7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:41.000Z",
            "modified": "2015-09-30T09:06:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5b4c3a37006877565bcf0514390162a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba622-eae0-4d0b-be50-41db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:42.000Z",
            "modified": "2015-09-30T09:06:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5c27a34d95b3ad062ed521509ae728f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba622-b898-4faf-bd83-46b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:42.000Z",
            "modified": "2015-09-30T09:06:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5cad2da941e6d07296fe4da0e0afda8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba623-fb9c-40ed-8c58-4ff5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:43.000Z",
            "modified": "2015-09-30T09:06:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5d78c045df328a180fa1dce8b614a0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba623-f604-40ee-aa30-499d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:43.000Z",
            "modified": "2015-09-30T09:06:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5e23ca01c82609f9a90612355fc89ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba623-032c-4f1c-9f0d-4d6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:43.000Z",
            "modified": "2015-09-30T09:06:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5e592c1a5e692f6b8fa200138516e3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba624-c8bc-4c74-8359-4bb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:44.000Z",
            "modified": "2015-09-30T09:06:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5f03038b40a4fcde86d52a81098320b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba624-5780-43d6-b523-4748950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:44.000Z",
            "modified": "2015-09-30T09:06:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5f4b98eb378c7a06f4a41875baa5e74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba624-eabc-4c6d-ba45-4e33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:44.000Z",
            "modified": "2015-09-30T09:06:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5f6d750b120e7dd8110238f8edaf3a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba625-4f48-4eca-891e-4d25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:45.000Z",
            "modified": "2015-09-30T09:06:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5f8025fb05d8e91613cc3dec36125b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba625-d954-48e6-94e7-4c8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:45.000Z",
            "modified": "2015-09-30T09:06:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a5f853c947f20722484493d2f6721383']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba625-f268-4bb6-9465-4415950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:45.000Z",
            "modified": "2015-09-30T09:06:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6073999b03ec3cf7cb578b00fb89429']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba626-d530-4314-9d0e-4230950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:46.000Z",
            "modified": "2015-09-30T09:06:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a60f0e2a355da86a4baa9485b13f40a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba626-b71c-40b0-96e9-40d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:46.000Z",
            "modified": "2015-09-30T09:06:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6118285107c9a1f233edf9cf9435d3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba627-2814-4108-aaad-46f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:47.000Z",
            "modified": "2015-09-30T09:06:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a61f7bb7886397270127b22a0dadf726']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba627-3304-44a8-af11-4860950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:47.000Z",
            "modified": "2015-09-30T09:06:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a626e6837175aea071cd5843570bf5d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba627-1094-4eb7-a14d-405f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:47.000Z",
            "modified": "2015-09-30T09:06:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6283cc2969e70c2ed052ca9d8e20bb8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba628-b2d4-414a-8728-4d63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:48.000Z",
            "modified": "2015-09-30T09:06:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a629501910ce4703c8abc4d5e20380fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba628-2158-42ca-b30e-4f6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:48.000Z",
            "modified": "2015-09-30T09:06:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a62eb223e0985948868a5096684a32cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba628-f440-4bba-ae6a-4487950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:48.000Z",
            "modified": "2015-09-30T09:06:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a63e722f4be8deb5d2b9acc36f96af48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba629-4468-422f-9a35-4225950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:49.000Z",
            "modified": "2015-09-30T09:06:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6400979454c23671c913dd9bd1f09ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba629-30a0-40a4-8b78-4655950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:49.000Z",
            "modified": "2015-09-30T09:06:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6412d124c8e1b2dd5755be7cd49ca3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba629-8fe8-4d9d-8cd4-4d37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:49.000Z",
            "modified": "2015-09-30T09:06:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a641c7a574c7935d7826553338f831eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62a-fab8-425b-bab1-468b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:50.000Z",
            "modified": "2015-09-30T09:06:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a647c026789e80a8912e7cf4a5b91b51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62a-d724-4454-9eac-4d86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:50.000Z",
            "modified": "2015-09-30T09:06:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a651cc245d568dae79dfbf28bfc71d1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62b-9eb0-4a1a-a743-40f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:51.000Z",
            "modified": "2015-09-30T09:06:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6537c90c96f0488ded84543e00b0590']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62b-10f0-4bca-b2e7-469d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:51.000Z",
            "modified": "2015-09-30T09:06:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a66065fdc81e3b1ec23c4fc9864fb225']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62b-6a04-4f03-b213-454d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:51.000Z",
            "modified": "2015-09-30T09:06:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a667f0739be22bc234473bf24ba6341b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62c-e190-4f67-bfcb-419c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:52.000Z",
            "modified": "2015-09-30T09:06:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a66aa5a3df707702704b8f9fa7e16ef0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62c-cc50-4470-819b-43e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:52.000Z",
            "modified": "2015-09-30T09:06:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a66e8b8a233d8b430c653207e6667eb0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62c-6c7c-4e69-9247-4491950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:52.000Z",
            "modified": "2015-09-30T09:06:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a66fadf656a957c71b6d3beb467f2551']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62d-0410-4c47-aca7-443d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:53.000Z",
            "modified": "2015-09-30T09:06:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6761891707571b69bc81b58bd63fc6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62d-a458-48bc-85a4-41a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:53.000Z",
            "modified": "2015-09-30T09:06:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6a406960caf6ea62f726fd67eba1069']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62e-0d7c-44ca-9d16-4e74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:54.000Z",
            "modified": "2015-09-30T09:06:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6b439e5f6d52a9c655bdff5d55ee6b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62e-ebfc-4725-8ca7-4c62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:54.000Z",
            "modified": "2015-09-30T09:06:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6bf8eeff089df984a4ff2f7e60a2f08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62e-46ac-4902-9e29-4f6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:54.000Z",
            "modified": "2015-09-30T09:06:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6bfb9bb3bbb095b2139b901b6295995']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62f-068c-4037-b092-4529950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:55.000Z",
            "modified": "2015-09-30T09:06:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6cacd5532cf541811bf02edc98b9c38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62f-839c-41af-9dfc-4f8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:55.000Z",
            "modified": "2015-09-30T09:06:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6d94fa7dd1d43a4935b43143d0c16db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba62f-8ac4-4c74-8ae5-4e26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:55.000Z",
            "modified": "2015-09-30T09:06:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6ed95bde9f7062b81b813d40b124e09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba630-ac98-4556-8560-4a37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:56.000Z",
            "modified": "2015-09-30T09:06:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6edb81fae295f4be9704d4e03f5e25b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba630-d8b0-4a9c-b667-4cc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:56.000Z",
            "modified": "2015-09-30T09:06:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a6f119a3e8b448d2842dadb400d4054d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba630-0978-4d84-9ca6-4b0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:56.000Z",
            "modified": "2015-09-30T09:06:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a70acd541aedbcc196146fc5b3ccc3a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba631-a510-40ce-b09a-4a78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:57.000Z",
            "modified": "2015-09-30T09:06:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a70b32426d06f28f29a9a389cb8c748b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba631-c710-4316-adfa-4881950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:57.000Z",
            "modified": "2015-09-30T09:06:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a713c51c106faf47149b8f0b5a610715']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba632-8c04-4a3f-bc42-41a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:58.000Z",
            "modified": "2015-09-30T09:06:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a71942e23b1f92bc6e70bb2fed8fc0da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba632-bb54-4501-9f7e-4de6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:58.000Z",
            "modified": "2015-09-30T09:06:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a72e0451cbd38a66363c423a1be5a067']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba632-9a94-4641-9dbd-4a8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:58.000Z",
            "modified": "2015-09-30T09:06:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a73602c3ade37cb1c7703a82dbf02a91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba633-812c-43d5-bd9b-4e19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:59.000Z",
            "modified": "2015-09-30T09:06:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7621f64c67e8bd2e162cbcc4e7c39ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba633-41d4-4cba-937f-4f6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:06:59.000Z",
            "modified": "2015-09-30T09:06:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a771f3aada02cd3244b38f55b7c09819']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:06:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba634-82d4-480b-a0fa-4ab1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:00.000Z",
            "modified": "2015-09-30T09:07:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a774a31d1cc655ae1235cb50f41ff9d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba634-e958-4575-8d8d-4454950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:00.000Z",
            "modified": "2015-09-30T09:07:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7780806f854d35dd8ccd3cb7832a43e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba634-c810-452e-a08f-4a0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:00.000Z",
            "modified": "2015-09-30T09:07:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a77df040e4b94ddd19ee4f75348a5724']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba635-0c88-4c0c-8562-467c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:01.000Z",
            "modified": "2015-09-30T09:07:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a77fa4897ef7deb76f0d9a9dc5bc12c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba635-d368-4abd-9a2f-4055950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:01.000Z",
            "modified": "2015-09-30T09:07:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7830bc981492f67a0527e64081a5db8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba635-673c-4655-84b7-4345950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:01.000Z",
            "modified": "2015-09-30T09:07:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a78478a0328735b5b330811c1143fbb1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba636-a804-458d-a8bd-42aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:02.000Z",
            "modified": "2015-09-30T09:07:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a789d7ea0866387e62fed3e01acae986']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba636-9d54-4a9e-acd1-4502950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:02.000Z",
            "modified": "2015-09-30T09:07:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a78b60414ba97c1643a16695dd8a98fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba637-4010-49cf-bf70-470d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:03.000Z",
            "modified": "2015-09-30T09:07:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7a3942c51d4743baea48be0d6412500']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba637-73b0-4509-8973-44ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:03.000Z",
            "modified": "2015-09-30T09:07:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7a6577c218bcd7c669aa9b928f5f41b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba637-c998-4fac-bae9-4a56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:03.000Z",
            "modified": "2015-09-30T09:07:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7a73e39585bb65c086a0637636e09c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba638-7fac-4110-94e2-4078950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:04.000Z",
            "modified": "2015-09-30T09:07:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7a88a737a43d919f0576d3f14aafe6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba638-1854-450c-81aa-49ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:04.000Z",
            "modified": "2015-09-30T09:07:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7b53a827d3f96163e9eb176a154db77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba638-a914-4ca0-9f06-4434950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:04.000Z",
            "modified": "2015-09-30T09:07:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7b5a7bd7634a30c4216c3e3d897e5d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba639-37ac-43cc-93d3-4fe8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:05.000Z",
            "modified": "2015-09-30T09:07:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7b6d08036b0fe653ea5e99eee99919e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba639-06cc-41e7-8a2a-42a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:05.000Z",
            "modified": "2015-09-30T09:07:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7b9ae935e6f2b233c971ec68cbf5f78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63a-e198-4bc3-af5a-4845950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:06.000Z",
            "modified": "2015-09-30T09:07:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7ba38a9e7bebbe12e75c73fba71cc11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63a-b4a4-4974-a632-4a7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:06.000Z",
            "modified": "2015-09-30T09:07:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7bec8c4fdf4a6b6a01ae2e1378d3089']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63a-a1e4-4eb0-ab71-4abe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:06.000Z",
            "modified": "2015-09-30T09:07:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7c3ca9defa52ba071db2c0558d22fa7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63b-8b28-4ef3-b17c-4951950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:07.000Z",
            "modified": "2015-09-30T09:07:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7c43e43d51f0621b6b53c08d24324b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63b-bc70-4190-9b74-44d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:07.000Z",
            "modified": "2015-09-30T09:07:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7c7aaead75e768d8836b923cdd85194']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63b-1a28-46d2-8787-4b6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:07.000Z",
            "modified": "2015-09-30T09:07:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7cabe9a859156ca98f29b25c5a04c09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63c-1710-4738-9c2b-42c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:08.000Z",
            "modified": "2015-09-30T09:07:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7cf8e97e76bfeaa30ea2e8afe6f283e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63c-eec0-436d-8166-4125950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:08.000Z",
            "modified": "2015-09-30T09:07:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7d28e60769ed90cfaed607e9d9a55dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63d-12b0-4075-8bdb-48cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:09.000Z",
            "modified": "2015-09-30T09:07:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7d2dac26b8891471d1bb5615f81eecc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63d-9680-43db-8770-43ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:09.000Z",
            "modified": "2015-09-30T09:07:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7e675a8737d336fa67c8afd98c34a2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63d-ac14-4fd1-a1df-4d54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:09.000Z",
            "modified": "2015-09-30T09:07:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7e7d23e9f59dffca50d3d29e1e8006e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63e-6134-4b71-a2bd-4b4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:10.000Z",
            "modified": "2015-09-30T09:07:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7ecbe26f52c0a55dceb47d83d058b39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63e-d1cc-4dd6-93dd-41bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:10.000Z",
            "modified": "2015-09-30T09:07:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7f12ac8d75869eb17280f5c444eef7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63e-57dc-4883-acd2-485d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:10.000Z",
            "modified": "2015-09-30T09:07:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7f16513385069bac2c6b117c243fe02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63f-2f8c-45c0-8f71-421f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:11.000Z",
            "modified": "2015-09-30T09:07:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a7fa27c279b136d397351df9618a15de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba63f-4d20-417c-bd01-403b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:11.000Z",
            "modified": "2015-09-30T09:07:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a805df0f5ad18dcf337ea24b78a1bd96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba640-4f90-4b5c-882b-4384950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:12.000Z",
            "modified": "2015-09-30T09:07:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8270f85ca3e9e243b1c83816a1911e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba640-8e40-4e91-bb95-496d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:12.000Z",
            "modified": "2015-09-30T09:07:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a83c90f4e1ba9d52c49c662a61d464b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba640-2cc4-4a98-848e-4a49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:12.000Z",
            "modified": "2015-09-30T09:07:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a841b80deb4021fe0992346efa376df9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba641-1f60-440b-98b0-473c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:13.000Z",
            "modified": "2015-09-30T09:07:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a84743aff65238fb470080f47a9dee2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba641-9e74-41e4-bd95-4ef0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:13.000Z",
            "modified": "2015-09-30T09:07:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a84bbd97723648d377bb3aec19d90086']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba641-88e0-4e35-ad2c-4bee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:13.000Z",
            "modified": "2015-09-30T09:07:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a85602db748195cc526d033613c5286e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba642-0dcc-4da0-8543-4e38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:14.000Z",
            "modified": "2015-09-30T09:07:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a867a60ca64c2e1369bbac8bead24d16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba642-dd78-4d13-92d0-42f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:14.000Z",
            "modified": "2015-09-30T09:07:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a86b49ac11a91d1335fc8ae7df81b0ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba643-3f18-4e5f-86ff-4dfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:15.000Z",
            "modified": "2015-09-30T09:07:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a86bed61465ef7e6135d87785fa9b26f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba643-2fc4-4376-ac16-40ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:15.000Z",
            "modified": "2015-09-30T09:07:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a86c195e15b7fcf47fa07bbb0e0548cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba643-f3f8-44e7-8c72-4b0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:15.000Z",
            "modified": "2015-09-30T09:07:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a874eb35ee69ecf127875c15c559ef77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba644-c2e4-45d7-80c6-45f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:16.000Z",
            "modified": "2015-09-30T09:07:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a888d0a8ec56e08b124cdbaac5b80c69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba644-4768-4ec9-813f-462b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:16.000Z",
            "modified": "2015-09-30T09:07:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a88901b6d534727a356ecf341035fb00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba644-e234-4a42-a517-41d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:16.000Z",
            "modified": "2015-09-30T09:07:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8a1f0996c3e2555f8f1bb62659b6b34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba645-5f88-4dfe-bbdf-4fb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:17.000Z",
            "modified": "2015-09-30T09:07:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8a5c00fe8f625b06760cb9892f614c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba645-bfd4-4dd6-bcbb-4faf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:17.000Z",
            "modified": "2015-09-30T09:07:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8a75220abd699b4331694fb05fb8c55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba646-64e0-4139-b4db-4a26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:18.000Z",
            "modified": "2015-09-30T09:07:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8aa559cb74e370313064c3c84e242ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba646-0bd4-4b3b-9b8f-4404950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:18.000Z",
            "modified": "2015-09-30T09:07:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8b0ca5d3a4a184fb69096c1f074c329']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba646-e270-4b40-a31b-447b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:18.000Z",
            "modified": "2015-09-30T09:07:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8b454f95cc670cfd6ce5bddaa10e93c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba647-e934-444c-ac15-4ae8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:19.000Z",
            "modified": "2015-09-30T09:07:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8bc8d72b02fce82be1ca480c6f682b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba647-3ac0-45e2-9b40-4b6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:19.000Z",
            "modified": "2015-09-30T09:07:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8c436c49c94da047ec691dc21912a5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba648-98e4-44f0-a88e-4d45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:20.000Z",
            "modified": "2015-09-30T09:07:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8c5ac4b5f972c662cdf915c47a1be6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba648-a2e0-44d6-b3a5-4559950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:20.000Z",
            "modified": "2015-09-30T09:07:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8c78c74624e67be73da5c9340c147dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba648-6240-4c3f-a06e-472a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:20.000Z",
            "modified": "2015-09-30T09:07:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8d093c3f493228ff99e9a57dab8315e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba649-14d0-47c0-97c9-442c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:21.000Z",
            "modified": "2015-09-30T09:07:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8d28e503929ba9ab4dc53b94851b34e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba649-ec80-4131-8426-4859950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:21.000Z",
            "modified": "2015-09-30T09:07:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8d805311c505aff21613e9f9858ecc6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba649-42cc-49d7-85f3-4e50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:21.000Z",
            "modified": "2015-09-30T09:07:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8da6395d08b8338c9ef8c3775280125']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64a-a80c-4521-97ac-4ee7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:22.000Z",
            "modified": "2015-09-30T09:07:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8db5945f9f7a4134af8852bf0ea4129']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64a-5dd4-451f-9096-4c88950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:22.000Z",
            "modified": "2015-09-30T09:07:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8e2662a07cfb10fcef4218cc711c90b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64b-da70-415b-8632-408c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:23.000Z",
            "modified": "2015-09-30T09:07:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8ec12ec7d1f2b829756e3c6b3d8be72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64b-5660-40da-81cb-4021950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:23.000Z",
            "modified": "2015-09-30T09:07:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8ec137a6bc1f713d14027d6d1351bda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64b-f168-498b-ba8e-4456950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:23.000Z",
            "modified": "2015-09-30T09:07:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a8ff033fda41a912d969a6a6c7e69305']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64c-eee8-46c8-9095-4cdf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:24.000Z",
            "modified": "2015-09-30T09:07:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a9033a4d4a9086f32fb8b511280b896a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64c-2270-4cf7-81ae-49b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:24.000Z",
            "modified": "2015-09-30T09:07:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a905dbc85699afa12ab18c655748818c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64c-652c-4900-80f9-429c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:24.000Z",
            "modified": "2015-09-30T09:07:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a90796d1daef998e8f1f280209e17cbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64d-b1c4-4cdf-8a86-46ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:25.000Z",
            "modified": "2015-09-30T09:07:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a925abbd83b6593648558b12dcfbe177']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64d-6158-48ab-9482-4b6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:25.000Z",
            "modified": "2015-09-30T09:07:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a92afe427e4c43ecfd03ce52d36ef33e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64e-3c34-40cb-b03c-4547950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:26.000Z",
            "modified": "2015-09-30T09:07:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a92bc7085d1688764fe98d0eb6ea958a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64e-cfb8-4b3d-804c-40bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:26.000Z",
            "modified": "2015-09-30T09:07:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a92d3dfde2753353519467803d832d50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64e-9004-413d-b647-4e87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:26.000Z",
            "modified": "2015-09-30T09:07:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a93a70621299c693ca10bbf831c44275']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64f-bc04-419c-8b5a-4cf9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:27.000Z",
            "modified": "2015-09-30T09:07:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a94384de1133039b03b76fdc645f3f36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64f-0b38-4ea1-b049-460f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:27.000Z",
            "modified": "2015-09-30T09:07:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a94d29697079a38d943edba7f61cf453']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba64f-8f50-4484-80ae-411a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:27.000Z",
            "modified": "2015-09-30T09:07:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a94ea4ae0756dfa6d789399a659ed0ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba650-e838-48cd-877c-4458950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:28.000Z",
            "modified": "2015-09-30T09:07:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a95e48f5576845f7e2e264d3e8031dc2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba650-7f24-4429-839f-4543950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:28.000Z",
            "modified": "2015-09-30T09:07:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a965fbeea9d6ec316f4d396774e72b35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba651-9914-4bbd-bc45-4a33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:29.000Z",
            "modified": "2015-09-30T09:07:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a967c8ab0fde0b456d3862681b827873']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba651-7928-4537-8bfd-4d02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:29.000Z",
            "modified": "2015-09-30T09:07:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a96c1d1b0a96bdc05528b3f7c3df0015']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba651-17fc-4ac3-acd8-4580950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:29.000Z",
            "modified": "2015-09-30T09:07:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a96cb01240894f73f8525ae3b0b5a7af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba652-6860-421d-a4eb-4f5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:30.000Z",
            "modified": "2015-09-30T09:07:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a96f720a5196053238b508793eec23e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba652-2510-450c-a134-4094950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:30.000Z",
            "modified": "2015-09-30T09:07:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a98124fdf4c59a88638701cd93e132ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba652-f26c-45e5-aeaf-4e35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:30.000Z",
            "modified": "2015-09-30T09:07:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a982a28a472a25e8d945790a38ffc4fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba653-5c14-4d6e-9f68-4cce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:31.000Z",
            "modified": "2015-09-30T09:07:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a98399245b0f0a29304a3989b544b582']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba653-5098-48ca-a06a-48e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:31.000Z",
            "modified": "2015-09-30T09:07:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a984019de6df47ec2ced6d55da5b9eb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba654-86cc-43b9-a61e-4e6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:32.000Z",
            "modified": "2015-09-30T09:07:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a985f120e3b83a65afbe7353e47e2b55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba654-e134-40cb-950d-4946950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:32.000Z",
            "modified": "2015-09-30T09:07:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a98bcc329fcfff3fd5ad246114f1ec46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba654-dc2c-476b-9efa-4ce8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:32.000Z",
            "modified": "2015-09-30T09:07:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a99fd187015f76eb08bcafc522e1114e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba655-07a8-4a3c-b4ff-4339950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:33.000Z",
            "modified": "2015-09-30T09:07:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a9b83f8d75767f389b3e41433a9d6041']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba655-1d98-4417-bf0d-4b51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:33.000Z",
            "modified": "2015-09-30T09:07:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a9c1be65333f34469c50c5a11245a813']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba655-290c-4b0d-93c5-47e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:33.000Z",
            "modified": "2015-09-30T09:07:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a9c6b24fb10b55c446fb986593c4d93e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba656-171c-418f-8356-4367950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:34.000Z",
            "modified": "2015-09-30T09:07:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a9ca329a924c5763836568c52357a26c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba656-f118-4530-b71e-4f15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:34.000Z",
            "modified": "2015-09-30T09:07:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a9dee2933752de1442441587759c8eef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba657-c730-45b6-a309-4330950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:35.000Z",
            "modified": "2015-09-30T09:07:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a9e1a60f77146c77ec17812d5e4e5c10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba657-8864-4011-82c6-44b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:35.000Z",
            "modified": "2015-09-30T09:07:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a9e1e8dd20fb06de45b5585a10831848']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba657-d5d8-409e-ac41-448b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:35.000Z",
            "modified": "2015-09-30T09:07:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'a9f2ccc6c0f030430b393dd119bf0487']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba658-51cc-49a2-9dc4-4edb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:36.000Z",
            "modified": "2015-09-30T09:07:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa021bea707ca7289e441b7c7dfe8a05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba658-288c-4e29-8340-4ddc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:36.000Z",
            "modified": "2015-09-30T09:07:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa02a723da6c27206e83783793534246']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba659-8610-4669-94b1-40e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:37.000Z",
            "modified": "2015-09-30T09:07:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa06f8665ab471c28dfe51f053ba9efa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba659-082c-4326-9395-47e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:37.000Z",
            "modified": "2015-09-30T09:07:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa0a757ad509ac9c55b27e6a119231c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba659-2b2c-40fb-b868-4528950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:37.000Z",
            "modified": "2015-09-30T09:07:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa0b57c818299d863d0e3a3d5b4247f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65a-ea70-4b4e-9d35-42d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:38.000Z",
            "modified": "2015-09-30T09:07:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa34df94982f8ac99449a77186069d73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65a-3294-4a30-9ac1-4d4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:38.000Z",
            "modified": "2015-09-30T09:07:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa383e7aba6f641f086f3bc8435c5bd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65a-8744-44b6-aa86-402c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:38.000Z",
            "modified": "2015-09-30T09:07:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa3ca8106f25b60288ca223c3b7ed27a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65b-3c8c-4047-932a-4f62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:39.000Z",
            "modified": "2015-09-30T09:07:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa4315a8e239727a7aded003f1fa07a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65b-8fa4-48f1-86b5-45d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:39.000Z",
            "modified": "2015-09-30T09:07:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa4c983d3a8064c6fb65a9bcbe8cc99c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65c-3fd4-4209-85d0-486b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:40.000Z",
            "modified": "2015-09-30T09:07:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa4db54402b6a553be440154d07f672b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65c-0428-4a78-8838-41bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:40.000Z",
            "modified": "2015-09-30T09:07:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa4e055a933eeddbb286d05ba69d4411']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65c-8578-48c3-aa5c-44f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:40.000Z",
            "modified": "2015-09-30T09:07:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa73a96a9d73fbd9fc98332f7ed85099']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65d-c294-4b69-b740-4c59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:41.000Z",
            "modified": "2015-09-30T09:07:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aa7e601964fef573253b0a56a88a8ad9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65d-8a58-45c4-a0d9-445e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:41.000Z",
            "modified": "2015-09-30T09:07:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aaa22990ff684a8aafc641f18fb9df88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65d-02a8-4e31-b1f5-46af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:41.000Z",
            "modified": "2015-09-30T09:07:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aaa9dc86a5503f12026f6cf8bc836e70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65e-a888-4a28-8f82-4581950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:42.000Z",
            "modified": "2015-09-30T09:07:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aabc05cc727ca00426d59844fa1f5ebd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65e-67e0-448c-8daf-47bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:42.000Z",
            "modified": "2015-09-30T09:07:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aabd11faea833bcde995aef185930ec6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65f-e8a0-4838-9f44-44c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:43.000Z",
            "modified": "2015-09-30T09:07:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aac403d54ac3beda5d2da153f1111999']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65f-cb20-4b96-aecc-40fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:43.000Z",
            "modified": "2015-09-30T09:07:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aacf051a06f3d8ff658d033c20d0333b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba65f-1128-4caf-9d2e-4594950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:43.000Z",
            "modified": "2015-09-30T09:07:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aad1b62ad3b0cf6b0d5a1b7caf5a41b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba660-04ac-474e-ad45-4502950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:44.000Z",
            "modified": "2015-09-30T09:07:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aadb9ee172d084253ecb5602f7e1d1eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba660-7108-4a2c-9dcf-4e8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:44.000Z",
            "modified": "2015-09-30T09:07:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aadd99dc0ba15d66da6af3c96cfb609c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba661-33d0-4e18-a380-4074950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:45.000Z",
            "modified": "2015-09-30T09:07:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aae0450af60148b1bd4fff8b8062dd63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba661-c6e0-497f-87c6-41a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:45.000Z",
            "modified": "2015-09-30T09:07:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aae7e64ec34d7fbdd45149097cb4f89b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba661-9434-41a6-ad23-43de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:45.000Z",
            "modified": "2015-09-30T09:07:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aae916c3aa453f45305863d8bf24b571']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba662-64d8-4cca-a192-4b41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:46.000Z",
            "modified": "2015-09-30T09:07:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aaf0d9973e4b4079e36e08d563edff06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba662-5228-451b-8192-4a3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:46.000Z",
            "modified": "2015-09-30T09:07:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aaf78f2d443a23e2c61f963330992a7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba662-0300-4792-a76e-46d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:46.000Z",
            "modified": "2015-09-30T09:07:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aafdd6c22090ca5e382480037cef4dc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba663-0e20-4ddc-8562-4508950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:47.000Z",
            "modified": "2015-09-30T09:07:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aafe690cf5971c54f5e50b702be9aa2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba663-b02c-4284-ae22-4540950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:47.000Z",
            "modified": "2015-09-30T09:07:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aafed18072d94c6cf7c3140e375efad1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba664-ec1c-4a89-9f3f-4b94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:48.000Z",
            "modified": "2015-09-30T09:07:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab1a6da4fc3d975825c024685f79ddea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba664-b158-4edd-994a-4d45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:48.000Z",
            "modified": "2015-09-30T09:07:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab1a996920acb369b3e28ab8aeeccd98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba664-8b94-4466-9c99-4700950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:48.000Z",
            "modified": "2015-09-30T09:07:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab226da49cf1498259205bfcad10bd40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba665-f758-4cfe-a633-4ac5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:49.000Z",
            "modified": "2015-09-30T09:07:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab22e3f49d4add15ba8af72c5f36228f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba665-bc64-40f4-934a-4180950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:49.000Z",
            "modified": "2015-09-30T09:07:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab232bb769c2266be8e61657f7caa9f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba665-75f4-4c07-9f8f-443f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:49.000Z",
            "modified": "2015-09-30T09:07:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab2ed7e6bdec26b486164f6142fc3925']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba666-b344-4f22-899e-4a0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:50.000Z",
            "modified": "2015-09-30T09:07:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab36ed5136997f41dec569c1b70be2bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba666-1d74-4ced-ac43-4c0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:50.000Z",
            "modified": "2015-09-30T09:07:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab38ba281f21684ba4555d93ab16c34e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba667-f760-449c-a1ac-4472950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:51.000Z",
            "modified": "2015-09-30T09:07:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab38f3442002ecbb88ca7049906966c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba667-1660-4111-9b40-45f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:51.000Z",
            "modified": "2015-09-30T09:07:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab3ce68f9f58677b09c183b7307803bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba667-9818-4d67-b733-4e43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:51.000Z",
            "modified": "2015-09-30T09:07:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab3f4a83d7cf3fcde3c220af09f87401']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba668-56f0-4f34-9f63-4824950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:52.000Z",
            "modified": "2015-09-30T09:07:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab430902a10be393c06ef33c9dfe2c71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba668-7bfc-4730-8ec1-4c34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:52.000Z",
            "modified": "2015-09-30T09:07:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab50c6512ab3f6a12d84a70ac86793c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba668-bfac-46c2-ba39-40d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:52.000Z",
            "modified": "2015-09-30T09:07:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab620d2958645a1f75c526a0d2542027']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba669-5c64-4d73-b7cf-4167950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:53.000Z",
            "modified": "2015-09-30T09:07:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab70c1028394ccaa904ff84361996068']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba669-5d2c-4934-9288-457b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:53.000Z",
            "modified": "2015-09-30T09:07:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab7224f606f81519c7972246ca02ad93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66a-dfbc-4a4b-93b2-4a68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:54.000Z",
            "modified": "2015-09-30T09:07:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab765ef1aa7e51729c3c761dfa3a6949']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66a-73e0-4f35-8c33-4538950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:54.000Z",
            "modified": "2015-09-30T09:07:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab899db0d8a2acb2893c17ec740a1b26']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66a-23b8-4529-b1cc-4b14950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:54.000Z",
            "modified": "2015-09-30T09:07:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab8c0810ddc8a75df876a8f5e96cdbff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66b-71e4-4f55-beb5-43e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:55.000Z",
            "modified": "2015-09-30T09:07:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab8ca885904308a9637563690af5ec03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66b-1908-4eb6-a69e-4b44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:55.000Z",
            "modified": "2015-09-30T09:07:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab9080fa2a9f38401aac86e207329b80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66c-3564-420f-8d9b-4b06950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:56.000Z",
            "modified": "2015-09-30T09:07:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab92aa9f2be494cc363962059871c61b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66c-ead0-41e4-8eac-4a95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:56.000Z",
            "modified": "2015-09-30T09:07:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab94245817a73f26204f2037a75bb6c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66c-725c-4d4a-9e1b-4ed8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:56.000Z",
            "modified": "2015-09-30T09:07:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ab9a3187bc9922c3a5335760e30e5548']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66d-cd94-4b33-a045-41f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:57.000Z",
            "modified": "2015-09-30T09:07:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aba43e52bd2831c895bb7dc75248587b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66d-731c-4431-9d37-4f04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:57.000Z",
            "modified": "2015-09-30T09:07:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abb662dfe261e164f8c29a0b31cb8610']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66d-ded4-4f35-8686-47c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:57.000Z",
            "modified": "2015-09-30T09:07:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abb76732322bc0085eb7c208b96b6b0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66e-380c-4abc-92c0-4758950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:58.000Z",
            "modified": "2015-09-30T09:07:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abb944b241d46bad1031f0a7b92276f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66e-b18c-46fe-819b-4597950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:58.000Z",
            "modified": "2015-09-30T09:07:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abc5029e141500e29e344e4b03c59135']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66f-a514-4ed3-b4e3-4350950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:59.000Z",
            "modified": "2015-09-30T09:07:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abc5d90e4b537e7ac872eeace54555dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66f-fe14-41b4-94a0-465f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:59.000Z",
            "modified": "2015-09-30T09:07:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abcdadf0a7a8f7a9f9613929ad0a2450']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba66f-c60c-41c9-8122-4020950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:07:59.000Z",
            "modified": "2015-09-30T09:07:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abe0d835551e3eb2e510ee7c59cff034']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:07:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba670-cc30-430a-9103-45f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:00.000Z",
            "modified": "2015-09-30T09:08:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abe1e58221a46cdcf5fad02955f36bcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba670-3e80-4f51-8e93-496c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:00.000Z",
            "modified": "2015-09-30T09:08:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abe7b88bfedbdeb58fe4eccde1763cf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba670-c6bc-44f6-be9b-4fd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:00.000Z",
            "modified": "2015-09-30T09:08:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abf0af179052fb46edcac3c9f1da7d25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba671-1ac8-407d-b8f7-4c26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:01.000Z",
            "modified": "2015-09-30T09:08:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'abf7b2b4dd75ee36375190bdb848311f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba671-0534-4748-9c95-4456950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:01.000Z",
            "modified": "2015-09-30T09:08:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac0ec98f4136ac2be6bbfe3f2896d654']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba672-b950-4f58-986e-4bf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:02.000Z",
            "modified": "2015-09-30T09:08:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac1964bf4851e86f2182d2b369157cda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba672-91d4-47ae-b364-4adb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:02.000Z",
            "modified": "2015-09-30T09:08:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac30f00eb7d7b836a02a74d9dff7baf4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba672-14b0-48b8-8725-4da8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:02.000Z",
            "modified": "2015-09-30T09:08:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac50436c49eac265c25bc74fa2a975ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba673-7624-4bab-b818-440c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:03.000Z",
            "modified": "2015-09-30T09:08:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac58419385464e97d0b300d4ed671bb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba673-7f48-414f-a8c6-4b67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:03.000Z",
            "modified": "2015-09-30T09:08:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac58decd0d0eaeba5940173f5f0aa537']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba673-6338-4a65-a061-4d24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:03.000Z",
            "modified": "2015-09-30T09:08:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac5b8ab2b636d0a434cfa62590bb7954']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba674-a240-4001-991e-4e1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:04.000Z",
            "modified": "2015-09-30T09:08:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac5fe44f876bcd7583176a7f9080e752']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba674-ca10-4fcb-820b-4e3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:04.000Z",
            "modified": "2015-09-30T09:08:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac64cadf749bb19b2a4e01bf49e01fec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba675-bb9c-4413-b4a4-444d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:05.000Z",
            "modified": "2015-09-30T09:08:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac6d819ff9f47a9498ba5b849ca73a48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba675-816c-478b-b409-4c23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:05.000Z",
            "modified": "2015-09-30T09:08:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac7abed0fdfa75a709c9fb460740891a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba675-f06c-47de-afae-4f8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:05.000Z",
            "modified": "2015-09-30T09:08:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac7b28e6711a14110235de87c7ba4fc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba676-c4c4-4a0c-b120-4315950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:06.000Z",
            "modified": "2015-09-30T09:08:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac7fc1838b226a9932578aee6e62ca06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba676-67e8-4302-8e7a-4848950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:06.000Z",
            "modified": "2015-09-30T09:08:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac889b2d3775730d542de2d8ef491a2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba676-e908-4386-86b1-4783950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:06.000Z",
            "modified": "2015-09-30T09:08:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac8b36166f0d8889c5b93df1e3b841cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba677-bb2c-47b0-bea7-49ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:07.000Z",
            "modified": "2015-09-30T09:08:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ac9325b5364622828ce49c269945b42c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba677-d9b0-4961-8f2f-4312950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:07.000Z",
            "modified": "2015-09-30T09:08:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ace32b93916fd8429f92305381231948']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba678-9858-4701-b8c7-413f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:08.000Z",
            "modified": "2015-09-30T09:08:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ace74772113462105a4076604427d265']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba678-87ac-47bd-b5ae-410d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:08.000Z",
            "modified": "2015-09-30T09:08:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ace987214aec3e0a458bef3f4a351246']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba678-995c-4cc6-8c37-4513950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:08.000Z",
            "modified": "2015-09-30T09:08:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aced2c91ea5038b25f2e58f497942153']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba679-1fb0-4bb3-a5dd-4b5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:09.000Z",
            "modified": "2015-09-30T09:08:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'acf5a48f38d078745d436b5d86fd88a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba679-1050-4a3f-9d83-4e93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:09.000Z",
            "modified": "2015-09-30T09:08:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'acfa72a4933fa446dcf0f264be5548df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba679-e688-4389-a150-4330950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:09.000Z",
            "modified": "2015-09-30T09:08:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad0c798bb1661524e6f02ec9a738b97b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67a-886c-4860-8b32-481b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:10.000Z",
            "modified": "2015-09-30T09:08:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad1352f35f0fe8f566114b2d2bf1e108']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67a-1d7c-41aa-a8bc-4c43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:10.000Z",
            "modified": "2015-09-30T09:08:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad19a9788a58a350e2494bc8875306d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67b-f324-43b5-abc7-4655950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:11.000Z",
            "modified": "2015-09-30T09:08:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad1a719eb3f381e29959e32725931b74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67b-4f58-4d39-b7df-4a5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:11.000Z",
            "modified": "2015-09-30T09:08:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad26b37ca7e598686fdf5eddf705f7fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67b-8014-4dc3-96af-4a26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:11.000Z",
            "modified": "2015-09-30T09:08:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad3d3858bf5c8533b7fd17feec03d18e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67c-08b4-453a-b806-4552950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:12.000Z",
            "modified": "2015-09-30T09:08:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad40c1cd4819deba41cb09b81a6fc6d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67c-3670-423b-97f8-4366950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:12.000Z",
            "modified": "2015-09-30T09:08:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad47790d7c7b4271fc367eebe19068a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67d-a0f8-4fff-b48e-43b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:13.000Z",
            "modified": "2015-09-30T09:08:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad4928160307c7029dab60cfbe43c3f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67d-28e4-4b37-839f-469f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:13.000Z",
            "modified": "2015-09-30T09:08:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad53af722300961314e255f94181bfc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67d-6208-44ef-bd56-4a43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:13.000Z",
            "modified": "2015-09-30T09:08:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad5ab885a958791fa10fa88f5439fce2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67e-7f74-43d6-b194-4aff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:14.000Z",
            "modified": "2015-09-30T09:08:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad719042a88361d4b8689fa5a4ed9749']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67e-a850-4d5b-b892-470b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:14.000Z",
            "modified": "2015-09-30T09:08:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad7739cdb19f3e0379b91beb31206ca8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67e-28b0-425d-be71-478e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:14.000Z",
            "modified": "2015-09-30T09:08:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad7bf23e21ccc5d311142ebf7f09caea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67f-cce8-4638-a0c6-4171950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:15.000Z",
            "modified": "2015-09-30T09:08:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad7c9fcee7041e4cf9632c202b006b27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba67f-94c4-4b1e-ae18-4cb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:15.000Z",
            "modified": "2015-09-30T09:08:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad7f350e24859a074d108dd747fa30a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba680-f63c-4e0c-ae19-4952950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:16.000Z",
            "modified": "2015-09-30T09:08:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad808984344dbdf46b77f7a650673f1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba680-8e40-4db9-8700-48ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:16.000Z",
            "modified": "2015-09-30T09:08:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad810a7e5626cf1b7585115b0c2de0e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba680-7860-430d-9a6a-4ba3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:16.000Z",
            "modified": "2015-09-30T09:08:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad8bca595e4226f4c0085315f216e4f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba681-8f38-49ef-a775-4861950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:17.000Z",
            "modified": "2015-09-30T09:08:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad9727146ac0c574bea6d2ecc9e7d537']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba681-bc88-4720-ae2f-4cbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:17.000Z",
            "modified": "2015-09-30T09:08:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ad9b9ca51ac6b78c0bffb20b9bb04c18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba681-87b4-4052-91f7-4e7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:17.000Z",
            "modified": "2015-09-30T09:08:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ada9da93eb15a0d98c90e5d46d14fef3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba682-ee84-453c-b011-4956950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:18.000Z",
            "modified": "2015-09-30T09:08:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adaa4a05989f9c8164fe801045615552']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba682-a0d0-42f7-9e65-4458950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:18.000Z",
            "modified": "2015-09-30T09:08:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adae629fcd2d7bc5e71c28661cad5174']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba683-85cc-4006-bdad-4f0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:19.000Z",
            "modified": "2015-09-30T09:08:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adb054ee4a85b947d3e48d0374e296a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba683-8cdc-478e-a06e-43b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:19.000Z",
            "modified": "2015-09-30T09:08:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adb366f67036f63e0910f39289ed3ead']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba683-a48c-4f2a-b0de-4067950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:19.000Z",
            "modified": "2015-09-30T09:08:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adb58d4431eafd548bb4500fc45fb581']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba684-b65c-4271-abbb-4546950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:20.000Z",
            "modified": "2015-09-30T09:08:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adbf95c37ae076f13301f36fd9731e02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba684-7594-4c92-8be0-4ca9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:20.000Z",
            "modified": "2015-09-30T09:08:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adc720dfafd667a719309ac4fe0e1fcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba684-0254-48d9-8088-45a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:20.000Z",
            "modified": "2015-09-30T09:08:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'add03c3a3f2d0b2ccf51d3c54355475f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba685-4968-4458-9bf7-46c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:21.000Z",
            "modified": "2015-09-30T09:08:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'add0e1fedeee366c16c21b3d14058ae6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba685-761c-48bf-b011-4134950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:21.000Z",
            "modified": "2015-09-30T09:08:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'add8006fe2de7aa22f6c389389b820f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba686-173c-46c3-9978-4d1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:22.000Z",
            "modified": "2015-09-30T09:08:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ade6835f3c93717aff50c9b4a80009a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba686-e508-43ec-9b03-43c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:22.000Z",
            "modified": "2015-09-30T09:08:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ade9fd676ea734652aa52439924a5edf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba686-f1bc-4c6c-ac95-4d28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:22.000Z",
            "modified": "2015-09-30T09:08:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adef9076b6f33efa51f39b225831e8a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba687-944c-4d85-8bb1-4732950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:23.000Z",
            "modified": "2015-09-30T09:08:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adf56b912af3cf8bb11b136020eab093']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba687-ed80-474f-a7ac-4e16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:23.000Z",
            "modified": "2015-09-30T09:08:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'adf9dd905124f288ee9c3891e1b68f3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba687-be6c-4331-a8c4-4557950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:23.000Z",
            "modified": "2015-09-30T09:08:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae10cd8b4cb6a09099b25743e6e8f264']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba688-6cec-4a14-8d6e-4f3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:24.000Z",
            "modified": "2015-09-30T09:08:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae25e01bd06ca231d772ed59d3bec393']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba688-83e8-40e3-86f2-497b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:24.000Z",
            "modified": "2015-09-30T09:08:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae286f7fb4be0fda0c7b291d91f7262e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba689-0670-4437-894b-47a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:25.000Z",
            "modified": "2015-09-30T09:08:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae4669630ce38af847d011cc28b373a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba689-0eec-4590-a908-4ab0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:25.000Z",
            "modified": "2015-09-30T09:08:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae4aababf326c560d51c94fbc9bd898b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba689-cdb8-49fe-81b9-4dbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:25.000Z",
            "modified": "2015-09-30T09:08:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae4f779b8d2281d2d50585432501e10c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68a-979c-4338-b225-480e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:26.000Z",
            "modified": "2015-09-30T09:08:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae5963a91661223d264267e4c9ce2226']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68a-34f8-4181-a82b-4f36950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:26.000Z",
            "modified": "2015-09-30T09:08:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae67a98724a7c686f22de1851f8a13de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68a-1664-4523-a466-4236950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:26.000Z",
            "modified": "2015-09-30T09:08:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae686a4521b75e62725bcd5a4e016e7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68b-07a0-4c18-8d70-4468950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:27.000Z",
            "modified": "2015-09-30T09:08:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae6a4e48196982645c7fcf68b943ba22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68b-6dd0-4e3e-9e84-4f3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:27.000Z",
            "modified": "2015-09-30T09:08:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae6c6c799aae48dd40bf611b7c967a5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68c-67f8-4e0e-8764-4cf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:28.000Z",
            "modified": "2015-09-30T09:08:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae73309db9bd02d08071e7f29b3f5562']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68c-397c-472d-92d1-409b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:28.000Z",
            "modified": "2015-09-30T09:08:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae7bdf5a3eb4045fd89bd2c9b01bb653']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68c-d3f0-4565-8550-4310950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:28.000Z",
            "modified": "2015-09-30T09:08:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae82d7d57fcebf775444ddafde306b87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68d-c2f4-40f2-8023-403c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:29.000Z",
            "modified": "2015-09-30T09:08:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae90621d37dfa9e279a7bf709a93337a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68d-5b28-48fb-adc5-4006950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:29.000Z",
            "modified": "2015-09-30T09:08:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ae91eb7768ab8ad3c2216acf0cefbd38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68e-4bfc-4de3-9820-4125950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:30.000Z",
            "modified": "2015-09-30T09:08:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aea676ca455ae6daf5d3eef412600438']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68e-9068-4d11-82e6-4567950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:30.000Z",
            "modified": "2015-09-30T09:08:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aead3aecb2f823a50eb16510665c45ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68e-37bc-4e42-9c39-4c84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:30.000Z",
            "modified": "2015-09-30T09:08:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aeb22d3ac6eea7b1f98f9e0d72d143e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68f-57dc-48ff-a0e6-492c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:31.000Z",
            "modified": "2015-09-30T09:08:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aec99d53916bf62e2e155b6e51a279bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68f-eaa4-4c46-bbba-436a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:31.000Z",
            "modified": "2015-09-30T09:08:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aece6713f41758c36be5b120abd98a4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba68f-7428-43a8-8038-4bdf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:31.000Z",
            "modified": "2015-09-30T09:08:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aed0b7781817d35d88c9144cd8bd29fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba690-a724-46b8-864c-419c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:32.000Z",
            "modified": "2015-09-30T09:08:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aed30f79aded231571b36c95f74fe8e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba690-618c-42fd-9ad1-4bae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:32.000Z",
            "modified": "2015-09-30T09:08:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aedb7e9c1bb9f59eed5ca40f66f6b336']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba691-a9dc-4263-a9fb-4cad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:33.000Z",
            "modified": "2015-09-30T09:08:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aee1ab2c65e291981b9cca78102b428f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba691-ead8-4564-946a-4b4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:33.000Z",
            "modified": "2015-09-30T09:08:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aeeb7be469c7087731a2a79f3d5ca98e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba691-1e4c-465e-a838-491d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:33.000Z",
            "modified": "2015-09-30T09:08:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aeecd8fdb8046bd7997604b0fb6e33a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba692-f3a4-473d-a2a8-4232950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:34.000Z",
            "modified": "2015-09-30T09:08:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aefd1e543c9794267ee01fe4f34b68b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba692-8fa4-4a83-8501-4b86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:34.000Z",
            "modified": "2015-09-30T09:08:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aefd86415bdf5ad7bb46773e7091d6c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba692-9108-4805-a9ca-4f50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:34.000Z",
            "modified": "2015-09-30T09:08:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af006768db880a9ccc7d43750c745a30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba693-52d4-41f9-979e-4a45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:35.000Z",
            "modified": "2015-09-30T09:08:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af01be58d30344a6d2fcc639dcf7f9bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba693-ff7c-4b36-85d3-488e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:35.000Z",
            "modified": "2015-09-30T09:08:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af0aed15b5b8cd49b0a08c73c377c7c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba694-e424-4ff0-af5f-41cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:36.000Z",
            "modified": "2015-09-30T09:08:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af0c1c7751547e6493564f0bc40cc79c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba694-2ab8-4132-bb07-489f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:36.000Z",
            "modified": "2015-09-30T09:08:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af1e067b4151c4f9671d60b6cfd4bf34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba694-4ea0-42e5-b091-4b15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:36.000Z",
            "modified": "2015-09-30T09:08:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af2e5c41555247fccb6f13794af407c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba695-e6cc-4743-ad95-40cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:37.000Z",
            "modified": "2015-09-30T09:08:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af2ee789ae0a24942d47da1b3aa60963']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba695-5128-4af8-b325-4651950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:37.000Z",
            "modified": "2015-09-30T09:08:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af347ebba13cbdf6d41591aec73f2dc4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba695-a664-4ba1-9368-47b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:37.000Z",
            "modified": "2015-09-30T09:08:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af36cc338f7cc8c499b07e8e4b00e99c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba696-4d88-4c4b-b527-4b57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:38.000Z",
            "modified": "2015-09-30T09:08:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af40d8945ab034f0f4c96eb7662b3c42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba696-3ce4-4caa-abbd-40b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:38.000Z",
            "modified": "2015-09-30T09:08:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af4a4e87d430fcef93ce34d70a549ea6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba697-f4ac-4831-acdb-4c32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:39.000Z",
            "modified": "2015-09-30T09:08:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af555460279915e9c5fdccf63772cc9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba697-e894-40a2-a2c3-49b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:39.000Z",
            "modified": "2015-09-30T09:08:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af6b650f2b8058a7468c242f6defb04a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba697-f5f4-4770-87f7-4b3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:39.000Z",
            "modified": "2015-09-30T09:08:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af74661b6cbbfb9fb76e78070f94d832']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba698-8c6c-40b0-b55d-4ce6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:40.000Z",
            "modified": "2015-09-30T09:08:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af76bd50a8501950ab93506ed9b45881']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba698-4f54-40b8-adf1-4a21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:40.000Z",
            "modified": "2015-09-30T09:08:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af78725b3505a77fca9e22cebecc4cfd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba699-1cc4-4195-9b5c-4d3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:41.000Z",
            "modified": "2015-09-30T09:08:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af92e536b1256666f73e6db3679c8be5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba699-9de4-467d-b65a-43bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:41.000Z",
            "modified": "2015-09-30T09:08:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af93d4bc2c00e7fb9c72a5e9d42daeef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba699-4fb0-4bf9-a891-464b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:41.000Z",
            "modified": "2015-09-30T09:08:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af97240b29391fa3b19fa472cd121ce5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69a-d674-41c8-be5a-4f5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:42.000Z",
            "modified": "2015-09-30T09:08:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af97a21f462800ddab7987c511aca25b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69a-3e8c-4d55-989a-404d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:42.000Z",
            "modified": "2015-09-30T09:08:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af981c29d0c898194c755c5dc491ab92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69a-1708-4f1b-a734-415c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:42.000Z",
            "modified": "2015-09-30T09:08:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'af98e2a24872220500a51a134a3364bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69b-1c5c-432a-8948-4e39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:43.000Z",
            "modified": "2015-09-30T09:08:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'afa000e2965af188fd8d3e58f4705b98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69b-c8b0-4edf-81e5-43d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:43.000Z",
            "modified": "2015-09-30T09:08:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'afadc0c96d4e04175b48c9d90a884fd0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69c-a4cc-4cf5-b114-4526950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:44.000Z",
            "modified": "2015-09-30T09:08:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'afc4cfef6c90a8e5c7e14459d310ddba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69c-050c-4dff-b6c9-4de8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:44.000Z",
            "modified": "2015-09-30T09:08:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'afce3eaa96155304cff74bf6e2daa63e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69c-de38-4a18-9f2c-4912950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:44.000Z",
            "modified": "2015-09-30T09:08:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'afe0764d86ebd5e9c0f7558d5125fb00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69d-f030-42c4-a858-4b4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:45.000Z",
            "modified": "2015-09-30T09:08:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'afe2ecdafabce8fbcc6b67fb052d351e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69d-9164-47ce-b50e-4f4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:45.000Z",
            "modified": "2015-09-30T09:08:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'afe32e0121ac62e6e3afa4c394f29dbd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69e-b2bc-494c-bb98-4225950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:46.000Z",
            "modified": "2015-09-30T09:08:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'afe97167951dbaa1ab208694117dd17d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69e-d318-4878-94ab-4c85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:46.000Z",
            "modified": "2015-09-30T09:08:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'aff79932d59547ac1b5341d7d31d5b48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69e-96e4-49f3-98c7-4975950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:46.000Z",
            "modified": "2015-09-30T09:08:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'affaa4a6d8e30522e21e010d9d8ca710']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69f-aa10-462c-8fae-4d3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:47.000Z",
            "modified": "2015-09-30T09:08:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'afff260ed396f60e8f96d8d9c7d048c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69f-8714-4bb1-8d3e-4be6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:47.000Z",
            "modified": "2015-09-30T09:08:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b008523b27f131e1faefb1c69a9e78b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba69f-bb98-450d-9a8d-429f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:47.000Z",
            "modified": "2015-09-30T09:08:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b01734e27a23abacdb8515aeadaa8676']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a0-afe0-4ee0-8fdb-48b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:48.000Z",
            "modified": "2015-09-30T09:08:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b01fdbda61e3e7532fa73817d1b98d20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a0-d520-46fa-a5cc-4f6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:48.000Z",
            "modified": "2015-09-30T09:08:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0263b8304fadf0845e7c0f528bf69ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a1-2cb4-49ff-8be7-4a73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:49.000Z",
            "modified": "2015-09-30T09:08:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b034c30fb76128ccbf2aca77452f09e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a1-38a4-42de-84e9-4520950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:49.000Z",
            "modified": "2015-09-30T09:08:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b03b21a8715097efab2f82514d249b98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a1-7bdc-487a-9fc8-4e94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:49.000Z",
            "modified": "2015-09-30T09:08:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b047d65353709dd87363f5c01975813d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a2-d884-449e-b456-41a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:50.000Z",
            "modified": "2015-09-30T09:08:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b04ad42c8410458ba613d83816639771']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a2-0514-4d09-ae45-49b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:50.000Z",
            "modified": "2015-09-30T09:08:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b05ba3be6491b2e98ae0fb566daee9f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a3-aa68-4fc7-8c58-4746950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:51.000Z",
            "modified": "2015-09-30T09:08:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b05f18cab7395b35b8008f13c580c59f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a3-0574-4983-8727-4e5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:51.000Z",
            "modified": "2015-09-30T09:08:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b066990c03ad780878bd2b1635fa3594']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a3-8b20-4805-a593-4217950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:51.000Z",
            "modified": "2015-09-30T09:08:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0671e972d0b9c9402f7c0bb163c5b8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a4-b364-45a8-a35f-46c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:52.000Z",
            "modified": "2015-09-30T09:08:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b06a2e3349d5fb3146601d3fa193241e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a4-647c-4535-a34d-4368950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:52.000Z",
            "modified": "2015-09-30T09:08:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b06ba99280503f88be508a980466019c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a4-c55c-42fb-81cc-4c4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:52.000Z",
            "modified": "2015-09-30T09:08:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b08dc125f1590c81d38741f88bc7891c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a5-39cc-47d4-855c-437a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:53.000Z",
            "modified": "2015-09-30T09:08:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0a84a72c17710ddf35f4d5f49a85895']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a5-85a8-437d-94be-43bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:53.000Z",
            "modified": "2015-09-30T09:08:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0a979bc8ef3cec3c74ef2eeabb63b28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a6-5838-427c-84e8-48cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:54.000Z",
            "modified": "2015-09-30T09:08:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0aace8821eed339a1b625658ad380cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a6-c0e8-4075-9dd6-4287950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:54.000Z",
            "modified": "2015-09-30T09:08:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0adb7911b583c2b37c61068972acc01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a6-aa78-4386-9c0a-4645950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:54.000Z",
            "modified": "2015-09-30T09:08:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0b143de6e6b48c3b520c1edd3ad547d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a7-f344-459c-9f31-436a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:55.000Z",
            "modified": "2015-09-30T09:08:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0b48cf5ae8feadf6bf9820a549ac185']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a7-8924-4f35-be2e-4d70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:55.000Z",
            "modified": "2015-09-30T09:08:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0b6874a4fb92fceb9b3617c61739e32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a7-8d8c-45cd-99ea-46e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:55.000Z",
            "modified": "2015-09-30T09:08:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0c7b9f4453d2c16646e56296066fe7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a8-8814-4ddc-84f3-4bed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:56.000Z",
            "modified": "2015-09-30T09:08:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b0f52909d12c3e50e312ae73ba09dfdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a8-bc4c-4945-8334-473f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:56.000Z",
            "modified": "2015-09-30T09:08:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b105eea832d1d848658fecab6446da3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a9-0b48-442c-a5c3-4dea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:57.000Z",
            "modified": "2015-09-30T09:08:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b11b721738b3fe3c29ea259083ae2cb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a9-b67c-485a-8a1c-41b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:57.000Z",
            "modified": "2015-09-30T09:08:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b123492916b04043f5da860f00f3cf0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6a9-9058-4dd7-bdc5-43a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:57.000Z",
            "modified": "2015-09-30T09:08:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b12e07d40750b9b5e5ec22393315f560']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6aa-0fcc-413f-90a8-491f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:58.000Z",
            "modified": "2015-09-30T09:08:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b12e9eb0a730e1ea8d1d5adc226877db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6aa-ef3c-46de-b139-48c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:58.000Z",
            "modified": "2015-09-30T09:08:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b12f10741d93c5bce25f2d100c902398']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6aa-7bf8-469e-a20d-41ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:58.000Z",
            "modified": "2015-09-30T09:08:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b12facfbb19c9704970e30828bcd37b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ab-f970-4d49-b0a9-4c48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:59.000Z",
            "modified": "2015-09-30T09:08:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b138b111eb57ddbb4fb253435eb23f52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ab-cfd0-4d9a-9fad-44a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:08:59.000Z",
            "modified": "2015-09-30T09:08:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b14e3ea855e37229883cfc11e0e6fee4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:08:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ac-a1ac-4cd9-8cda-4790950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:00.000Z",
            "modified": "2015-09-30T09:09:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b156034ca90840831c3b23973bfc4d85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ac-c840-4308-b4f5-427b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:00.000Z",
            "modified": "2015-09-30T09:09:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b15de4a663796e9171f68c0e01c5a252']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ac-4540-44ae-af1b-4387950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:00.000Z",
            "modified": "2015-09-30T09:09:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1754c006f9a7990e82fcac55e7aec3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ad-d6b8-459c-ad4c-428c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:01.000Z",
            "modified": "2015-09-30T09:09:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1786a3e98382c3938535868dcc9d1cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ad-e7a4-4c11-9060-4048950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:01.000Z",
            "modified": "2015-09-30T09:09:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b17f69c4a6b8ec730376ae244688965b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ae-78f4-4004-b646-4693950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:02.000Z",
            "modified": "2015-09-30T09:09:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1874f8718e7db629cc0a5d55bd1d460']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ae-e780-45e1-9683-473a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:02.000Z",
            "modified": "2015-09-30T09:09:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b18a1c4973334fad1bc709dc460a0fe0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ae-7304-40d4-9330-4482950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:02.000Z",
            "modified": "2015-09-30T09:09:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b18d78c75fa451201639d9760fb4ecf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6af-94c4-405f-8028-4083950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:03.000Z",
            "modified": "2015-09-30T09:09:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b193c4a5e9a485e8891c2750405e0010']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6af-4e38-4cc6-9dd8-4442950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:03.000Z",
            "modified": "2015-09-30T09:09:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b19b6b9c0e9006050f6d847a176adce3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6af-a9ec-40f5-9577-4a1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:03.000Z",
            "modified": "2015-09-30T09:09:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1a0ab2a4b555852349e543716eef9e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b0-24f0-4e28-b0af-43fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:04.000Z",
            "modified": "2015-09-30T09:09:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1ac08f87580999af02433ae004b15eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b0-0744-4f18-86fd-4f5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:04.000Z",
            "modified": "2015-09-30T09:09:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1b786d7e8831686de219ed967f1e741']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b1-c4dc-4099-a32a-40f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:05.000Z",
            "modified": "2015-09-30T09:09:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1c31bb75a4317056c71c25074d4ada8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b1-6e2c-459c-bf3d-4155950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:05.000Z",
            "modified": "2015-09-30T09:09:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1c3f0124ee06599dcbf80158b74c257']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b1-67f8-4f2b-bbaf-497a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:05.000Z",
            "modified": "2015-09-30T09:09:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1cff22e6432252cc4b000f0a426b467']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b2-9228-43e5-81c9-4be9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:06.000Z",
            "modified": "2015-09-30T09:09:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1dbaf0eba9a646c9c6ce59d3342e845']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b2-bf40-4283-a75d-48fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:06.000Z",
            "modified": "2015-09-30T09:09:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1e4e6bd59251dc6df1d17e45f0bb200']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b3-430c-45b1-8423-400c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:06.000Z",
            "modified": "2015-09-30T09:09:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1f82cb6b095a5c9b8843106094ec2b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b3-940c-475e-aeaf-46cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:07.000Z",
            "modified": "2015-09-30T09:09:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b1fdc95229d052d135127085223ef1d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b3-d114-4235-9a8f-4da7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:07.000Z",
            "modified": "2015-09-30T09:09:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2002c01b6baef7113355b7d6d089e78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b4-3214-4f84-adb2-4348950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:08.000Z",
            "modified": "2015-09-30T09:09:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b20a55e03a239f3f4e89d148f6ce76ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b4-d11c-466a-96a3-4d37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:08.000Z",
            "modified": "2015-09-30T09:09:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2141adeb94a99799816cc1faed1b8b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b4-cdb4-49b7-9f80-4b07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:08.000Z",
            "modified": "2015-09-30T09:09:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b217a9474a88dbff8ad12692b8632e23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b5-bba0-4ef0-86e5-49e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:09.000Z",
            "modified": "2015-09-30T09:09:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b21d53abc3ac98787bc439fbbdc56941']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b5-0e70-4054-b2c9-42fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:09.000Z",
            "modified": "2015-09-30T09:09:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b234bfb1e1e63a66ec9c15a0168847cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b6-1bf8-4ed6-b10d-4296950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:10.000Z",
            "modified": "2015-09-30T09:09:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b235422a1e37dc25b5eac3ddb2416f7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b6-a05c-450b-9d98-4ae9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:10.000Z",
            "modified": "2015-09-30T09:09:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2395ff954dd8bdee96364eb39dda720']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b6-d058-4d84-b004-437c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:10.000Z",
            "modified": "2015-09-30T09:09:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2397b47ce2fbce09a5ae2e986602322']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b7-2790-4dc1-b3b0-4e7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:11.000Z",
            "modified": "2015-09-30T09:09:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b240c031179d61100064fe95e2e0605a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b7-7ee0-480d-9fea-4e7b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:11.000Z",
            "modified": "2015-09-30T09:09:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b246ae9358cf59b45947321147ba7d68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b7-38e8-4b41-9305-42cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:11.000Z",
            "modified": "2015-09-30T09:09:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b24b28dfb27408bb94f07614de60d947']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b8-d62c-469d-80c7-482f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:12.000Z",
            "modified": "2015-09-30T09:09:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b24cf58523b736a1ba02e039d6cf8dc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b8-236c-456e-8442-4424950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:12.000Z",
            "modified": "2015-09-30T09:09:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2545f30d41a902e8b764fe49f51d712']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b9-f7fc-4b7f-97a3-4d74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:13.000Z",
            "modified": "2015-09-30T09:09:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b25cfb469dbf2066f62856f4f04078c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b9-bbf8-4b4b-871e-40ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:13.000Z",
            "modified": "2015-09-30T09:09:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b27609e183489c44faf7d4421218c571']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6b9-4368-440c-a981-4dcc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:13.000Z",
            "modified": "2015-09-30T09:09:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2824d1157dbfdce1f925422f5971e89']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ba-1518-4be3-b11a-43df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:14.000Z",
            "modified": "2015-09-30T09:09:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b282697efdcc520e51ded18b3333c57c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ba-2fa8-4aed-8133-438c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:14.000Z",
            "modified": "2015-09-30T09:09:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b288a82c19474a0af0bd5a1944958eec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ba-9c98-438a-bb24-452d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:14.000Z",
            "modified": "2015-09-30T09:09:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b28c4b7d6c6ce9d596184445378c7357']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bb-8eac-45b6-a329-4f24950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:15.000Z",
            "modified": "2015-09-30T09:09:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b28e5bf666d3a2a51bd3c41681c082b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bb-ff20-4464-a6a0-41d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:15.000Z",
            "modified": "2015-09-30T09:09:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b29ebc2c2d19ff21aee991cc2b37145a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bc-1114-463f-9a95-4430950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:16.000Z",
            "modified": "2015-09-30T09:09:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2b1a6f8ab7da4871782d02e96381b90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bc-8c14-4033-a006-42c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:16.000Z",
            "modified": "2015-09-30T09:09:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2bc5d83bca760e7be8d1a76d9dde207']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bc-e218-420f-ad5f-4c57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:16.000Z",
            "modified": "2015-09-30T09:09:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2c1cd4f6d141d8fd7c7d4df8940ab43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bd-8360-4100-adf2-4376950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:17.000Z",
            "modified": "2015-09-30T09:09:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2c67549e0db4191b69257d76294d549']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bd-d8d0-4c62-aff3-41c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:17.000Z",
            "modified": "2015-09-30T09:09:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2c7e0906c117b85395204743e6c5314']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6be-606c-4a8a-8e3b-4e5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:18.000Z",
            "modified": "2015-09-30T09:09:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2c9cb35ba1fd6722215c3f4ad0d9970']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6be-0734-42bc-ae59-4206950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:18.000Z",
            "modified": "2015-09-30T09:09:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2d8729447527a455051bb64eb613dda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6be-314c-4e73-a6b9-4453950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:18.000Z",
            "modified": "2015-09-30T09:09:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2ddc955b667b1c6d5ffef0ac89356ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bf-35e8-4ab4-9196-488d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:19.000Z",
            "modified": "2015-09-30T09:09:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2dea927079946cd7b80a02ccadece98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bf-7fc0-4ab9-9707-4cf5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:19.000Z",
            "modified": "2015-09-30T09:09:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2e54c746bfacab1984633b8c5485baa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6bf-a414-4d11-aa83-4c0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:19.000Z",
            "modified": "2015-09-30T09:09:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2e7b7261a124b41bdf9d7dd1fdfd6a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c0-4a0c-4918-913c-440a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:20.000Z",
            "modified": "2015-09-30T09:09:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2ea8ada49e64c94a33889ea42bebf7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c0-8158-4ad0-8183-46f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:20.000Z",
            "modified": "2015-09-30T09:09:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2ec3e166021460e25d3e7c7d809bdd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c1-d470-4782-8f86-4693950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:21.000Z",
            "modified": "2015-09-30T09:09:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b2ec5e7ab79b506bbfdf861047d8b2e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c1-ead0-434b-9e6e-4d8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:21.000Z",
            "modified": "2015-09-30T09:09:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b30a480c5d15cdc9f0d88de9d67d35e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c1-e6f4-4b15-a3aa-437d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:21.000Z",
            "modified": "2015-09-30T09:09:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b30df63cf3545047dd74bc7d7ae3c4ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c2-bda4-42c4-a662-4b8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:22.000Z",
            "modified": "2015-09-30T09:09:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b318c312065e9cdd533de872d96d64bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c2-f9b0-4ddc-b86c-44f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:22.000Z",
            "modified": "2015-09-30T09:09:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b320599b4d4c8ac2dd535eed179793d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c2-8ecc-4131-9db6-4d1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:22.000Z",
            "modified": "2015-09-30T09:09:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3214695c413a762aefe8edb32e98cce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c3-9dfc-4dc2-8c19-465d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:23.000Z",
            "modified": "2015-09-30T09:09:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b330410fcdc13ca1370e6e957244b172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c3-fc9c-4519-b6d0-481c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:23.000Z",
            "modified": "2015-09-30T09:09:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b338c2eb1c1e75f6d7b086a60fae0ed1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c4-0864-408a-b02f-4231950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:24.000Z",
            "modified": "2015-09-30T09:09:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b345ead0be2d9debf1faa7d7a07ef119']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c4-f44c-45e8-b5ab-4d54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:24.000Z",
            "modified": "2015-09-30T09:09:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b34765cba7c11b6e8b8bc04c6a90f62b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c4-8ac8-42ec-8e88-41b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:24.000Z",
            "modified": "2015-09-30T09:09:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3487cf4d7038fcbf016d463b3f1baad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c5-baf8-4b47-b43a-4d67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:25.000Z",
            "modified": "2015-09-30T09:09:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b34cf0b622c9fbd1ccf616b57d9f4504']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c5-7694-4f65-ad9f-4f3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:25.000Z",
            "modified": "2015-09-30T09:09:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b35224c64ce16b58d749bf935e8404dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c5-9ad4-4bd4-98e7-4abb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:25.000Z",
            "modified": "2015-09-30T09:09:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b354e4397b02f469a61bb0389db081c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c6-e970-4aa6-97d0-450a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:26.000Z",
            "modified": "2015-09-30T09:09:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b35597962e58078c59a6dbc084196d39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c6-d5e8-4445-9ca9-46ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:26.000Z",
            "modified": "2015-09-30T09:09:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b35856c109d361c8882a29a1be0c0b99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c7-2368-4489-8813-4771950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:27.000Z",
            "modified": "2015-09-30T09:09:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b37f8968bc1924a36f57b9b7ff789b6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c7-d368-43f8-94d1-42ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:27.000Z",
            "modified": "2015-09-30T09:09:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b38266e8fa66bcbbacd8cc96a887b82d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c7-b308-4165-992f-467c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:27.000Z",
            "modified": "2015-09-30T09:09:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3832c44504031f93aed768994a9d997']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c8-1804-41b1-a509-41a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:28.000Z",
            "modified": "2015-09-30T09:09:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b38b79f5ee62b2ac7e4b7c7d60643ca6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c8-e618-4c75-bf90-4100950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:28.000Z",
            "modified": "2015-09-30T09:09:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b396868fec35d0b759f7cfdf9c52f200']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c9-7b24-4fd1-af83-40aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:29.000Z",
            "modified": "2015-09-30T09:09:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3a0bc8ce245b73a7da514f87ea2aa27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c9-8b9c-4393-8c54-4a16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:29.000Z",
            "modified": "2015-09-30T09:09:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3a7a31569c5458d26ac32ee9c3eaaaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6c9-ff3c-47de-bef6-423a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:29.000Z",
            "modified": "2015-09-30T09:09:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3ad9022f7299367de95102f5b187c01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ca-330c-42c0-af59-45c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:30.000Z",
            "modified": "2015-09-30T09:09:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3afe6b9762f13eb179c1f28b211034c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ca-cc60-4c35-a213-499e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:30.000Z",
            "modified": "2015-09-30T09:09:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3c80d0dee30d6e6e8caf5bb0e0aa13d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ca-9630-4416-8502-463f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:30.000Z",
            "modified": "2015-09-30T09:09:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3d50ffd2fd2a1f70084b5b7629ae832']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cb-64d4-4e43-93c9-45da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:31.000Z",
            "modified": "2015-09-30T09:09:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3dafd00e7dfe9c4450b7da6872ecb40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cb-6438-472b-9045-4ccc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:31.000Z",
            "modified": "2015-09-30T09:09:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3ef143761501e36b7c132ff1d87b26f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cc-87c8-4046-90e7-4d4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:32.000Z",
            "modified": "2015-09-30T09:09:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3f469d18cb6e0388ab8c2ddf52926c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cc-767c-4d49-a6db-4cfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:32.000Z",
            "modified": "2015-09-30T09:09:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b3facfc3b9682b2b0a1fd09a82636047']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cc-be24-4f92-8fba-47e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:32.000Z",
            "modified": "2015-09-30T09:09:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b40d1b2eb402ccc31eee33c994d6883e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cd-b924-48fb-a6a1-4e89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:33.000Z",
            "modified": "2015-09-30T09:09:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b41d2dba1f947cb7f70641e8ddd77099']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cd-25ac-4ac0-a280-4fd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:33.000Z",
            "modified": "2015-09-30T09:09:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4354b6abc04b278630ca8961f980e64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cd-8020-4add-9366-47c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:33.000Z",
            "modified": "2015-09-30T09:09:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b45e84acc9f0ba998eadbe165b67eeeb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ce-5644-4f6b-8e21-4185950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:34.000Z",
            "modified": "2015-09-30T09:09:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b46160d89bac660ca1b0c40f24315c3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ce-fb14-45fb-b459-4ac1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:34.000Z",
            "modified": "2015-09-30T09:09:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4625ca72cc0aeaf389fec4f2feed1f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ce-78a8-46f8-b489-4e7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:34.000Z",
            "modified": "2015-09-30T09:09:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b463273d294fb3657e36d2e9b426cabd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cf-5108-4cdb-8d53-4d63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:35.000Z",
            "modified": "2015-09-30T09:09:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b46b1076b298768196aa2336bb70dcf7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6cf-26a4-4169-9cb7-49f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:35.000Z",
            "modified": "2015-09-30T09:09:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b47bae8bde440dbb454ab875ad26b7d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d0-cf8c-4d27-82f2-42ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:36.000Z",
            "modified": "2015-09-30T09:09:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b47e4dc567ac0c53e5b9e0ea4215d079']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d0-d704-422b-baa2-4879950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:36.000Z",
            "modified": "2015-09-30T09:09:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b48d435f6b0583d83f683d757b8f953f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d0-5964-487f-b7d2-4031950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:36.000Z",
            "modified": "2015-09-30T09:09:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b49bc80746500a39609a8ac01a21bd25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d1-03b8-4d50-8062-4105950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:37.000Z",
            "modified": "2015-09-30T09:09:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4a0c12977db3a3613691b3005648ead']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d1-56a8-4b9a-a370-4788950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:37.000Z",
            "modified": "2015-09-30T09:09:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4a826b68b0934b94dfbf428a88c5f23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d1-0330-47aa-bf0f-4e23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:37.000Z",
            "modified": "2015-09-30T09:09:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4b35032d2535e7a89090e1052cced20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d2-223c-4de7-ae56-4bf8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:38.000Z",
            "modified": "2015-09-30T09:09:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4be4091a694145647c0260f8292f997']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d2-7044-4d9a-b623-41cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:38.000Z",
            "modified": "2015-09-30T09:09:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4be86cf7cd81fe070d8978dabd9667d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d2-ab60-431f-8158-46fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:38.000Z",
            "modified": "2015-09-30T09:09:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4d031a1b1fbb10cfcce4f487370463f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d3-6ad4-4511-8552-496c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:39.000Z",
            "modified": "2015-09-30T09:09:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4d1f19264490126362f204801f73dce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d3-9c58-42f8-b1a8-4ee7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:39.000Z",
            "modified": "2015-09-30T09:09:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4e639429dce7707e624dbc704331c94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d4-4c24-41a2-8f81-4723950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:40.000Z",
            "modified": "2015-09-30T09:09:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4e6a54acc706a431dd9a3adcae45cc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d4-d48c-453f-b949-4c25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:40.000Z",
            "modified": "2015-09-30T09:09:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4f8aab631a406f8f6d06e091cfa3fb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d4-ca78-4de3-9b41-40b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:40.000Z",
            "modified": "2015-09-30T09:09:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b4fcb8762dfa66c133fb9dd8ab73cd57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d5-0a80-4456-8643-45dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:41.000Z",
            "modified": "2015-09-30T09:09:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b50cd1d7e382316910c5f38800bea55d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d5-83fc-424a-8076-4976950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:41.000Z",
            "modified": "2015-09-30T09:09:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5292e44ae6d084dce62e3d11de5b736']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d5-1ae0-446f-b178-4aa7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:41.000Z",
            "modified": "2015-09-30T09:09:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b53bbf8e0822181a3b8cb989a3674e29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d6-a8d0-45c2-8566-43a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:42.000Z",
            "modified": "2015-09-30T09:09:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b540f463abff1aa93873c0734b2da5bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d6-bcbc-4eb5-9df9-4c50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:42.000Z",
            "modified": "2015-09-30T09:09:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b55e522f9972087c18b7e005cd67d030']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d7-3e54-4e3a-99e6-4b38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:43.000Z",
            "modified": "2015-09-30T09:09:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b55eadd2bf2426788d4010f366d2f488']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d7-33f4-4d5b-87f3-4fd0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:43.000Z",
            "modified": "2015-09-30T09:09:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b567b86c2293410fdb5495b830106e1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d7-c688-460b-8ca6-4958950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:43.000Z",
            "modified": "2015-09-30T09:09:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5685244da19c863c29c063f7138c099']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d8-16c0-4d28-903e-4320950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:44.000Z",
            "modified": "2015-09-30T09:09:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b56be3f59408e8d045cfaa19ab1ea373']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d8-442c-41fe-a412-465b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:44.000Z",
            "modified": "2015-09-30T09:09:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b585ae5a9ca28eb0d5bf50fc1ad6ed83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d8-dd80-436f-b8f7-49db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:44.000Z",
            "modified": "2015-09-30T09:09:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b59b75a5397be3f86383760beab2419e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d9-6e90-4f76-a630-4e2a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:45.000Z",
            "modified": "2015-09-30T09:09:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5a32be36e5ee6c10a3ff2c4c9ce07ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6d9-57e0-4f33-bd6f-433e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:45.000Z",
            "modified": "2015-09-30T09:09:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5a94e03622d5d650838929cfcf67231']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6da-ca58-448c-adca-478b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:46.000Z",
            "modified": "2015-09-30T09:09:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5af883f5a0dfd40d6941eb4332c3262']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6da-26d0-445d-9c44-47a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:46.000Z",
            "modified": "2015-09-30T09:09:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5c0b1381c402cbcb76cd4769702b170']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6da-121c-493f-bd60-406d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:46.000Z",
            "modified": "2015-09-30T09:09:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5c9785563fdf8e1481983560a21f550']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6db-da64-4be6-a790-40f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:47.000Z",
            "modified": "2015-09-30T09:09:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5ca8520a4f9efc4ab69376c04ea671c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6db-c840-471b-bd11-4196950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:47.000Z",
            "modified": "2015-09-30T09:09:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5d526fbb8122de51983e230d85b440b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6db-c7a0-4115-8255-4c66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:47.000Z",
            "modified": "2015-09-30T09:09:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5d7b5e8a9e77f6c0eb1c023ee08241b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6dc-577c-46d8-9aa8-4dad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:48.000Z",
            "modified": "2015-09-30T09:09:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5dce8d27aa82aef03d0e96b41e9917f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6dc-6160-4a6f-bad7-4ca1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:48.000Z",
            "modified": "2015-09-30T09:09:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5e595cb3c64b5aef24a44797032a372']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6dd-4570-413a-a680-4bda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:49.000Z",
            "modified": "2015-09-30T09:09:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5e71adbaa193a1f3b147d9298ac3f4d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6dd-e2a0-440e-b4bc-4eda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:49.000Z",
            "modified": "2015-09-30T09:09:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5f28c6f60fce8dd4e26ad656ea6ab51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6dd-0ea0-4b50-b0c2-4d63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:49.000Z",
            "modified": "2015-09-30T09:09:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b5fdc78b1b225321c681c6d4a807c8c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6de-68b0-463e-9206-447f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:50.000Z",
            "modified": "2015-09-30T09:09:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6041e5822a11b49d4b64b8df31bd76b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6de-60a0-4c2b-8eba-41e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:50.000Z",
            "modified": "2015-09-30T09:09:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b60845aeee3e604812d03c4bf1050bd1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6df-628c-44c4-ae0c-41cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:51.000Z",
            "modified": "2015-09-30T09:09:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b60c26edfcb2e880e8d0421304f0def5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6df-5168-44ee-a083-470b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:51.000Z",
            "modified": "2015-09-30T09:09:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b60fe15c09fc4a4d0d2b5ae9a40592c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6df-d3e4-4ee8-8f2b-429a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:51.000Z",
            "modified": "2015-09-30T09:09:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b613bf29dbad717051bebd8257980c52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e0-4414-4af2-87c7-4e57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:52.000Z",
            "modified": "2015-09-30T09:09:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b61465e6aa6c071adbb212008ae9ca2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e0-514c-4f05-8faf-40ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:52.000Z",
            "modified": "2015-09-30T09:09:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b627ba4c493b57accd2673e49cbdedec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e0-5cac-40bd-8c33-4943950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:52.000Z",
            "modified": "2015-09-30T09:09:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b62906e73c86e2d6725057b3dcd11378']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e1-f518-4ad7-80a1-4377950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:53.000Z",
            "modified": "2015-09-30T09:09:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b63ad3b6f663e1813a2ffdd93de7500e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e1-c014-4f53-9a56-406f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:53.000Z",
            "modified": "2015-09-30T09:09:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6495b2240417a466302d24c0111288c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e2-5fd8-4e32-9761-40cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:54.000Z",
            "modified": "2015-09-30T09:09:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b64f3951d560d127dc49e6ae87ad7217']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e2-3164-48cb-a6f1-4bc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:54.000Z",
            "modified": "2015-09-30T09:09:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b656ff7e1a82feaad6a968750a9e7db3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e2-4400-4454-9657-4fad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:54.000Z",
            "modified": "2015-09-30T09:09:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b65da314ce294433092ea0aca6a9f022']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e3-d1f4-4453-a02e-495d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:55.000Z",
            "modified": "2015-09-30T09:09:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b65e225d8309a5bc1a126d973a80da6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e3-6e90-4815-936c-4e50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:55.000Z",
            "modified": "2015-09-30T09:09:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b66e4f92a7cb398426511f6c58939f4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e3-36bc-4901-91e3-4c03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:55.000Z",
            "modified": "2015-09-30T09:09:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b67ac132f2f80adda25d5803cf95d617']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e4-7a9c-42cf-8857-4845950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:56.000Z",
            "modified": "2015-09-30T09:09:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b67ad8cc925bfacd1e5d73596e0b932e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e4-29a8-481a-a2ad-46fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:56.000Z",
            "modified": "2015-09-30T09:09:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b67dd969119126ed895db8405a005c6b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e5-059c-4429-be82-423a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:57.000Z",
            "modified": "2015-09-30T09:09:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b68a4c23f4adcd250ab62e3fa727cad6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e5-b404-4bff-a9c9-4b6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:57.000Z",
            "modified": "2015-09-30T09:09:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b68ba2b23d8a20f69b6ea4557847d07c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e5-31bc-4cbe-9366-4e00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:57.000Z",
            "modified": "2015-09-30T09:09:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6a8f7ca428bd11f3e8b361f86e3fe89']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e6-8530-40a6-bc94-4020950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:58.000Z",
            "modified": "2015-09-30T09:09:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6ab5166ce47880d10f6fd5837f68dc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e6-7810-4e18-b39f-40fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:58.000Z",
            "modified": "2015-09-30T09:09:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6b053caa3e5e6ad01a825c3cb39e59e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e7-61b4-484f-b399-4ced950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:59.000Z",
            "modified": "2015-09-30T09:09:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6b4f21ded5aa09dbec879abc8f3c8ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e7-0fd4-496a-8157-4c1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:59.000Z",
            "modified": "2015-09-30T09:09:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6c11bb183188f047273b23ff9b8591d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e7-5b64-4bf2-aee2-4128950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:59.000Z",
            "modified": "2015-09-30T09:09:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6c303bb4909fe83c1f45ba2b69846f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e7-efc0-4c7c-bb65-4674950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:09:59.000Z",
            "modified": "2015-09-30T09:09:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6c8b83b0aee3965caa90d94620d5e55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:09:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e8-f114-46aa-81a2-483e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:00.000Z",
            "modified": "2015-09-30T09:10:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6d4388eaa40e1a31e0ae5c4292edc79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e8-95cc-429f-ac18-48b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:00.000Z",
            "modified": "2015-09-30T09:10:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6d86f6dab516db30ec85ade4445ee58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e8-9160-4d74-977c-4c22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:00.000Z",
            "modified": "2015-09-30T09:10:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6df172555a6d9b738683fca80e2b058']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e8-139c-4ef9-b200-4e23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:00.000Z",
            "modified": "2015-09-30T09:10:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b6e64678b70c7e77659f1da30cd8ba89']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e9-2e90-47a6-a40c-470c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:01.000Z",
            "modified": "2015-09-30T09:10:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b709a50b1fb9e5d78da8f426038c4554']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e9-d578-407a-bc80-4f94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:01.000Z",
            "modified": "2015-09-30T09:10:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b7101616a288998d076a223c5d5e421c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e9-64a0-4199-b883-4e1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:01.000Z",
            "modified": "2015-09-30T09:10:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b71dc1af44434256f9c948a6a65baf1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6e9-4cdc-4518-ba18-4b43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:01.000Z",
            "modified": "2015-09-30T09:10:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b71dcbe03d8846537321921374378ec6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ea-2aa8-4c4b-b32f-45e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:02.000Z",
            "modified": "2015-09-30T09:10:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b71e8a9bb2dab9e7b1378b2d03b71984']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ea-cf38-4482-aac4-4270950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:02.000Z",
            "modified": "2015-09-30T09:10:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b7238a4f592aff03e79333936acb6305']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ea-3e48-4ff7-bc8e-42a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:02.000Z",
            "modified": "2015-09-30T09:10:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b7248cbc756eeb3b195a99a38c6f8505']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ea-fccc-4bbf-bc25-401e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:02.000Z",
            "modified": "2015-09-30T09:10:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b72c940164207745ecbc4d0f3d189a28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6eb-222c-48f0-89ca-4be9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:03.000Z",
            "modified": "2015-09-30T09:10:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b730f68d3b7b7442b5414b45976ea894']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6eb-1a74-4c9d-878a-46a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:03.000Z",
            "modified": "2015-09-30T09:10:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b7486e58c484c7dab5d5d3e6e41b1673']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ec-d318-41f6-991e-4181950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:04.000Z",
            "modified": "2015-09-30T09:10:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b74f6566e817bf6ee68790c2ff605dff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ec-28a0-4661-bb28-4f8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:04.000Z",
            "modified": "2015-09-30T09:10:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b753eaf5d32e0aafb853cd9a16303626']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ec-5350-4fd1-b025-4f85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:04.000Z",
            "modified": "2015-09-30T09:10:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b756894f6180703571641928dca1f65f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ec-f0ec-4896-bdbd-4f3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:04.000Z",
            "modified": "2015-09-30T09:10:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b75f33d3d1832148e1b61f29f40b27c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ed-ca60-48f3-8f49-4846950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:05.000Z",
            "modified": "2015-09-30T09:10:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b760baf20ac067302662ad6dc8fdaedb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ed-31a4-4889-a71c-40d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:05.000Z",
            "modified": "2015-09-30T09:10:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b764756cd3746b22ef0a6fb8a646856f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ed-7f18-4bec-9150-42d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:05.000Z",
            "modified": "2015-09-30T09:10:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b76777957fb7412f045cf77baac09eba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ed-74e4-42a6-9e73-4ea2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:05.000Z",
            "modified": "2015-09-30T09:10:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b7879a6cf6cc1087177027bd44d22288']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ee-2394-4838-915d-42f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:06.000Z",
            "modified": "2015-09-30T09:10:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b78a8a51f103764327765ca96d789504']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ee-3cac-403e-99d3-4748950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:06.000Z",
            "modified": "2015-09-30T09:10:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b78badbc3e6ac5293c717fdbfef41503']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ee-c6b0-4202-a451-4da2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:06.000Z",
            "modified": "2015-09-30T09:10:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b78e0203e13a1c1be5a6483e99030889']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ee-a738-4af5-adfa-44e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:06.000Z",
            "modified": "2015-09-30T09:10:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b7b9f79403ec23b5ef3d942b9e5a976f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ef-0bcc-4d16-b89d-4b6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:07.000Z",
            "modified": "2015-09-30T09:10:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b7f0cdf0b9e0c06ebe3fe0c7e08abd98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ef-a298-41a9-b068-4d97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:07.000Z",
            "modified": "2015-09-30T09:10:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b7f1dbe1e8465ffe41064c26fea3c92f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ef-23a0-4a22-b789-48cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:07.000Z",
            "modified": "2015-09-30T09:10:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b7f22fe9f184f3987d5c9bf3e2abba69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f0-d608-4f1b-b95b-4ffe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:08.000Z",
            "modified": "2015-09-30T09:10:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8291cbdc23009325e0e1a31d2d26fa8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f0-feac-437e-871a-480f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:08.000Z",
            "modified": "2015-09-30T09:10:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b83a12cdeca6d2684ce1d8832c51cc95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f0-f6c8-40b1-a809-4776950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:08.000Z",
            "modified": "2015-09-30T09:10:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b84033ed8bdc27fb0f0f6a195553355d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f0-fef0-4ec5-b06f-4c0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:08.000Z",
            "modified": "2015-09-30T09:10:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b842b5831eac62d4cab8beb6c2ae6d75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f1-7128-48bf-aa89-47aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:09.000Z",
            "modified": "2015-09-30T09:10:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b844518529e1dbcfbdf9d3ab98cf742c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f1-be90-46ab-9272-4488950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:09.000Z",
            "modified": "2015-09-30T09:10:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b84c5f065deaa07d53e3e339f5f0d9f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f1-c088-45e7-b5e9-46cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:09.000Z",
            "modified": "2015-09-30T09:10:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b85d7acd5bd4e265900185d63e82adb2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f1-27ac-4f10-9fc3-486f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:09.000Z",
            "modified": "2015-09-30T09:10:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b87864958fb97a5ddf2b0229db3ce49c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f2-f32c-42f4-94e9-48e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:10.000Z",
            "modified": "2015-09-30T09:10:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b87d10ff1f2b90243b2dd1ea48d91a1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f2-28e8-4226-82c0-4637950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:10.000Z",
            "modified": "2015-09-30T09:10:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b88ff511812305ab82559ea598fedd8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f2-32b0-4fcb-9024-4b23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:10.000Z",
            "modified": "2015-09-30T09:10:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b89d0525d8ef614ed5e548561db755e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f2-18a8-4f09-8fd7-45b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:10.000Z",
            "modified": "2015-09-30T09:10:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8a6bc4aaaa8b7f78e7db54409233474']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f3-720c-4900-b4e5-495c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:11.000Z",
            "modified": "2015-09-30T09:10:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8b071b86eb396815af433a4411c7d19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f3-e484-4869-85f6-4826950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:11.000Z",
            "modified": "2015-09-30T09:10:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8bb40c498bca3e31495f16714bf269a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f3-7964-4c2d-bccb-469a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:11.000Z",
            "modified": "2015-09-30T09:10:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8bd2a74bc34ce75216d7fdee99442b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f4-f200-4171-90e1-48ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:12.000Z",
            "modified": "2015-09-30T09:10:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8c20a46b13698dbb8180b420d048b1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f4-69d8-4447-a2bc-47aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:12.000Z",
            "modified": "2015-09-30T09:10:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8c7da5f37c0a83822c1087124884ea5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f4-bba8-4b12-8ad1-4248950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:12.000Z",
            "modified": "2015-09-30T09:10:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8cd91bf40cf7563a07b4021e04cecb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f4-80c8-4dce-802e-478d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:12.000Z",
            "modified": "2015-09-30T09:10:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8ceea172e4470c24d960241b2b0be41']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f4-ddc4-43a6-967c-49d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:12.000Z",
            "modified": "2015-09-30T09:10:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8d0f87408c4f8d2ea01b0bb3f82e1e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f5-6080-4a52-8e08-4ae0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:13.000Z",
            "modified": "2015-09-30T09:10:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8d21444b38d98067c307ad47094ad84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f5-343c-466d-a047-4e1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:13.000Z",
            "modified": "2015-09-30T09:10:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8d3ab5f1bb39ad1b1bbd00b054a4c84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f5-7940-4230-b231-4bad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:13.000Z",
            "modified": "2015-09-30T09:10:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8d947c5f3ae475549065f83973c4bc7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f5-4e84-44cd-935e-4c1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:13.000Z",
            "modified": "2015-09-30T09:10:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8dc290d9df001ef32a0c4b25ef2a23b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f6-1ea8-40de-87ce-4eef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:14.000Z",
            "modified": "2015-09-30T09:10:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8e0eb1573271652dda662e49bf3863a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f6-3298-4872-a772-474f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:14.000Z",
            "modified": "2015-09-30T09:10:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8e3d2a464b68030b3a1d4073bd547ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f6-8018-402f-9579-4973950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:14.000Z",
            "modified": "2015-09-30T09:10:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8e4f13294d10e1de4a10bc7f3bf8d81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f7-d570-4647-8c0a-49ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:15.000Z",
            "modified": "2015-09-30T09:10:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8eade0367a50ead8e6843ee7381109c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f7-a2ac-44eb-aded-4901950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:15.000Z",
            "modified": "2015-09-30T09:10:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8ef17ff1dec429b39fc5a0132ae0f84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f7-5058-417c-9dd3-41f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:15.000Z",
            "modified": "2015-09-30T09:10:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8f0d3d50d9f8e6f7bcba652c8e5f63a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f7-aebc-4da9-ad7f-4712950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:15.000Z",
            "modified": "2015-09-30T09:10:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8f43d2c137d2751c993408179f52895']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f8-22e8-45b8-a3c9-497d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:16.000Z",
            "modified": "2015-09-30T09:10:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8f6cdda400158bb99a38ab8ec0675d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f8-4f38-4a7c-9c9c-481e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:16.000Z",
            "modified": "2015-09-30T09:10:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8f8685ef53f51ae1b01e096c4cdd796']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f8-70ec-4214-ad2f-43f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:16.000Z",
            "modified": "2015-09-30T09:10:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8f8b9a693a610150a8a972afd6dc8fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f8-3b48-4c33-a713-48ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:16.000Z",
            "modified": "2015-09-30T09:10:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8f994c6ede2ec18c73cb8ff93851d22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f9-1ef0-46dd-b942-47d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:17.000Z",
            "modified": "2015-09-30T09:10:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8fe6d0f2719ed9cc36dbdeefa0ab66b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f9-ca04-42b0-8f2c-4062950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:17.000Z",
            "modified": "2015-09-30T09:10:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b8fe7fa8714f2553c721efa441aa324e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6f9-f0dc-4eca-a55d-4174950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:17.000Z",
            "modified": "2015-09-30T09:10:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b902c355313f9692102e505a93bb75d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fa-ce84-4ce4-83c3-4d9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:18.000Z",
            "modified": "2015-09-30T09:10:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9062b070ebca2a80ca975dffc86a78a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fa-321c-4a3f-a162-4013950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:18.000Z",
            "modified": "2015-09-30T09:10:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b906d33b53b26f0fb9f85b8cf47d5158']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fa-5480-442f-88af-4879950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:18.000Z",
            "modified": "2015-09-30T09:10:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b911e41f4252bc67767073d1a6c0d427']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fa-7cf8-40b4-ac94-4da1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:18.000Z",
            "modified": "2015-09-30T09:10:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b91ab78d9226556865567cf288a49c84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fb-09ec-42cb-a5df-43b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:19.000Z",
            "modified": "2015-09-30T09:10:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b933623cd8b568713b7e3e2f7fe68b46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fb-3328-41c2-b4aa-4628950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:19.000Z",
            "modified": "2015-09-30T09:10:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9389b3d69c989b887d900e282b4dbfe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fb-c1c0-4786-b278-40a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:19.000Z",
            "modified": "2015-09-30T09:10:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b93aa628f13a68ec1fee37dc6299cc1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fb-a798-472b-8a97-43a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:19.000Z",
            "modified": "2015-09-30T09:10:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b945282a540027f5183aebfa69175bd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fc-b94c-4845-bf3a-467a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:20.000Z",
            "modified": "2015-09-30T09:10:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b94bb4b4e3afc5f373e7998ca216897d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fc-9b20-407b-a179-4d9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:20.000Z",
            "modified": "2015-09-30T09:10:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b94f2304489d9ddcccb1bc03e2715bcc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fd-d8d0-4931-ad7c-4262950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:21.000Z",
            "modified": "2015-09-30T09:10:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b959eb6239bcd90633b66313508f6225']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fd-de90-47f8-ac44-4ffa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:21.000Z",
            "modified": "2015-09-30T09:10:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9677f219c31846da68cb467c1957224']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fe-ca24-4d36-9073-4987950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:22.000Z",
            "modified": "2015-09-30T09:10:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b967ea6025f645706aa70d05e34e7cc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fe-2658-4e32-8060-4a7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:22.000Z",
            "modified": "2015-09-30T09:10:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b968f5e8b50dde6f5b0e8a0e8fd87cd4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fe-723c-4ee4-af9d-48a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:22.000Z",
            "modified": "2015-09-30T09:10:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b96af60a601dfc9d6bf13b3f6f71dcf7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6fe-60a0-4a7a-89de-4d99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:22.000Z",
            "modified": "2015-09-30T09:10:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b97346b5561a719c5370f301f8d3021d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ff-4740-433d-8197-48b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:23.000Z",
            "modified": "2015-09-30T09:10:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b992cc63cfa0684cb228ff3cefd3015e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ff-be9c-48a6-886d-4d6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:23.000Z",
            "modified": "2015-09-30T09:10:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b995c362c4897ce1f9c59661baca637f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ff-6a80-427e-9156-4611950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:23.000Z",
            "modified": "2015-09-30T09:10:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b99938742a898abcd803e42e6d432c93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba6ff-d2bc-4005-846c-48ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:23.000Z",
            "modified": "2015-09-30T09:10:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b99ec48a0649a5bff0e4125ac2b89c45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba700-3d04-4f5c-a5d9-4ae1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:24.000Z",
            "modified": "2015-09-30T09:10:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9adbb0f9df3d8af086cd0940f1efabf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba700-f344-4a36-9066-428f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:24.000Z",
            "modified": "2015-09-30T09:10:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9c73bee6af26499588145740bbdb0c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba700-4590-45af-95e5-48c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:24.000Z",
            "modified": "2015-09-30T09:10:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9cd3e70e42f18a46bd1e641ed1f2bca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba700-f12c-4f48-9638-4e3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:24.000Z",
            "modified": "2015-09-30T09:10:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9ced9ec4a5f51121b24d78bf1365112']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba701-99f0-4104-8dc9-4090950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:25.000Z",
            "modified": "2015-09-30T09:10:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9f2d31d8ebf2b168d5de11b57c21254']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba701-bfb0-4294-8f5f-4ed9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:25.000Z",
            "modified": "2015-09-30T09:10:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9fc95160a640ef2c1675a28dbe331f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba701-d220-487a-94a0-42c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:25.000Z",
            "modified": "2015-09-30T09:10:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'b9fe60667cb5488496a4c6b03fdb2ac1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba701-62ac-43b0-88a9-4ce4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:25.000Z",
            "modified": "2015-09-30T09:10:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba001fae5320e3318189bc41c2b746a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba702-93c0-4e9a-885c-433f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:26.000Z",
            "modified": "2015-09-30T09:10:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba21156a2c32c1e6eb840f3a6e8c5718']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba702-424c-4d42-b832-41a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:26.000Z",
            "modified": "2015-09-30T09:10:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba2ed49425206764cc4e4c1ee9f5836f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba702-b398-4e55-a81e-47e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:26.000Z",
            "modified": "2015-09-30T09:10:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba2f2a169f27fd5749884c9478e09974']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba702-37b0-4779-bbdf-40eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:26.000Z",
            "modified": "2015-09-30T09:10:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba3d3e4b266a3514e559746c22800bfa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba703-3294-4c95-aace-4713950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:27.000Z",
            "modified": "2015-09-30T09:10:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba4d9ad94db106bc76cb166b0eef438f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba703-1460-418d-a22d-4923950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:27.000Z",
            "modified": "2015-09-30T09:10:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba58f34a4721820f2ab9be1f31a9da03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba703-9e28-4201-b9cb-4bb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:27.000Z",
            "modified": "2015-09-30T09:10:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba5e531dc86bfc97081b53894ac26abe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba704-dbbc-41df-982d-41ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:28.000Z",
            "modified": "2015-09-30T09:10:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba5e9a468eb280fb77d3ead5ebfa1611']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba704-ddf4-4cd6-9c27-4055950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:28.000Z",
            "modified": "2015-09-30T09:10:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba60aa30376dbae0b29ed6133c3b3781']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba704-c340-4e9a-8f46-4e1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:28.000Z",
            "modified": "2015-09-30T09:10:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba6d2e921975e1e065a8dc6563152025']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba704-f51c-4d06-9f14-400d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:28.000Z",
            "modified": "2015-09-30T09:10:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba75baf0b4ddfac1d2928d005bc9a274']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba705-efa8-4a0f-bc21-4842950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:29.000Z",
            "modified": "2015-09-30T09:10:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba79a7cda4ea08d6e409c9eac5597841']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba705-a59c-4ee6-a22f-40eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:29.000Z",
            "modified": "2015-09-30T09:10:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba7db816803162d756268e5c86345c3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba705-2e30-4451-aa7d-43f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:29.000Z",
            "modified": "2015-09-30T09:10:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba7fe1770e84bf59d6d1add7b3ae85b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba705-f058-47e3-a4cd-4b7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:29.000Z",
            "modified": "2015-09-30T09:10:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba83686494c537e8db5b705bebd44ed2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba706-fee8-43ac-a332-4cfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:30.000Z",
            "modified": "2015-09-30T09:10:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba854bd7ed34a7de658b07a8c0fc70f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba706-15ec-4c89-9b42-4e2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:30.000Z",
            "modified": "2015-09-30T09:10:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba8ccb961a8730d1016d838ad6b74940']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba706-a2d0-47a1-be3f-42df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:30.000Z",
            "modified": "2015-09-30T09:10:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba8cedee9e05be0a04ff6da66a972f0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba706-9548-49e2-b767-4762950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:30.000Z",
            "modified": "2015-09-30T09:10:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ba9fc031a9abc2f4ec30d17bbdbf49d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba707-0d90-4e86-b790-4ed9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:31.000Z",
            "modified": "2015-09-30T09:10:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'baa2b8bb2b624aecfc97517f1210e6ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba707-2a98-481e-b77f-41a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:31.000Z",
            "modified": "2015-09-30T09:10:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'baa90d57653ba53835d03180631e5644']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba707-1968-414a-b6a0-4f0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:31.000Z",
            "modified": "2015-09-30T09:10:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bab4ef5d3eafda325020ace3b33fbdaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba707-56fc-4ccb-b6e8-47f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:31.000Z",
            "modified": "2015-09-30T09:10:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bab65428ff0e49234013d7804249a63a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba708-ef34-44aa-808c-4093950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:32.000Z",
            "modified": "2015-09-30T09:10:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'babf4b8a9c0c018a1d37916304fdb660']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba708-0e98-41d4-925d-4742950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:32.000Z",
            "modified": "2015-09-30T09:10:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bac55f4932ec7ec67c55cc8a47769bcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba708-d4e4-4e20-8331-42a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:32.000Z",
            "modified": "2015-09-30T09:10:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bad0f4c5dc43fa5f2967f134946f2f7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba708-65b0-4dc5-bbd1-48de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:32.000Z",
            "modified": "2015-09-30T09:10:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bad82bea13ae2466346afeb5d5c2d950']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba709-a66c-467e-be6e-4451950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:33.000Z",
            "modified": "2015-09-30T09:10:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bad9a6792c4885506f69dfd27172377f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba709-3a94-47b4-8b4f-4559950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:33.000Z",
            "modified": "2015-09-30T09:10:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bae4148c9f93970f260e91923f41ff2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba709-4b40-4e6d-98c9-40b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:33.000Z",
            "modified": "2015-09-30T09:10:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'baea29de3ff26b47b564bd90fde04513']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba709-4760-442a-93bb-4c44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:33.000Z",
            "modified": "2015-09-30T09:10:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'baf4d2a2843705241e1a4167a74424e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70a-6368-434e-8105-430d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:34.000Z",
            "modified": "2015-09-30T09:10:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bafac7a2d4ba5f0e7eb75c187ddda889']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70a-6d70-46ea-9b19-4f21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:34.000Z",
            "modified": "2015-09-30T09:10:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bafd6ecab3ef6fc6c8c33be4e3839e5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70a-7ee8-4de1-9675-459b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:34.000Z",
            "modified": "2015-09-30T09:10:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb00c4cf4f3583c45d0ab45284a78777']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70b-16d4-462d-ab0e-4e7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:35.000Z",
            "modified": "2015-09-30T09:10:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb020e4a6e6b8883394d1f2d56f2b494']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70b-5fc0-4e7f-ab19-4d47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:35.000Z",
            "modified": "2015-09-30T09:10:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb037429ee77d738cb4d261546dcc762']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70b-3128-4820-bf98-405f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:35.000Z",
            "modified": "2015-09-30T09:10:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb0e5c55ed092622875736dadde4f09c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70b-4290-45bb-94d8-4c8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:35.000Z",
            "modified": "2015-09-30T09:10:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb1c7c0999a50e0a6efeebc5f799e7b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70c-5fe0-4666-9d3d-4138950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:36.000Z",
            "modified": "2015-09-30T09:10:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb293fa574a2fbf96acf794e3e605832']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70c-aa84-4151-b1c7-40a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:36.000Z",
            "modified": "2015-09-30T09:10:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb2def56fc948e0bb44161a9d6c74be4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70c-1880-46ad-9c67-4083950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:36.000Z",
            "modified": "2015-09-30T09:10:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb40f934e2b43d64d9914388c7c955e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70c-1ab8-4e4d-a373-4eea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:36.000Z",
            "modified": "2015-09-30T09:10:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb4305c6308f7acd9486a112e5d5cad2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70d-222c-4cd8-b8ed-4d91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:37.000Z",
            "modified": "2015-09-30T09:10:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb443a4f63238fb226e7b80531a1276d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70d-9020-4bb1-86e4-4c07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:37.000Z",
            "modified": "2015-09-30T09:10:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb61e5fc81d2d4856707dbd2cafcfa3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70d-065c-4d3a-b4b8-4444950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:37.000Z",
            "modified": "2015-09-30T09:10:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb67d6ea71fad86bf77317bd2f913620']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70d-8bd8-48ce-8251-47b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:37.000Z",
            "modified": "2015-09-30T09:10:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb7a84d13e08578b05c0735d8eeeed2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70e-e8ac-4ae7-90ee-41b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:38.000Z",
            "modified": "2015-09-30T09:10:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bb8c054e673fa5678f62f489150f9933']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70e-622c-4fa8-abd9-49fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:38.000Z",
            "modified": "2015-09-30T09:10:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bba1025d924e026a6de0fbf8c1f29827']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70e-dda4-4e98-9fc6-41cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:38.000Z",
            "modified": "2015-09-30T09:10:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bbc9823b8b2175237289fd411c3b9401']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70f-7230-4ac6-b368-4021950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:39.000Z",
            "modified": "2015-09-30T09:10:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bbdb709c9503ac5e29dce9dc5304c1b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70f-bdd8-41c2-affe-47e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:39.000Z",
            "modified": "2015-09-30T09:10:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bbe462a6cbf556ce98fa5504c891dd87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70f-3924-4c46-882c-4c59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:39.000Z",
            "modified": "2015-09-30T09:10:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bbf308077c45dbfdd52a807bc1fb6734']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70f-4b74-49ba-8b8c-47e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:39.000Z",
            "modified": "2015-09-30T09:10:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bbf8cf18e9375e4f19a5fcdce13652f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba70f-fb40-4424-9a2b-473f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:39.000Z",
            "modified": "2015-09-30T09:10:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bbfa3cd324ae88df4afe1b84f18cb918']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba710-e170-4885-a844-4f7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:40.000Z",
            "modified": "2015-09-30T09:10:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bbfb0558e788db1f144c40768bc9d9ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba710-cd08-4766-a83a-4e90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:40.000Z",
            "modified": "2015-09-30T09:10:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bbfcfc6df043fcfbe6267a2b92fe980b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba710-f90c-4bcb-a85b-405f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:40.000Z",
            "modified": "2015-09-30T09:10:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc0685378c6e6bb5247b70da3a2eb7f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba710-3a24-4886-a700-40e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:40.000Z",
            "modified": "2015-09-30T09:10:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc0d18d205596db556355a53b65faace']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba711-f9f0-441d-be30-4b81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:41.000Z",
            "modified": "2015-09-30T09:10:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc10ee525e3c0c6576dc93dd3f266624']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba711-ee7c-4f4a-84a3-49cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:41.000Z",
            "modified": "2015-09-30T09:10:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc415510d627d0b407d3b1ee4317e7b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba711-b348-47b4-b910-4a31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:41.000Z",
            "modified": "2015-09-30T09:10:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc42b480d2cea707250a2161644bede5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba712-fa18-456c-9a51-4aff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:42.000Z",
            "modified": "2015-09-30T09:10:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc74c8124f5e07bd639f592f260142cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba712-37b0-4cde-955f-4de4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:42.000Z",
            "modified": "2015-09-30T09:10:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc7e1dcff11ae1b25925c17f6ea2e511']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba712-93cc-4ba6-bfdd-4dfc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:42.000Z",
            "modified": "2015-09-30T09:10:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc8cce8476b6052e31a48b189f48d8ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba712-9788-4d41-899f-412a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:42.000Z",
            "modified": "2015-09-30T09:10:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc909f0fc123a4c3a43d6d599f974172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba713-35c0-4a50-a138-4af8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:43.000Z",
            "modified": "2015-09-30T09:10:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bc98349f098a1edd213cb9011e8b30a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba713-d9ac-4db0-8b92-47ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:43.000Z",
            "modified": "2015-09-30T09:10:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bca00ec717dd8ad0c49e48fe4d3940e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba713-ab7c-43c3-86ac-4a6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:43.000Z",
            "modified": "2015-09-30T09:10:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bca176a84b206fc807497e72c62fda29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba713-3be4-497e-a457-4289950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:43.000Z",
            "modified": "2015-09-30T09:10:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bcac27fcec45b38c6fd77b136b50e0f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba714-6cdc-49ed-93ca-414b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:44.000Z",
            "modified": "2015-09-30T09:10:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bcbce296320051464274ec61288e54bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba714-a4b0-4687-bcbf-4c98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:44.000Z",
            "modified": "2015-09-30T09:10:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bccb8bf478e70800348afceba9bba743']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba714-8a64-43a4-8576-4671950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:44.000Z",
            "modified": "2015-09-30T09:10:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bccba6991b67c878d861df7d9bff2536']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba714-f698-4abd-a080-4942950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:44.000Z",
            "modified": "2015-09-30T09:10:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bccd8807a247ce25d21425af40ab81f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba715-43f4-4308-a12e-491e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:45.000Z",
            "modified": "2015-09-30T09:10:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bcd9b69998f282389829a3b57763bf29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba715-e678-4691-8c17-4752950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:45.000Z",
            "modified": "2015-09-30T09:10:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bcdab161789b33b0f3b842d20089caf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba715-7188-431d-81fe-475d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:45.000Z",
            "modified": "2015-09-30T09:10:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bcdf9656b56a089016fef7143de72559']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba716-2888-4a4b-8591-4fd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:46.000Z",
            "modified": "2015-09-30T09:10:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bcf19d30a4bac33014df719e6562d967']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba716-b34c-40a2-adf1-41f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:46.000Z",
            "modified": "2015-09-30T09:10:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bcf67201589b74656bd093228ce66ead']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba716-1b90-403e-9176-4e19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:46.000Z",
            "modified": "2015-09-30T09:10:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd02740be599516cce5c25ca78ad075a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba717-ff84-4978-b79c-4204950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:47.000Z",
            "modified": "2015-09-30T09:10:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd03d24c25693717b0f74d800e4d38ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba717-9264-40cd-a8d5-4b08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:47.000Z",
            "modified": "2015-09-30T09:10:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd1226acc074046f6e7e6ca1ebe85adf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba717-0318-435e-afd9-4370950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:47.000Z",
            "modified": "2015-09-30T09:10:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd31640a79dff19f7c482c15cdcad99d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba718-a030-43d9-958d-428c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:48.000Z",
            "modified": "2015-09-30T09:10:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd38af7e28a91cf3697c97c84c18d77f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba718-0a0c-4af4-9b97-4c25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:48.000Z",
            "modified": "2015-09-30T09:10:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd47e14ed7a861276ef0e536c453b7be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba719-d7f0-441b-a082-402c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:49.000Z",
            "modified": "2015-09-30T09:10:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd4b28065ef5ff3463cee42e33e2431b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba719-4564-4d17-91b0-4457950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:49.000Z",
            "modified": "2015-09-30T09:10:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd559a899436b6472ae0cf27ab784d39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba719-32c8-4d97-a0a0-4938950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:49.000Z",
            "modified": "2015-09-30T09:10:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd628ba5d0beabd4f86d3146e3be83b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71a-97a4-4365-8343-40c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:50.000Z",
            "modified": "2015-09-30T09:10:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd631fda71192fc80dff52a3775b4971']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71a-ff50-48e6-8fdc-4784950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:50.000Z",
            "modified": "2015-09-30T09:10:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd647dc78350d5fff110af900a5efd5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71b-8e70-4581-89c1-4e95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:51.000Z",
            "modified": "2015-09-30T09:10:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd691ee2bcb3c227d218c4a28a808b4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71b-b6f4-4255-aafd-47ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:51.000Z",
            "modified": "2015-09-30T09:10:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd6a9798825b6cc130c5ac70b76f8b16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71b-9e34-4c72-be2a-4ce1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:51.000Z",
            "modified": "2015-09-30T09:10:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bd791c81bc1946e65f8184313e9a355d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71c-46fc-40e1-842f-422c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:52.000Z",
            "modified": "2015-09-30T09:10:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bda8fcbf9a84cb06eb90bcd0382f246d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71c-4d80-471e-be03-41da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:52.000Z",
            "modified": "2015-09-30T09:10:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bdaa0ba1a1795f6d14e08f46405ab492']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71c-1abc-493b-af2f-487e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:52.000Z",
            "modified": "2015-09-30T09:10:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bdafff1005c8e618960db4ca55ff1cc6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71d-af24-4acd-96e9-4996950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:53.000Z",
            "modified": "2015-09-30T09:10:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bdb539adbabbfe94d59b6725046ebfce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71d-433c-4717-aad5-4780950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:53.000Z",
            "modified": "2015-09-30T09:10:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bdb7d7c61c95fe11449dd82d609ada96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71e-f104-4473-bbbc-4c28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:54.000Z",
            "modified": "2015-09-30T09:10:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bdbc5638aaf748f955afdc6e732ea8ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71e-691c-4229-a83c-49fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:54.000Z",
            "modified": "2015-09-30T09:10:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bdbd3e4c76d894de9e49bd5295001ab1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71e-a930-4a64-bfbb-4633950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:54.000Z",
            "modified": "2015-09-30T09:10:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bdd5a1b5f4de99380886a11699a706c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71f-9270-48b2-8969-4651950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:55.000Z",
            "modified": "2015-09-30T09:10:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bde01b032eb79b6948f34f6e1735bd7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba71f-9948-4099-9e37-4cb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:55.000Z",
            "modified": "2015-09-30T09:10:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bdee4a4e1c0925840027abab013e0ec9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba720-5988-43db-b3a4-4d29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:56.000Z",
            "modified": "2015-09-30T09:10:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bdf40a04ccdae59121dec4aca8a511b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba720-d670-4bed-ba67-446d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:56.000Z",
            "modified": "2015-09-30T09:10:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be018a58f04ec84aeda189368438621d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba720-d924-4721-a0d1-4aaa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:56.000Z",
            "modified": "2015-09-30T09:10:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be13dadd55a23f6d8c02eeee5785db84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba721-37a8-4dc3-921b-4f29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:57.000Z",
            "modified": "2015-09-30T09:10:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be1b300a482fdccd4a10417c75224140']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba721-8a50-4c4f-97b3-41f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:57.000Z",
            "modified": "2015-09-30T09:10:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be29d67005d4de3f367c9d158193f2a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba721-315c-424a-bf20-4ff3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:57.000Z",
            "modified": "2015-09-30T09:10:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be2f2f3923ed50a5cb1228cbf18cdead']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba722-0940-42fc-94ab-4a0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:58.000Z",
            "modified": "2015-09-30T09:10:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be30a51f0eda1860b2d9dc1903372cf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba722-2520-4760-8c5d-4d29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:58.000Z",
            "modified": "2015-09-30T09:10:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be40c915fc296537875851e8df44c6c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba723-7968-4288-8295-4d79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:59.000Z",
            "modified": "2015-09-30T09:10:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be4c4ff28c486877a728a8465e0eb294']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba723-62c8-4a5a-917d-43fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:59.000Z",
            "modified": "2015-09-30T09:10:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be502c9b1979f7fd5d7d9c964622a6dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba723-4208-4de0-8d22-49f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:10:59.000Z",
            "modified": "2015-09-30T09:10:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be58fda953d6e41c8b9ec6447b15a65f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:10:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba724-2454-4bb0-b0e7-4e17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:00.000Z",
            "modified": "2015-09-30T09:11:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be765a91cf9fbd35ea824751b48de8d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba724-3058-4f7a-a0b9-433d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:00.000Z",
            "modified": "2015-09-30T09:11:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be8c790ea1ff504f65267a406784dbea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba725-dee8-490d-a6cb-42ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:01.000Z",
            "modified": "2015-09-30T09:11:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'be9ca9aa8e2eeda84c6fd7282e1f8d0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba725-ba94-4bc2-b71d-4abe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:01.000Z",
            "modified": "2015-09-30T09:11:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bea382c0e9a1a303ee30dc84f0977a0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba725-8010-4b22-b6cf-4e00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:01.000Z",
            "modified": "2015-09-30T09:11:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'beb4c5d7ed35c6738dcec8bfa2d6faf0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba726-6d40-40e8-8dc4-410a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:02.000Z",
            "modified": "2015-09-30T09:11:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bebd05916575482491116ba7b5ea699f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba726-7a90-42c0-9ea9-41f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:02.000Z",
            "modified": "2015-09-30T09:11:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bec93212db78ff8c6d391ae62c42b267']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba726-a05c-48c9-91ff-4de2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:02.000Z",
            "modified": "2015-09-30T09:11:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bee63af7d3789df9ca88ddf118d82b17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba727-ab98-4f38-9394-44a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:03.000Z",
            "modified": "2015-09-30T09:11:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bef49bec40bc6fc712d997eadcbec112']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba727-ac24-4357-ba2f-43a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:03.000Z",
            "modified": "2015-09-30T09:11:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf0488cc5786530d9570fc1105101401']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba728-3908-4cb9-8d85-4b5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:04.000Z",
            "modified": "2015-09-30T09:11:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf1c25959ca5a38bdf0f0125c26fd89d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba728-b974-4158-b395-41f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:04.000Z",
            "modified": "2015-09-30T09:11:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf20dc2ef2d574523a4cd550e89ce283']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba728-a3c4-4c55-9ab7-4b94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:04.000Z",
            "modified": "2015-09-30T09:11:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf23d0be498fa143381a23a744a78758']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba729-96c4-4764-b2f2-44f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:05.000Z",
            "modified": "2015-09-30T09:11:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf324d5f3019c570693bc696ff9d86e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba729-17fc-41e3-8221-4703950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:05.000Z",
            "modified": "2015-09-30T09:11:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf396b8a9aaf40b94da4afc7ebeb061f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72a-a7bc-42ec-b3d5-4e4b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:06.000Z",
            "modified": "2015-09-30T09:11:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf3d717fce1a6b926564bd0b569dacb2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72a-4dd8-41e7-8681-4c22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:06.000Z",
            "modified": "2015-09-30T09:11:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf3d8cfbb6dcc54e61c06786924cbf1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72a-a25c-46c8-810e-4b0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:06.000Z",
            "modified": "2015-09-30T09:11:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf47dca64ce48e2e987a04f8d3f18cb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72b-b848-49a8-ab5f-4325950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:07.000Z",
            "modified": "2015-09-30T09:11:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf4f18d7ec0f4b030da6ef878d11dbd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72b-c73c-469b-b5a1-408b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:07.000Z",
            "modified": "2015-09-30T09:11:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf6588340e30fa4c67945d8c7c0ad788']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72b-4d60-4b4c-9fd1-443e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:07.000Z",
            "modified": "2015-09-30T09:11:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf8349fa58f720f5c8f0a7cbc725ff5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72c-b8c0-48e5-90a6-44a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:08.000Z",
            "modified": "2015-09-30T09:11:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf8650f91168f07c68b050a54af5cca8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72c-582c-4aa0-87ea-4f18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:08.000Z",
            "modified": "2015-09-30T09:11:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf8e3008b12c3700a7b8b3b9445d852c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72d-c880-4dbf-a449-43a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:09.000Z",
            "modified": "2015-09-30T09:11:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf8e3f9c6c59e29e66e4ffefeaece1b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72d-a854-409e-b5b3-461c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:09.000Z",
            "modified": "2015-09-30T09:11:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf8e731f4b6bd8acc327539752a1b788']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72d-1aac-4d32-8cf7-499a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:09.000Z",
            "modified": "2015-09-30T09:11:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf912c8597403263eed7b2a2afd67bab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72e-f9cc-404b-8c90-48ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:10.000Z",
            "modified": "2015-09-30T09:11:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bf92637e48427ee9fe60d6e912aeba00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72e-626c-4fc3-ad75-44d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:10.000Z",
            "modified": "2015-09-30T09:11:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfa61e00ff3087313f9ed7f1d8a9b82f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72e-cce4-4bd1-9159-4d11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:10.000Z",
            "modified": "2015-09-30T09:11:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfabb4e2054d26e84b9eabbed3893490']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72f-b168-4eca-9c9d-4011950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:11.000Z",
            "modified": "2015-09-30T09:11:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfb616f0fff7740d1af53c5687d5a07d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba72f-d128-4286-b616-4d66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:11.000Z",
            "modified": "2015-09-30T09:11:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfb758d274ede1a099ca491456350741']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba730-ae80-4a14-b4f9-4538950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:12.000Z",
            "modified": "2015-09-30T09:11:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfba49712a74a15343a71132cb15efed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba730-ac30-4d0e-a8f8-4c0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:12.000Z",
            "modified": "2015-09-30T09:11:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfbf2b9620c760e76c98271d6bfdeb79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba730-5364-40d2-bf76-4fec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:12.000Z",
            "modified": "2015-09-30T09:11:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfc1931355d97e76b00851ef87ac0d5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba731-c0bc-4ea1-b406-45b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:13.000Z",
            "modified": "2015-09-30T09:11:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfc8e615deab82a1310fe23e737b819f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba731-8be4-4454-8fde-4cc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:13.000Z",
            "modified": "2015-09-30T09:11:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfcfbabf36b2335a511a1b765da5c973']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba732-229c-453f-8e98-4816950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:14.000Z",
            "modified": "2015-09-30T09:11:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfd47b5495beb4c5e96f169477541818']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba732-d52c-4885-818c-4426950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:14.000Z",
            "modified": "2015-09-30T09:11:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfe3ad4c0ac19e321d940ca9af94eabb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba732-e910-4883-909b-4430950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:14.000Z",
            "modified": "2015-09-30T09:11:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfe762e73af6c0de11119b61aecd98d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba733-1bd0-4ea4-b8b2-452b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:15.000Z",
            "modified": "2015-09-30T09:11:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bfe88f384f9b40b4ec0c1168896e5be7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba733-3e58-4aa8-ab93-4773950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:15.000Z",
            "modified": "2015-09-30T09:11:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bff8660e6bcb782a56044285953b3b37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba733-d97c-4539-8a8c-4b11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:15.000Z",
            "modified": "2015-09-30T09:11:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'bffa06e3cd976efceeb646c56804753d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba734-1510-4463-823d-4682950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:16.000Z",
            "modified": "2015-09-30T09:11:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0017d6bff61e0eda0172f6934dd7981']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba734-25a8-4f6a-b420-4252950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:16.000Z",
            "modified": "2015-09-30T09:11:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c001bf7a053352051952800fd11516ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba735-1fa0-438f-8580-4179950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:17.000Z",
            "modified": "2015-09-30T09:11:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c00d0b3bbaa2ed07cc0ee2f003ecebf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba735-a6b8-47a0-aef8-4117950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:17.000Z",
            "modified": "2015-09-30T09:11:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c00db41a6aa9ff37bb32c15c4ca38e35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba735-611c-4519-8e2a-4623950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:17.000Z",
            "modified": "2015-09-30T09:11:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c017cb1b6ee923fad0250e073d501349']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba736-b940-4ce5-9f94-4e5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:18.000Z",
            "modified": "2015-09-30T09:11:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c01cfba5096a91831623a71ba477b15e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba736-f44c-4553-82e6-40af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:18.000Z",
            "modified": "2015-09-30T09:11:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c01e9c39570127749b4ac484188373a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba736-658c-4da4-afae-45f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:18.000Z",
            "modified": "2015-09-30T09:11:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c022ef2fb26e93db3c3750dc6cdb9d3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba737-b444-4f46-ae88-405d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:19.000Z",
            "modified": "2015-09-30T09:11:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c02fb97dfaac6ea74dc9f42dee5caa5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba737-e950-464a-bbcd-48eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:19.000Z",
            "modified": "2015-09-30T09:11:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c030d8ef4f6ef51dcb9cc991adcbf259']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba738-4560-4842-a339-4810950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:20.000Z",
            "modified": "2015-09-30T09:11:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0332d6d6f883ad9e9cb42d3e34f6266']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba738-1d8c-4bda-9ca0-46d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:20.000Z",
            "modified": "2015-09-30T09:11:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c038f08b68a2514457ad8071b09c4fe3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba738-4530-4dbb-979f-4867950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:20.000Z",
            "modified": "2015-09-30T09:11:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c03dd589b4ffee2319fccc8dab473a7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba739-89d8-4543-88e3-481d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:21.000Z",
            "modified": "2015-09-30T09:11:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c03e7a2dab23f6002e45f94a20002af5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba739-3680-4dc5-98d6-4337950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:21.000Z",
            "modified": "2015-09-30T09:11:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c043f61f794bb0c8fed50b862aef5bdd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73a-5234-42fc-9b92-49ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:22.000Z",
            "modified": "2015-09-30T09:11:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0442f3a4c42a43520afa29b13be537f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73a-6d28-4960-a2d9-499c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:22.000Z",
            "modified": "2015-09-30T09:11:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0526c1d2985beb0d28ad0f955253ee0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73a-57dc-48b9-8c73-46f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:22.000Z",
            "modified": "2015-09-30T09:11:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c066da2bd041b8c91072e4f4458b54d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73b-dcc0-4379-86ed-4ff1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:23.000Z",
            "modified": "2015-09-30T09:11:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c074372338a06c36fa8cefd994435389']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73b-9994-4320-9e3d-4591950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:23.000Z",
            "modified": "2015-09-30T09:11:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c07561e0b77bb9489ad008b01a6c0a29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73b-61bc-40a0-bd8a-4fc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:23.000Z",
            "modified": "2015-09-30T09:11:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c08c20ef6dc584e4ff9e0dcf4b816bd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73c-6618-47c5-89fb-475a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:24.000Z",
            "modified": "2015-09-30T09:11:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0928bfd527344aeea2ef2b81b3feeec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73c-3328-4826-8944-4d0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:24.000Z",
            "modified": "2015-09-30T09:11:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0a9e661858ce57732348813543abbe2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73d-e9ec-4682-9d2b-4ec0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:25.000Z",
            "modified": "2015-09-30T09:11:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0ace7ddea0048bb4326de39878bbcc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73d-c8e0-49e8-b14e-4cf0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:25.000Z",
            "modified": "2015-09-30T09:11:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0af5bba330bdbe6bf558a245489e672']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73d-2338-468a-a1fb-4aec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:25.000Z",
            "modified": "2015-09-30T09:11:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0b6f6e91c509f6a49282f296047b6d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73e-f8b4-4d6c-ab6a-45ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:26.000Z",
            "modified": "2015-09-30T09:11:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0bbe1dbf3f53e248679efdb7cfd2389']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73e-dbc4-433a-9e2d-4646950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:26.000Z",
            "modified": "2015-09-30T09:11:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0bee897246aaa48bfced1746f7c933b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73e-d6cc-4bbb-8277-47be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:26.000Z",
            "modified": "2015-09-30T09:11:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0bfce09ae56f2cc7d00db63dd634408']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73f-bdb4-4cd9-8797-4df9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:27.000Z",
            "modified": "2015-09-30T09:11:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0c88e818da65c44c8534f9bc074f30d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba73f-15d4-4d63-9e55-4a3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:27.000Z",
            "modified": "2015-09-30T09:11:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0d149a03370d57f5c4b9799af8e4ff1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba740-bd18-46c0-9453-4449950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:28.000Z",
            "modified": "2015-09-30T09:11:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0d7a08a9ce9556dfc483c7703dd7d33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba740-f394-466a-8f60-4205950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:28.000Z",
            "modified": "2015-09-30T09:11:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0dabe67497c55aab7b735fff329eb85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba740-3978-4f60-afbc-4ff0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:28.000Z",
            "modified": "2015-09-30T09:11:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0ea2f142f279332a62a8922ab555504']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba741-a4a4-4ec2-8223-41fd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:29.000Z",
            "modified": "2015-09-30T09:11:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c0efca060006f6ffc1c25661692cb4ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba741-f240-4298-af9a-493a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:29.000Z",
            "modified": "2015-09-30T09:11:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c102509b19d36e1b6d537d85918cdecb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba742-5ff0-458d-8b68-43d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:30.000Z",
            "modified": "2015-09-30T09:11:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c10da5a0c3261331df6268a6ea9b09e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba742-148c-4fed-bfcd-41f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:30.000Z",
            "modified": "2015-09-30T09:11:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c11ada913cd7029e454596f676fc794d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba742-72c4-4ead-8d1b-4ea8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:30.000Z",
            "modified": "2015-09-30T09:11:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c124d96552eb84d961cda4d1d93a2793']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba743-46b4-44f7-85ee-49a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:31.000Z",
            "modified": "2015-09-30T09:11:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c124e5830d1b63e40036841cf51394b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba743-a24c-4e41-a02f-45a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:31.000Z",
            "modified": "2015-09-30T09:11:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c129f1171f625204ec69e6caef1a4c8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba743-82dc-43e3-9168-4ba1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:31.000Z",
            "modified": "2015-09-30T09:11:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c12bbb73cc9e68553079f4d5606e68f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba744-7f64-42a7-baa7-4310950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:32.000Z",
            "modified": "2015-09-30T09:11:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c12eb3b76358a5c87eef08a78dfc8aae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba744-6094-4f48-a3b8-48e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:32.000Z",
            "modified": "2015-09-30T09:11:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c14599a5878613720a85feab9d068d0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba745-4048-463d-b5ad-484e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:33.000Z",
            "modified": "2015-09-30T09:11:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c15f13a27b60a241a73e7970acd67b4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba745-26b0-4a81-8fb7-4e42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:33.000Z",
            "modified": "2015-09-30T09:11:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c16f3658e60b9cae3fbe1d4f959e6a22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba745-fa20-41e4-9373-4752950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:33.000Z",
            "modified": "2015-09-30T09:11:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c1765ff61bd63281179fda2beeb72cc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba746-5c00-4a5a-a2bf-4740950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:34.000Z",
            "modified": "2015-09-30T09:11:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c187e3687ac13224732cdd1fa4078852']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba746-245c-42be-9b7a-4af4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:34.000Z",
            "modified": "2015-09-30T09:11:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c18a9e74449d7f27cb319277410103f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba747-9aac-4d3d-ab35-4026950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:35.000Z",
            "modified": "2015-09-30T09:11:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c18ec0ed99edb709bfbfe24256bf756a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba747-16d4-4c25-99b3-4b8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:35.000Z",
            "modified": "2015-09-30T09:11:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c1a532ce9b47ed8b869a89fbe73cc160']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba747-4cf8-42ee-b44d-4e5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:35.000Z",
            "modified": "2015-09-30T09:11:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c1ae88909876f9f31365e7a461dff17b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba748-fa68-4c69-9384-407b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:36.000Z",
            "modified": "2015-09-30T09:11:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c1b5166b6dcc804f0f0410dedba0404b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba748-2490-4c1e-94fd-4204950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:36.000Z",
            "modified": "2015-09-30T09:11:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c1beb887d5022e04356072e73939f166']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba748-6ddc-43d1-9e51-43a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:36.000Z",
            "modified": "2015-09-30T09:11:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c1c5ebe005a08bc2f0ea3cb043457b50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba749-6948-4c48-9277-44ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:37.000Z",
            "modified": "2015-09-30T09:11:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c1c5f04f01e9ab78a92952a5b6f2791f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba749-d764-41f5-ab88-4557950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:37.000Z",
            "modified": "2015-09-30T09:11:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c1c9bc27bf45b9b6eb62655bd7000b17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74a-c60c-4e80-b8f6-4789950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:38.000Z",
            "modified": "2015-09-30T09:11:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c1ce293738a8408c8a355c71ac3b3b65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74a-b2a8-4e80-b7cb-4adb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:38.000Z",
            "modified": "2015-09-30T09:11:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2052096988566523cee66093d77c19d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74a-b0d0-416d-a2be-4204950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:38.000Z",
            "modified": "2015-09-30T09:11:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c21d310123aad753c862e7d736429090']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74b-88d4-4da9-9d4b-41fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:39.000Z",
            "modified": "2015-09-30T09:11:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2297c4f9a8678158252e3ce1cd4c4d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74b-bdd0-4c3a-90f5-4eae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:39.000Z",
            "modified": "2015-09-30T09:11:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c22bb350e1b0a25086506aa72f3f0620']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74b-6aa8-490a-b73c-420a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:39.000Z",
            "modified": "2015-09-30T09:11:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c22d87e3d28ae7cb3547702f15e53595']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74c-b770-4a20-9bf9-4047950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:40.000Z",
            "modified": "2015-09-30T09:11:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c235abe8880d691f1e627e30ebdb1938']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74c-0e28-45d7-861a-4be7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:40.000Z",
            "modified": "2015-09-30T09:11:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c23ab0623de416002f5ad8282de701f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74d-8b68-45a2-9dcf-4cf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:41.000Z",
            "modified": "2015-09-30T09:11:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c23ad6b900fed91b5f98cec5370cca30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74d-30b8-48fe-84bf-4ecd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:41.000Z",
            "modified": "2015-09-30T09:11:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2440752f20aa0ae162af565ae678ece']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74d-e40c-4c2e-a873-424b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:41.000Z",
            "modified": "2015-09-30T09:11:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c245d1ee52a080c67f531cb0cc9ec411']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74e-de18-4b0e-b3f3-4cfd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:42.000Z",
            "modified": "2015-09-30T09:11:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c25c00d6eeee188526649860d72c14cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74e-16b4-470a-93e4-4e50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:42.000Z",
            "modified": "2015-09-30T09:11:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c26349df476c8dc9bd448bd0a63fc7d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74e-3718-4999-8a58-44dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:42.000Z",
            "modified": "2015-09-30T09:11:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c26981c6ad25bdb0954caa06ab29b6b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74f-3650-44d5-b561-408b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:43.000Z",
            "modified": "2015-09-30T09:11:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c269e6066228127cb3fbd87e00012c40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba74f-d2dc-4324-841b-42a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:43.000Z",
            "modified": "2015-09-30T09:11:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c269f1677437c7f923a01a95a1f6f6a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba750-07b4-47c7-99d9-41a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:44.000Z",
            "modified": "2015-09-30T09:11:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c269ffe34c82fcf1d446d4e4e1693852']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba750-a6fc-4737-a8d8-4fad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:44.000Z",
            "modified": "2015-09-30T09:11:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c26e16336e24a23c3165fb81d6268899']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba750-4e7c-4779-9a6e-48bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:44.000Z",
            "modified": "2015-09-30T09:11:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c27bc3f5d51fad8c130320283109d27a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba751-1a30-4158-9448-4aca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:45.000Z",
            "modified": "2015-09-30T09:11:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c27c9fb20fd20a8dcf92347c16edff77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba751-82cc-43e4-8cc3-4530950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:45.000Z",
            "modified": "2015-09-30T09:11:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2804164dcf19be8be14944594c2f7bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba752-87f8-4162-acb2-45c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:46.000Z",
            "modified": "2015-09-30T09:11:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2862dd6994eeaa9f11d687fa2af80ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba752-08e0-4af0-9174-4f89950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:46.000Z",
            "modified": "2015-09-30T09:11:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2947f628f643cc3df682ccbe7f5925b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba752-0c20-49ed-a3be-4524950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:46.000Z",
            "modified": "2015-09-30T09:11:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c29f3f595bf14b1e01a14197580b6f54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba753-21e8-4cef-82d1-424c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:47.000Z",
            "modified": "2015-09-30T09:11:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2a7c753d836e0c4041cbe37ae887b2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba753-7dc8-45ae-a74d-4bd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:47.000Z",
            "modified": "2015-09-30T09:11:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2b488f408171bd2392fda6766d4f467']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba753-9a18-4677-9f1b-4a28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:47.000Z",
            "modified": "2015-09-30T09:11:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2cb64700412def46d089ed4d8ef9e27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba754-3670-4f70-a691-4797950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:48.000Z",
            "modified": "2015-09-30T09:11:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2df0d3e7ff52a8674284524cadcbb68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba754-82f0-4701-a27f-45f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:48.000Z",
            "modified": "2015-09-30T09:11:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2e4d7c229814195e8cae498c3315e4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba755-fd10-4834-966a-4776950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:49.000Z",
            "modified": "2015-09-30T09:11:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2e6df93fc3e6936c082e5f8f093626b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba755-2b50-427f-a364-47af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:49.000Z",
            "modified": "2015-09-30T09:11:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2f4cd3cda7f4152ded071d9aa786abb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba755-7b14-428f-9a7f-4b43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:49.000Z",
            "modified": "2015-09-30T09:11:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c2fd936150093731096fc46a30e45e19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba756-c6cc-4867-ac34-4acf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:50.000Z",
            "modified": "2015-09-30T09:11:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c302d17cac1e4365e0f85e688e9aebcc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba756-45cc-47c2-8bcd-4c60950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:50.000Z",
            "modified": "2015-09-30T09:11:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3066fea4b59334ba05dd4adee040272']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba757-36d8-47d9-8f22-4e94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:51.000Z",
            "modified": "2015-09-30T09:11:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c30f2b39ef6e514fdb77e2757d629525']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba757-0dc0-461f-815e-42b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:51.000Z",
            "modified": "2015-09-30T09:11:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c31748c627f40e7f0c6beef55a833d32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba757-d91c-44de-ae88-454c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:51.000Z",
            "modified": "2015-09-30T09:11:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c32425a9fcd6839e6dd151fe766c6eba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba758-f084-445c-a31d-4b7f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:52.000Z",
            "modified": "2015-09-30T09:11:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3243dc9825e8d5b1c47334ca4b97d1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba758-9f24-4bf0-83d1-4449950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:52.000Z",
            "modified": "2015-09-30T09:11:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c33e433145933216520aed43a10d3f01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba758-abc0-42ff-8be6-496b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:52.000Z",
            "modified": "2015-09-30T09:11:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c340134047a7a64d08f0ba8242038103']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba759-2308-4ff1-9ffa-4ce2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:53.000Z",
            "modified": "2015-09-30T09:11:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c34f8ffaaa1506bdc6d7d83b9d477e07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba759-8850-481d-84fd-49fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:53.000Z",
            "modified": "2015-09-30T09:11:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c350744cabc534e34a39cd5562338137']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75a-5608-4959-a588-46e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:54.000Z",
            "modified": "2015-09-30T09:11:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c395bf1939aaddac92c2ebc232602105']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75a-59cc-4119-8b63-4a80950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:54.000Z",
            "modified": "2015-09-30T09:11:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c39cec864646792eb2942fc0388f7ec8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75a-5e68-4ec0-bf13-4eb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:54.000Z",
            "modified": "2015-09-30T09:11:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3a33065c40506c9f49da2fcaacec9e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75b-39fc-4648-bd93-479f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:55.000Z",
            "modified": "2015-09-30T09:11:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3a535cbb330205963d4a5c2cf4b9c5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75b-6bf8-4faf-b252-43e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:55.000Z",
            "modified": "2015-09-30T09:11:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3a62dc0eb8c0fe6ab730cc1168a45a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75b-a780-400f-96c8-4489950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:55.000Z",
            "modified": "2015-09-30T09:11:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3aaac5325d5286d1934bc161544a453']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75c-bdfc-4aa2-8aec-4509950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:56.000Z",
            "modified": "2015-09-30T09:11:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3b8d67a76d1edf46ba74ac62ee2a4cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75c-b500-4264-84fc-459e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:56.000Z",
            "modified": "2015-09-30T09:11:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3bc95c17e4433b1df5ee229cc82e6b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75d-2a1c-4882-8471-4f81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:57.000Z",
            "modified": "2015-09-30T09:11:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3c57e8f4e62fd04d67540d77b9d2598']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75d-d408-4bd3-9c95-4b08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:57.000Z",
            "modified": "2015-09-30T09:11:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3c6c713b466986eca8a5cae09921319']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75d-8e28-40e0-831d-4510950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:57.000Z",
            "modified": "2015-09-30T09:11:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3c6d9e256712baff30ff911e430da49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75e-e070-48b4-90ed-491d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:58.000Z",
            "modified": "2015-09-30T09:11:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3dd9ace7cd17211d6421ba08db4e136']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75e-4610-4f1c-a4f9-4fb5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:58.000Z",
            "modified": "2015-09-30T09:11:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3e146512a88668d79324e2f112bda8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75f-008c-4732-8bc8-4e36950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:59.000Z",
            "modified": "2015-09-30T09:11:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3e54fdb6b03eb97682de1a361e68e15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75f-b240-4f6c-be4a-459a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:59.000Z",
            "modified": "2015-09-30T09:11:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3ebded4c292094538425b3ba110ac68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba75f-f9b0-4328-ac48-410b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:11:59.000Z",
            "modified": "2015-09-30T09:11:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3ed4fcdc67af527888bb8ccd4284e96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:11:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba760-41e0-4d09-a864-47a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:00.000Z",
            "modified": "2015-09-30T09:12:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3eef66d723a0e09bc11a57fadade22d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba760-6d80-4d49-bdef-4184950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:00.000Z",
            "modified": "2015-09-30T09:12:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3f33d7812f6fd54df55f31f36ba37d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba761-6600-4287-9d4d-4fe3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:01.000Z",
            "modified": "2015-09-30T09:12:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c3f690dd75377567a9616207b14f832f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba761-ce40-454b-998a-414d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:01.000Z",
            "modified": "2015-09-30T09:12:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4049273aab0382aa0ecab3f3e64b909']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba761-213c-40f5-9777-40f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:01.000Z",
            "modified": "2015-09-30T09:12:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c40b470b0bbaff495207c61050fd17b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba762-f190-43fb-962a-4a74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:02.000Z",
            "modified": "2015-09-30T09:12:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4224fc01f00c931ef14bc87a3c3f844']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba762-d8e8-426c-83a7-441f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:02.000Z",
            "modified": "2015-09-30T09:12:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4272abe211c13e66b23ede4bdd9454d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba762-1758-4c15-8a7e-4c8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:02.000Z",
            "modified": "2015-09-30T09:12:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c430fcf354c83c61d277e33d6d5cf305']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba763-b320-4814-b74c-47bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:03.000Z",
            "modified": "2015-09-30T09:12:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c44394878690d15efa4255ea2d5e4f04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba763-f2d8-4aa9-a79f-49cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:03.000Z",
            "modified": "2015-09-30T09:12:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c444c425756ef8c6ccacc781ec3bd32d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba764-3218-46c2-9919-4e2f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:04.000Z",
            "modified": "2015-09-30T09:12:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c450ed478ffa988091e8a894db1e0251']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba764-1284-4a0c-85e2-446d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:04.000Z",
            "modified": "2015-09-30T09:12:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c45bfde9de94c201f589b70fa35f55b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba764-f450-4cee-b0ce-43a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:04.000Z",
            "modified": "2015-09-30T09:12:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c46a98a5db936993092d5b7eac3180e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba765-93c4-4157-9c86-4ca4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:05.000Z",
            "modified": "2015-09-30T09:12:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c46f2d14faa217120375564b173a3ddf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba765-b8c4-4b66-bfa9-46c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:05.000Z",
            "modified": "2015-09-30T09:12:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c47c4b0ecb304f28b90853ec5eeb774c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba765-428c-46dd-99fc-4c86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:05.000Z",
            "modified": "2015-09-30T09:12:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c47cb1af2080400af31c7e64fbd46e28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba766-366c-4316-9411-4dde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:06.000Z",
            "modified": "2015-09-30T09:12:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c483e26c6cff4f51cf97ce1b316ee229']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba766-f0cc-443d-b804-4edc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:06.000Z",
            "modified": "2015-09-30T09:12:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4892faf578befa3f946905336f3c5a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba767-7ba0-42e1-8197-4a96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:07.000Z",
            "modified": "2015-09-30T09:12:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4968945b0e1c08761947a31708a4f45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba767-d81c-4cca-9f5a-43ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:07.000Z",
            "modified": "2015-09-30T09:12:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c49ddf3e79a9c96f2430112105e16ffb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba767-9fb0-4541-abf2-4128950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:07.000Z",
            "modified": "2015-09-30T09:12:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4a7ec32064bc816a505121e7902ef97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba768-aaf0-4d56-84ac-4af5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:08.000Z",
            "modified": "2015-09-30T09:12:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4ac177993f63292cdc69432b88456f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba768-0adc-4bbe-ba70-4dde950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:08.000Z",
            "modified": "2015-09-30T09:12:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4b1f943a04d6e7c550d660aa6862ab6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba769-3e34-4f72-ae9a-4cbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:09.000Z",
            "modified": "2015-09-30T09:12:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4b2f3a73648fa790f11426bccc5faf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba769-2868-42ac-9412-4291950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:09.000Z",
            "modified": "2015-09-30T09:12:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4b701c6604b560dd459536f7ccc4998']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba769-acd0-492b-b792-4d43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:09.000Z",
            "modified": "2015-09-30T09:12:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4b726f4b3ca5623d8b55e6c8cee0de0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76a-d980-42ab-83f2-4b3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:10.000Z",
            "modified": "2015-09-30T09:12:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4d6962fc5059b9f6b3889468bbfff7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76a-b24c-4017-8bb6-4961950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:10.000Z",
            "modified": "2015-09-30T09:12:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4dacd706a1a81c350d050e623c57bd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76b-78b8-4da7-9373-4b2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:11.000Z",
            "modified": "2015-09-30T09:12:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4e19d2ab26c78cf64c2d9b33a12163f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76b-89ac-4617-954b-4798950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:11.000Z",
            "modified": "2015-09-30T09:12:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4e58280632b0a9aa23fbb63a500ae14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76b-00f8-4b4c-a8a2-46f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:11.000Z",
            "modified": "2015-09-30T09:12:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4ebada580faca8861338316a72e861e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76c-8d78-4980-86f2-44bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:12.000Z",
            "modified": "2015-09-30T09:12:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c4f1dd72a89f69403c9869e52a2325a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76c-92d0-4952-9f3f-4ec6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:12.000Z",
            "modified": "2015-09-30T09:12:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c50918a5008e51f619d6cf393c3b13a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76c-e204-45a8-8e68-489b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:12.000Z",
            "modified": "2015-09-30T09:12:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c50e17a4e781ffd9cf71d18dc97e2b2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76d-7da4-4f39-83fb-46a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:13.000Z",
            "modified": "2015-09-30T09:12:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c50f1f79436b4050ab22205141ae6479']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76d-2320-4a8a-8d15-473b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:13.000Z",
            "modified": "2015-09-30T09:12:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c526859cdf5ed41b18eb85e33e0b741c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76e-02f8-4bbc-a564-4e6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:14.000Z",
            "modified": "2015-09-30T09:12:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c52e0b34b61e86343317e7a4930a6d80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76e-8bfc-4c6a-b9f1-4b6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:14.000Z",
            "modified": "2015-09-30T09:12:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c53ea0da2159bae8f78c0cdf108b5d62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76e-4714-4223-b1e3-4a76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:14.000Z",
            "modified": "2015-09-30T09:12:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5403c63e186c9f06b4a900d533e0967']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76f-0884-4490-99d4-43cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:15.000Z",
            "modified": "2015-09-30T09:12:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c54044197ca177d5da855edde84c326c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba76f-a2fc-47d1-ad48-4f92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:15.000Z",
            "modified": "2015-09-30T09:12:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c54e7b97c073c22a2fe371864ebc97ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba770-7228-4467-87c0-411a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:16.000Z",
            "modified": "2015-09-30T09:12:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c562c21b385b6f4f98415e6ee58396e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba770-3b54-4814-ac8e-467c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:16.000Z",
            "modified": "2015-09-30T09:12:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c563deba09ba9801557091d299bca862']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba770-eb80-4208-80d2-4859950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:16.000Z",
            "modified": "2015-09-30T09:12:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c569bd7aca121c816f2d38695ebedb8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba771-2e68-44aa-bd54-4d93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:17.000Z",
            "modified": "2015-09-30T09:12:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c56cebf50ce01b5e235d5ac2bb2bc675']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba771-ba48-4d7b-8ab8-4c51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:17.000Z",
            "modified": "2015-09-30T09:12:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c578ca6e47897a01416b2b3ac7bc3f5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba771-8178-4cc3-9941-430f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:17.000Z",
            "modified": "2015-09-30T09:12:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c58084a95d24b88d4b5f8961ef322d2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba772-26f4-487a-8afd-4a9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:18.000Z",
            "modified": "2015-09-30T09:12:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c590dd3c437a6aef5bc03b63e2cf8722']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba772-8674-45bf-b99e-43f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:18.000Z",
            "modified": "2015-09-30T09:12:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c592e5127120d5836a1f5821749a7903']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba773-7e18-44cb-b0ca-44b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:19.000Z",
            "modified": "2015-09-30T09:12:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c59604d33d0f5823dbbbf720be4d58e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba773-920c-42a8-a262-4205950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:19.000Z",
            "modified": "2015-09-30T09:12:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c599c8d2d8dc76e55d4c9f18648e9b8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba773-14f8-4c3b-bc9e-485c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:19.000Z",
            "modified": "2015-09-30T09:12:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5a225266a8b384f72e5b5980bbefce3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba774-1f90-4bfa-a8f2-4bf2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:20.000Z",
            "modified": "2015-09-30T09:12:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5a3dc44818734f9b1775993a1587535']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba774-4668-4c32-aeed-42d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:20.000Z",
            "modified": "2015-09-30T09:12:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5b0c159343d30b28cc3d4b12da2f85d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba774-977c-45df-b77b-4e78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:20.000Z",
            "modified": "2015-09-30T09:12:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5b3b7f58faf0b7a831c31a2ea103163']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba775-2b14-42e4-8664-4eda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:21.000Z",
            "modified": "2015-09-30T09:12:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5b53db9fafed43fb2b93dff1f5ae2a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba775-7594-44b5-8ed9-468e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:21.000Z",
            "modified": "2015-09-30T09:12:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5b9c7ba11000870a2dad73bed3ddbc6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba776-5c10-4381-91dd-4a33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:22.000Z",
            "modified": "2015-09-30T09:12:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5bf5222ab4fb17bd6a0d35e8192b6fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba776-d8e0-40dc-99d7-47a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:22.000Z",
            "modified": "2015-09-30T09:12:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5c0318a36d3cac16a1e92712050f682']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba776-f860-4294-a22d-45d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:22.000Z",
            "modified": "2015-09-30T09:12:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5d7f1c87cb8058133ea22f25016bfc4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba777-b318-4dc9-8181-4769950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:23.000Z",
            "modified": "2015-09-30T09:12:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5d9c3cb0ccc9f9c2acec41c1a62a172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba777-198c-44f7-bda0-4ca4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:23.000Z",
            "modified": "2015-09-30T09:12:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5e44b92f9ee5ee369589a0109f68b4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba778-5900-4d47-a354-4041950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:24.000Z",
            "modified": "2015-09-30T09:12:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5e6294d2f5f0dafd952d9d30803f58e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba778-08a8-4abc-a673-4a59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:24.000Z",
            "modified": "2015-09-30T09:12:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5e654e0dc6512b519c22efb583ef895']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba778-50e4-48d1-b2ee-45b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:24.000Z",
            "modified": "2015-09-30T09:12:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5eba092d02053678c09f6d97778a1f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba779-7ae0-4cc2-901d-4e5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:25.000Z",
            "modified": "2015-09-30T09:12:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5f59a2f760515195123d9bb178409dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba779-1c6c-42bd-88f1-4bbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:25.000Z",
            "modified": "2015-09-30T09:12:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5f88f9c7d571dd57c314058ea51b67e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba779-df88-4685-8da5-4e97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:25.000Z",
            "modified": "2015-09-30T09:12:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c5fa47158ef6f1ed781fe41ba11cc0b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77a-7808-4d1a-83de-4be8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:26.000Z",
            "modified": "2015-09-30T09:12:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6104051b31d71c613d9df6eed418cc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77a-872c-453c-bce5-4c29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:26.000Z",
            "modified": "2015-09-30T09:12:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c61a61cdac870e73621650c83790230e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77b-e604-4852-9524-4843950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:27.000Z",
            "modified": "2015-09-30T09:12:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c61a94c5dafc6c14fbba04099bb15f46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77b-fdf4-41e4-9cea-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:27.000Z",
            "modified": "2015-09-30T09:12:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c62e495d173ecb4904d54d711c597391']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77b-a240-411a-89ea-4dae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:27.000Z",
            "modified": "2015-09-30T09:12:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c633b002dde6f15c91ccb5e6ecfb10af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77c-d62c-4605-87f2-4bc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:28.000Z",
            "modified": "2015-09-30T09:12:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c647af78f3e5a464cd41f9551cbba0c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77c-d6e4-4cdd-a68d-4463950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:28.000Z",
            "modified": "2015-09-30T09:12:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6524565d47397a557b04e86129df71b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77c-8ccc-4241-b407-4013950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:28.000Z",
            "modified": "2015-09-30T09:12:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6645ff4f1fb105362e84e7820a08417']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77d-dbc4-4997-9a59-417f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:29.000Z",
            "modified": "2015-09-30T09:12:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c66aef8a12535cc177fb1c4c3a698890']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77d-f658-44c5-bdc6-4a8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:29.000Z",
            "modified": "2015-09-30T09:12:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6729d64a658043db3dc0f868b02fac5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77e-374c-4922-b002-4e33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:30.000Z",
            "modified": "2015-09-30T09:12:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c682c3e76b86586282698545b75dc8fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77e-7c94-4598-b97c-40b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:30.000Z",
            "modified": "2015-09-30T09:12:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6855b2775a9f5015786798efacde6fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77e-7594-4bd3-8b83-4e67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:30.000Z",
            "modified": "2015-09-30T09:12:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6894535307d5d45a2c3c4db0acef134']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77f-7374-4917-b2bb-4a9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:31.000Z",
            "modified": "2015-09-30T09:12:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c69a5ae68debbbeb601c9599195d3636']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba77f-fb98-48dd-b64c-43f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:31.000Z",
            "modified": "2015-09-30T09:12:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6a5185d39a7beb6f3e82433976dca3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba780-83fc-4249-a3c8-4fcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:32.000Z",
            "modified": "2015-09-30T09:12:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6b1a99f2d380b72e141432b5c090f6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba780-695c-418b-a202-40b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:32.000Z",
            "modified": "2015-09-30T09:12:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6c99df2ab89a5c6e538ade1f9273fee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba780-853c-40f0-898c-417b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:32.000Z",
            "modified": "2015-09-30T09:12:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6dff48a0cc08450862a5395c641f7b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba781-d39c-470b-b651-4e0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:33.000Z",
            "modified": "2015-09-30T09:12:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c6e12786e4c798b3f1b2695ff16a7ba6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba781-5574-4645-a5cf-4803950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:33.000Z",
            "modified": "2015-09-30T09:12:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7030abd1e1c2122531f355f89955eed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba781-b6b8-45c8-b699-4c01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:33.000Z",
            "modified": "2015-09-30T09:12:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c708a45d0eeaff804ab82f5ae4a04a7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba782-6114-4a77-a768-4bc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:34.000Z",
            "modified": "2015-09-30T09:12:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c714f51f4e7f712098fecf6832a1e3c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba782-ab84-466b-b10e-4dbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:34.000Z",
            "modified": "2015-09-30T09:12:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c726e1e0ad128bfb626ff3719e200252']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba783-ff18-4adc-a405-4cbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:35.000Z",
            "modified": "2015-09-30T09:12:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c72873b672192ee9abd301f9b2b69799']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba783-a57c-4f9e-ba19-45f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:35.000Z",
            "modified": "2015-09-30T09:12:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c728ddc2b3bdebb3eb00d3a37f53333d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba783-5f9c-44f8-b313-48f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:35.000Z",
            "modified": "2015-09-30T09:12:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c72c905c8931bfaa685660ee9c970d72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba784-d87c-4752-931a-4613950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:36.000Z",
            "modified": "2015-09-30T09:12:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c74073bff34f1fd2e63f5c0fa558aebf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba784-77a0-4131-8856-426d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:36.000Z",
            "modified": "2015-09-30T09:12:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c74866270f78b6bb9d610b7d92171644']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba784-cf70-4510-8f7b-4434950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:36.000Z",
            "modified": "2015-09-30T09:12:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7591b55e36a9d6236a6a9a0984109f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba785-14b0-4818-a40a-4096950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:37.000Z",
            "modified": "2015-09-30T09:12:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c75b0ee9202cb0289be66d48541e7b37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba785-9314-4ae0-acb5-4e35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:37.000Z",
            "modified": "2015-09-30T09:12:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c75da9507ec26eb93bd267ddfc127ed0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba786-bfb8-4910-916e-4fb5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:38.000Z",
            "modified": "2015-09-30T09:12:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c75f91efea4e40221da29e2f739ab9cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba786-a4a0-4d1b-a2e4-4196950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:38.000Z",
            "modified": "2015-09-30T09:12:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c76c17a5a23a41d1d7fb95f0bf6e8f94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba786-cb3c-418a-a524-451a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:38.000Z",
            "modified": "2015-09-30T09:12:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c77c80f763df85a0d249b187c9284d82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba787-f7fc-4a16-80e3-4409950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:39.000Z",
            "modified": "2015-09-30T09:12:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7832811c95ea041cbc423074bd12df4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba787-dc14-4753-a321-4615950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:39.000Z",
            "modified": "2015-09-30T09:12:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c78b3ce6a4287e71ead07b9d31121124']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba788-e458-47a9-9b2d-484b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:39.000Z",
            "modified": "2015-09-30T09:12:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c78ded380e9ddcc2ca5ed765162a7faf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba788-e684-46fd-9260-4f5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:40.000Z",
            "modified": "2015-09-30T09:12:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c79bdd4f2043639804ed4ab5763af6dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba788-1b68-44c3-8c17-4754950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:40.000Z",
            "modified": "2015-09-30T09:12:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7a8764f42e95ba163a52ac015c12578']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba789-b258-45ee-9204-4153950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:41.000Z",
            "modified": "2015-09-30T09:12:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7b9ed2e087e6d1ee489082555bc84e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba789-b754-4511-bb50-4b3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:41.000Z",
            "modified": "2015-09-30T09:12:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7bc76fe8daa5afa45918277d6e6e041']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba789-b2b8-4dfc-a0de-45ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:41.000Z",
            "modified": "2015-09-30T09:12:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7cd4e2d75caa140c022ddcb0f966a10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78a-7b88-4df9-8391-444e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:42.000Z",
            "modified": "2015-09-30T09:12:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7cfbac8635d55ede0292993a2a688d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78a-cb28-4548-8951-4c70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:42.000Z",
            "modified": "2015-09-30T09:12:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7d0203df595f256d0ef00fd7aa8d792']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78b-b5a4-4a7e-b1ec-46b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:43.000Z",
            "modified": "2015-09-30T09:12:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7d5d9a36222eb301d66828ae245b6a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78b-9280-453d-a308-4b57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:43.000Z",
            "modified": "2015-09-30T09:12:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7e3d2e8190f6c7157e122d07545a8bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78b-4ac8-4a48-a824-4666950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:43.000Z",
            "modified": "2015-09-30T09:12:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7e8c42bf2516f72e998c43f831fe553']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78c-a44c-4e0c-96b6-47a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:44.000Z",
            "modified": "2015-09-30T09:12:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c7ee52785bd5ac5819252fa346e92c6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78c-0498-4d87-bddb-40a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:44.000Z",
            "modified": "2015-09-30T09:12:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c815a28f95bc5c6fff155289f47173dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78c-10ac-41b8-be79-49dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:44.000Z",
            "modified": "2015-09-30T09:12:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c815cc29e7b256969816b64e5d91aa8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78d-e190-4a31-ab3a-4a26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:45.000Z",
            "modified": "2015-09-30T09:12:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c82072dfab38a0f667a6e9608a851a8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78d-610c-4744-8317-4b11950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:45.000Z",
            "modified": "2015-09-30T09:12:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c82c3e90cc6a772479c5b57513bc7446']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78e-5848-4855-ab40-4949950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:46.000Z",
            "modified": "2015-09-30T09:12:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8329d80b08bbe8153d4b9201ff0b879']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78e-3db4-4980-8c1c-43cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:46.000Z",
            "modified": "2015-09-30T09:12:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c845c59320a4012da1962ef65ad171dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78e-7d2c-4288-8ac2-49a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:46.000Z",
            "modified": "2015-09-30T09:12:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8482198a6d79307632f0dae946f691c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78f-5cac-40a8-a3b2-4fc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:47.000Z",
            "modified": "2015-09-30T09:12:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c848b853229f46392edd7cf9ca043f2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba78f-d604-4d0b-874d-4b6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:47.000Z",
            "modified": "2015-09-30T09:12:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c855f4b20c0fd02856f69b6225d09188']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba790-4f9c-4c87-a4ef-4e4e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:48.000Z",
            "modified": "2015-09-30T09:12:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c857a9ac412ec19afb23d757ece86c26']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba790-aba8-410d-bba9-469c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:48.000Z",
            "modified": "2015-09-30T09:12:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c861a7c53b640eff6a018928456ddeeb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba790-aad8-4300-ad75-4bb6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:48.000Z",
            "modified": "2015-09-30T09:12:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c86318c6f9567e888c03b7662cd38a3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba791-40ac-4b8b-a1c0-47a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:49.000Z",
            "modified": "2015-09-30T09:12:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c86939fbf886e23d2c274b0a29865953']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba791-dadc-4f0a-b50a-477c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:49.000Z",
            "modified": "2015-09-30T09:12:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c86ac24e571b4a0a1860c58db1609f9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba791-56a4-44fe-b10c-46b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:49.000Z",
            "modified": "2015-09-30T09:12:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c87174ddd67450c1e5b714e11a2948a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba792-d958-4b25-8346-434c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:50.000Z",
            "modified": "2015-09-30T09:12:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c87ca4541e86bdbbde627e6736e013bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba792-a1fc-4776-ab62-461c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:50.000Z",
            "modified": "2015-09-30T09:12:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c87d5d5c3455bc81de19d259c34d45f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba793-4398-46cf-a317-43bc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:51.000Z",
            "modified": "2015-09-30T09:12:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c87f1514ebcd51ab06ca458f2e164591']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba793-9cc8-46f7-89b4-4e64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:51.000Z",
            "modified": "2015-09-30T09:12:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c88d0070145a26ef9f22f8db9050c6e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba793-ead0-4d6b-aea4-4a61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:51.000Z",
            "modified": "2015-09-30T09:12:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c88ffd8644a2009e6d3c64cc6d5288f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba794-ac3c-4f64-9630-441c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:52.000Z",
            "modified": "2015-09-30T09:12:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8941a00906f705321d92af671e98cfb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba794-5530-4a58-9087-43a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:52.000Z",
            "modified": "2015-09-30T09:12:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8a3d8904f44045eb1b4bddf356c930a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba794-fd98-4633-a22c-4165950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:52.000Z",
            "modified": "2015-09-30T09:12:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8b81b89be44261a684127ac3b48b40e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba795-7e68-4e13-a027-4063950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:53.000Z",
            "modified": "2015-09-30T09:12:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8c2ae312ce049e7d1ebfa9f4cbd62e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba795-a720-471e-b9c3-426b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:53.000Z",
            "modified": "2015-09-30T09:12:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8c37887293ed447edac42e483959338']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba796-7bd8-4e76-b449-4129950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:54.000Z",
            "modified": "2015-09-30T09:12:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8c4033d7a0bebae86e12aef51fd962b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba796-54b4-411b-b57c-454c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:54.000Z",
            "modified": "2015-09-30T09:12:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8c8d1ffb2d3905779933867187bc391']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba796-3320-499c-9306-48f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:54.000Z",
            "modified": "2015-09-30T09:12:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8cc77d622091ed7eb2ff87c0dd0a8ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba797-2d70-4fce-9ca5-48ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:55.000Z",
            "modified": "2015-09-30T09:12:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8f6c1f972b703c4e6feb07e8c73701d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba797-58f4-4c16-ab93-47ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:55.000Z",
            "modified": "2015-09-30T09:12:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8f88f96fac4ca591f9bc0a5d5d93f22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba797-6e1c-4c0f-a9f1-4522950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:55.000Z",
            "modified": "2015-09-30T09:12:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c8fee5eeff59e90ffaca7268f8eab23c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba798-b170-4aaf-b91c-4ed8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:56.000Z",
            "modified": "2015-09-30T09:12:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c908d0b40f12b52a250b08b39d36c253']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba798-8d60-44c1-b9a9-412f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:56.000Z",
            "modified": "2015-09-30T09:12:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c91b775fc8e1e0d6a4232da3a730989e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba799-eec0-4b33-bea5-4b75950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:57.000Z",
            "modified": "2015-09-30T09:12:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c91c1d568dbdb615b749bbb6f4f88624']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba799-75d8-4fb5-af3b-42ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:57.000Z",
            "modified": "2015-09-30T09:12:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c91e00289cfaf60a4cd232db0d9c7fa3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba799-fb0c-4426-8903-4323950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:57.000Z",
            "modified": "2015-09-30T09:12:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9216dfd7fbc887c5bcf5a62df23f271']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79a-a488-4dfb-b17e-476a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:58.000Z",
            "modified": "2015-09-30T09:12:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c924cbfa1179734e846c5c9a3fc136e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79a-ebd8-481f-b8a9-44fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:58.000Z",
            "modified": "2015-09-30T09:12:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c94154d72252c7274cf173c298239451']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79b-4f74-4940-b002-4ac2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:59.000Z",
            "modified": "2015-09-30T09:12:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9711ef1867bf427676ad9a617a268c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79b-099c-4aa1-94e0-4ad9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:59.000Z",
            "modified": "2015-09-30T09:12:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9727dc838d0a520f34d6554824f2806']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79b-354c-4442-a276-4062950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:12:59.000Z",
            "modified": "2015-09-30T09:12:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c977be345554504962002cbbcab8f4fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:12:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79c-49e8-4c77-bd9f-477b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:00.000Z",
            "modified": "2015-09-30T09:13:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c98ce2e779803436ea5b151261a3d260']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79c-18f8-4820-8240-46df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:00.000Z",
            "modified": "2015-09-30T09:13:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c98ee9f065a9db2190b4477e70f740e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79c-3660-494c-9e24-4ff2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:00.000Z",
            "modified": "2015-09-30T09:13:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c98f98123641f47620b7ed14f28ce02d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79d-49dc-4549-9c28-4576950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:01.000Z",
            "modified": "2015-09-30T09:13:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c98ffc39e44905e77c086f68b38d78a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79d-13ac-444b-b330-4810950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:01.000Z",
            "modified": "2015-09-30T09:13:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c99351e76d6859a62733372b27c140a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79e-10a8-4dbd-bb8e-4c71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:02.000Z",
            "modified": "2015-09-30T09:13:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c99e177c1d626048d3efbbae3d306085']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79e-edcc-4841-a928-4c97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:02.000Z",
            "modified": "2015-09-30T09:13:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9a1ceeddc34b9e12df2ea2932e4ddff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79e-3830-4cc2-bdfc-4380950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:02.000Z",
            "modified": "2015-09-30T09:13:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9a3ca5e62d4ed7ddf03665a124b1b29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79f-5170-430c-8d8c-4771950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:03.000Z",
            "modified": "2015-09-30T09:13:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9d1b2aa03bc2dd9294bb3909fd67a40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba79f-a184-4f65-b677-43c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:03.000Z",
            "modified": "2015-09-30T09:13:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9d422564eaf9b87eba9a58ff574662d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a0-7c94-4906-819f-4a8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:04.000Z",
            "modified": "2015-09-30T09:13:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9e0f4b0736a7beb554a1b47499c266c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a0-17e8-44dc-bcd9-43b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:04.000Z",
            "modified": "2015-09-30T09:13:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9e6db39f75364fe592cf031fcc16b16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a0-22f4-40c0-8941-4b21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:04.000Z",
            "modified": "2015-09-30T09:13:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9ec79b8f198f08670841fa69dc5b0c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a1-e678-4424-900d-4ad1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:05.000Z",
            "modified": "2015-09-30T09:13:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9f247c5cc8a51ef051b68a6e69c92e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a1-cab8-467d-8d52-43d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:05.000Z",
            "modified": "2015-09-30T09:13:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'c9fe111aea630f9d28301b89e5ae3df2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a1-736c-4b65-bd50-492c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:05.000Z",
            "modified": "2015-09-30T09:13:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca055e428e48844fbc70572a31b0c135']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a2-ce98-410a-8f89-42d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:06.000Z",
            "modified": "2015-09-30T09:13:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca0ff5b7b63d7bf64da20d900aef5a42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a2-da90-44bb-90ef-45d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:06.000Z",
            "modified": "2015-09-30T09:13:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca119e0dfec6cfb2bdade6e418a29661']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a3-4d68-4540-a3ba-4844950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:07.000Z",
            "modified": "2015-09-30T09:13:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca1fb9b9f6f950fd95017022b20a6f8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a3-5c14-46ba-a524-405d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:07.000Z",
            "modified": "2015-09-30T09:13:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca20233684e2baa0fc08e3a1dadf8503']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a3-d978-42cf-a5c7-4047950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:07.000Z",
            "modified": "2015-09-30T09:13:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca25062cfc0cd5dfbc3c1bc614cec246']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a4-5890-4323-bcb0-49c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:08.000Z",
            "modified": "2015-09-30T09:13:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca41bb7c5ac91e70354cdc39837b6da1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a4-02f4-4bda-b31d-4e32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:08.000Z",
            "modified": "2015-09-30T09:13:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca44007d2b944e7f22612024c1a8b971']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a5-dab8-43bf-9162-44af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:08.000Z",
            "modified": "2015-09-30T09:13:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca48f5603039f756edd1bff53ae9158f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a5-b3e8-42db-9358-471f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:09.000Z",
            "modified": "2015-09-30T09:13:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca4a82f00a128d8ef1ddcf297edacafb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a5-7b68-415c-9fc2-442a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:09.000Z",
            "modified": "2015-09-30T09:13:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca4fd693cd9becab1c5a1921ab1cca92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a6-f824-41d8-8ee0-4b34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:10.000Z",
            "modified": "2015-09-30T09:13:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca53030c6fb90d89cb00acfc7a5e0201']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a6-8b04-49ea-b4eb-404a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:10.000Z",
            "modified": "2015-09-30T09:13:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca6022389850d88909c889eb90ea3395']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a6-46e8-4f4e-9e0e-40c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:10.000Z",
            "modified": "2015-09-30T09:13:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca6c47689a229dfbe3d78a446d0e5569']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a7-0838-4755-b30e-4111950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:11.000Z",
            "modified": "2015-09-30T09:13:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca7689552d8f2df44879b0f143724e3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a7-2e60-4cfa-b698-4e4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:11.000Z",
            "modified": "2015-09-30T09:13:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca77e80b4fb54baf69933a7cb80cdf0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a8-3384-4427-9434-448b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:12.000Z",
            "modified": "2015-09-30T09:13:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca7cd5d083373d3d3823b5a4b2fe80d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a8-0f00-4722-899a-442d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:12.000Z",
            "modified": "2015-09-30T09:13:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca7e3057c0eb28f81d4bb8ba641e3dac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a8-8310-45a0-bd3c-4e78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:12.000Z",
            "modified": "2015-09-30T09:13:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca86ec772079d70df892be35119033fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a9-bfac-49b2-af1b-4577950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:13.000Z",
            "modified": "2015-09-30T09:13:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca874539e47e448edaa6dc1cb2baecce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a9-8034-4281-8eab-4458950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:13.000Z",
            "modified": "2015-09-30T09:13:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ca8fac0d446cc1679185ab2566875e14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7a9-35e0-4190-8862-4514950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:13.000Z",
            "modified": "2015-09-30T09:13:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'caa3ab46901d676678aec3f4d0292569']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7aa-48e0-4a52-a9bf-4d67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:14.000Z",
            "modified": "2015-09-30T09:13:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'caafe0c6f65e2ae743a2b7934cad24a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7aa-f42c-4adf-8e8e-42e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:14.000Z",
            "modified": "2015-09-30T09:13:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cabeaec237905d9eaed8633c9e393b64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ab-7724-4dec-895f-4a16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:15.000Z",
            "modified": "2015-09-30T09:13:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cac73ead104b34f865faeb0bab8c48d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ab-8e94-4636-bbd8-4fd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:15.000Z",
            "modified": "2015-09-30T09:13:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cad7f6d622036865ff2c66131e009d9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ab-5f6c-4ca7-9594-4c0e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:15.000Z",
            "modified": "2015-09-30T09:13:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cadaa07e5bb73f5f30d1f32ed29ee8cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ac-de00-4d09-baed-49f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:16.000Z",
            "modified": "2015-09-30T09:13:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cadb42faf916e9df12184640bae262aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ac-5b34-4a9a-a55b-470f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:16.000Z",
            "modified": "2015-09-30T09:13:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cadf86ce96108ce42825d7ac5cc39377']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ac-fadc-456d-bffb-4980950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:16.000Z",
            "modified": "2015-09-30T09:13:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cae1ad8b41d49d6ce56b16385cc49b33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ad-a4f0-46db-a469-460f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:17.000Z",
            "modified": "2015-09-30T09:13:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cae7dfa8fcc644bcfe1e8027b9eb5ad0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ad-a82c-4246-83fa-43d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:17.000Z",
            "modified": "2015-09-30T09:13:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'caeb865a208a632e676bfca9d246729b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ae-42b8-47f2-9c15-4731950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:18.000Z",
            "modified": "2015-09-30T09:13:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'caee4185de015eee6655892ebe6cc68f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ae-befc-4dea-b0e6-4885950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:18.000Z",
            "modified": "2015-09-30T09:13:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'caf85051791c06ea59b752130f18f047']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ae-58a0-44af-a802-42dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:18.000Z",
            "modified": "2015-09-30T09:13:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb02254b1f428089e786982e30ca073b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7af-f92c-42a7-a537-430e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:19.000Z",
            "modified": "2015-09-30T09:13:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb0bcc6b3a70593b504e8460889d9c94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7af-28e8-4f17-afe3-416b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:19.000Z",
            "modified": "2015-09-30T09:13:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb0fa48b7b90daea3024bb3aba736262']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7af-a00c-416a-acef-4097950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:19.000Z",
            "modified": "2015-09-30T09:13:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb11fe8f1d2dbf7baa554a42408f7561']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b0-ba04-447d-83c3-488f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:20.000Z",
            "modified": "2015-09-30T09:13:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb26cd4c08800901dfb66b657a099910']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b0-afb4-4e38-a24b-4aa5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:20.000Z",
            "modified": "2015-09-30T09:13:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb2948dbc0e64abb377a612bed67a682']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b1-b8cc-4165-aad8-46cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:21.000Z",
            "modified": "2015-09-30T09:13:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb2fd7f44e27f5e70a0b87c7c3bb913a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b1-5488-4afa-87fa-40d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:21.000Z",
            "modified": "2015-09-30T09:13:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb3191cd636972215b70e0e868e46ec2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b1-9890-40d5-842b-49e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:21.000Z",
            "modified": "2015-09-30T09:13:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb33692487e79873716097ba8c66d6a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b2-5c88-4670-b154-4d80950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:22.000Z",
            "modified": "2015-09-30T09:13:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb345809c46081a211f412af9c37c7de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b2-0090-4e0e-8009-4be5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:22.000Z",
            "modified": "2015-09-30T09:13:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb37cc74d067c6f2254acb2db99d204f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b2-4ecc-4867-a82c-4cd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:22.000Z",
            "modified": "2015-09-30T09:13:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb3c33f4fe2b1a51cd1091c5deae27da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b3-f894-41e1-a114-45a9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:23.000Z",
            "modified": "2015-09-30T09:13:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb4d580c97b86664619bbca7dd43ac9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b3-8c58-4df0-bf3b-4777950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:23.000Z",
            "modified": "2015-09-30T09:13:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb5584c6fa76c33741a8270472734607']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b4-9f3c-405a-80b9-4685950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:24.000Z",
            "modified": "2015-09-30T09:13:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb6cb5e2511a70178544c21440d7985a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b4-0d1c-4f47-a5d2-448a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:24.000Z",
            "modified": "2015-09-30T09:13:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb6e96e392348635d13bfc948e516447']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b4-a92c-4e25-b11f-4b95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:24.000Z",
            "modified": "2015-09-30T09:13:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb70723ab8ae5c81bc42292b635ac5f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b5-2c5c-4d2d-b0fc-492a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:25.000Z",
            "modified": "2015-09-30T09:13:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb70c20c985814907d3a3c873c3062a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b5-61b4-4867-98a1-49a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:25.000Z",
            "modified": "2015-09-30T09:13:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb7372b32120af2878c41bdfa7a8bad3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b6-bb90-4a78-ac44-4bb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:26.000Z",
            "modified": "2015-09-30T09:13:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb742275472a3354a52e8694463ef477']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b6-31fc-4cee-8c4d-4f5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:26.000Z",
            "modified": "2015-09-30T09:13:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb7913dbc59d15a004066612d06f2fa1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b6-aee4-41c3-96f8-491d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:26.000Z",
            "modified": "2015-09-30T09:13:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb7efc6a6b952d2fde5748edc47d46cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b7-0e1c-47ff-b6ba-44a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:27.000Z",
            "modified": "2015-09-30T09:13:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb8206965810389341bc7fc53a9c7c73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b7-cdd0-4db1-9808-4a12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:27.000Z",
            "modified": "2015-09-30T09:13:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb956851327500902218f310b0cf7c87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b7-91b0-48b4-9247-4c41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:27.000Z",
            "modified": "2015-09-30T09:13:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cb9c9d4cd3d3ae58dbdc6b68a18a366a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b8-bb20-4e5a-9ce5-46a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:28.000Z",
            "modified": "2015-09-30T09:13:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cba0679dab9455715148c1fe0eab3ca6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b8-d5a8-43cb-9597-4051950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:28.000Z",
            "modified": "2015-09-30T09:13:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cbc45dfd30ae8104c1bfdb3c49de7ec0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b9-c0ac-49ba-a014-4898950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:29.000Z",
            "modified": "2015-09-30T09:13:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cbc98ef6eac08d7847a21be2b2608da4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b9-1d28-4cec-8118-4e66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:29.000Z",
            "modified": "2015-09-30T09:13:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cbd31447c463d3afd28396ad8990475c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7b9-c7e8-407a-9775-4774950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:29.000Z",
            "modified": "2015-09-30T09:13:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cbe2f7a40ca97b9131915f176728703e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ba-5584-4178-92f0-4f92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:30.000Z",
            "modified": "2015-09-30T09:13:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc093e45e95ff222cd43eb89f778fac9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ba-0c5c-455f-8738-4500950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:30.000Z",
            "modified": "2015-09-30T09:13:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc0a483185e9c37d86842a670c31f060']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ba-1a40-4a14-bb94-4c15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:30.000Z",
            "modified": "2015-09-30T09:13:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc1bb54980a8675894df1beca0a75df6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bb-9038-4ca7-b2bd-4360950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:31.000Z",
            "modified": "2015-09-30T09:13:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc1c359807840eb474833e5da1ace793']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bb-8478-4418-964f-499a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:31.000Z",
            "modified": "2015-09-30T09:13:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc22699f54221f1dc528b3f860b45dde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bc-f0c0-470b-bd1e-45a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:32.000Z",
            "modified": "2015-09-30T09:13:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc2d4d27dfaf40d964f37d9e7a03788b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bc-4ca0-4ec5-97ff-484a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:32.000Z",
            "modified": "2015-09-30T09:13:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc2f1b26d89dcc5eba5fed16d07da83f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bc-787c-4bfa-835f-4a3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:32.000Z",
            "modified": "2015-09-30T09:13:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc345b2474915309375af26287b04ea8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bd-087c-4499-ba0d-4e7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:33.000Z",
            "modified": "2015-09-30T09:13:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc383679781033096118dbc3d02bf55e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bd-5a28-446e-a757-45b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:33.000Z",
            "modified": "2015-09-30T09:13:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc430f89d7230836ff6ca476fe57ab4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bd-0b38-449b-b8a8-4714950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:33.000Z",
            "modified": "2015-09-30T09:13:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc44b26db0815d675866da4ed9fb06f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7be-70d4-4252-ad43-4ef1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:34.000Z",
            "modified": "2015-09-30T09:13:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc44b96c09c83f24e2300c8b37f6c531']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7be-69f4-49ee-a7a2-461a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:34.000Z",
            "modified": "2015-09-30T09:13:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc4948a36e22044f68cc6f1084e2712e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bf-62c0-43d0-b31f-47e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:35.000Z",
            "modified": "2015-09-30T09:13:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc5b58925bf9cfd4b5a3c7b48423b900']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bf-bcd8-4ae5-b3aa-46c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:35.000Z",
            "modified": "2015-09-30T09:13:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc686680c8e499155d9dc4f1cf55b60f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7bf-b8e8-4d26-aff2-42f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:35.000Z",
            "modified": "2015-09-30T09:13:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc698e19248a6413b38a7d5efe90485f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c0-2c94-4842-9731-4dbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:36.000Z",
            "modified": "2015-09-30T09:13:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc6b66b0e22bd762ad2910a3bb90c130']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c0-5a88-4129-8986-472e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:36.000Z",
            "modified": "2015-09-30T09:13:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc6bf0a0f963783edf6847fe70f816b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c1-c5d0-459e-8440-4c67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:37.000Z",
            "modified": "2015-09-30T09:13:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cc85df52fb091e58b0d40fbc6209be4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c1-e92c-4566-97df-4184950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:37.000Z",
            "modified": "2015-09-30T09:13:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cca22d0f26cb8c10486cfd49897abec2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c1-3660-4a30-97a5-42f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:37.000Z",
            "modified": "2015-09-30T09:13:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cca64cc9611f0012f9fb77dce7d6e691']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c2-6188-4a80-99d1-48bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:38.000Z",
            "modified": "2015-09-30T09:13:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ccb85f512a26e56c1a668f67db39afb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c2-f5d8-4203-b45b-42bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:38.000Z",
            "modified": "2015-09-30T09:13:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ccb9273a7cbbfbc74abf92831a9cf9ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c2-5d78-4448-829c-4fc1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:38.000Z",
            "modified": "2015-09-30T09:13:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ccc6255328de97421aee8bc908f09c1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c3-0ae8-47e3-9d57-4206950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:39.000Z",
            "modified": "2015-09-30T09:13:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ccc6ce0bcbc1bac1096d61e9d5db2ea2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c3-cfc8-47d6-b96c-4f17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:39.000Z",
            "modified": "2015-09-30T09:13:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ccc836204db73429ac35dacb07fd2478']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c4-7d9c-4bb1-9f01-4515950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:40.000Z",
            "modified": "2015-09-30T09:13:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ccd515944965bd6dcd98c743490eeaf0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c4-4e2c-40b2-9639-4718950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:40.000Z",
            "modified": "2015-09-30T09:13:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ccdc52b82695df5f9a417e00e3164830']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c4-32a4-4638-a5ac-4242950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:40.000Z",
            "modified": "2015-09-30T09:13:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cce47b7eb6f87efb0893577ca8af06fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c5-482c-41bc-9913-4beb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:41.000Z",
            "modified": "2015-09-30T09:13:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ccf3f2a9f1710cf3c248761b9009465c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c5-ae98-40f8-b3ed-4cd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:41.000Z",
            "modified": "2015-09-30T09:13:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd30e8f1110e719df01b224bb29828f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c5-6270-4bab-abd2-48eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:41.000Z",
            "modified": "2015-09-30T09:13:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd3995536573000ff23f9b570461708c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c6-101c-4f61-be7d-429a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:42.000Z",
            "modified": "2015-09-30T09:13:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd414386ecf8fca80151d5dd2639d271']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c6-bc2c-47fa-aa7d-498a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:42.000Z",
            "modified": "2015-09-30T09:13:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd4783d3f196b83debeca789ca4fe4d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c7-4478-45b5-865c-4917950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:43.000Z",
            "modified": "2015-09-30T09:13:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd4be7d4924cfb8e5299140e99b029f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c7-3d70-4ff3-998b-41cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:43.000Z",
            "modified": "2015-09-30T09:13:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd5407487aed9c9e3a12321e08f53f93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c7-ab98-46b6-98a8-4ee6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:43.000Z",
            "modified": "2015-09-30T09:13:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd6a9d7ca048b9468070e0f8b1b7bc83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c8-57ec-4158-be2a-4d51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:44.000Z",
            "modified": "2015-09-30T09:13:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd6b5c046ee8835546b55456aa944eeb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c8-a838-4615-9902-4aba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:44.000Z",
            "modified": "2015-09-30T09:13:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd6b913c374431e03b332de3b759d848']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c8-a970-438c-a711-4eed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:44.000Z",
            "modified": "2015-09-30T09:13:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd7660017e76d1a7eb61fe6df5af7038']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c9-f978-4258-b6cd-4305950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:45.000Z",
            "modified": "2015-09-30T09:13:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd7b11e22784a43d2bd27b33b488f54e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7c9-1d58-4ab0-92d7-4997950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:45.000Z",
            "modified": "2015-09-30T09:13:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cd8a855a45af5d8a27bf5e8dac31c71b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ca-7458-4ee2-a04e-46ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:46.000Z",
            "modified": "2015-09-30T09:13:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cda8c0cfd607f73517c5e6411fa47ff3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ca-e0f4-40f2-bb48-4d35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:46.000Z",
            "modified": "2015-09-30T09:13:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cdada8cc6245118ecf3b46beff18e7b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ca-6a60-4a5c-92b0-4886950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:46.000Z",
            "modified": "2015-09-30T09:13:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cdb596c624ffb8c11c209688f1afeb0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cb-8af8-48dc-956e-4d16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:47.000Z",
            "modified": "2015-09-30T09:13:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cdb69af03eb13a9bd8064a5b1cafb8ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cb-e450-4483-9299-40b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:47.000Z",
            "modified": "2015-09-30T09:13:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cded8e2f44b9242c6f0ddf52eb03fb87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cc-7a08-48fb-8a38-4bbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:48.000Z",
            "modified": "2015-09-30T09:13:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cdf512f3a452eb109be050bba655b24a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cc-b910-4ea2-965e-487b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:48.000Z",
            "modified": "2015-09-30T09:13:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce0fff7d9d17ec3133a87d14db925794']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cc-f934-4ba2-b932-45a5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:48.000Z",
            "modified": "2015-09-30T09:13:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce16ed6cf3b4f50fd8a45f67aefc0e10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cd-ae7c-4456-823b-41cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:49.000Z",
            "modified": "2015-09-30T09:13:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce20549f36862e9493f4777e1d617ca6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cd-86b4-4217-b9b4-4904950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:49.000Z",
            "modified": "2015-09-30T09:13:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce29f3043839d8f3c84fc264d006bf58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cd-e1e0-4889-9c59-48f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:49.000Z",
            "modified": "2015-09-30T09:13:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce2ad5c0b57e257b743d5d8746c7043c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ce-8078-423d-bc4b-4541950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:50.000Z",
            "modified": "2015-09-30T09:13:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce2fe85da8999528a1f4fd027f292356']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ce-fd78-412a-ad7a-4915950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:50.000Z",
            "modified": "2015-09-30T09:13:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce3ad8bbc0435d09e727a203d5ab3630']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cf-daf8-408b-92bf-4d6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:51.000Z",
            "modified": "2015-09-30T09:13:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce3b6a090ffc2f196aeae5666c8b598a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cf-9950-4d39-88aa-42b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:51.000Z",
            "modified": "2015-09-30T09:13:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce3c2e14f7c3b4022617663879c7d3df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7cf-9ebc-4c3b-9e24-48b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:51.000Z",
            "modified": "2015-09-30T09:13:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce3cd9b9b5d64bbcbc6546d9ce3cb38a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d0-9ad4-4ade-8fe3-4367950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:52.000Z",
            "modified": "2015-09-30T09:13:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce4a2f86dd8da4d837f68e08d732a4ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d0-3cc4-4c99-bb16-4d67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:52.000Z",
            "modified": "2015-09-30T09:13:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce4c682b3e4f5fa2036e8c4afb11fd9a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d0-ffc4-42cc-a61c-4165950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:52.000Z",
            "modified": "2015-09-30T09:13:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce5aa7c655ee53e8d2ca347364ae8551']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d1-bacc-412c-9a48-47bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:53.000Z",
            "modified": "2015-09-30T09:13:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce655a1571d778f2e94a21b847467529']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d1-7070-4db3-b527-4dae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:53.000Z",
            "modified": "2015-09-30T09:13:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce6992a5203d07cf56277cc8508f8334']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d2-595c-4bac-b51f-48f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:54.000Z",
            "modified": "2015-09-30T09:13:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce6bf84a926ac18abca9795a8847e1c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d2-515c-4c4d-85b5-4758950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:54.000Z",
            "modified": "2015-09-30T09:13:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce7177de87200cb3925cebed746da98f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d2-0464-4f68-a69e-49c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:54.000Z",
            "modified": "2015-09-30T09:13:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce947dc73aa35fa111c846f4ffc75a64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d3-a6f4-4faa-910b-4c7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:55.000Z",
            "modified": "2015-09-30T09:13:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ce9c6e1a310c26d149393c29c3dc7dee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d3-a2c4-4ab8-9964-4921950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:55.000Z",
            "modified": "2015-09-30T09:13:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cea125b114ba2543ba4958bc1488d7b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d3-dd08-494b-b0f7-436b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:55.000Z",
            "modified": "2015-09-30T09:13:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cea2ce40fc6e9a5e74bb5f9b3e611be0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d4-eb30-4f0c-9959-45ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:56.000Z",
            "modified": "2015-09-30T09:13:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cea32e02f036b6a811c73b15067d62dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d4-f680-4c53-b83d-45bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:56.000Z",
            "modified": "2015-09-30T09:13:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cea4892fc5639aa9c65c21c42c6b1a6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d5-bb3c-46fb-8e95-4753950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:57.000Z",
            "modified": "2015-09-30T09:13:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cea943514acc6ea106bb77ffb0abd985']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d5-5930-4b1d-b1b5-4c72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:57.000Z",
            "modified": "2015-09-30T09:13:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ceb025adf8ba1ea585faca09f3d20f70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d5-cb38-4daf-ac76-4dd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:57.000Z",
            "modified": "2015-09-30T09:13:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ceb77f8733a0be6f30cdaa64cd45cc4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d6-48e8-41e4-bd72-4dbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:58.000Z",
            "modified": "2015-09-30T09:13:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cebcf00ad6d633687d1c8c459dc481a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d6-cc7c-40a6-ae65-4146950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:58.000Z",
            "modified": "2015-09-30T09:13:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cebf673a25ec6f06ad9a326e8335d3c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d7-d734-4cd0-aefe-464c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:59.000Z",
            "modified": "2015-09-30T09:13:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cec6110ef4e5e276a881089f7ea99523']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d7-9808-4dea-91d1-4b22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:59.000Z",
            "modified": "2015-09-30T09:13:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ceca7b12e4704c9105b5412faa6357f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d7-09cc-4a1d-8b7c-4de8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:13:59.000Z",
            "modified": "2015-09-30T09:13:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cecb5401c41900b5e67b21ef311ff1c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:13:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d8-92ac-4fa8-acc1-4675950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:00.000Z",
            "modified": "2015-09-30T09:14:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ced5b5c4d8458b8214a94cdde78e090b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d8-6080-4016-9b19-493c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:00.000Z",
            "modified": "2015-09-30T09:14:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cefb8843c28843bb308e76733b7497dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d8-37f8-4952-87f0-48dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:00.000Z",
            "modified": "2015-09-30T09:14:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf082b39a364c6ce2c283d702dbacf4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d9-326c-4fbc-ae43-4cf7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:01.000Z",
            "modified": "2015-09-30T09:14:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf0e134222304ac8eef5b7fa1c29f5d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7d9-c0c8-4e8e-8867-465c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:01.000Z",
            "modified": "2015-09-30T09:14:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf0ee8a0eb5c1875951382bbc69f216e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7da-3034-4279-8598-4435950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:02.000Z",
            "modified": "2015-09-30T09:14:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf141f707015689c58aa18cfeac1ff4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7da-5f5c-4afa-8c93-41f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:02.000Z",
            "modified": "2015-09-30T09:14:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf2c66915a0e32ebb65973fc72e52d42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7da-c1bc-4ab6-a738-4640950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:02.000Z",
            "modified": "2015-09-30T09:14:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf39473c0a00bd7343fe9cca4e7547d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7db-e3e4-4588-acb0-49c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:03.000Z",
            "modified": "2015-09-30T09:14:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf3fec85f603ba5934e0a680abc6dbd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7db-31d8-4a99-b2c9-4d78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:03.000Z",
            "modified": "2015-09-30T09:14:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf43025073d977b40c5ca803b70db117']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7db-5104-4824-81d6-47e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:03.000Z",
            "modified": "2015-09-30T09:14:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf4a0441483b32dd06ea2456f2047ea4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7dc-6858-48da-b039-4857950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:04.000Z",
            "modified": "2015-09-30T09:14:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf528dae41c11e5e512eb11c26e238ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7dc-19d0-4df3-8cb0-492d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:04.000Z",
            "modified": "2015-09-30T09:14:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf577ae1ceb39cf709c0be0dbdfae2d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7dd-0414-4b56-872a-43ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:05.000Z",
            "modified": "2015-09-30T09:14:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf5c3d62c52abf02a0c3d6fae1b5115f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7dd-a9fc-44ba-b3c3-45bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:05.000Z",
            "modified": "2015-09-30T09:14:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf5c78d9503282fc2d84befef4d6a02a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7dd-be24-4a01-99cf-42b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:05.000Z",
            "modified": "2015-09-30T09:14:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf62e7d100cd0de99e9dfef48f33000f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7de-d1b4-4cba-89ed-4451950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:06.000Z",
            "modified": "2015-09-30T09:14:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf6a6630a18c14e8d138343257faf67c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7de-6ac0-48c8-83bf-4266950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:06.000Z",
            "modified": "2015-09-30T09:14:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf8ef0e539ac759b2860c6e4088dce73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7de-de38-4993-922b-4e1d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:06.000Z",
            "modified": "2015-09-30T09:14:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cf9531429affcb72e8fe94f6e709703a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7df-5d08-4ed3-afc3-4699950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:07.000Z",
            "modified": "2015-09-30T09:14:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cfa352a314ae821cd3ed7c91682063f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7df-63c8-44b5-844b-4127950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:07.000Z",
            "modified": "2015-09-30T09:14:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cfb687aff2f11514b8d857a076c84172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e0-1018-4001-9708-44c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:08.000Z",
            "modified": "2015-09-30T09:14:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cfb6d1539868a8e364ee36e864e44493']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e0-ef4c-4613-9b6f-47d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:08.000Z",
            "modified": "2015-09-30T09:14:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cfcb624798e538a8c8ebe7564114a25b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e0-7b50-48e5-86dc-4f3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:08.000Z",
            "modified": "2015-09-30T09:14:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cfccc5b35e258dd078c1199d65dfca83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e1-45d8-42d0-af7f-48f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:09.000Z",
            "modified": "2015-09-30T09:14:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cfe299b807a51b68d1575a845dc60af5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e1-5068-4eb7-b41f-4732950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:09.000Z",
            "modified": "2015-09-30T09:14:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'cffb26198405a5fa0ec4c9e84c98ea1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e2-8d34-4927-b5e2-48f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:10.000Z",
            "modified": "2015-09-30T09:14:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd002904439643e1e24b8444076f162d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e2-c3a0-4ad3-b172-4c31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:10.000Z",
            "modified": "2015-09-30T09:14:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd0031fc8de080f87a661b9fbeb47dfae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e2-8378-40db-a18b-4051950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:10.000Z",
            "modified": "2015-09-30T09:14:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd0108039c5d868a77d65813d5d8b0cdd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e3-6288-4823-8db9-48c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:11.000Z",
            "modified": "2015-09-30T09:14:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd013bbc8a494828278cdb2ee4021f57c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e3-2a74-4094-af4d-41de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:11.000Z",
            "modified": "2015-09-30T09:14:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd0268f18891e3a893bcbd471cdacf028']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e3-ea38-49ea-94e0-417e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:11.000Z",
            "modified": "2015-09-30T09:14:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd027006b4971c11c328b0b700b90194f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e4-618c-4ced-9d01-4426950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:12.000Z",
            "modified": "2015-09-30T09:14:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd034fb989fe5d2558f359e17b2744bed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e4-2264-4933-ab5d-4645950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:12.000Z",
            "modified": "2015-09-30T09:14:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd03c527b8f41ec8e420b4a4a41af137d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e5-1390-476a-b5d6-4eda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:13.000Z",
            "modified": "2015-09-30T09:14:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd03d6e88c193f3f741a94ec79f9c1836']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e5-fc7c-498a-bd7a-4548950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:13.000Z",
            "modified": "2015-09-30T09:14:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd048ce77b6344882e1bda2a9efdad16f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e5-607c-464a-a400-491c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:13.000Z",
            "modified": "2015-09-30T09:14:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd04bb6b365feb395db841ee152f09a74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e6-d590-4449-bd7c-4d00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:14.000Z",
            "modified": "2015-09-30T09:14:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd056cf49fdd22707eefb6d10338f8e49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e6-601c-4fe7-a6c5-4e45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:14.000Z",
            "modified": "2015-09-30T09:14:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd060d6f59b62b1a9362100cc21e4faa8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e6-703c-419c-b89d-4ef5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:14.000Z",
            "modified": "2015-09-30T09:14:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd073ea984f12375ef1210c64443b8c46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e7-0748-49ce-a550-4fd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:15.000Z",
            "modified": "2015-09-30T09:14:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd07713b57c55626e2e5c90f1710c3f2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e7-f8d4-4481-bc6d-43d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:15.000Z",
            "modified": "2015-09-30T09:14:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd0906eb588bba98a31ad3410616275f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e8-2d04-4c37-a211-4ce4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:16.000Z",
            "modified": "2015-09-30T09:14:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd094375369bf3179856f9e8b1cff2250']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e8-0278-4a0a-881f-4aad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:16.000Z",
            "modified": "2015-09-30T09:14:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd0ae93b8f1bc0ff69483b5346cfb1db5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e8-89e8-464d-860a-43b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:16.000Z",
            "modified": "2015-09-30T09:14:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd0ce6bf4c5169f41d60d986374b2d101']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e9-2560-45f3-a100-4861950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:17.000Z",
            "modified": "2015-09-30T09:14:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd0d61cfa62eb513b651017e71e5385b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e9-b14c-45ca-a5df-4a67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:17.000Z",
            "modified": "2015-09-30T09:14:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd0ddebe10983ec842661ef3147670bba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7e9-1de0-460e-985b-4431950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:17.000Z",
            "modified": "2015-09-30T09:14:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd0eb875ca011305a532f5b4d5aa55356']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ea-c2c8-480c-8748-4566950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:18.000Z",
            "modified": "2015-09-30T09:14:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd10ccf170bca45618e2d655c5d54484f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ea-8db8-41e3-93b4-4be1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:18.000Z",
            "modified": "2015-09-30T09:14:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd11098324f2e8c900a1bf69160592b8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7eb-f95c-4fc9-96b8-483a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:19.000Z",
            "modified": "2015-09-30T09:14:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1184ce66f539990bbba3c68bdff840f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7eb-32b8-4ae3-8efa-45e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:19.000Z",
            "modified": "2015-09-30T09:14:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd128a5182726f0efe1e29b010b937597']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7eb-4cb8-46eb-9ab2-4c02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:19.000Z",
            "modified": "2015-09-30T09:14:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd12e406d5f2fa378f0f04dc43674c5b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ec-f5c0-4fa4-97a4-4a4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:20.000Z",
            "modified": "2015-09-30T09:14:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd131f57195e78223703d60e44a351fbf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ec-802c-498c-9741-4d77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:20.000Z",
            "modified": "2015-09-30T09:14:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1356208fab117aa5c2f8f3410d6e9b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ed-9570-49c8-8787-44f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:20.000Z",
            "modified": "2015-09-30T09:14:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1389766cc93bbb0f49a49a5a25ea9ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ed-b6cc-4bbd-b09c-4234950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:21.000Z",
            "modified": "2015-09-30T09:14:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd140f46edede12ef2c0475f633b30910']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ed-f138-4c4a-92be-4fe5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:21.000Z",
            "modified": "2015-09-30T09:14:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd149206a95e6565148f349e34b8c5c70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ee-98ac-45d2-bf9b-4b84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:22.000Z",
            "modified": "2015-09-30T09:14:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd14fd685d9f7e7768ad40be49c86a6d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ee-dee4-4f6a-b04d-4d26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:22.000Z",
            "modified": "2015-09-30T09:14:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd151d748100900697a6aec5a5cc6d52b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ee-c36c-4c53-946d-46d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:22.000Z",
            "modified": "2015-09-30T09:14:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd153966d30c852835f3add75bca04099']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ef-5214-44d7-8379-4e16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:23.000Z",
            "modified": "2015-09-30T09:14:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd15ca4e4ab58741735f39d4c6fa05ea9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ef-65f4-46d7-ac6b-4b03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:23.000Z",
            "modified": "2015-09-30T09:14:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd16ccf1912591766c12097717e8fb6d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f0-2dd0-49d9-87d5-4b56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:24.000Z",
            "modified": "2015-09-30T09:14:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd17f3928c077f46698a3dcce3e93b784']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f0-6624-4152-988b-4599950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:24.000Z",
            "modified": "2015-09-30T09:14:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd19c2f853f2a7a0f5cf4ab9d8f6b0ced']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f0-40f8-413f-84ce-4884950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:24.000Z",
            "modified": "2015-09-30T09:14:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd19d4c103d32b4827b495909eba9cde1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f1-79b8-4f0b-a986-4ef9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:25.000Z",
            "modified": "2015-09-30T09:14:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1b5710e23b7a3a38bf396f630d94004']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f1-182c-4d70-9f93-4a73950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:25.000Z",
            "modified": "2015-09-30T09:14:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1bc93ad6a16101e9ed4611ebd63236d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f2-3908-4d38-83bc-4175950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:25.000Z",
            "modified": "2015-09-30T09:14:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1be28b8a23ac0228dfc8a52241bd6e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f2-d5f8-4447-a382-4805950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:26.000Z",
            "modified": "2015-09-30T09:14:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1c3f12302e45763697966ec6c053125']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f2-767c-40d3-bde8-47e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:26.000Z",
            "modified": "2015-09-30T09:14:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1cd39b9a942cc105aba8358e8ac6555']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f3-94b4-4466-83f9-44c9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:27.000Z",
            "modified": "2015-09-30T09:14:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1d4443d6bde63773a0dd958a6414f64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f3-3070-4750-b571-4026950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:27.000Z",
            "modified": "2015-09-30T09:14:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1dd79776b64da863daa19871c07cef4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f3-4d00-4b43-9b38-4792950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:27.000Z",
            "modified": "2015-09-30T09:14:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1e2048351224eed8b995721a3369866']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f4-3fa0-4651-bd78-4fba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:28.000Z",
            "modified": "2015-09-30T09:14:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1f92fd5dd9699687ba97b389cccb061']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f4-e6dc-4d07-bdf0-4de7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:28.000Z",
            "modified": "2015-09-30T09:14:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd1fe7c4511f05c60689267855126cd5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f5-d0dc-45a5-a670-424f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:29.000Z",
            "modified": "2015-09-30T09:14:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2049546f42b68687db35bb25ef74c2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f5-0f88-42e5-937e-47ee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:29.000Z",
            "modified": "2015-09-30T09:14:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2122458676360a3896f89195ee98f2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f5-7cc0-4d9a-9884-4ff7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:29.000Z",
            "modified": "2015-09-30T09:14:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd216b7f570c42de5df5bf4dfca77a467']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f6-0bd4-4a11-b488-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:30.000Z",
            "modified": "2015-09-30T09:14:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd21722c1bed8fd32ad49b45146ffe694']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f6-21d0-4706-b08e-467e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:30.000Z",
            "modified": "2015-09-30T09:14:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd22390380002b86331e1e48674e048b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f6-6ca4-4e21-84f1-472c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:30.000Z",
            "modified": "2015-09-30T09:14:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2284596d092dfdd4cb8874f3dba638a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f7-5b64-4c7f-9aae-4748950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:31.000Z",
            "modified": "2015-09-30T09:14:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd22cce1b40401e787014c565874c33b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f7-cdac-4724-a9bf-40ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:31.000Z",
            "modified": "2015-09-30T09:14:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2305893e80ff4c960febb482b3f445d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f8-b8cc-4b98-a634-4aea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:32.000Z",
            "modified": "2015-09-30T09:14:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd230f2c5aab34b9af9709b43488d673f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f8-5288-4355-86fa-460b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:32.000Z",
            "modified": "2015-09-30T09:14:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd25038fc10905924706aaced8c9df9ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f8-3b3c-49cd-bb98-42af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:32.000Z",
            "modified": "2015-09-30T09:14:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd25360add162d15f3669b41c76aedb15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f9-8204-473f-82be-4259950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:33.000Z",
            "modified": "2015-09-30T09:14:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd26acd976bcfe260e65d31df8ced31ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f9-cfe8-4065-ac18-4d45950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:33.000Z",
            "modified": "2015-09-30T09:14:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd276250911f502cfb706e6cad6b34436']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7f9-b128-4cbb-bcaf-4a8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:33.000Z",
            "modified": "2015-09-30T09:14:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2873446306d3545d6cac2b1b3ff3b2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fa-674c-4006-b9f5-4f32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:34.000Z",
            "modified": "2015-09-30T09:14:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd28fc051622df86fa77210c49e01c33e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fa-3c30-47d5-9ba3-47c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:34.000Z",
            "modified": "2015-09-30T09:14:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd291f0457f6e4d798d9aa8122884d078']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fb-80f0-4f7b-808c-48b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:35.000Z",
            "modified": "2015-09-30T09:14:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd29540749f462a47ce7e1771a6c56e98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fb-39c0-4911-a931-4510950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:35.000Z",
            "modified": "2015-09-30T09:14:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2acc5e8ba4b452025042fb44c98aa27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fb-9670-4866-859b-45f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:35.000Z",
            "modified": "2015-09-30T09:14:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2b21bbcf428d243ea35c75fb63ef739']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fc-45e4-4281-b553-4b85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:36.000Z",
            "modified": "2015-09-30T09:14:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2ba5f0ceec7f073e51fac2fbb5bfa0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fc-12f0-4892-b7b6-4c4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:36.000Z",
            "modified": "2015-09-30T09:14:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2bd4a7416ba2f5bf5528e18000da8cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fc-5b4c-42d3-96da-44ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:36.000Z",
            "modified": "2015-09-30T09:14:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2c2ed46770eb7183ec5fabfd05a2cff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fd-cc00-4631-b27b-4bff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:37.000Z",
            "modified": "2015-09-30T09:14:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2ca5af48be8b531df23b5f001546dcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fd-9928-4268-945a-4d5e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:37.000Z",
            "modified": "2015-09-30T09:14:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2ddfe151a7b8b50a764c51da798797f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fe-2b3c-4357-b90d-415c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:38.000Z",
            "modified": "2015-09-30T09:14:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd2fca1f85ae6584070d71d0292a8994f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fe-82dc-4f81-95fb-46e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:38.000Z",
            "modified": "2015-09-30T09:14:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3000955e223d7d10574b5456086bf75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7fe-7210-4c3c-aee5-4aac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:38.000Z",
            "modified": "2015-09-30T09:14:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3039f5db2b09b99755a8123b1b12b7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ff-4820-4440-be94-4ed0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:39.000Z",
            "modified": "2015-09-30T09:14:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd30445a156d7ab9dd136932987a7e375']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba7ff-e458-4512-9454-4c34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:39.000Z",
            "modified": "2015-09-30T09:14:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd30488b1096418d8ecb08e5610894de8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba800-0c58-48ec-841d-4833950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:40.000Z",
            "modified": "2015-09-30T09:14:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd305a767bccb6da81a4ca5aadf28fa79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba800-ae58-4aae-8ccf-41a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:40.000Z",
            "modified": "2015-09-30T09:14:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd305e4e829d86b2cf05361296e84e493']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba800-e6b4-4b2b-a520-4058950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:40.000Z",
            "modified": "2015-09-30T09:14:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3090c27c2ed5ba7f1b18818260a6bce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba801-eda8-430c-8b8f-40d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:41.000Z",
            "modified": "2015-09-30T09:14:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd320b62c51b55bc3520221ea51067b7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba801-a5d4-4595-982e-4edd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:41.000Z",
            "modified": "2015-09-30T09:14:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd324ac562366d05d3c259132cbf9af06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba801-4adc-4058-93d5-4ed4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:41.000Z",
            "modified": "2015-09-30T09:14:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3341e767ff75b94d717964455900625']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba802-9d38-4f56-89e3-4179950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:42.000Z",
            "modified": "2015-09-30T09:14:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd34128d2fc4fb59eeef9efb3f665c84f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba802-6960-4c80-98d7-4f6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:42.000Z",
            "modified": "2015-09-30T09:14:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd34535b46374a6708d3d9a843f3bb9ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba803-eb74-48d2-a14d-4ec7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:43.000Z",
            "modified": "2015-09-30T09:14:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd34b01dee1fb123605566486171fd9a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba803-feb4-4e61-aa03-466a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:43.000Z",
            "modified": "2015-09-30T09:14:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd35417ab26c6937af3a0d6d1913fb346']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba803-15ac-4c85-b4c3-4ee8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:43.000Z",
            "modified": "2015-09-30T09:14:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd35725fa3bc9739ca630747825c1bd79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba804-407c-4c00-a88c-463d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:44.000Z",
            "modified": "2015-09-30T09:14:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd35e280bdf65fca7cb8c9f50abf4f5b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba804-b698-4af6-9c39-423d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:44.000Z",
            "modified": "2015-09-30T09:14:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd35e3b313acd6a735a90e8bc8fd27f1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba804-8ba4-4806-9cb6-494c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:44.000Z",
            "modified": "2015-09-30T09:14:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd36cbd50508c4e2038ef76bc6c684db9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba805-2264-4827-819b-4a5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:45.000Z",
            "modified": "2015-09-30T09:14:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd38f18f709819e68ca6651fa14fb6720']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba805-690c-4982-865a-403a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:45.000Z",
            "modified": "2015-09-30T09:14:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3943461919d325949b6a1798c12f0fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba806-4c08-4bca-bc64-4c10950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:46.000Z",
            "modified": "2015-09-30T09:14:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3bbdaedfa8c3d9563815af44e0fc8c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba806-4a30-43b3-af90-4d4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:46.000Z",
            "modified": "2015-09-30T09:14:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3befab519ed852457a5423158c96da4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba806-d148-4061-8fd7-4335950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:46.000Z",
            "modified": "2015-09-30T09:14:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3bf9c6ee84ad73086edc48795b0a10b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba807-3c30-4375-a761-40d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:47.000Z",
            "modified": "2015-09-30T09:14:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3c8cfb166f584f1d7b95ae9d1914e09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba807-3c04-486e-a34a-49b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:47.000Z",
            "modified": "2015-09-30T09:14:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3cb3767e72d279ccc83d7912b39b2e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba808-2bdc-4ce4-bb81-472b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:47.000Z",
            "modified": "2015-09-30T09:14:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3cf7af749ce01277fdf71170865c497']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba808-8428-4d10-9c7b-4128950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:48.000Z",
            "modified": "2015-09-30T09:14:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3d04f118fcbe48a5f0f4adc9dfe8939']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba808-002c-404f-a389-441d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:48.000Z",
            "modified": "2015-09-30T09:14:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3dbc3313e80ada215e701f455ca2885']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba809-e8a0-4716-96d0-4916950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:49.000Z",
            "modified": "2015-09-30T09:14:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3efb3fafefa7c9160517449406fc0dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba809-b084-492c-9771-4b85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:49.000Z",
            "modified": "2015-09-30T09:14:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd3f155f2e2982a5871cd0a4fa39db56e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba809-a140-4554-8247-4b0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:49.000Z",
            "modified": "2015-09-30T09:14:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd40b4006962add2a833cf67d62721e13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80a-7e98-4cf1-83cc-4271950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:50.000Z",
            "modified": "2015-09-30T09:14:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd419536137892ad9691a027b337138b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80a-2514-475b-ab81-4629950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:50.000Z",
            "modified": "2015-09-30T09:14:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd424f108d981a8f81a0fed4aecdccf18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80b-28c4-45df-9537-4e71950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:51.000Z",
            "modified": "2015-09-30T09:14:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd42864f29199091a1a0dc58a5993aa2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80b-1838-4c0c-b252-4270950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:51.000Z",
            "modified": "2015-09-30T09:14:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd42927547f9dd44d620a6ff4eb40b6b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80b-2e44-4209-ac1a-4b54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:51.000Z",
            "modified": "2015-09-30T09:14:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd42934c772370084047deccded9bf656']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80c-e0a4-443a-86ea-4fad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:52.000Z",
            "modified": "2015-09-30T09:14:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd42bca8ba387c10fab6ad52a4351f06f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80c-de28-49ca-be88-432b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:52.000Z",
            "modified": "2015-09-30T09:14:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd42d7bd6a9cf4fb117aa2cfad8e076fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80c-d118-4683-b579-4cd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:52.000Z",
            "modified": "2015-09-30T09:14:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd43962fdbec0a64c354d3230e3a98116']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80d-d420-45f8-9564-4fd5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:53.000Z",
            "modified": "2015-09-30T09:14:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd43ecb2d5234128bfe1704ea936a81c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80d-e0ec-485d-b019-4bf8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:53.000Z",
            "modified": "2015-09-30T09:14:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4482a08766309bc750d962bac064afe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80e-8b58-4915-b9c9-44d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:54.000Z",
            "modified": "2015-09-30T09:14:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd44976433a411f4d227a89153cdc2045']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80e-a0d4-4d3d-a248-404a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:54.000Z",
            "modified": "2015-09-30T09:14:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd44cec85c564d45dc5606f49059c79ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80e-b408-4a61-a0f6-4884950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:54.000Z",
            "modified": "2015-09-30T09:14:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd45aaa14cccdd11549b4d15a9f2dd7db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80f-e63c-4863-a1fc-46d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:55.000Z",
            "modified": "2015-09-30T09:14:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd45b7cd3c8cdf9fe617db1f0cd7ac6b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80f-3574-4155-b91d-4c6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:55.000Z",
            "modified": "2015-09-30T09:14:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd46e8e0d119829b83cff2396561e60d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba80f-088c-4b80-b88b-49d9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:55.000Z",
            "modified": "2015-09-30T09:14:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd47275c618cce0b37bd860c258d4a38d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba810-cb88-40f4-b4d4-4ebe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:56.000Z",
            "modified": "2015-09-30T09:14:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd479dd42c7e9ac0c95f339425a8b8aba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba810-b398-4d78-9822-449a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:56.000Z",
            "modified": "2015-09-30T09:14:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4827a9f0158a3ba2945149fd883af36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba811-3d10-4320-884f-408c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:57.000Z",
            "modified": "2015-09-30T09:14:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd494e2d4a5661d4a5b84d01c016ee254']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba811-9158-4bf1-b7af-4bf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:57.000Z",
            "modified": "2015-09-30T09:14:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4994fe106c07982be088e1b71079cc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba811-150c-43c8-8ba1-45e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:57.000Z",
            "modified": "2015-09-30T09:14:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd49b3fa70a076dbe0cc15c3b3cdf395c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba812-edf0-4e9c-9312-433a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:58.000Z",
            "modified": "2015-09-30T09:14:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd49c875308cf59e2d4c7357cd50dc23f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba812-7d64-4f16-9f3f-4dc8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:58.000Z",
            "modified": "2015-09-30T09:14:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4a2a83deb7133fb17c59c059135898d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba813-d27c-4890-a7b5-4536950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:58.000Z",
            "modified": "2015-09-30T09:14:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4a2d215e144ee6908aaf7949829d4b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba813-60d4-4e84-ab2f-4164950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:59.000Z",
            "modified": "2015-09-30T09:14:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4abb2036cc610218dec101d862d6261']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba813-eecc-4201-8dd3-4649950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:14:59.000Z",
            "modified": "2015-09-30T09:14:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4ac51f459f70b8a51ebdada2a64220e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:14:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba814-e7d4-4b2b-b529-4d53950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:00.000Z",
            "modified": "2015-09-30T09:15:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4b19ca061c8a85869e33b1a61c2f0c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba814-f260-4b7a-95bf-4e9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:00.000Z",
            "modified": "2015-09-30T09:15:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4b85fa5969c58f2f884d030443cbd33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba814-9614-415d-ad64-42eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:00.000Z",
            "modified": "2015-09-30T09:15:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4b9b909dc2603c777564477e2c12c40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba815-858c-4a3c-9b62-4ee9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:01.000Z",
            "modified": "2015-09-30T09:15:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4be8396dd6b7ec50cad3c23f2396e9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba815-ea78-420f-9d51-42b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:01.000Z",
            "modified": "2015-09-30T09:15:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4d9471fb4c95659b7b718c02b6aa72e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba816-f438-440b-a44d-44e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:02.000Z",
            "modified": "2015-09-30T09:15:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4df3e7fafeb125e92efd10be8f55fd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba816-f008-4ec5-bc89-471a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:02.000Z",
            "modified": "2015-09-30T09:15:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4e0828f22b6cd5039b6273a27a55b98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba816-7eb4-4c5e-96c0-4f8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:02.000Z",
            "modified": "2015-09-30T09:15:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4fb9f35e0241a206e36c4e845378f02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba817-3acc-49d4-af47-4da0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:03.000Z",
            "modified": "2015-09-30T09:15:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd4fce8d4e2724c2a624a509c0f9fefe3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba817-b278-4fc6-a53f-4af3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:03.000Z",
            "modified": "2015-09-30T09:15:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5097e2921fce68923c831735b1c4e63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba817-fd60-45cb-a583-4233950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:03.000Z",
            "modified": "2015-09-30T09:15:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd51baac692b27bf8ea8ce8b8dae318fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba818-be10-43ff-96bd-426b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:04.000Z",
            "modified": "2015-09-30T09:15:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd521b152a91efcd30e1a6208012a1240']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba818-9158-4a11-b680-4c5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:04.000Z",
            "modified": "2015-09-30T09:15:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd55b0e0040799fbfd7cd5abe0b425cbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba819-c248-4a11-ae19-477a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:05.000Z",
            "modified": "2015-09-30T09:15:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5654e0230712953f0d842deae094279']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba819-bd68-4853-8445-461e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:05.000Z",
            "modified": "2015-09-30T09:15:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5696629ccd494c81d1c7c7e267264f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba819-99e4-45ae-8eb4-496a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:05.000Z",
            "modified": "2015-09-30T09:15:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd57a8d9a21d54f6d0411573f9f474654']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81a-d8d0-42fb-9e9b-4545950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:06.000Z",
            "modified": "2015-09-30T09:15:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd57c00608d3ecbf5eba89e3082e55105']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81a-c844-4360-bb88-446c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:06.000Z",
            "modified": "2015-09-30T09:15:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd587d153b29379931fd5fe8734941439']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81a-5048-42aa-9414-40ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:06.000Z",
            "modified": "2015-09-30T09:15:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd597cff565e2ec3886e6ce00ca17d00a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81b-71f4-4fe0-b663-4a07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:07.000Z",
            "modified": "2015-09-30T09:15:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd59c3718aafa948f09ea46a097237a5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81b-08fc-4421-bbab-4808950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:07.000Z",
            "modified": "2015-09-30T09:15:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd59d6bba2faf4f3be2c89cf46f1f3a91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81c-6e84-4f18-af8a-4ef8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:08.000Z",
            "modified": "2015-09-30T09:15:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5a09cc5064747a24460ffcfd8784e7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81c-b544-41ad-99ef-4948950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:08.000Z",
            "modified": "2015-09-30T09:15:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5ac865e6e297b655377e02d353c5fa3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81c-f2b0-48d3-9c45-4bb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:08.000Z",
            "modified": "2015-09-30T09:15:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5af48bce881e1c76bc55361517a4234']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81d-5940-42f3-8b60-4278950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:09.000Z",
            "modified": "2015-09-30T09:15:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5b8501595230434a6091782771870d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81d-612c-4961-a1c6-45b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:09.000Z",
            "modified": "2015-09-30T09:15:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5bed2033f4ca71a1fee9e507a54ea05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81e-4630-43d2-a82f-44e2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:10.000Z",
            "modified": "2015-09-30T09:15:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5c2e155796069d1262237665dec3fff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81e-5264-4714-81a9-49f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:10.000Z",
            "modified": "2015-09-30T09:15:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5c3f3e972ba330f35c8cb79c3ddec76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81e-bae8-475b-9a1b-4783950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:10.000Z",
            "modified": "2015-09-30T09:15:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5c51787df9fa0662f075bbfc0e89341']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81f-7efc-47e7-b6f3-4a02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:11.000Z",
            "modified": "2015-09-30T09:15:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5c667236386719333fba25adf4caa6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81f-2fa8-46f5-9732-4911950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:11.000Z",
            "modified": "2015-09-30T09:15:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5cfbecade55ca78981620fbbcbe909f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba81f-4864-4808-94f0-4dc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:11.000Z",
            "modified": "2015-09-30T09:15:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5d523aa4254941c27bab5fbd6805649']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba820-6020-494d-bce9-4cbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:12.000Z",
            "modified": "2015-09-30T09:15:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5e516e029a7518f2e47a152b64e9e9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba820-d4a4-42d3-a507-4a37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:12.000Z",
            "modified": "2015-09-30T09:15:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5e8d86072e9967c49509ecd3ffa1f1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba821-d6c0-42f7-8582-4f03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:13.000Z",
            "modified": "2015-09-30T09:15:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5f307b607e9667b32fd437e2c0c3c17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba821-77a8-4c3c-9937-4f8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:13.000Z",
            "modified": "2015-09-30T09:15:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5f4b5a0ab4c226e854e1d8cbcad1231']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba821-37d0-4028-aec9-4845950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:13.000Z",
            "modified": "2015-09-30T09:15:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5fcf69896d8f0d26aa874d928097205']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba822-1588-4a08-964f-4d54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:14.000Z",
            "modified": "2015-09-30T09:15:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd5ff7050688ec8c77b42d14fb7f686e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba822-344c-4675-9941-411f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:14.000Z",
            "modified": "2015-09-30T09:15:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd60321f14a88ae3a7e0e48231cc7a0a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba822-99f8-4e24-9948-4f16950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:14.000Z",
            "modified": "2015-09-30T09:15:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd60d6d9c6f231027dada136cd5543e01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba823-0ad4-4f39-9c87-48c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:15.000Z",
            "modified": "2015-09-30T09:15:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd61ece8ac002a82d5b4e27bed261de2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba823-2b34-4b2b-8669-4905950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:15.000Z",
            "modified": "2015-09-30T09:15:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd62b27ab5e4c9966511ed98960375b30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba824-0330-4db5-9e6c-4864950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:16.000Z",
            "modified": "2015-09-30T09:15:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd63113f0b3e513a1d98314d703bbda19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba824-e624-4edb-8ecc-4540950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:16.000Z",
            "modified": "2015-09-30T09:15:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd63301b4df79f5e0b4af081accd6e5e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba824-0b34-4adf-b6ca-452d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:16.000Z",
            "modified": "2015-09-30T09:15:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd635e232a6ae94f2b273d16f5a0e90ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba825-67b8-4af7-b509-49a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:17.000Z",
            "modified": "2015-09-30T09:15:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd65a8a1e3af95c64ea5e9a6ccebfe25f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba825-ffa4-4657-bbb5-4a56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:17.000Z",
            "modified": "2015-09-30T09:15:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd67be02c8d4ee253871e7adbca48f6c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba826-05f0-4aa9-bb57-4917950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:18.000Z",
            "modified": "2015-09-30T09:15:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd67c8d1744b1c35f9224a09908002afd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba826-2520-4252-9e99-423c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:18.000Z",
            "modified": "2015-09-30T09:15:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd686e644b3f1b63d28af6a8ac20add08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba826-19cc-42fb-9dbe-400b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:18.000Z",
            "modified": "2015-09-30T09:15:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd688ea97188eb7ba33c2674c84d0c4ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba827-c804-4bb1-ba0a-4d74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:19.000Z",
            "modified": "2015-09-30T09:15:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd69efc05d03f4da7d02d318eea5dd91f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba827-166c-44c1-9f91-4391950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:19.000Z",
            "modified": "2015-09-30T09:15:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd69ffe9b626f2be9548de92f0d335c5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba827-f318-43e0-9c10-453b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:19.000Z",
            "modified": "2015-09-30T09:15:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd6a7f288b0346feacdefefcb1442ac11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba828-d768-404a-aa86-4816950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:20.000Z",
            "modified": "2015-09-30T09:15:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd6b72bef4c380ed8510e19d3a028958c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba828-e53c-4b72-be69-4f2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:20.000Z",
            "modified": "2015-09-30T09:15:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd6b81c884ea1b2986f2a2bcdbfaf1d9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba829-4484-41c2-a1d0-4e92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:21.000Z",
            "modified": "2015-09-30T09:15:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd6c03e58605a44a94f77b62eec425f40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba829-f01c-4827-a676-4eac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:21.000Z",
            "modified": "2015-09-30T09:15:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd6c38dd08e7a14146066a25109d682f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba829-c3ec-48d7-a678-43d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:21.000Z",
            "modified": "2015-09-30T09:15:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd6c3bd3b31aed811ba5414bed8dd561d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82a-9884-4976-bdfc-469e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:22.000Z",
            "modified": "2015-09-30T09:15:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd6dcea841378ccc6eb54cc0d6a1fa3be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82a-08ec-4f1d-b6d1-412a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:22.000Z",
            "modified": "2015-09-30T09:15:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd6f327eabe8a240fd7ca22ffac614c17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82a-8380-476d-93ea-4c15950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:22.000Z",
            "modified": "2015-09-30T09:15:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7029458ce5ba13058c730dd644a44cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82b-3f08-41f5-9fcc-4e51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:23.000Z",
            "modified": "2015-09-30T09:15:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd704139dc4900abc9092fb8c918da718']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82b-88cc-48bb-a407-46a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:23.000Z",
            "modified": "2015-09-30T09:15:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd713b753aac36337d68cd4ea472b0848']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82c-a5f4-448c-93c5-4db5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:24.000Z",
            "modified": "2015-09-30T09:15:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7187642b326db7dd892644ba389400d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82c-5bb4-40d5-b12c-4cf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:24.000Z",
            "modified": "2015-09-30T09:15:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7200c91fc54d81145b39852cb4154ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82c-52a0-4388-936f-4a2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:24.000Z",
            "modified": "2015-09-30T09:15:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd724a998a66e1bef71171d584d353186']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82d-05e8-447f-8220-4afc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:25.000Z",
            "modified": "2015-09-30T09:15:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd725a8ebaacddfc3325d993ea3bb105b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82d-64f8-4f4d-b022-47f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:25.000Z",
            "modified": "2015-09-30T09:15:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7277b408c792323a1001705a06f05eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82d-e250-46a6-9b10-4600950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:25.000Z",
            "modified": "2015-09-30T09:15:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd72c23f0ab679095da9ad8cac0d884d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82e-9e64-4bf4-a54a-453d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:26.000Z",
            "modified": "2015-09-30T09:15:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd73ba578a08f882df8ebea94f241e507']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82e-2e00-46bf-9fa7-4310950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:26.000Z",
            "modified": "2015-09-30T09:15:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd73c595e0963f79fcc7c56f165cbf803']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82f-327c-4777-8988-4728950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:27.000Z",
            "modified": "2015-09-30T09:15:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd73d1b9fb5ad780fe5c1ac5e71cca3ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82f-2dac-463b-a451-4acd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:27.000Z",
            "modified": "2015-09-30T09:15:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd740411eadb2eb2d8c606f71df6345ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba82f-8c98-407b-8350-47c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:27.000Z",
            "modified": "2015-09-30T09:15:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd743ebfec5ccaa11aed78e73c7c76010']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba830-5890-40c4-9e3e-4475950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:28.000Z",
            "modified": "2015-09-30T09:15:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd746994ac7c004fbaeee5c9c8f7f8054']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba830-6224-4362-9d9f-4fc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:28.000Z",
            "modified": "2015-09-30T09:15:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd74f67c638e2e09880f78476c9ca0985']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba831-80f4-4534-8b90-485f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:29.000Z",
            "modified": "2015-09-30T09:15:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd753df01cea8bc02d87864dca10d3d08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba831-f8d0-4c2d-b5cb-4552950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:29.000Z",
            "modified": "2015-09-30T09:15:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7554e7f0c7b2f1f82a8c542d0db1fac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba831-5f68-4945-96aa-4003950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:29.000Z",
            "modified": "2015-09-30T09:15:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd755f6ef3927bedda4dedb8368ec55f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba832-32b4-4859-a16f-4a92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:30.000Z",
            "modified": "2015-09-30T09:15:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd75a3f192a4dc2051a32dbd0b4080bdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba832-3fe4-47f7-9be6-4a4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:30.000Z",
            "modified": "2015-09-30T09:15:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd765dc36947c7b23b61346107a076ff8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba832-2028-483e-814d-4354950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:30.000Z",
            "modified": "2015-09-30T09:15:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd77263bf318efe1673d35c6052b0c44f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba833-97f8-40b3-8625-4b97950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:31.000Z",
            "modified": "2015-09-30T09:15:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd776aeb2e4392d0ebbedb0fc72dd974d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba833-ee98-4b2a-b8ec-47bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:31.000Z",
            "modified": "2015-09-30T09:15:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd776b3e58b6b9418e564339f2d6cbb4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba834-d618-4132-8a1a-4f33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:32.000Z",
            "modified": "2015-09-30T09:15:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7773976e103c1ab336a8092e036fe6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba834-1a4c-44d0-abe6-4805950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:32.000Z",
            "modified": "2015-09-30T09:15:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd783859bcf6d4fb3c2566444075c2775']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba834-1210-4a14-ab84-4508950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:32.000Z",
            "modified": "2015-09-30T09:15:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd78ed39468eeb488b8c50d59e5e89c2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba835-d4ec-4071-8f23-4c74950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:33.000Z",
            "modified": "2015-09-30T09:15:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd792ead28dad8d59ef91d5403d49ce37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba835-9d1c-4cf2-98f0-4785950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:33.000Z",
            "modified": "2015-09-30T09:15:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7a5d587e43b80f732f729f9f9aa12e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba836-4ab4-4edd-9aa5-4ea5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:34.000Z",
            "modified": "2015-09-30T09:15:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7aa906a2673cd2311ae7d5b69a3d58e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba836-84d4-4211-a18c-4886950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:34.000Z",
            "modified": "2015-09-30T09:15:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7aa9ee7bf85428b7885664b9dbeef53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba836-37b4-46dc-a579-4f1f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:34.000Z",
            "modified": "2015-09-30T09:15:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7aada7f59e2a571fa61c52fc975c4c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba837-a700-4f79-bf5f-4d98950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:35.000Z",
            "modified": "2015-09-30T09:15:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7e258997a33137d78bd684adaa17c6b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba837-5ccc-438d-8652-4d1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:35.000Z",
            "modified": "2015-09-30T09:15:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7f094d88aa0eb8a1b6852fd2645ddf8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba838-baf0-4536-8314-4338950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:35.000Z",
            "modified": "2015-09-30T09:15:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd7fe29991e4a1af02752c52f6d6b7d61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba838-4180-4591-b89c-4ab7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:36.000Z",
            "modified": "2015-09-30T09:15:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd800c94260a8aedc24d09e185146286c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba838-93d0-4ade-8ca1-4108950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:36.000Z",
            "modified": "2015-09-30T09:15:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd80320b2433115d16b14c44767c9b318']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba839-c154-4d46-b173-4312950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:37.000Z",
            "modified": "2015-09-30T09:15:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd80361980c81c32f6de952b78604e672']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba839-9bf0-4a0f-8758-4d87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:37.000Z",
            "modified": "2015-09-30T09:15:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd812499d774f16e36e53a19364bd932f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba839-6448-4b8b-9eff-4ace950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:37.000Z",
            "modified": "2015-09-30T09:15:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd81b838c95b2853dac3d255cf2989e74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83a-4448-490e-bfae-4415950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:38.000Z",
            "modified": "2015-09-30T09:15:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8229d7f7abfdaacc3ce2de8ddf2e032']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83a-7910-498e-9fca-426a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:38.000Z",
            "modified": "2015-09-30T09:15:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd82c3a5acafa40d68be4c2eaeb4b9cc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83b-2e80-41cc-9edb-4936950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:39.000Z",
            "modified": "2015-09-30T09:15:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8333f7bb225e8d98c38252925cb43a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83b-bac8-4db0-a2c5-4c64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:39.000Z",
            "modified": "2015-09-30T09:15:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd83db92dd25912f53e50f214c2a2c222']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83b-39c0-4998-8b6d-4356950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:39.000Z",
            "modified": "2015-09-30T09:15:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd84d7c5084bd16902dde279b9d4c367a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83c-f74c-41ce-8404-4f83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:40.000Z",
            "modified": "2015-09-30T09:15:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd862eac8f3a088288142324170e5a053']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83c-95a0-429c-98c2-429b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:40.000Z",
            "modified": "2015-09-30T09:15:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd876c357313f7de5215a09fb78cf23f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83c-44c8-4d60-9281-4bce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:40.000Z",
            "modified": "2015-09-30T09:15:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd87e98bf76cb5b2851ba342adfaf9543']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83d-44d0-4132-bd09-47e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:41.000Z",
            "modified": "2015-09-30T09:15:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd88acea43510bf47d1dc7241bbe74cfc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83d-41e4-4bfc-9810-4e33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:41.000Z",
            "modified": "2015-09-30T09:15:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd89462d57ea1d79c6b0310442016ca15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83e-c0d0-4e99-aab4-4c66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:42.000Z",
            "modified": "2015-09-30T09:15:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8948a4bd85eb26b21b9111b240ea9b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83e-b710-445a-8d32-47d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:42.000Z",
            "modified": "2015-09-30T09:15:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd895930ea3f7727ff3d7d574aca6d933']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83e-2960-4953-b0b7-41da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:42.000Z",
            "modified": "2015-09-30T09:15:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd89c39d584621f1805e4a0ccf4450279']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83f-a88c-47fe-adb3-4052950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:43.000Z",
            "modified": "2015-09-30T09:15:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8b7969ed1617c9e4cc056be175bdad8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba83f-71dc-43d5-b820-40cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:43.000Z",
            "modified": "2015-09-30T09:15:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8b96c6bfd01090bd3ce4198288b9ecd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba840-dcdc-42b4-aef8-46e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:44.000Z",
            "modified": "2015-09-30T09:15:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8bc7bf20d37519ab8fa6e179a95f086']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba840-3328-474e-9233-416a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:44.000Z",
            "modified": "2015-09-30T09:15:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8ce56f4cd325d212f97c1a8afa331dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba840-6ec4-4b1d-b93a-478e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:44.000Z",
            "modified": "2015-09-30T09:15:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8d56c4d6c79a9b652ed507a19d98044']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba841-e540-4786-a699-4b3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:45.000Z",
            "modified": "2015-09-30T09:15:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8d5c02dd0cb994256ffa5a248ef2302']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba841-815c-4c1b-b958-4ac6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:45.000Z",
            "modified": "2015-09-30T09:15:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8d5ea52692e6f1189fef2d31332deb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba842-cb18-4d6d-b8ca-40db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:46.000Z",
            "modified": "2015-09-30T09:15:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8d8968489ed838f6211d2530c3d3d8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba842-697c-4afd-b3d7-4e29950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:46.000Z",
            "modified": "2015-09-30T09:15:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8dc2c1b6236f2cf47731a9c5b59c0d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba842-ce28-47d5-a918-4971950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:46.000Z",
            "modified": "2015-09-30T09:15:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8f2d159cc82159b7afd9d21052c7211']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba843-0d98-4b20-916d-4995950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:47.000Z",
            "modified": "2015-09-30T09:15:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8f7dbc29b016f8968e0b927e337ca95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba843-8a5c-40ea-894e-4189950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:47.000Z",
            "modified": "2015-09-30T09:15:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd8fbcc0a1912a0b16f0d4d0c1a7d8a35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba843-a290-42a2-bc90-4d33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:47.000Z",
            "modified": "2015-09-30T09:15:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9178addac9fdffa6c8fe4437e27ebf6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba844-cf08-42e8-88e1-4382950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:48.000Z",
            "modified": "2015-09-30T09:15:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd929379870389ba0fd368a18023b34c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba844-4a28-40ea-beb0-42c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:48.000Z",
            "modified": "2015-09-30T09:15:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd92dcd629a11534df80aa26877c2fb18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba845-0858-464d-b846-4055950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:49.000Z",
            "modified": "2015-09-30T09:15:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd930caab1c64a79a0e2b09efd1195d5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba845-44d0-476d-85aa-4ff9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:49.000Z",
            "modified": "2015-09-30T09:15:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9368251f8fcdd2c0b1d3cd8a2747549']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba845-0f94-4ed5-8e10-4444950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:49.000Z",
            "modified": "2015-09-30T09:15:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd93d9d02296f1864b003c88ca7d28280']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba846-7220-4ec7-9847-41fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:50.000Z",
            "modified": "2015-09-30T09:15:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9417a031593b27ce7d737fa3651dd02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba846-7e74-4b78-8c1a-4207950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:50.000Z",
            "modified": "2015-09-30T09:15:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd94f53fc8ef7b2bc1ab950850e2aa5dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba847-bffc-489d-afaa-46c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:51.000Z",
            "modified": "2015-09-30T09:15:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd95495728db1d257c78bcc19b43e94ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba847-1eb0-4765-8fa8-4248950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:51.000Z",
            "modified": "2015-09-30T09:15:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9572e46a1701dd393bc9e19c4736f09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba847-36ac-472f-be0b-4951950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:51.000Z",
            "modified": "2015-09-30T09:15:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9588f912e41dff3662cecfac400ef60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba848-f27c-445a-a7e1-4d7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:52.000Z",
            "modified": "2015-09-30T09:15:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9592c8b67d621892dae01b6b9a5bf53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba848-4c04-4478-a5a6-4f01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:52.000Z",
            "modified": "2015-09-30T09:15:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd95f2a0fad73594f290df486b821fcaf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba848-fc58-42e3-b06a-4f43950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:52.000Z",
            "modified": "2015-09-30T09:15:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd982daa64419b5401e18904ce3e676df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba849-3ff0-4f37-9e8c-4069950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:53.000Z",
            "modified": "2015-09-30T09:15:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd984409f9aca36a8afc9e57225082e21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba849-4de8-46b3-8408-45fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:53.000Z",
            "modified": "2015-09-30T09:15:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd990fe748264efada8eccc8706194870']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84a-06d0-457f-9b9a-4fb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:54.000Z",
            "modified": "2015-09-30T09:15:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9a5e73a211cb5c3f78d2cc31123b455']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84a-34ec-4812-a351-405d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:54.000Z",
            "modified": "2015-09-30T09:15:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9a75270b09df3da50d39ce0d0c6a5ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84a-92e8-4dc5-a8a5-470d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:54.000Z",
            "modified": "2015-09-30T09:15:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9a7cef294290855603f1a079926c749']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84b-2744-43f5-9a2b-4d2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:55.000Z",
            "modified": "2015-09-30T09:15:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9b5535a34f268276a7c757c4a396812']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84b-5130-4eb8-8e1e-479d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:55.000Z",
            "modified": "2015-09-30T09:15:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9bad924e2ced57f13d3c7d0fb08472e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84b-8798-4788-a97d-4ded950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:55.000Z",
            "modified": "2015-09-30T09:15:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9c1932b3dd7fa145215c477df7c653e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84c-7a50-4c2f-9104-417f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:56.000Z",
            "modified": "2015-09-30T09:15:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9c3d2cfe29759f799b76098dbc7a244']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84c-9fcc-49f1-8842-4052950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:56.000Z",
            "modified": "2015-09-30T09:15:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9cd17c2bb8b0b12c488dbba75e9d448']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84d-89ec-42b7-a091-470e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:57.000Z",
            "modified": "2015-09-30T09:15:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9e5ed4fa9dd4f7b14bef2a443b0d851']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84d-37a4-466a-8621-4663950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:57.000Z",
            "modified": "2015-09-30T09:15:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'd9fb1718008b8879bcfdf0ea4d2e0cb8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84d-87a0-47c1-9767-4a37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:57.000Z",
            "modified": "2015-09-30T09:15:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da06dbfd86e2e8978942b878697601e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84e-5f38-488c-8339-4da8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:58.000Z",
            "modified": "2015-09-30T09:15:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da0cb54e43b8916f28410685ccd457e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84e-003c-44b3-9f6c-4b99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:58.000Z",
            "modified": "2015-09-30T09:15:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da2408e7854de7419f4781f69de353fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84f-de68-410c-8509-46e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:59.000Z",
            "modified": "2015-09-30T09:15:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da29089228811144f6f837649da3dae4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84f-e1d0-4247-a19d-41ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:59.000Z",
            "modified": "2015-09-30T09:15:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da299bf6108c680e2830dfcd3bfd80b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba84f-0110-4f05-a5ad-42ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:15:59.000Z",
            "modified": "2015-09-30T09:15:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da322ec076e6067a912cb2f7e8d39825']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:15:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba850-a18c-46bc-87b6-4814950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:00.000Z",
            "modified": "2015-09-30T09:16:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da40acdeef71827d4c416f052c459cf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba850-fe50-4df0-835c-495b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:00.000Z",
            "modified": "2015-09-30T09:16:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da4956ff6663e6677d28ef024b887da5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba850-7cfc-4a55-8db0-4053950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:00.000Z",
            "modified": "2015-09-30T09:16:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da5ca5f5daf2eae50670d43d5fa7352b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba851-d364-46c0-8a41-48b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:01.000Z",
            "modified": "2015-09-30T09:16:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da5f2aa9dc572c88e432970663dd841b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba851-54bc-4caf-841e-41fe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:01.000Z",
            "modified": "2015-09-30T09:16:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da75d1a9306a1f9ee70a58c35ea761fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba852-08f0-4ce1-ab6c-4bd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:02.000Z",
            "modified": "2015-09-30T09:16:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da766b5a479f14b7e6d17a9cd8b81f98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba852-f114-4541-a818-4904950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:02.000Z",
            "modified": "2015-09-30T09:16:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da7f48e2b2ff0a0b59fbbc409b575d3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba852-a8a4-4f08-a8a4-4b6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:02.000Z",
            "modified": "2015-09-30T09:16:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da81de633de3483b8b41d0c9de2bfdba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba853-8470-4ce0-8e71-45de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:03.000Z",
            "modified": "2015-09-30T09:16:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'da9eab45b917fe4b496d0c60b3f8df75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba853-a1d0-4996-91d5-4c1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:03.000Z",
            "modified": "2015-09-30T09:16:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dab1919005d68ec0996def0fab15f948']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba854-ed1c-4241-a4e3-4595950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:04.000Z",
            "modified": "2015-09-30T09:16:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dabb4f06c228612aa5b138eaf5704d52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba854-1d18-4580-8e06-4e05950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:04.000Z",
            "modified": "2015-09-30T09:16:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dabc240c41a4ca904d9e53458e4576d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba854-db34-4b69-bf1a-433b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:04.000Z",
            "modified": "2015-09-30T09:16:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dabe4a9f16f08717de64d614f01250ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba855-b1f4-432d-a409-4345950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:05.000Z",
            "modified": "2015-09-30T09:16:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dacec174e1adf08ac440b26266531edf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba855-fd60-477d-8edc-4b85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:05.000Z",
            "modified": "2015-09-30T09:16:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dad523c2f36256664a43e8a6f95db1c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba855-fb1c-45be-8b0f-4bb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:05.000Z",
            "modified": "2015-09-30T09:16:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dad66f20f36b34a429b239ee2d002108']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba856-c990-46ac-877a-47d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:06.000Z",
            "modified": "2015-09-30T09:16:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dae0a27b11aa2fdccb876453c71b39ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba856-39ec-4985-bd0b-4864950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:06.000Z",
            "modified": "2015-09-30T09:16:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dae68170343742c1aee398a4390fb265']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba857-4a0c-4ca2-ad92-43c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:07.000Z",
            "modified": "2015-09-30T09:16:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'daed3a632a3f0dcd94ffa9427339d88f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba857-e1d0-40db-b743-44ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:07.000Z",
            "modified": "2015-09-30T09:16:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'daf041bd6297ceab01d5ef709e24d88c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba857-26f8-4092-bec7-4446950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:07.000Z",
            "modified": "2015-09-30T09:16:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'daf48f99dbef6721f2c17a558ae226d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba858-370c-43b4-8e9f-4c2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:08.000Z",
            "modified": "2015-09-30T09:16:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db17270d3e9589da09cacf06be92c51c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba858-19cc-4afd-bcd3-4f96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:08.000Z",
            "modified": "2015-09-30T09:16:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db1cd4c8ff056ebbc80ce67c6c7b1b04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba859-e65c-4e24-990d-463b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:09.000Z",
            "modified": "2015-09-30T09:16:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db21c3e1f79f1193eb8ec35dff6da829']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba859-e66c-4616-8372-4ae6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:09.000Z",
            "modified": "2015-09-30T09:16:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db32da1da2c8dea8de15fbc93b02ad6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba859-a110-499a-b4b5-414c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:09.000Z",
            "modified": "2015-09-30T09:16:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db4a9bd74f762b2efe607b8066866a8d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85a-bf14-4486-9b8e-4f6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:10.000Z",
            "modified": "2015-09-30T09:16:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db5eec7b9b9b4b460dc4deb6fde818cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85a-3b84-4ad2-9ca7-414a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:10.000Z",
            "modified": "2015-09-30T09:16:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db5f317ecc325ce82763d8cc36fa4952']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85a-854c-4b86-96e9-461d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:10.000Z",
            "modified": "2015-09-30T09:16:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db63cc9d6287e91a49242084c6b676f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85b-747c-46da-9915-484d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:11.000Z",
            "modified": "2015-09-30T09:16:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db6f129b1346f2968c54f0e08faaaaa6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85b-37b4-49cd-9432-4f42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:11.000Z",
            "modified": "2015-09-30T09:16:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db7b502b26d4d5ad8f9bc18cb71a2009']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85c-3c68-43c0-b68f-4899950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:12.000Z",
            "modified": "2015-09-30T09:16:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db88363ecbd1b6783a0de22d2355f993']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85c-da94-425e-bfd9-40f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:12.000Z",
            "modified": "2015-09-30T09:16:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db8c1207ffe7e56aeb6fc1145a50c60f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85c-b3dc-4868-b02a-4766950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:12.000Z",
            "modified": "2015-09-30T09:16:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db8c6c95cb3dd5a13b795b521676df99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85d-5980-4c9a-9c25-4007950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:13.000Z",
            "modified": "2015-09-30T09:16:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'db99ee0878650186b5059deacc099c80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85d-d8b4-41be-9f49-4977950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:13.000Z",
            "modified": "2015-09-30T09:16:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dba36aed7e703dc28c90d3ce5a74782a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85d-2954-4f52-91d8-4ddc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:13.000Z",
            "modified": "2015-09-30T09:16:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dba40354198deae8ac27f441a691405b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85e-8114-42ce-bfb8-44f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:14.000Z",
            "modified": "2015-09-30T09:16:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbb03d3747635c585bb9921bdbb3e556']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85e-5b28-445f-a502-4053950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:14.000Z",
            "modified": "2015-09-30T09:16:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbc49aed8e9886d6ccfd7c62d6685452']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85f-9bb8-4acb-9c54-4cbc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:15.000Z",
            "modified": "2015-09-30T09:16:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbd28e676df7d721557582e912697493']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85f-638c-48b0-9d9f-410a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:15.000Z",
            "modified": "2015-09-30T09:16:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbdefbf1f9a508c8713e8fa97d35c7ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba85f-a31c-433e-a04d-456d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:15.000Z",
            "modified": "2015-09-30T09:16:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbe0ea6cf968361ec7fb16674849f165']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba860-b40c-45e8-81a3-4815950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:16.000Z",
            "modified": "2015-09-30T09:16:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbe17275d9acb06a46faddd4cb062db5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba860-ee60-4ec7-8a23-4b04950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:16.000Z",
            "modified": "2015-09-30T09:16:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbe2a31f8e2dbe29d354b88e58abe4e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba860-eff8-4ca8-8e8b-4b55950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:16.000Z",
            "modified": "2015-09-30T09:16:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbe8df7dddc1bbfb8d68d14650e6a5fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba861-e530-4593-a114-48a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:17.000Z",
            "modified": "2015-09-30T09:16:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbfb48bc9ca679f0ad3d9712229602d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba861-2c28-4257-9e22-411c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:17.000Z",
            "modified": "2015-09-30T09:16:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dbfff83bba6a60d4f9bba864e6132771']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba862-2028-451d-80af-4b87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:18.000Z",
            "modified": "2015-09-30T09:16:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc06dd0679a3c08647bf04d72c15a819']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba862-2c68-4e46-8fa9-4f9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:18.000Z",
            "modified": "2015-09-30T09:16:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc10b3f44a04fea03604ae00c717c1b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba862-79b8-4657-b8b2-45da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:18.000Z",
            "modified": "2015-09-30T09:16:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc1ab370574f45acffc75224294de803']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba863-1e2c-42fb-a192-404d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:19.000Z",
            "modified": "2015-09-30T09:16:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc2232cf3bddd32ea8cfc301a64327d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba863-b938-4c25-a2ff-4fd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:19.000Z",
            "modified": "2015-09-30T09:16:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc2e533c455e25383d732136e03b9988']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba864-baac-4f44-9c73-4bb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:20.000Z",
            "modified": "2015-09-30T09:16:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc34c3565199a407352b8ea5c6f9866c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba864-c698-497e-bfdd-491a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:20.000Z",
            "modified": "2015-09-30T09:16:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc34d75f5a326d2ee1592066617f2bc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba864-2450-4922-8ccc-4fe3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:20.000Z",
            "modified": "2015-09-30T09:16:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc375cdf1833e934902439abf1c3a5d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba865-0e68-4d4e-8a34-40f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:21.000Z",
            "modified": "2015-09-30T09:16:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc65491c9218fcf09e73e27d20252202']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba865-1958-4f4e-a61d-42b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:21.000Z",
            "modified": "2015-09-30T09:16:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc6bf6c1ca2a75cf8dc689bf0d77dd70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba865-de54-4f39-a110-4c4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:21.000Z",
            "modified": "2015-09-30T09:16:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc75e2c2923d61eb47a753bf607236b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba866-4254-42c9-a9d5-4313950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:22.000Z",
            "modified": "2015-09-30T09:16:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc8a8df77c4d0049694397236704e8e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba866-4f70-40d4-a783-48a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:22.000Z",
            "modified": "2015-09-30T09:16:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc9b37fbaad9521a0d37beef1328b483']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba867-5518-4baa-98dd-4385950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:23.000Z",
            "modified": "2015-09-30T09:16:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dc9dfda06cbd4e180169f572e638db90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba867-c8c8-428d-ab99-475c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:23.000Z",
            "modified": "2015-09-30T09:16:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dca2da86083e77d0bf83b41bc72f11dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba867-cf3c-4694-9ffc-4bb6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:23.000Z",
            "modified": "2015-09-30T09:16:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dca63ff67eb30f6d36c751b3730c9366']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba868-eb38-4ef6-9976-4ae1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:24.000Z",
            "modified": "2015-09-30T09:16:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dcb4c6a5ca2418225fd3ce968fedff9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba868-28cc-4940-a3f6-4469950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:24.000Z",
            "modified": "2015-09-30T09:16:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dcc108c22927bd2ef723e231b3560fba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba868-1338-4a02-afd6-49b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:24.000Z",
            "modified": "2015-09-30T09:16:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dcd7d886d13dbb0b064703631901a4ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba869-4e88-4bf4-8175-4a61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:25.000Z",
            "modified": "2015-09-30T09:16:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dce2ba04e2cf7aac59ef6d28fe6d3a8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba869-943c-444f-b92c-4ee7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:25.000Z",
            "modified": "2015-09-30T09:16:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dce78967489676d2ea03becaef945171']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86a-4c14-4bad-87c5-4add950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:26.000Z",
            "modified": "2015-09-30T09:16:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dcf39c8e7639aa77d59fbeda3e03b2bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86a-dd8c-4b9e-a09f-4a0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:26.000Z",
            "modified": "2015-09-30T09:16:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dcf5ca3f207f110a0dde9c920a9ad4d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86a-9c54-4ae8-9a30-4696950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:26.000Z",
            "modified": "2015-09-30T09:16:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd2d550c25834de0bf979b38b5a2dc85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86b-5e3c-40d7-ba72-49d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:27.000Z",
            "modified": "2015-09-30T09:16:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd36f9c4d1c927011bbabeba47045421']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86b-7394-4cd8-a0e9-4ce8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:27.000Z",
            "modified": "2015-09-30T09:16:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd3eb7a387e3d25e10bf99953efa21d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86b-d8b8-496a-a670-4465950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:27.000Z",
            "modified": "2015-09-30T09:16:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd52ae06f638ba680e042ab7f0b05584']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86c-7d0c-4fd7-866b-4b01950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:28.000Z",
            "modified": "2015-09-30T09:16:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd553612cddd579d58b416a7770f43d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86c-75dc-4c5e-b0c3-462a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:28.000Z",
            "modified": "2015-09-30T09:16:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd62a8c3e2e7ecbc567c6c578355dbff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86d-8d04-48a3-923e-4520950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:29.000Z",
            "modified": "2015-09-30T09:16:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd7af900d739ad2d266668edbde21a0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86d-ed78-4466-9133-4a7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:29.000Z",
            "modified": "2015-09-30T09:16:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd8624660bf6be3b43fa4c7e06a00211']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86d-85ac-4c83-a552-49f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:29.000Z",
            "modified": "2015-09-30T09:16:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd8f354510049e80a7e61fa485acddde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86e-a430-4abe-bb78-494b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:30.000Z",
            "modified": "2015-09-30T09:16:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd90448dc759f017402cb4b7f0b9d0af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86e-ab14-4f81-904c-4e81950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:30.000Z",
            "modified": "2015-09-30T09:16:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd9a4673a853fae2daaa05a22b5f4a02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86f-8654-4237-9bec-4561950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:31.000Z",
            "modified": "2015-09-30T09:16:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dd9dba938c8132df1a8d567487d8fc36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86f-648c-4b9a-b3a3-4a3e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:31.000Z",
            "modified": "2015-09-30T09:16:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dda50c923db095f454b1ba270da95921']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba86f-44b0-4fe0-9137-47c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:31.000Z",
            "modified": "2015-09-30T09:16:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dda651157ea3d2bd16a218e58fc4fe53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba870-7ba8-401b-9769-4ed1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:32.000Z",
            "modified": "2015-09-30T09:16:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddad9e448c54a4a05b2d0431170fdd87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba870-9c4c-4486-82e5-42e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:32.000Z",
            "modified": "2015-09-30T09:16:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddbe5c78294ced2248f3b5d6df145824']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba870-117c-4798-a03b-4f78950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:32.000Z",
            "modified": "2015-09-30T09:16:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddc5e0fe664d1248140f773be96e4c87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba871-cc80-481f-91ef-470c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:33.000Z",
            "modified": "2015-09-30T09:16:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddc647064594a62d181fdfbe89573043']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba871-0a9c-4c70-8a52-4548950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:33.000Z",
            "modified": "2015-09-30T09:16:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddc8877dc7593b9e21a1a5a749960607']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba872-da1c-43d1-8d61-46ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:34.000Z",
            "modified": "2015-09-30T09:16:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddcd0cfe3fce5b912955d72785ef526e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba872-7414-4a93-89f9-42de950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:34.000Z",
            "modified": "2015-09-30T09:16:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddcd354c04dbcc743669a4c6e3643f8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba872-300c-4b6f-8f72-4177950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:34.000Z",
            "modified": "2015-09-30T09:16:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddd109c23315cf5eed535697e3a2304c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba873-0024-403c-9d0a-4f6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:35.000Z",
            "modified": "2015-09-30T09:16:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddda9ae1bb716b4312cc2eca708b77dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba873-be68-4ba8-aa7e-4938950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:35.000Z",
            "modified": "2015-09-30T09:16:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddda9cc5159f0fb4d5d97ab5e358bfd3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba873-6f00-4233-997f-4ef7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:35.000Z",
            "modified": "2015-09-30T09:16:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dde3d4ebcb2f694db67858f042c74ddf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba874-3078-43b1-96f5-41b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:36.000Z",
            "modified": "2015-09-30T09:16:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dde599022afd1035094e9f5fe4875ecf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba874-0fdc-4d00-94bf-4f8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:36.000Z",
            "modified": "2015-09-30T09:16:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ddee969f3801a19bad060f20224263a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba875-c2fc-42a2-8d86-43f7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:37.000Z",
            "modified": "2015-09-30T09:16:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de0d283dd019e4164e881cf9626bf993']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba875-5bdc-443d-8694-4e83950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:37.000Z",
            "modified": "2015-09-30T09:16:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de194657efd3205dcdd61693bdd7d190']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba875-2b20-4571-9147-43fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:37.000Z",
            "modified": "2015-09-30T09:16:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de1fcd26e08ccb019f856c0283e9de6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba876-6408-4cdc-a3f2-46cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:38.000Z",
            "modified": "2015-09-30T09:16:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de2ee71297197f840e71991d9a84afe8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba876-050c-4d74-b03f-407d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:38.000Z",
            "modified": "2015-09-30T09:16:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de36646773cccc74d22655beaa55dae3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba876-d2c8-4656-979f-4d48950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:38.000Z",
            "modified": "2015-09-30T09:16:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de3d78748023029eb5e247530f5fb35c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba877-ce98-45bc-a982-45ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:39.000Z",
            "modified": "2015-09-30T09:16:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de426311c33cac5f5857b5c90b2dc59c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba877-0c48-400b-ba1e-470b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:39.000Z",
            "modified": "2015-09-30T09:16:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de47e59e90b688fa027e6aae581c95fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba878-5e10-4076-97c3-4931950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:40.000Z",
            "modified": "2015-09-30T09:16:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de508f6ed90a2186ee32ba7612e849ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba878-05dc-4233-9c87-434e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:40.000Z",
            "modified": "2015-09-30T09:16:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de6ab36033b8a632bc37afb1a96172e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba878-5d0c-4da9-8080-4fa4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:40.000Z",
            "modified": "2015-09-30T09:16:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de785bee16c1368418fbad7a27c6164f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba879-24d4-4391-9967-49f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:41.000Z",
            "modified": "2015-09-30T09:16:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de7f2f6908aa93552c130f6bbab99468']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba879-6838-4859-b878-4e07950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:41.000Z",
            "modified": "2015-09-30T09:16:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de84f17c846cd49b971b0c222bb7f877']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba879-2a40-4658-b6ce-4f77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:41.000Z",
            "modified": "2015-09-30T09:16:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de8759124aeed6f374b31714f3f12621']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87a-0f6c-4273-8cd6-43e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:42.000Z",
            "modified": "2015-09-30T09:16:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de9720d36a1c3d2afbe9f977264d9a29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87a-bb48-44e7-bcec-4060950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:42.000Z",
            "modified": "2015-09-30T09:16:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'de998c4d4de45963bc7a6c46b00509ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87b-5b44-4e1f-91f4-4c59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:43.000Z",
            "modified": "2015-09-30T09:16:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dea57535a3858524820fc9b4dfbf0db9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87b-9ddc-42cb-acf6-41a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:43.000Z",
            "modified": "2015-09-30T09:16:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'deac754c5f9fdf8da44b49212f4a1921']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87b-3fc0-47c1-b616-4028950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:43.000Z",
            "modified": "2015-09-30T09:16:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'deb7a129ad442795be2eee44b57e4523']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87c-fcf4-489f-9e77-4648950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:44.000Z",
            "modified": "2015-09-30T09:16:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dec8a733cf8824d8f08480bbc952d641']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87c-c750-4484-b731-467c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:44.000Z",
            "modified": "2015-09-30T09:16:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dee7b96ae1124ea58cd9e1a6e4181301']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87d-ab70-4363-8881-4aae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:45.000Z",
            "modified": "2015-09-30T09:16:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'deeb576ad366717d2af44cefa9d83373']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87d-8260-44f4-b661-450c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:45.000Z",
            "modified": "2015-09-30T09:16:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'defbb0bb021202062d56d2bdcfc1bc5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87d-b0b0-4aad-9540-47cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:45.000Z",
            "modified": "2015-09-30T09:16:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df08f78cb9e94c1a6e57f13b50563956']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87e-fd1c-4b75-8b65-46b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:46.000Z",
            "modified": "2015-09-30T09:16:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df0c50bd1efdd176809b6c29c886dcfa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87e-2598-4005-97fa-4fac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:46.000Z",
            "modified": "2015-09-30T09:16:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df0d224b4c40b1e80d866cbd6289daa2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87e-4e5c-457d-9dc3-46b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:46.000Z",
            "modified": "2015-09-30T09:16:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df1051ac3318470e3bcbd74a25c19cb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87f-9aa8-4725-825c-4bb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:47.000Z",
            "modified": "2015-09-30T09:16:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df1d2c221d96cb0f2d8597116e5450ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba87f-8a5c-4095-a1fb-4da1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:47.000Z",
            "modified": "2015-09-30T09:16:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df1dfc6a7ecb52bcbf2690c55116cbd0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba880-581c-458a-a2aa-4bb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:48.000Z",
            "modified": "2015-09-30T09:16:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df1ea627b6b5ab7d5748a645cacc6ce5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba880-55d0-4490-b660-4735950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:48.000Z",
            "modified": "2015-09-30T09:16:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df21c152c6ec8ec16d149ca86682030e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba880-844c-486a-97e4-412a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:48.000Z",
            "modified": "2015-09-30T09:16:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df3dc6a2ebeadb2c73984a52b6cc1d1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba881-8e5c-4614-92f5-4d3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:49.000Z",
            "modified": "2015-09-30T09:16:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df46097ff9466f837ef8820a51898822']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba881-02bc-4d59-80cf-4b20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:49.000Z",
            "modified": "2015-09-30T09:16:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df501de31cc49240b85381179957c3b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba882-1de0-4ac8-aeb5-45c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:49.000Z",
            "modified": "2015-09-30T09:16:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df57a88099a9d3e3a52d4d2ea724a76a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba882-2bac-4ff8-87a1-46c8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:50.000Z",
            "modified": "2015-09-30T09:16:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df58773f5aeac7f4c7fd232ae0e75d10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba882-c918-44cc-ab07-4428950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:50.000Z",
            "modified": "2015-09-30T09:16:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df5c23d8a7aa67156c1dcfd529b3601c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba883-4b08-4f91-ae57-402a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:51.000Z",
            "modified": "2015-09-30T09:16:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df66144efc1f9fa9d540ecee99bd7ed7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba883-e134-4a26-9b70-43db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:51.000Z",
            "modified": "2015-09-30T09:16:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df74cc117cc7c0a606ad9b463a8d805d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba883-e458-4422-b534-4937950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:51.000Z",
            "modified": "2015-09-30T09:16:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df76c04f2639529cce88848d251c86fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba884-3c30-4e73-a9c7-4e21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:52.000Z",
            "modified": "2015-09-30T09:16:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df786d6e0e6eea9cfd4501e5e8c78c8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba884-d258-464b-aeb8-41b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:52.000Z",
            "modified": "2015-09-30T09:16:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df84932138b498e5cb004cb9ff9e0ab6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba885-c2f8-461f-a43c-4491950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:53.000Z",
            "modified": "2015-09-30T09:16:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df8c47e973bf767cb8c5cc7636e6137b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba885-b104-418d-b6c0-4dd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:53.000Z",
            "modified": "2015-09-30T09:16:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df8d0a549c95e6275d36ed94c7c7f12e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba885-548c-4be7-8716-43e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:53.000Z",
            "modified": "2015-09-30T09:16:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df8f8744590a04315d60ce515e9a42a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba886-f49c-4072-aa52-4e6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:54.000Z",
            "modified": "2015-09-30T09:16:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'df93d3a1843f0ea1f7f5dbc769342218']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba886-abac-4c3b-b5a3-40d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:54.000Z",
            "modified": "2015-09-30T09:16:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dfaaaa294c2b4442ea95484e59a6ae11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba886-7c70-4b1a-94ec-45cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:54.000Z",
            "modified": "2015-09-30T09:16:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dfc806728f983e879a6af5ac325b4b84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba887-5f04-4424-9935-4f2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:55.000Z",
            "modified": "2015-09-30T09:16:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dfd970eb0b98f6524267dd150a4025d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba887-110c-4df9-87e0-4285950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:55.000Z",
            "modified": "2015-09-30T09:16:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dfde900ffd4c754b1cbcc9986ba0af57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba888-5528-46dc-b344-49a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:56.000Z",
            "modified": "2015-09-30T09:16:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dfe5fa481a416054c766de9e185024e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba888-d55c-4c3b-b5d1-4128950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:56.000Z",
            "modified": "2015-09-30T09:16:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dfe7f301df078bad91b04365d8bab067']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba888-d938-4b38-b7bc-48ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:56.000Z",
            "modified": "2015-09-30T09:16:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dfee9cac332379ee6e1b40046f6fa3d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba889-a27c-4252-bdbb-49f5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:57.000Z",
            "modified": "2015-09-30T09:16:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dff72577e43712e48522a7b683a18737']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba889-1340-4d51-aac1-4856950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:57.000Z",
            "modified": "2015-09-30T09:16:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'dffe4c124f6e4c0013b740fd0dea4f26']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88a-980c-41f2-84e6-4270950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:58.000Z",
            "modified": "2015-09-30T09:16:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e004e21a11bd3c176676cbaad1cf1df1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88a-0df8-4154-b7cd-4464950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:58.000Z",
            "modified": "2015-09-30T09:16:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e007a92d1c8cd27f82c23fa4cc1f8810']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88a-ec94-4873-8812-42ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:58.000Z",
            "modified": "2015-09-30T09:16:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e00e5ebac714a063ed43f29af93459ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88b-2374-4452-bccb-4041950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:59.000Z",
            "modified": "2015-09-30T09:16:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e03759521bdff045885ab48702317b21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88b-cc74-4ff2-a2be-43f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:59.000Z",
            "modified": "2015-09-30T09:16:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e042f571b043eac745d1330b80d192f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88b-1db4-4269-a5f5-43f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:16:59.000Z",
            "modified": "2015-09-30T09:16:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e04966bedd5643ea7cded497d203efdc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:16:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88c-f574-43e3-8001-489a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:00.000Z",
            "modified": "2015-09-30T09:17:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e04d487cdc2858b2cb06904779699295']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88c-0b60-4312-9bff-49dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:00.000Z",
            "modified": "2015-09-30T09:17:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e04e2db2b0f2f67509da1531ef1efc0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88d-db94-4583-bed7-4215950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:01.000Z",
            "modified": "2015-09-30T09:17:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0714b710104fb53d1dc0141cdfe3677']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88d-49e4-48b7-87b0-46d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:01.000Z",
            "modified": "2015-09-30T09:17:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e07467c2e1fd49c2cebc8355803072c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88d-2aa8-4adb-ade3-4a4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:01.000Z",
            "modified": "2015-09-30T09:17:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e07966daba8420bbf4177d27a8964511']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88e-58ac-4221-85e2-45aa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:02.000Z",
            "modified": "2015-09-30T09:17:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e07b82d34839be1a057a2b7ace6b096d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88e-46c0-4013-9220-4330950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:02.000Z",
            "modified": "2015-09-30T09:17:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e08ea493e1ccabe0d0a6ec1970a92a90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88f-ec34-4c0a-a45e-49e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:03.000Z",
            "modified": "2015-09-30T09:17:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e08ede2f78b142d377a8f86de1a7c662']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88f-7b88-4696-bacb-411d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:03.000Z",
            "modified": "2015-09-30T09:17:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e091d88092bbff761b9a187a8f857704']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba88f-9e08-413e-8f4e-4767950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:03.000Z",
            "modified": "2015-09-30T09:17:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0983c4e53fe3ee06c2b4ad60fc746b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba890-d7c8-4647-ab88-4c7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:04.000Z",
            "modified": "2015-09-30T09:17:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e09fba5948cd10f3d7629c5536caed0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba890-6494-4579-8510-4c5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:04.000Z",
            "modified": "2015-09-30T09:17:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0a0cedc6425e1fab5c8dce5cf90e15e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba890-1624-4b5f-8af6-4411950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:04.000Z",
            "modified": "2015-09-30T09:17:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0aa1c82ef6249467f25f08693704987']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba891-6030-4dba-803c-4b95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:05.000Z",
            "modified": "2015-09-30T09:17:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0af9c7f74acf724f47b08a350f01105']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba891-2970-480e-861a-48ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:05.000Z",
            "modified": "2015-09-30T09:17:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0b5c434a06c98bdf4cd858feb5065ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba892-6e54-4e53-b2b7-423b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:06.000Z",
            "modified": "2015-09-30T09:17:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0d65484526d8241b8d485a489b754ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba892-f0b4-4999-9b03-43bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:06.000Z",
            "modified": "2015-09-30T09:17:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0de82b6654cf6eff75e12b582a553ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba892-3150-4504-aacf-409e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:06.000Z",
            "modified": "2015-09-30T09:17:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0e32f3adb24fb655222d19607b09053']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba893-8f30-4c5a-a488-4458950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:07.000Z",
            "modified": "2015-09-30T09:17:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e0e60249136fbd47c82c377e511a45e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba893-1048-4849-ba93-4205950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:07.000Z",
            "modified": "2015-09-30T09:17:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1031fa844095f610f1744a76b08598a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba893-9b10-470e-bff3-4ec1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:07.000Z",
            "modified": "2015-09-30T09:17:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e11fe46922b87cff72ff3c5a3f9f25c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba894-aa04-4226-a91b-4a7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:08.000Z",
            "modified": "2015-09-30T09:17:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e13003437846aa51408d631183d2932f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba894-251c-4c52-838b-46c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:08.000Z",
            "modified": "2015-09-30T09:17:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1349cdeaed8b2fb0f788e2ec67cb9e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba895-76dc-4869-90df-4e9f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:09.000Z",
            "modified": "2015-09-30T09:17:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e13b708d38eccc403c5899c899b819bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba895-ffd4-40c0-8919-47b2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:09.000Z",
            "modified": "2015-09-30T09:17:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e14495dd4ca58a3d96054987183d828c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba895-3e30-4ebf-a7e2-42cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:09.000Z",
            "modified": "2015-09-30T09:17:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e14566af371242456c936ace27b0a5ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba896-9cd4-412e-bc94-4e26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:10.000Z",
            "modified": "2015-09-30T09:17:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e14ff5eb390a030a705f3208d61f621f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba896-604c-4ee3-9127-4c1b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:10.000Z",
            "modified": "2015-09-30T09:17:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e174ad9b602052a25cc3331180572736']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba897-b368-49ae-b19d-4647950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:11.000Z",
            "modified": "2015-09-30T09:17:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e189904d9e1ad88fd0a066780db241a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba897-0384-4af8-a300-4477950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:11.000Z",
            "modified": "2015-09-30T09:17:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e190b22287c8058f17ed95a5dc9e1741']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba897-1c08-469a-a3e6-4323950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:11.000Z",
            "modified": "2015-09-30T09:17:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1a3c3f0d7ad83249cb0d10191e1f76e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba898-7130-4a3a-b5ac-4026950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:12.000Z",
            "modified": "2015-09-30T09:17:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1a4395dfc832e9e81ed3f6e907ad550']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba898-41a4-406d-a045-4b8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:12.000Z",
            "modified": "2015-09-30T09:17:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1a8870748521ef0a17dc60025402584']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba898-c98c-4dcc-b0b7-4325950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:12.000Z",
            "modified": "2015-09-30T09:17:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1abb0603454ab8f7a448425736a4c03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba899-9848-4d7a-958e-4e1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:13.000Z",
            "modified": "2015-09-30T09:17:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1add37f5a5731462a82e736ea9c270d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba899-7980-409a-b95e-4fda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:13.000Z",
            "modified": "2015-09-30T09:17:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1ca05bf3650f4872f465aa640855f7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89a-1038-4902-b2a4-4795950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:14.000Z",
            "modified": "2015-09-30T09:17:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1ce23854b0129a21c43d849846246da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89a-07b4-4d7e-a3bf-4a86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:14.000Z",
            "modified": "2015-09-30T09:17:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1d53f57138ae215909c7214f46219a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89a-c35c-43db-b75a-4200950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:14.000Z",
            "modified": "2015-09-30T09:17:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1de554bc1a45aa11f5f4a4aa7826d6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89b-39f8-41f2-8c4e-4e42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:15.000Z",
            "modified": "2015-09-30T09:17:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1e404f43b1fbae633ad2b2dcadfe5ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89b-b9ac-4eca-9b2d-4c3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:15.000Z",
            "modified": "2015-09-30T09:17:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1e45bfd2dcc4bc755973854f9a1e062']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89b-a600-4551-979f-43fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:15.000Z",
            "modified": "2015-09-30T09:17:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1e9dd6c4c4efccc0677a433b2f906e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89c-7a34-43e5-9500-4b0d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:16.000Z",
            "modified": "2015-09-30T09:17:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e1ea0f12e43d3127a37fa0784dbd0dda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89c-b4f4-4bdb-b2eb-4c79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:16.000Z",
            "modified": "2015-09-30T09:17:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e214e9f80ca904dad23be9158bf4411f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89d-be90-4075-9344-4376950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:17.000Z",
            "modified": "2015-09-30T09:17:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e21acc4849b1dac29e9b8a2930fdc7f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89d-ca2c-492c-8c5d-47c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:17.000Z",
            "modified": "2015-09-30T09:17:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e22d6b3593cf9d60393c9845e6ec7c00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89d-f7a4-423e-863b-459a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:17.000Z",
            "modified": "2015-09-30T09:17:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e22f2da2549e27c8565a4663c191c4c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89e-bf48-48e9-8454-45b8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:18.000Z",
            "modified": "2015-09-30T09:17:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e234fd74dd8261d362675debeb0d29fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89e-19e0-4afb-8241-4d51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:18.000Z",
            "modified": "2015-09-30T09:17:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e23c64f623d82f8ed1913d842281a3fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89f-a1f0-4957-914d-44a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:19.000Z",
            "modified": "2015-09-30T09:17:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e23f7fa1d09b3fcc28f762f941a3e059']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89f-69f0-414b-b6ad-41a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:19.000Z",
            "modified": "2015-09-30T09:17:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e24b088ce6e08dbf7194e994108891c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba89f-e7c4-441d-97e5-4a50950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:19.000Z",
            "modified": "2015-09-30T09:17:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e24c2c64a37b8ea8abbfe512886d6aa3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a0-d950-4165-b568-4e26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:20.000Z",
            "modified": "2015-09-30T09:17:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e24c5dcd1a86b1cd05efddb6d6b167e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a0-f19c-4c92-93e8-452d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:20.000Z",
            "modified": "2015-09-30T09:17:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2507e254c0a0a32115962a95b9c03c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a0-3ef4-46d8-8b51-4d4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:20.000Z",
            "modified": "2015-09-30T09:17:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e268d952f72120d31cd53639758e17e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a1-b3e8-4da2-9f48-4531950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:21.000Z",
            "modified": "2015-09-30T09:17:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e26a7d1f3ff645317162bb9ed5ff4ae1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a1-59fc-4e28-9148-4c65950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:21.000Z",
            "modified": "2015-09-30T09:17:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e26b0bfbad9b0e9b0684f1cd8628cda7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a2-7ed8-499f-9d73-4eff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:22.000Z",
            "modified": "2015-09-30T09:17:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e26fe0d61c7149e7a06a89a5f25fc015']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a2-eec0-4b76-bf92-4769950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:22.000Z",
            "modified": "2015-09-30T09:17:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2718ff68df0ad45cc56eaf167e7dd35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a2-d614-484a-bc53-44d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:22.000Z",
            "modified": "2015-09-30T09:17:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e271fec2a5b941a14ae2e5f35e06065d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a3-0d7c-4d1f-b0a7-4746950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:23.000Z",
            "modified": "2015-09-30T09:17:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e274dda454b094066a977c6674f683d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a3-3dc0-4384-b88d-4423950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:23.000Z",
            "modified": "2015-09-30T09:17:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e27cd69b88f801750f9036415f6747cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a3-afc4-4b35-8414-4226950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:23.000Z",
            "modified": "2015-09-30T09:17:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e288d3937f2fbef4b0626161534a34c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a4-64a0-4d8d-8058-4ace950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:24.000Z",
            "modified": "2015-09-30T09:17:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e28b71d6829a6cb4650f123f13bd028e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a4-af60-46f3-96ca-4edb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:24.000Z",
            "modified": "2015-09-30T09:17:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2988ba6a22cc2603e0cb15fa65effba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a5-b2f8-4393-be81-4dd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:25.000Z",
            "modified": "2015-09-30T09:17:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2989a51700680ff537c3f82a0833ef0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a5-6610-4929-b27d-4487950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:25.000Z",
            "modified": "2015-09-30T09:17:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e29a31eabbe04fb876771376dd9d690d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a5-eb18-4f24-952b-4654950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:25.000Z",
            "modified": "2015-09-30T09:17:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e29bfbd666d9da3632f42d3376a33e68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a6-e7cc-4f01-be44-4f0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:26.000Z",
            "modified": "2015-09-30T09:17:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2a5f0ed990c3bc5908ac5d278e5e1a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a6-48d4-4b99-b596-4bc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:26.000Z",
            "modified": "2015-09-30T09:17:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2a7f1c467d8a51216bf58833f60e21b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a7-2c14-4841-9bd3-413d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:27.000Z",
            "modified": "2015-09-30T09:17:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2aac0b281f896da06913a3d4ca1c6bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a7-ff64-4593-871f-4421950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:27.000Z",
            "modified": "2015-09-30T09:17:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2ac5ad49e85390b712a1e77c29d9ce6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a7-f960-4045-851f-48c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:27.000Z",
            "modified": "2015-09-30T09:17:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2c23ebe9cd23482ff1f34a87c4e7f15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a8-d9d4-4263-b803-48c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:28.000Z",
            "modified": "2015-09-30T09:17:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2dcb40c5d81381594929623e016bb7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a8-2eec-4245-b931-4294950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:28.000Z",
            "modified": "2015-09-30T09:17:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2e01570b702d2ce9ea9978fb90e2d7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a8-54f8-4b52-8500-457f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:28.000Z",
            "modified": "2015-09-30T09:17:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2e49aadf9dfd42cf420d5280b1c8798']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a9-3c8c-42cd-b642-447f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:29.000Z",
            "modified": "2015-09-30T09:17:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2e5647127042800eabb4b63e240ba99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8a9-4024-4da7-a8d4-44cd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:29.000Z",
            "modified": "2015-09-30T09:17:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2f1748c57747c3dfb3350b52048fa0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8aa-ec9c-476d-94b3-4119950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:30.000Z",
            "modified": "2015-09-30T09:17:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2f7d892b74cc90dd61cc80be6ceacb3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8aa-0e74-417e-a1f5-42bb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:30.000Z",
            "modified": "2015-09-30T09:17:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e2f89370c3159092c9491a37043bf23b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8aa-bd88-49ab-b3f9-4bd7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:30.000Z",
            "modified": "2015-09-30T09:17:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e303637f85cde006159970649ee8beb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ab-8b74-4064-90d7-4358950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:31.000Z",
            "modified": "2015-09-30T09:17:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e309aed94e925b5207f83b2a57d629a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ab-3d70-46e3-bb6f-4ba6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:31.000Z",
            "modified": "2015-09-30T09:17:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3131e70e00ef94a55a23414a05f56dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ac-022c-4137-8468-4926950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:31.000Z",
            "modified": "2015-09-30T09:17:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e31d0411271dbb1b12d6beadf51e3a4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ac-4454-4895-aead-495a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:32.000Z",
            "modified": "2015-09-30T09:17:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e31df9a14777c97c51ab05bc4d75102c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ac-7ef8-4253-bff3-4de4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:32.000Z",
            "modified": "2015-09-30T09:17:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e329b77ff889e9c836f6822956d610eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ad-8b88-44e0-a9f2-4a70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:33.000Z",
            "modified": "2015-09-30T09:17:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3313f3b65c0e368b85057d3d12656c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ad-0bbc-4665-8694-47c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:33.000Z",
            "modified": "2015-09-30T09:17:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e348135bde2b12fc2ac6b81f7f57909d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ad-24d8-4883-b769-45f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:33.000Z",
            "modified": "2015-09-30T09:17:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e34de4c14822bcf019ab0c45815f6380']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ae-5a44-4427-92ac-474e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:34.000Z",
            "modified": "2015-09-30T09:17:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e357247218cbb56eb704eafd05f5f20a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ae-8374-4559-b914-4a41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:34.000Z",
            "modified": "2015-09-30T09:17:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e35de33c8ebd8a1c168efd7f388044a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8af-6170-4f11-9b26-4545950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:35.000Z",
            "modified": "2015-09-30T09:17:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3630084a22c347778ce8ae82d065bf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8af-641c-46a1-a34a-44a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:35.000Z",
            "modified": "2015-09-30T09:17:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e383a8cfcbe901a5e735a4f552e3ed98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8af-267c-4b9a-9fb4-4f63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:35.000Z",
            "modified": "2015-09-30T09:17:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3884ad5a808a9c072ad5ab2b001349f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b0-ca64-46bd-9314-4f91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:36.000Z",
            "modified": "2015-09-30T09:17:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e38ca695bdb9b99009cacee0b04617e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b0-dd4c-4f55-86c3-4426950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:36.000Z",
            "modified": "2015-09-30T09:17:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e38df81e543d1fbb7744bf5f5edefa33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b0-80d4-4623-a6f2-4901950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:36.000Z",
            "modified": "2015-09-30T09:17:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e39f14ed355eac5f6e592f6b87270b41']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b1-5fc8-4276-8f78-4c79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:37.000Z",
            "modified": "2015-09-30T09:17:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3a3b6072131005e9d8bc2f68b8a136e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b1-0c2c-4bb2-8c0d-403c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:37.000Z",
            "modified": "2015-09-30T09:17:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3af4abbd30846f803db963265159132']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b2-1364-4eb4-a494-4a69950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:38.000Z",
            "modified": "2015-09-30T09:17:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3b78abc00efb7b74e386f3d7e19a396']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b2-7824-4773-9418-4fe4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:38.000Z",
            "modified": "2015-09-30T09:17:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3bb7bcbe0b76fd10b709cd88105d4a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b2-8a9c-499a-83e7-44fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:38.000Z",
            "modified": "2015-09-30T09:17:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3d4d4df3e8226de9d779c0c7aaff771']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b3-d25c-4761-a435-42cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:39.000Z",
            "modified": "2015-09-30T09:17:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e3db93e86c1d6dc382112321514eae14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b3-3e9c-4d66-8710-4dec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:39.000Z",
            "modified": "2015-09-30T09:17:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e40c2a0a02424c080ae49c95f4e7d5a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b4-55e0-400a-a852-464b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:40.000Z",
            "modified": "2015-09-30T09:17:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4101196baaa27c1503e96b4ba17b79e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b4-225c-48aa-9969-4aaa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:40.000Z",
            "modified": "2015-09-30T09:17:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e41a136515257c83598d3676e340b926']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b4-2060-4560-9463-4a0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:40.000Z",
            "modified": "2015-09-30T09:17:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e41ee5ea6a83870ca0f0d47549a5f2fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b5-ccc0-45b1-8955-4cf9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:41.000Z",
            "modified": "2015-09-30T09:17:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4379f6d1ca8c5ce02629d3168fb11b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b5-930c-44e9-9e66-4d7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:41.000Z",
            "modified": "2015-09-30T09:17:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e440333ced7617ccf88b55b88f474e96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b5-c9f0-4ee2-b1e5-4dbe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:41.000Z",
            "modified": "2015-09-30T09:17:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e440b55402d0d56f1d7388ead0da4007']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b6-0360-4732-a758-4134950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:42.000Z",
            "modified": "2015-09-30T09:17:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e445f771990cde7753b2135576aa9f53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b6-a4c8-480f-95f4-40a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:42.000Z",
            "modified": "2015-09-30T09:17:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e449099fdd0690cae7d2cddd8e3fab12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b7-0ce8-4233-9a4b-4452950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:43.000Z",
            "modified": "2015-09-30T09:17:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e44b4f9431259be9ab70e93c4bf41764']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b7-f14c-4a09-a877-4c91950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:43.000Z",
            "modified": "2015-09-30T09:17:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e44b761377dc3ef22727ecaeec1dff31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b7-4680-4276-8e75-4fb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:43.000Z",
            "modified": "2015-09-30T09:17:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e46182143157270d74eed1b1a5d1d6dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b8-ff44-444f-8070-4f08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:44.000Z",
            "modified": "2015-09-30T09:17:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e46768ce6ee8e08852194fc9a774c005']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b8-6c2c-49f9-bb3d-43d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:44.000Z",
            "modified": "2015-09-30T09:17:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e475d4a0f28f91aa1143ef8ad2d03b0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b9-6cec-4d76-a462-4a38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:45.000Z",
            "modified": "2015-09-30T09:17:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e47e5408a86898647dcdf946911331fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b9-c964-49e4-93c4-4482950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:45.000Z",
            "modified": "2015-09-30T09:17:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e48ec2082968cf20b5b23b3362894086']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8b9-f510-430f-95e4-459a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:45.000Z",
            "modified": "2015-09-30T09:17:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e496868682f93faa7c0a122164b95af3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ba-0a50-4e50-b663-4a1a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:46.000Z",
            "modified": "2015-09-30T09:17:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4991f07cd275d8ae3701906f1ce08fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ba-ede8-473d-b7fe-40c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:46.000Z",
            "modified": "2015-09-30T09:17:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4af8b4be5baea3382abc6db5b0cd850']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ba-de64-4d0b-8dae-45c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:46.000Z",
            "modified": "2015-09-30T09:17:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4bbd78923d3a646b950553d32ce45fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bb-1178-4340-9450-4422950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:47.000Z",
            "modified": "2015-09-30T09:17:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4c4e2910377f4884516bc206838fdf0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bb-486c-44fa-993c-47f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:47.000Z",
            "modified": "2015-09-30T09:17:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4ca075134806086151f116cd5a67d65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bc-b5f4-4142-aa4e-4923950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:48.000Z",
            "modified": "2015-09-30T09:17:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4db1945329cbe9bf433096d267d5d41']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bc-2720-4be0-a4a4-4243950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:48.000Z",
            "modified": "2015-09-30T09:17:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4dcd4124bc2ba96aa950057a7018cc4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bc-6944-4dec-a415-436c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:48.000Z",
            "modified": "2015-09-30T09:17:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4e961210cd2f1574dfb0e410ffa93b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bd-5548-4878-98ef-4598950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:49.000Z",
            "modified": "2015-09-30T09:17:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4f343ab9076f84ef1bbc7bb04ca79d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bd-f348-4ba7-b5e5-41b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:49.000Z",
            "modified": "2015-09-30T09:17:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e4f4046a31ab55963f11ac4dadac36af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bd-7b78-43dc-8343-427f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:49.000Z",
            "modified": "2015-09-30T09:17:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e501b0779c919cdfe668e0f2192076c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8be-7264-48f6-bbca-44ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:50.000Z",
            "modified": "2015-09-30T09:17:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e504267e08e7596dfd6056e591016f62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8be-7970-4515-b780-49a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:50.000Z",
            "modified": "2015-09-30T09:17:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e50aa75dde87c318bebf9afc2fa4dd99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bf-7138-4988-8389-4d6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:51.000Z",
            "modified": "2015-09-30T09:17:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5135f644fda6bb102c49458469e9c7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bf-7bb4-4a4e-8311-4337950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:51.000Z",
            "modified": "2015-09-30T09:17:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5185cc09b687a32f44f763e1584b8f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8bf-20d8-4e6c-946b-46ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:51.000Z",
            "modified": "2015-09-30T09:17:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e53a54a74c75765cb5de6c6bbec09024']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c0-ed08-4cf1-83aa-45c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:52.000Z",
            "modified": "2015-09-30T09:17:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e540d20f0f92f0e9a933dff6a3d179e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c0-32f4-4501-8b43-4ad5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:52.000Z",
            "modified": "2015-09-30T09:17:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e543003922a26c95944074aba1923405']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c1-145c-48e1-981c-4f4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:53.000Z",
            "modified": "2015-09-30T09:17:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e55c281f09de4e474c1ae42d756459aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c1-c514-4334-8947-4b95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:53.000Z",
            "modified": "2015-09-30T09:17:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5807f4f5d1e15464f779adaebd0f35b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c1-12b8-4c24-85ec-4b26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:53.000Z",
            "modified": "2015-09-30T09:17:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e58bea87c0f4f148e293d7b4f2066ae7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c2-1f3c-42b7-9502-4d40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:54.000Z",
            "modified": "2015-09-30T09:17:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e596346311bb9753a5b406589e5da82c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c2-82dc-4744-85e3-49ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:54.000Z",
            "modified": "2015-09-30T09:17:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5b7bd8a740c34d0e173ef62f3fba986']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c2-ac2c-49cd-9b30-4aa2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:54.000Z",
            "modified": "2015-09-30T09:17:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5b7e7bcfcac86238c3d8b89312e0f6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c3-9b98-4fea-a335-4f5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:55.000Z",
            "modified": "2015-09-30T09:17:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5c29cedcde6a8d11872254264a1575b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c3-fe78-477c-a8b6-477c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:55.000Z",
            "modified": "2015-09-30T09:17:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5ebc88c4a11aae70d713def2136034e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c4-3b6c-42e9-ad4b-4dc5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:56.000Z",
            "modified": "2015-09-30T09:17:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5ec4a077eba7ae579353e38ba3dfd27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c4-c158-466e-bc41-465c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:56.000Z",
            "modified": "2015-09-30T09:17:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5ee74c31154f1c30139e4d66d324b4d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c4-734c-4094-b5f1-4101950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:56.000Z",
            "modified": "2015-09-30T09:17:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5f153c59d394882ee1032211b85714a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c5-67fc-4b0a-90dc-48e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:57.000Z",
            "modified": "2015-09-30T09:17:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5f9390be0d1716a489bc241b4464712']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c5-ee88-466d-8444-4e70950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:57.000Z",
            "modified": "2015-09-30T09:17:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e5f9e9fd09aedea7264c5e9d292c33f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c6-9e1c-4546-9299-487a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:58.000Z",
            "modified": "2015-09-30T09:17:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e603ea1e12ad0e0911ab5167658c2beb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c6-6f4c-417f-a988-4986950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:58.000Z",
            "modified": "2015-09-30T09:17:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e60af8745bfb8975dba3e1753fef2268']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c6-aa88-4cba-929d-4104950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:58.000Z",
            "modified": "2015-09-30T09:17:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e60b5c2a2849e041a5ad28594cce5531']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c7-cfdc-48f2-8128-495f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:59.000Z",
            "modified": "2015-09-30T09:17:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e61187ccc9ab8f83c6d7637259bccf84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c7-11e4-43d9-a3bd-43df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:59.000Z",
            "modified": "2015-09-30T09:17:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e614292df0382924364205df89a91651']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c7-ee14-4a65-aed4-4a99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:17:59.000Z",
            "modified": "2015-09-30T09:17:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e61b5cdda032d76f39fb23d51ba21eba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:17:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c8-1900-4aea-8593-47fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:00.000Z",
            "modified": "2015-09-30T09:18:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e61f12bd104e96ac4da388a1c90d3b1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c8-d488-4113-bb6d-464d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:00.000Z",
            "modified": "2015-09-30T09:18:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e62278fdfc2e460495bbc46ac5823580']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c9-7d7c-4eaf-a776-4e8f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:01.000Z",
            "modified": "2015-09-30T09:18:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e62983421550625d87a047a38dcb7984']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c9-65c8-4fb5-b4bb-4078950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:01.000Z",
            "modified": "2015-09-30T09:18:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e62d80806805f2014eba1d35058868f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8c9-2bac-4563-a7e0-4e96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:01.000Z",
            "modified": "2015-09-30T09:18:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e63cb04a5269e77d1208c88a6b0a9111']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ca-f488-401d-844a-4fa2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:02.000Z",
            "modified": "2015-09-30T09:18:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e64081a47a17ba5946610ff358c5c3c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ca-8624-440f-896f-41af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:02.000Z",
            "modified": "2015-09-30T09:18:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e642c8371b4527ea334512c61624d7b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cb-9ca8-4236-a965-4bf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:03.000Z",
            "modified": "2015-09-30T09:18:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e65185506a8dc3a4b7d8ef77a34c2da3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cb-3b44-4b1e-a17d-46ce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:03.000Z",
            "modified": "2015-09-30T09:18:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e655260bda475475979bccddcc820ceb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cb-8050-4de2-9b1b-4cb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:03.000Z",
            "modified": "2015-09-30T09:18:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e65c464acf36e3ee3f6118b20596a38b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cc-b078-4c49-baa8-46d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:04.000Z",
            "modified": "2015-09-30T09:18:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e65eb43965f5c82dfd4bbbdf87b340ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cc-0b08-48ce-bcb7-4bc3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:04.000Z",
            "modified": "2015-09-30T09:18:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6638eb0ab3b87702bb051a6420ba635']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cc-dc40-4ad7-aa0c-4b5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:04.000Z",
            "modified": "2015-09-30T09:18:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6790cc2bbb5181b1364140b3bb8eaa4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cd-e884-45a7-822f-490d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:05.000Z",
            "modified": "2015-09-30T09:18:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e679b38c4627a72095cdb4b76d250206']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cd-9c5c-45df-9ad0-4a6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:05.000Z",
            "modified": "2015-09-30T09:18:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e67bc6c394eb664beb020800356aa65d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ce-5d3c-4ee8-85c8-4618950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:06.000Z",
            "modified": "2015-09-30T09:18:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e67d8fa4d16484ba989a064332ca9a12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ce-9b1c-409a-971a-4351950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:06.000Z",
            "modified": "2015-09-30T09:18:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6836568305f28c91d0ce4578b916fae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ce-cab0-472c-a347-4a8d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:06.000Z",
            "modified": "2015-09-30T09:18:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e68b8bfc5a72c56b6991452544c0b501']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cf-abd8-4358-9af3-4d5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:07.000Z",
            "modified": "2015-09-30T09:18:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e68be1a2919ec4975636f32b0a395e7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8cf-c060-4866-beda-427d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:07.000Z",
            "modified": "2015-09-30T09:18:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e68c4c732757d11eba762fe91ea68b03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d0-8438-479c-8231-47f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:08.000Z",
            "modified": "2015-09-30T09:18:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6903fb812303ae43106bd5f28e54cba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d0-cfec-42ba-896f-4c0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:08.000Z",
            "modified": "2015-09-30T09:18:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e69dcf31dc07ee35b7aa309d6749be7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d0-0fa4-4230-8542-4763950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:08.000Z",
            "modified": "2015-09-30T09:18:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6a2b15169461468ff8896a727d20dd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d1-a7c0-4d12-911e-4846950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:09.000Z",
            "modified": "2015-09-30T09:18:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6a75483d2f2b1195882b5e98327d02e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d1-a954-4b56-9e6f-4260950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:09.000Z",
            "modified": "2015-09-30T09:18:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6ace3e3e5f8be1f8226a335b253cdba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d1-c4d4-49ee-ae65-45b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:09.000Z",
            "modified": "2015-09-30T09:18:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6b5577250464b1ba8b9ca05b497a256']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d2-5b14-44cf-8c77-47d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:10.000Z",
            "modified": "2015-09-30T09:18:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6b726e6b2473724c6483152ace14c6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d2-845c-4479-87c8-4012950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:10.000Z",
            "modified": "2015-09-30T09:18:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6c5ce467f03bca12b632cb774ed6c94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d3-ca9c-49ae-9c9e-4c2d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:11.000Z",
            "modified": "2015-09-30T09:18:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6ccffdff05d6811869e602afcad2949']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d3-ef98-4945-a109-4f3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:11.000Z",
            "modified": "2015-09-30T09:18:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6d266d5e691b26f69a03a53ec857781']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d3-ed34-4b7e-9606-450d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:11.000Z",
            "modified": "2015-09-30T09:18:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6ddefd66e6509cae243d23039ae141e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d4-bc64-433c-a897-45f2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:12.000Z",
            "modified": "2015-09-30T09:18:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6deefcd231e200ae70e487d9a15fdcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d4-b990-4cd1-a55c-4114950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:12.000Z",
            "modified": "2015-09-30T09:18:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e6e5a0787b9041db1c00a7eda8627854']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d5-9d58-4f6e-a575-4437950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:13.000Z",
            "modified": "2015-09-30T09:18:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e700de93e83d2be410965f10666e32f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d5-7130-405c-96e1-4969950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:13.000Z",
            "modified": "2015-09-30T09:18:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e71db45270cdf1ed05126ca9d9f4b3c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d5-3f04-42de-8876-439e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:13.000Z",
            "modified": "2015-09-30T09:18:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e73e60cba6406959636bede82bbb6d97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d6-38bc-4662-9268-4c63950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:14.000Z",
            "modified": "2015-09-30T09:18:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7456ff4dd80eaea112686c383035c21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d6-bac0-4a7e-b01e-475c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:14.000Z",
            "modified": "2015-09-30T09:18:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e752d651f1dc5561a0e7a2033407e87e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d7-3464-42ac-ba89-409c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:15.000Z",
            "modified": "2015-09-30T09:18:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e758d75bb0dbf9d3fc09d6bc67c4a815']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d7-47a8-4bde-b15d-4725950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:15.000Z",
            "modified": "2015-09-30T09:18:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e75a4f4f99f78ce57df4b562c0fb1f34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d8-75c0-4a7f-8cf0-4f67950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:16.000Z",
            "modified": "2015-09-30T09:18:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e75cb11294eaf79560b58675205cdbc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d8-26c0-46ed-9fc1-48b6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:16.000Z",
            "modified": "2015-09-30T09:18:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e75d698c5dcefddaa62c2366eff919eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d9-012c-41ed-81aa-47f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:17.000Z",
            "modified": "2015-09-30T09:18:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e75df7b8400b2aca3b79cecf62138a30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d9-4998-4a19-831a-4f9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:17.000Z",
            "modified": "2015-09-30T09:18:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e78035807af1ed6679487b54317537ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8d9-66cc-4f23-b8df-48bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:17.000Z",
            "modified": "2015-09-30T09:18:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e78fd0b98d658f340dd44a4d7182f9dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8da-0478-4c4f-83d9-4acc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:18.000Z",
            "modified": "2015-09-30T09:18:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e792465754733b6919b4226c8abf401e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8da-0b98-42d1-886e-4ff8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:18.000Z",
            "modified": "2015-09-30T09:18:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e79e99b217028482061e8e8c5bad608e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8da-6b20-451e-802a-4627950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:18.000Z",
            "modified": "2015-09-30T09:18:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e79fad334ac4e58c4e949065c346475b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8db-23c8-4359-b652-4f7e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:19.000Z",
            "modified": "2015-09-30T09:18:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7a9bbf33d3e459c2fda6f1ac99f9dc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8db-ee60-45c0-a9d5-42a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:19.000Z",
            "modified": "2015-09-30T09:18:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7ad0e76e9142417b9f0478a1506ee5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8dc-68f0-46b8-ae8f-4958950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:20.000Z",
            "modified": "2015-09-30T09:18:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7ada9c88343aeaba129aecad44c182d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8dc-2bf8-4099-966c-4177950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:20.000Z",
            "modified": "2015-09-30T09:18:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7b0d1a76057dcb394ae07f1b6b9f74f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8dc-aaf8-476e-92f8-4422950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:20.000Z",
            "modified": "2015-09-30T09:18:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7bb483ae11dbf6559edcdcdaafdd597']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8dd-cfd0-491c-aee7-4eb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:21.000Z",
            "modified": "2015-09-30T09:18:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7cab108943cbaf69444734214297c06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8dd-cf70-4c2a-a4ed-4f3d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:21.000Z",
            "modified": "2015-09-30T09:18:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7cf25d992ca284b2880b7ebdbcabacc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8dd-e16c-4a13-ba8e-4e4a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:21.000Z",
            "modified": "2015-09-30T09:18:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7d55ef5f7247de4c19769b6fc688f69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8de-d104-4d18-b0c8-4739950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:22.000Z",
            "modified": "2015-09-30T09:18:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7da95c5434351639cbe073a27ce769a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8de-09a0-465e-8c68-4d80950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:22.000Z",
            "modified": "2015-09-30T09:18:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7e0622b43b72c5f04dcd46797d7cac2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8df-dbec-4e3e-bb7a-48ab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:23.000Z",
            "modified": "2015-09-30T09:18:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7e659a46eadfee7bec5ac0e1572380d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8df-3768-4d05-83c9-4ffe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:23.000Z",
            "modified": "2015-09-30T09:18:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7ea1a105f3459e224e4f8d55b839b2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8df-d938-4fed-b6c4-4f72950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:23.000Z",
            "modified": "2015-09-30T09:18:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7ee3f1e8ea0f55d11d045dae38bbe43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e0-02fc-43cc-a13e-4976950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:24.000Z",
            "modified": "2015-09-30T09:18:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7f013e6944cf5706d390ed915c2ce20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e0-9ba4-4b96-bbdb-451c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:24.000Z",
            "modified": "2015-09-30T09:18:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7fc3d89d33548213db039ad000c621b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e1-6fe4-47ba-92f6-440c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:25.000Z",
            "modified": "2015-09-30T09:18:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e7fc5e8a5c7474fda9e31e945ce219a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e1-1f98-49eb-9be1-4352950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:25.000Z",
            "modified": "2015-09-30T09:18:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e80431f3f66ab120fe41b1524c266190']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e1-3704-48dd-b8d7-4670950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:25.000Z",
            "modified": "2015-09-30T09:18:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e80c3feb355595dc8d1d8f7448e0670f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e2-49f4-44d1-9e96-40d0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:26.000Z",
            "modified": "2015-09-30T09:18:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e80d77da09faa5fcaae65743c629f6ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e2-1ed4-41d3-b98f-43db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:26.000Z",
            "modified": "2015-09-30T09:18:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e81b8eec352424562c45eebeea83c9b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e2-9c40-4b96-ae98-4cc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:26.000Z",
            "modified": "2015-09-30T09:18:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e81ea9bed68ea00dcc81c02b95339c60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e3-7fc0-4a47-aaa2-40d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:27.000Z",
            "modified": "2015-09-30T09:18:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e81ee26b62ff2a079e7e99ed0aa1dbee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e3-73ec-4f66-a1fd-4536950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:27.000Z",
            "modified": "2015-09-30T09:18:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e82ce0c9d6cb958ec6e477e1aa1b0b12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e4-f624-46b3-b48a-4ab0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:28.000Z",
            "modified": "2015-09-30T09:18:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e83ec347499468b1cad856403204a811']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e4-e790-4016-bf05-4af9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:28.000Z",
            "modified": "2015-09-30T09:18:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e83f06622503e369215d300a28ea2dd4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e4-24a8-4923-9ed5-4176950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:28.000Z",
            "modified": "2015-09-30T09:18:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e83f5f8fd13e2f262cd309ae11fb1a79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e5-3bec-49e7-8e8e-4402950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:29.000Z",
            "modified": "2015-09-30T09:18:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e840a9875989012adb11f6d926dc7528']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e5-f00c-46b1-b92b-4801950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:29.000Z",
            "modified": "2015-09-30T09:18:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e84cf60743216d8f3be0c17e2a710024']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e6-52a4-4e0f-81d2-4c37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:30.000Z",
            "modified": "2015-09-30T09:18:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e854d519fa22284aaedd796ffdac937d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e6-63c8-4d6c-9369-40cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:30.000Z",
            "modified": "2015-09-30T09:18:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e857eb82e02235a0ad210190dadafb35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e6-ac24-4ef6-b149-44ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:30.000Z",
            "modified": "2015-09-30T09:18:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e85f794eceaa60ebbf2359d87355d102']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e7-31c4-4128-9c02-4d3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:31.000Z",
            "modified": "2015-09-30T09:18:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e86182d02cb3f1f8e8c201832d89de08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e7-75dc-46f5-b830-4592950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:31.000Z",
            "modified": "2015-09-30T09:18:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e86f6babeaddb7bb904caffab247398f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e8-9e24-469c-a7cb-47ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:32.000Z",
            "modified": "2015-09-30T09:18:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e8704a133cea1eea225056929d50dc44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e8-cf5c-4379-b046-488b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:32.000Z",
            "modified": "2015-09-30T09:18:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e879035433aebccae93effd473a7aea9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e8-6b80-4fc4-8a87-4604950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:32.000Z",
            "modified": "2015-09-30T09:18:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e888d2be6ed88aaa022d52b1b00fd808']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e9-c3ac-4e4a-800f-403a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:33.000Z",
            "modified": "2015-09-30T09:18:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e8959fc0356c61f08802506cd68afe98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e9-a654-4948-8748-4c57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:33.000Z",
            "modified": "2015-09-30T09:18:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e8a4f80cc8320a4ea849381c75f51089']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8e9-f0b4-4145-9683-405c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:33.000Z",
            "modified": "2015-09-30T09:18:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e8bba0664a5712895b0d760296632d21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ea-6840-4397-a60e-4d21950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:34.000Z",
            "modified": "2015-09-30T09:18:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e8d512fd4660d64b0d33c3eef0a99dcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ea-1fb4-4a00-b98e-4a79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:34.000Z",
            "modified": "2015-09-30T09:18:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e8e16dc1e984c3dcb34a43b78304792a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8eb-5e2c-4b49-8e7b-4483950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:35.000Z",
            "modified": "2015-09-30T09:18:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e8e49bfedf7ee23e9e7f8862e250c330']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8eb-cfe4-4143-9c94-48b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:35.000Z",
            "modified": "2015-09-30T09:18:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e8f13338bb0a5396ef4eb1fa0173a2b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8eb-76a4-4b7a-a853-4a34950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:35.000Z",
            "modified": "2015-09-30T09:18:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e901465b5b15d90e980273ff56d0fee6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ec-edf8-45b3-8069-4cb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:36.000Z",
            "modified": "2015-09-30T09:18:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e901f0c86629861cd8af2fc054a5e236']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ec-1104-4e37-86fe-43db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:36.000Z",
            "modified": "2015-09-30T09:18:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9052a5c1da96d2b099067c2107cff74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ed-0bf4-4a53-a5ac-4203950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:37.000Z",
            "modified": "2015-09-30T09:18:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e916a7604750e333fade42f12c96d650']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ed-b9d0-48d1-b2d9-483c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:37.000Z",
            "modified": "2015-09-30T09:18:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e91e7f349833069e87bdc4422416ea13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ed-4210-4e4e-abe3-4a79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:37.000Z",
            "modified": "2015-09-30T09:18:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e930f0933e86da7ddb294ab55e363248']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ee-dc40-4df9-a180-4331950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:38.000Z",
            "modified": "2015-09-30T09:18:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e931e4bc97ad55b601cf7fbd3e6edfdc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ee-cb20-426d-823f-4a7a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:38.000Z",
            "modified": "2015-09-30T09:18:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e938a9e8af5b75afed3d27f079dd221b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ee-5510-4110-92fc-49a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:38.000Z",
            "modified": "2015-09-30T09:18:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e93a3d10d0f44f1a39e8fa278ebad1ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ef-35a4-4005-9af8-4622950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:39.000Z",
            "modified": "2015-09-30T09:18:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e94614efeb7bdd2f7a8b6afbb5b9f672']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ef-db24-4616-99f1-4986950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:39.000Z",
            "modified": "2015-09-30T09:18:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e947f759912402a9ab7957bc53b62041']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f0-ae7c-4a5e-964e-46c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:40.000Z",
            "modified": "2015-09-30T09:18:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e95cf5ca05dd60390ea69f925f352a51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f0-5fa4-439f-9e6d-4892950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:40.000Z",
            "modified": "2015-09-30T09:18:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e97a8cb1249b0be7f2e49b1d6cf60a6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f0-b4c4-4a65-b540-4e6d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:40.000Z",
            "modified": "2015-09-30T09:18:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e97cea7373a69b2a9a40b118d34b7446']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f1-30fc-47d9-860b-4999950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:41.000Z",
            "modified": "2015-09-30T09:18:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e97e0f398d2b66f7e5a519e21b68b922']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f1-e10c-4a94-83ff-415a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:41.000Z",
            "modified": "2015-09-30T09:18:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e983d42825bacf28f07af06adb1c5241']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f1-3d70-4232-94c6-4a9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:41.000Z",
            "modified": "2015-09-30T09:18:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e985a36fa13e319b551ebed3b1100684']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f2-5340-48b4-a18f-4f33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:42.000Z",
            "modified": "2015-09-30T09:18:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e98697a92a182252abea4af185439525']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f2-b828-46ca-b87a-4c26950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:42.000Z",
            "modified": "2015-09-30T09:18:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9894d2242dc8d36b65dff4e46f101d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f3-27e8-4701-8d8a-4aa1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:43.000Z",
            "modified": "2015-09-30T09:18:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9922069abaec1e3d0469bd0f7b69451']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f3-7f58-4a68-9ef0-4f64950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:43.000Z",
            "modified": "2015-09-30T09:18:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e99a91212b2a5527988145401cab417b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f3-a130-47b2-8670-40b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:43.000Z",
            "modified": "2015-09-30T09:18:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9af4689cccbfd265082076fd369ac50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f4-36f8-4840-834d-44f3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:44.000Z",
            "modified": "2015-09-30T09:18:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9b34c6714e2923f4916c66c8efdea6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f4-140c-4b76-9742-4899950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:44.000Z",
            "modified": "2015-09-30T09:18:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9b887f8121b08d0418b10fbabb05771']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f4-a398-460e-92cf-4359950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:44.000Z",
            "modified": "2015-09-30T09:18:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9c0277d93eee8f2692cbea56683e5a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f5-2ce8-4d0f-9437-4319950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:45.000Z",
            "modified": "2015-09-30T09:18:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9c16dc1238a14a27abc14485a8c846f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f5-3688-4fd2-8169-407c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:45.000Z",
            "modified": "2015-09-30T09:18:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9c2420f3391929ec4d1a5757d1458e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f6-4970-432f-b720-4d6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:46.000Z",
            "modified": "2015-09-30T09:18:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9c58500d0568899e7b41a495fd50911']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f6-7970-489d-8be8-4738950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:46.000Z",
            "modified": "2015-09-30T09:18:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9d0c3a708da9e8acb1a9a7ecd5a029e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f6-11c8-4b87-a96c-4ec1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:46.000Z",
            "modified": "2015-09-30T09:18:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9d16397670c3afd92d040166b959e64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f7-847c-4ec8-a155-4bac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:47.000Z",
            "modified": "2015-09-30T09:18:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9d675175597b3dacb4eab590ab44928']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f7-eeb0-494f-b3c3-47fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:47.000Z",
            "modified": "2015-09-30T09:18:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9d88b576a8b03b73b1be793f57a852a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f7-63f8-4b4d-8717-4a6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:47.000Z",
            "modified": "2015-09-30T09:18:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9e18902478825d17bc35aa95fe034d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f8-8f54-461f-a24a-4fb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:48.000Z",
            "modified": "2015-09-30T09:18:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9e543faa5396a507ea47f7b703b5bbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f8-a728-4291-9559-4b38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:48.000Z",
            "modified": "2015-09-30T09:18:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9e8f4b286dff4bd0b3d2eaf8dea864f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f9-4c84-44dd-a783-4a44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:49.000Z",
            "modified": "2015-09-30T09:18:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9edfa0c75846ac4b0a6cd3f3a0a0e6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f9-8974-44ad-bd3d-474c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:49.000Z",
            "modified": "2015-09-30T09:18:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9f606f04d5b5c84c34b1318408a8f03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8f9-c0ac-41ba-9d54-4413950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:49.000Z",
            "modified": "2015-09-30T09:18:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'e9f944b2370b2332d0a2d4c1571bf0c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fa-c320-4427-8f66-4145950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:50.000Z",
            "modified": "2015-09-30T09:18:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea006c685b3b1ead455c66064f85646d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fa-e314-44d0-80c1-4cfa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:50.000Z",
            "modified": "2015-09-30T09:18:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea259aa248b48b31cd0d15842b7e40e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fa-d46c-4734-a137-4dfb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:50.000Z",
            "modified": "2015-09-30T09:18:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea29891addb207edca5a9c3dd33d47ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fb-b3f4-4d29-bd77-4602950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:51.000Z",
            "modified": "2015-09-30T09:18:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea2a8aa6783f2721ca58a7dbf7312239']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fb-6858-4c32-a1df-44d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:51.000Z",
            "modified": "2015-09-30T09:18:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea2ed2d9256144ae916fb07b2881cc52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fc-87f8-463b-9b06-4aed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:52.000Z",
            "modified": "2015-09-30T09:18:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea31c5f66ff8bc980621f2dabd00a8ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fc-1038-456b-bb8a-44d2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:52.000Z",
            "modified": "2015-09-30T09:18:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea34b3d8338a687ca3ceae7c3ff04082']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fc-6328-4b0e-9b8f-4a90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:52.000Z",
            "modified": "2015-09-30T09:18:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea4085f1ffe18613457e3d9dd6cf513e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fd-2cd4-4988-96ed-4252950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:53.000Z",
            "modified": "2015-09-30T09:18:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea40ffa4e7737363854e5c71fa32e121']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fd-9c1c-42f7-abc9-40a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:53.000Z",
            "modified": "2015-09-30T09:18:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea43e41c80bbaa473910bbc260b55fd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fd-28d0-4286-9189-4fcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:53.000Z",
            "modified": "2015-09-30T09:18:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea4b9557d5f2640df26e81222daf31db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fe-09ac-4b5e-8827-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:54.000Z",
            "modified": "2015-09-30T09:18:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea5131c200374794fabc5cc9457dad1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8fe-250c-4b5a-942e-4c77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:54.000Z",
            "modified": "2015-09-30T09:18:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea596d7ea8ed8a60c4f8627a06c220c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ff-8ab4-4123-a303-4703950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:55.000Z",
            "modified": "2015-09-30T09:18:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea67f23306d7cca4a24911b82df23354']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ff-9e80-4668-ba5a-4877950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:55.000Z",
            "modified": "2015-09-30T09:18:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea691f5b3dda9cb879dd7c6808c7bf53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba8ff-0610-403b-b2ec-4e94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:55.000Z",
            "modified": "2015-09-30T09:18:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea6c5fd763032e83258e9865ef35597a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba900-fee8-447a-98db-40a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:56.000Z",
            "modified": "2015-09-30T09:18:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea6e1895884681c40a7ec23ad1f27fac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba900-4b24-4bb9-9ee1-4384950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:56.000Z",
            "modified": "2015-09-30T09:18:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea6ea546e4a723eff7d13e385f941d76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba901-7714-4e24-9614-4f41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:57.000Z",
            "modified": "2015-09-30T09:18:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea6fe368ac3b9c90a6bb64410e964fe6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba901-78f4-47ec-b405-4036950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:57.000Z",
            "modified": "2015-09-30T09:18:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea6ff1c40aef9cc8f6b3c9d84e4d67e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba901-3184-41d9-9cd8-43e1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:57.000Z",
            "modified": "2015-09-30T09:18:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea70e878a041c4d5a6204019ff7c562f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba902-867c-4260-876b-4156950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:58.000Z",
            "modified": "2015-09-30T09:18:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea712568aa7fa687db774f1e4febfd65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba902-6130-476f-9ac8-475f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:58.000Z",
            "modified": "2015-09-30T09:18:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea72946f77478ab7fa2ab2e6769af525']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba902-198c-404e-be30-4f22950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:58.000Z",
            "modified": "2015-09-30T09:18:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea758ddfbc0e43f1d73c74f199f4054b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba903-bc9c-4479-8b67-4eba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:59.000Z",
            "modified": "2015-09-30T09:18:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea7dd2f4b8aee76774d2c427b7752f06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba903-5a68-4b49-9eda-441d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:18:59.000Z",
            "modified": "2015-09-30T09:18:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea845bdb46abb724a5ab775e00da303d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:18:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba904-d6c4-44d0-a8ea-4c49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:00.000Z",
            "modified": "2015-09-30T09:19:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea86a14a75829d752555a563f3a63e07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba904-17b4-4b41-8e5a-4fd2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:00.000Z",
            "modified": "2015-09-30T09:19:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea93ec64a157df28a3e1971a1c75da07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba904-dcc0-4db8-b7dd-4c0b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:00.000Z",
            "modified": "2015-09-30T09:19:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ea97186fad3a9951974b2ebb4e698b14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba905-ad90-4b52-b03c-4d13950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:01.000Z",
            "modified": "2015-09-30T09:19:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eaa515ad2efe45793e5373b3987a4abd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba905-8f34-4e8c-bdfd-4f39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:01.000Z",
            "modified": "2015-09-30T09:19:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eab1fb3f9dac90f1543ae0d0895c8d3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba905-c468-4813-aa7d-419e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:01.000Z",
            "modified": "2015-09-30T09:19:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eac9f1946f51c95166d4e0228c903ccc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba906-19b4-40a9-a346-4aad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:02.000Z",
            "modified": "2015-09-30T09:19:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb0534c5fdc0234cfa1eff3813f73c49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba906-4e94-416f-9c66-4a38950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:02.000Z",
            "modified": "2015-09-30T09:19:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb06a00f528dd4428a2ac18d807bbdfc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba907-9608-480f-87bc-46e7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:03.000Z",
            "modified": "2015-09-30T09:19:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb11a5108dfb26abb81ee701720b5304']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba907-5dd4-4597-a5d0-490a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:03.000Z",
            "modified": "2015-09-30T09:19:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb165b7ec796c39e817267cdd47819e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba907-8de0-4d6d-b40d-4fb4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:03.000Z",
            "modified": "2015-09-30T09:19:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb1deda6d695cd91c523a9ab4c21a934']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba908-9fb4-42b1-87de-4042950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:04.000Z",
            "modified": "2015-09-30T09:19:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb200fe3ceb971054580bb5c6fb5746a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba908-18ec-4eb7-89c6-4564950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:04.000Z",
            "modified": "2015-09-30T09:19:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb2b2c9233e121dce7b79e1226dfe503']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba908-f1b8-4325-8ad3-4cec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:04.000Z",
            "modified": "2015-09-30T09:19:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb319190a0bba051c017d68cd3e493e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba909-b74c-41f8-a0e9-45c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:05.000Z",
            "modified": "2015-09-30T09:19:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb39bd3feb772e6bf8891127226bb979']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba909-5080-46b8-a9d9-4f8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:05.000Z",
            "modified": "2015-09-30T09:19:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb3d014c4173e1d7f0245f1bfafe8122']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90a-9638-4e34-8721-4914950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:06.000Z",
            "modified": "2015-09-30T09:19:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb3f115998480818732f19e4a0e1f740']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90a-0230-4dab-b3bb-4b9d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:06.000Z",
            "modified": "2015-09-30T09:19:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb3f5df0f0044809d5023aba72e4626e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90a-dce4-4096-9e87-4899950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:06.000Z",
            "modified": "2015-09-30T09:19:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb41b79e843c7023656484b70dffea79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90b-8600-418d-a3d8-4eb9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:07.000Z",
            "modified": "2015-09-30T09:19:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb4dd0ac9c35df08c1c7523d0055c311']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90b-58f0-4db0-9ec9-497c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:07.000Z",
            "modified": "2015-09-30T09:19:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb5d863d832ec9d53e60c465133bfbaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90b-8cd8-4a61-9328-4097950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:07.000Z",
            "modified": "2015-09-30T09:19:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb5eb8d96fbf075c23f935c0e2060915']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90c-4b74-4c0a-9597-4605950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:08.000Z",
            "modified": "2015-09-30T09:19:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb61b3b92e3f7bc26c056528227c804d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90c-b9fc-4e4f-a839-4c57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:08.000Z",
            "modified": "2015-09-30T09:19:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb6314f8a0ff49401f96c2dca6bd1dd7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90d-4f60-4f4a-bb64-410d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:09.000Z",
            "modified": "2015-09-30T09:19:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb64bca84af1e93f8c14fe7943001afa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90d-2798-43a7-8060-42b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:09.000Z",
            "modified": "2015-09-30T09:19:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb6755ad78b2f6ea345cf7dd6b7f15b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90d-3c80-4a59-bd1b-4820950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:09.000Z",
            "modified": "2015-09-30T09:19:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb6bfb465ae160ba6357774d0b2ee34a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90e-75e8-440a-a248-4406950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:10.000Z",
            "modified": "2015-09-30T09:19:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb7fc9a1f71ae553198500e42c52fb3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90e-eed0-4e19-bbaf-45d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:10.000Z",
            "modified": "2015-09-30T09:19:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb8cbbd4ea2c9b297f0ea2618b1427bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90e-a1a0-4adc-b898-4653950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:10.000Z",
            "modified": "2015-09-30T09:19:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb93b69c8dacc3a0f09edf0a838e6597']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90f-85d8-47b9-bc6f-463b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:11.000Z",
            "modified": "2015-09-30T09:19:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb948bddc970ecf82dbe2c8caf6072ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba90f-6770-49b6-a270-4f7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:11.000Z",
            "modified": "2015-09-30T09:19:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb94f3bbc8b9ff54a09ebba27fa3963c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba910-bf50-4be9-ac60-433f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:12.000Z",
            "modified": "2015-09-30T09:19:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eb9e023815b7b5ab854866cc8ab0feed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba910-0a60-4558-8c03-4275950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:12.000Z",
            "modified": "2015-09-30T09:19:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eba548e127d7e4790062afcc69dc3ce8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba910-1afc-4836-9c73-4711950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:12.000Z",
            "modified": "2015-09-30T09:19:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ebb114b96f8031df02f0df7d96618f82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba911-afe0-47f8-9b13-4502950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:13.000Z",
            "modified": "2015-09-30T09:19:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ebd0b5150beb957333ba5bf4dd0291dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba911-5838-4dd4-bbe2-497a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:13.000Z",
            "modified": "2015-09-30T09:19:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ebdb623bbe9ccc585d619578e447aca3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba911-dbc8-4390-b92b-45fb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:13.000Z",
            "modified": "2015-09-30T09:19:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ebdd403e8b8af37ad61dbdfc456485e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba912-60cc-4c15-9840-4cca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:14.000Z",
            "modified": "2015-09-30T09:19:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ebe576311650828d8b34b73953a63feb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba912-2a20-4dec-b0cb-4f20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:14.000Z",
            "modified": "2015-09-30T09:19:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ebf19fb9c87f7d9351562c53624de99d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba913-f9a4-4c1b-ad74-420f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:15.000Z",
            "modified": "2015-09-30T09:19:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ebfa04b5e1cea91d30db670002671974']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba913-4ff4-454c-a772-483a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:15.000Z",
            "modified": "2015-09-30T09:19:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec006312334ad8eaa53eed0d18bfd7f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba913-2590-48a6-9fb6-42f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:15.000Z",
            "modified": "2015-09-30T09:19:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec0bd226cefc56b619cfb6771042f5b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba914-d430-4969-baac-4945950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:16.000Z",
            "modified": "2015-09-30T09:19:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec1eb2da4bcbbd74050db99b09ed639c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba914-3c9c-429c-9eea-4cfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:16.000Z",
            "modified": "2015-09-30T09:19:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec25c56b4df0d5e79e877a7872c6bfae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba914-bd2c-4c5e-99fd-4275950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:16.000Z",
            "modified": "2015-09-30T09:19:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec34d680f697341dedf69026113b6fbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba915-7748-4a69-9df6-4db6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:17.000Z",
            "modified": "2015-09-30T09:19:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec36e39b9a8d5c022ee5dbcb394d09e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba915-6e40-45be-a069-4ae5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:17.000Z",
            "modified": "2015-09-30T09:19:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec3d60b8da4e684c3fd912a536433296']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba916-af00-4bdd-88c4-42c7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:18.000Z",
            "modified": "2015-09-30T09:19:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec3f4f3a01015d44e6198a3356f0ee1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba916-56c8-43be-bd79-4224950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:18.000Z",
            "modified": "2015-09-30T09:19:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec548e16843b6c3e7f2ca7530e906805']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba916-333c-4edb-84de-4479950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:18.000Z",
            "modified": "2015-09-30T09:19:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec6cc118ddfb2b6379eea66c32dcb0d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba917-ca88-4494-9b06-4399950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:19.000Z",
            "modified": "2015-09-30T09:19:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec84588707232411b0c2fe04c06e8df6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba917-85ac-4555-8165-419a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:19.000Z",
            "modified": "2015-09-30T09:19:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec879662bb0268dd4d5e21880d35d32b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba917-5280-4df0-a3b7-4563950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:19.000Z",
            "modified": "2015-09-30T09:19:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec8c214fd9abdf15560e7374654646b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba918-234c-4d14-a9eb-4c44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:20.000Z",
            "modified": "2015-09-30T09:19:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec97eefea577c867ab709815cbbdec90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba918-99ac-4818-9186-469d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:20.000Z",
            "modified": "2015-09-30T09:19:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ec9fabaf3d8fda0e069b8401f039d9b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba919-72c0-43c1-96c0-4f6a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:21.000Z",
            "modified": "2015-09-30T09:19:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ecafa90e746df8ec1fb04107c638eb32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba919-0f28-4b06-b90a-42fa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:21.000Z",
            "modified": "2015-09-30T09:19:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ecb84fe91daaa65b40b618039bb18c83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba919-62b4-4e38-83e8-45e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:21.000Z",
            "modified": "2015-09-30T09:19:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ecbe31967f93c284f1c88b981840d294']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91a-b3c4-4386-9497-488c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:22.000Z",
            "modified": "2015-09-30T09:19:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ecc04961036c52b278e4605c86cbde20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91a-0dd8-49a4-8a97-439b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:22.000Z",
            "modified": "2015-09-30T09:19:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ecc26da5b4f49db6363cc37c06fb56db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91a-e964-4fdc-bf36-42e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:22.000Z",
            "modified": "2015-09-30T09:19:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ecc739ccc19b80085f267ff8f35a8470']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91b-667c-434a-a020-428a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:23.000Z",
            "modified": "2015-09-30T09:19:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ecc965d6cccd5b032d1747bb53b9b03e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91b-0e34-466e-9c09-411d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:23.000Z",
            "modified": "2015-09-30T09:19:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eccf638c4292db088405b9bc1c932374']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91c-43dc-42b3-abb9-4b6e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:24.000Z",
            "modified": "2015-09-30T09:19:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ece6a27fa2b800db9ab5ba2cefa5ec37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91c-f0b0-4034-a12d-4fd1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:24.000Z",
            "modified": "2015-09-30T09:19:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eceb1deb6fda88a8d7fdd8a1f1adf45d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91c-2604-49bf-a4e6-4dc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:24.000Z",
            "modified": "2015-09-30T09:19:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed255a76d819068022818f33a03e61ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91d-90a8-459d-863f-45d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:25.000Z",
            "modified": "2015-09-30T09:19:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed25c3075342c8d29b16a665caf1d2ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91d-cf74-4ee3-acb2-4f2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:25.000Z",
            "modified": "2015-09-30T09:19:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed44b0a9c9ae95baf253dab31d6dd7f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91d-6ac4-43f5-9196-4a84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:25.000Z",
            "modified": "2015-09-30T09:19:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed509091b8c2e15778e6b7c764746b5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91e-7b2c-4ce4-8d5c-49c2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:26.000Z",
            "modified": "2015-09-30T09:19:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed53ce95af2be1628d6917ff7eb7b047']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91e-cd4c-4533-b87b-4b19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:26.000Z",
            "modified": "2015-09-30T09:19:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed576518d9b22ebfdce01918c2b13883']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91f-7548-4209-b819-436e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:27.000Z",
            "modified": "2015-09-30T09:19:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed5cbfad37c379b35abf4252089837bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91f-1d94-4e78-b625-4311950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:27.000Z",
            "modified": "2015-09-30T09:19:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed5f82b9ed953d8fec06639c31b43a8d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba91f-c710-4621-958e-43dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:27.000Z",
            "modified": "2015-09-30T09:19:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed5fce63533388b04bf043c3e78a17c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba920-f110-4f23-82b7-41c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:28.000Z",
            "modified": "2015-09-30T09:19:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed696923acc2f8444fee84757bf32443']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba920-4f04-41ef-8495-45af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:28.000Z",
            "modified": "2015-09-30T09:19:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed6a236fe3905f180f97b3d7f8c048b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba920-8fb8-495f-bd98-405f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:28.000Z",
            "modified": "2015-09-30T09:19:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed6d39238a7e7c26771984d80c20e43a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba921-c470-430c-ac10-4a92950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:29.000Z",
            "modified": "2015-09-30T09:19:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed86de65368015793d5e3efd6949b1c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba921-b430-46db-a0d6-4fc7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:29.000Z",
            "modified": "2015-09-30T09:19:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed8bdd5a2a03c3afd768f9ee6acfe9aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba922-f74c-4c1f-ac4d-4f59950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:30.000Z",
            "modified": "2015-09-30T09:19:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed8f66f60719475a65b7b1045b761d01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba922-92ac-4086-98a7-4f51950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:30.000Z",
            "modified": "2015-09-30T09:19:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed9156660108a53a37cdfec3eb2f22a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba922-a068-460e-ac5d-4492950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:30.000Z",
            "modified": "2015-09-30T09:19:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed942bd6be99a57349ba7f8a50bea792']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba923-bc7c-4695-aca9-4844950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:31.000Z",
            "modified": "2015-09-30T09:19:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ed97c62ed9c6a6054978340cfd30d83f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba923-da68-4a30-a7b3-471e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:31.000Z",
            "modified": "2015-09-30T09:19:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eda8430f9bbf12e4c711720cae7fbab3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba923-7aa4-4d49-bb2a-4bda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:31.000Z",
            "modified": "2015-09-30T09:19:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eda95006de74290d451c6e983fdf79b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba924-6c7c-4a8b-bc2a-4fe8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:32.000Z",
            "modified": "2015-09-30T09:19:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edb1612b8a4b3180ff8317faca61e0e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba924-9cf8-4230-b441-4b31950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:32.000Z",
            "modified": "2015-09-30T09:19:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edb6db48b8ef69fc69abb7a88a523c19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba925-5ec0-4793-93b3-4582950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:33.000Z",
            "modified": "2015-09-30T09:19:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edb8432dd9869068e04aa4784214737e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba925-4338-4236-b908-452a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:33.000Z",
            "modified": "2015-09-30T09:19:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edc0d00ae80e618bbf2ed37042a453d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba925-19f8-4f96-8fd4-4ab3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:33.000Z",
            "modified": "2015-09-30T09:19:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edc442c1c03eb50e89a3b4303caffd7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba926-2608-4980-8ae9-459f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:34.000Z",
            "modified": "2015-09-30T09:19:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edc9630885cb306fc36127bcfdadbd39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba926-1d18-498f-b8c6-4574950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:34.000Z",
            "modified": "2015-09-30T09:19:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edd3dd372b1c72c7418cb81e28152f9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba926-245c-44c2-b0ec-4f5f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:34.000Z",
            "modified": "2015-09-30T09:19:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edd5b581a428c44c6e2ce333324a8018']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba927-7124-4a9c-814b-4b79950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:35.000Z",
            "modified": "2015-09-30T09:19:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eddd8727f5b8ff82c852c616a20dae67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba927-a398-474a-90af-4222950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:35.000Z",
            "modified": "2015-09-30T09:19:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ede267fddeb81cf608f0dae073f1dccb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba928-8960-4568-ab29-4347950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:36.000Z",
            "modified": "2015-09-30T09:19:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eded88ec4aa4ba422a06d34c2c467d22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba928-bf58-4a36-bd0c-419d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:36.000Z",
            "modified": "2015-09-30T09:19:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edf9cded85f88c03246e76d4d0a5ca07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba928-5934-4daf-88fb-4870950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:36.000Z",
            "modified": "2015-09-30T09:19:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edfa358e97ac5d17a4c6de46714e29bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba929-a700-4ecf-8bc5-4783950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:37.000Z",
            "modified": "2015-09-30T09:19:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edfa3795a1923a56bb70781d0adeec1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba929-7868-48a6-a98f-4a87950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:37.000Z",
            "modified": "2015-09-30T09:19:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edfd6ad57157c0eb69ce1fd0e19be7ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba929-0290-47d1-a0f9-4444950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:37.000Z",
            "modified": "2015-09-30T09:19:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'edffa8f5697034476f95678994d1c2d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92a-9814-4eab-9352-445d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:38.000Z",
            "modified": "2015-09-30T09:19:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee097061970ac1175009bfbec1e9ac92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92a-df60-42ff-b4ea-4017950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:38.000Z",
            "modified": "2015-09-30T09:19:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee3cb789961ba24a3ca278450e3cc661']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92b-2d20-4584-bfc3-4290950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:39.000Z",
            "modified": "2015-09-30T09:19:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee412ffc94e6c0d9c55f2e8ce422036a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92b-550c-49f5-bbed-4d5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:39.000Z",
            "modified": "2015-09-30T09:19:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee427408989df507855ec90faa57d10a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92b-1cd8-4c17-b5ab-449a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:39.000Z",
            "modified": "2015-09-30T09:19:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee42b900a59e63ea899a59ffb0646be3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92c-1ae4-4707-9f48-45ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:40.000Z",
            "modified": "2015-09-30T09:19:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee4b709dccd4fb263fa26b096452842d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92c-483c-4886-a12d-4bb3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:40.000Z",
            "modified": "2015-09-30T09:19:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee4dfc5ad23bf325593f0ad707bda850']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92c-b334-4d17-a62b-41be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:40.000Z",
            "modified": "2015-09-30T09:19:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee57d04f7d36881f86fbc08900fcf1ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92d-4b9c-49c4-8e38-4ea2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:41.000Z",
            "modified": "2015-09-30T09:19:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee5c335cd099c6d64f160b95ff80d50d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92d-6b90-4851-8f2b-4e44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:41.000Z",
            "modified": "2015-09-30T09:19:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee5cc3a5fb079947c003b948416ced8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92e-1a44-4ea1-97db-41ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:42.000Z",
            "modified": "2015-09-30T09:19:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee654d4f7035e0d4aecdcec9188f9e0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92e-d748-4fed-a474-4bf5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:42.000Z",
            "modified": "2015-09-30T09:19:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee78341ab9bbeca4f115a9eb42584b4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92e-6ff0-4d30-a36c-4624950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:42.000Z",
            "modified": "2015-09-30T09:19:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee7a05561275833f93a78c959f9edf90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92f-255c-479b-8723-4c3f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:43.000Z",
            "modified": "2015-09-30T09:19:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ee7d9285b23eba54d89c6a5d7ec86ea9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92f-c2fc-40b1-9a46-4e20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:43.000Z",
            "modified": "2015-09-30T09:19:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eea07ed1b23eb19fddfeba44c76a67d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba92f-3b58-4c31-8de0-4fa1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:43.000Z",
            "modified": "2015-09-30T09:19:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eeaad603948f19c5a0c6d82ad36e23b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba930-0c38-49e0-9845-4f5d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:44.000Z",
            "modified": "2015-09-30T09:19:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eeab036c3dea307d084431b8ec8f819e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba930-a8a4-4063-985f-4ad9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:44.000Z",
            "modified": "2015-09-30T09:19:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eeb25b81c44f67e012d34223de3ede27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba931-460c-4699-9c30-4a42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:45.000Z",
            "modified": "2015-09-30T09:19:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eeb2a3f02021f5e4c6c90ab758a6c267']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba931-7be8-4d1f-85a1-4c18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:45.000Z",
            "modified": "2015-09-30T09:19:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eeb501c1f16a72b180cc83fc63a249a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba931-d24c-4844-8962-42b5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:45.000Z",
            "modified": "2015-09-30T09:19:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eeb6b9c1a899918134171e53cb13bccb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba932-54c4-466b-90bf-4a61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:46.000Z",
            "modified": "2015-09-30T09:19:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eeba7927b127773ee27de249d1a48c31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba932-fc3c-4c53-a4d4-47c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:46.000Z",
            "modified": "2015-09-30T09:19:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eeea7063b77b834ac1f02788ecd08971']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba932-fd40-4ef4-b317-48be950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:46.000Z",
            "modified": "2015-09-30T09:19:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eef13c3867846e21f717024a8f7dfdfa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba933-defc-42d2-b59d-4d42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:47.000Z",
            "modified": "2015-09-30T09:19:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eef20953a102e8190f385631817f8beb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba933-3c88-4f5b-a117-4ddb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:47.000Z",
            "modified": "2015-09-30T09:19:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eefa057a44786b1081bc3a0e414a19f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba934-fb1c-4daf-8091-41c6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:48.000Z",
            "modified": "2015-09-30T09:19:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eefd1591e2cb66c52e06a443f3ae1c42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba934-c118-48b0-ab86-4f00950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:48.000Z",
            "modified": "2015-09-30T09:19:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eeff28de11cfb6f9226697c8926e8f20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba934-af84-45b7-8307-427c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:48.000Z",
            "modified": "2015-09-30T09:19:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef05b3c2cc29784fa54f2c0099839c09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba935-7058-4dc4-95da-46d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:49.000Z",
            "modified": "2015-09-30T09:19:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef15b79ef10ce3d7b04c8c4e4c69c56b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba935-7ea8-4b04-927b-4e49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:49.000Z",
            "modified": "2015-09-30T09:19:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef223544d3dcc74bcf24b064e1baf702']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba935-391c-49f9-9631-45cc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:49.000Z",
            "modified": "2015-09-30T09:19:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef752a2bb121214aff5ec0f947120e2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba936-1c44-478b-99dd-4707950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:50.000Z",
            "modified": "2015-09-30T09:19:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef78d97632a1a5ceafe5eb2489cf3a35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba936-ed58-40d1-937b-4b8a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:50.000Z",
            "modified": "2015-09-30T09:19:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef7921b82bd47a4af3d53e52335f1698']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba937-3bac-449c-bbe1-4e57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:51.000Z",
            "modified": "2015-09-30T09:19:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef7b734e244514ed72e21d02cc51ee7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba937-16d0-4e58-81a9-4816950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:51.000Z",
            "modified": "2015-09-30T09:19:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef822b63b890c8f0a67d661c6acbe32d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba937-118c-468a-8e98-4bee950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:51.000Z",
            "modified": "2015-09-30T09:19:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef86cffcf5bc4166b9a83eba87740fec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba938-3eec-4314-bb7e-48d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:52.000Z",
            "modified": "2015-09-30T09:19:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef8999430f25a8c10005597dc6cdddc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba938-3fc4-472f-a551-43d6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:52.000Z",
            "modified": "2015-09-30T09:19:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ef9fcaf0cb5c22aaebfea6bb3923525e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba938-aa1c-4c90-9c3f-45d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:52.000Z",
            "modified": "2015-09-30T09:19:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'efa5aea83f0cf02c3d8a6118ba3b8847']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba939-987c-47a3-a4ea-44eb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:53.000Z",
            "modified": "2015-09-30T09:19:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'efabad6f74ce00c012ad1b5013eacb5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba939-b02c-4926-bc00-438a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:53.000Z",
            "modified": "2015-09-30T09:19:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'efc17ae7983a678188508a823dc1179d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93a-9294-44c1-99d5-48af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:54.000Z",
            "modified": "2015-09-30T09:19:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'efc324400c68e68983250f1e48cb530e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93a-c2f0-404a-8900-41b7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:54.000Z",
            "modified": "2015-09-30T09:19:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'efcb45e4b37c02a21b6590dda64d99e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93a-d9a0-4d54-86d3-489b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:54.000Z",
            "modified": "2015-09-30T09:19:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'efcf7d10be2493ebc6b250458f0c98cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93b-5864-4089-81f2-4057950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:55.000Z",
            "modified": "2015-09-30T09:19:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'efe04ffaa551c6c65b1e02a93fe8b641']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93b-8768-4464-8f55-49a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:55.000Z",
            "modified": "2015-09-30T09:19:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'efe0c66f25d8cf0667d0a538435cac88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93b-c8fc-4120-9144-4705950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:55.000Z",
            "modified": "2015-09-30T09:19:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eff44fdbba2b30b1d008c6c387f806a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93c-611c-4b92-9b32-41ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:56.000Z",
            "modified": "2015-09-30T09:19:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eff775dec7775be809266a0d717dc922']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93c-8e40-4d41-848c-4349950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:56.000Z",
            "modified": "2015-09-30T09:19:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'eff8d8295a0f48158bb43530fa9901d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93d-3998-4176-9b02-4dac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:57.000Z",
            "modified": "2015-09-30T09:19:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'effce19ef6f1c2a690175a3f02f1c35a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93d-3148-4dd9-821b-4005950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:57.000Z",
            "modified": "2015-09-30T09:19:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f005c753d0f64ea8fe588b04435c2d2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93d-cb00-44d7-9dd5-47da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:57.000Z",
            "modified": "2015-09-30T09:19:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f015d67d760cb265af325fc2b7c35494']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93e-a99c-4fbc-a0aa-47ec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:58.000Z",
            "modified": "2015-09-30T09:19:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f01b42910d8882b5c18a2f4c7e54fc5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93e-89ec-47b8-b116-438c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:58.000Z",
            "modified": "2015-09-30T09:19:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f023e8c02ecc7ab1ad3d8f272c6fdd9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93e-4ec8-4218-a0e1-444a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:58.000Z",
            "modified": "2015-09-30T09:19:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f036f95fbd6fd4ca33ccb54ab00311de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93f-3654-4cd3-a23c-4bc9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:59.000Z",
            "modified": "2015-09-30T09:19:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f045269749ce56acc27012c473a3ced8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba93f-4bf4-486a-a7a7-429c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:19:59.000Z",
            "modified": "2015-09-30T09:19:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f04ca9905e70f06a7789da915aa697b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:19:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba940-9240-45de-b000-4669950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:00.000Z",
            "modified": "2015-09-30T09:20:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0535f9d8b66852c08cbaf79b8f0e3f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba940-93e0-4b07-89c9-46f1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:00.000Z",
            "modified": "2015-09-30T09:20:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f05c4e5c64a0c66d13ea6dccfea33b6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba940-012c-4eec-ac35-4e9b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:00.000Z",
            "modified": "2015-09-30T09:20:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f06d6e5bbb3973a7000280c8a3fe301d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba941-703c-4fe6-809c-492f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:01.000Z",
            "modified": "2015-09-30T09:20:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f082212f6d91afc0c90ebeedb3425158']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba941-83d4-4db8-b9c5-47d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:01.000Z",
            "modified": "2015-09-30T09:20:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f08379f6162cd06c0a6fb7a82cd9d18a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba941-f6b8-4f04-8ec9-44ac950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:01.000Z",
            "modified": "2015-09-30T09:20:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f085428acede82e4f3ec13e41f898a39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba942-6530-4be8-ae14-4fb5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:02.000Z",
            "modified": "2015-09-30T09:20:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0978091111794daa69f37948ad45cde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba942-ea34-49af-920e-4688950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:02.000Z",
            "modified": "2015-09-30T09:20:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0a3cab3ac2bdcd79b9a51f6a6139786']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba943-4438-4007-9067-4bf9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:03.000Z",
            "modified": "2015-09-30T09:20:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0a5a57e62ce3c5bd02a5ba529be8b05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba943-6c84-4d31-9628-4e2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:03.000Z",
            "modified": "2015-09-30T09:20:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0a9c32c9220762989e0e0fb1412423b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba943-35f8-48ef-806d-45c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:03.000Z",
            "modified": "2015-09-30T09:20:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0af51e3d818150d666f2e9719252b84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba944-0088-440d-81e7-410d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:04.000Z",
            "modified": "2015-09-30T09:20:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0cd8dc171634ded0bb13e150f40d20c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba944-cc8c-4a9a-b55c-45c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:04.000Z",
            "modified": "2015-09-30T09:20:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0d70dcc1befe052116d7a63516c6cba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba945-3348-4487-9373-469f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:04.000Z",
            "modified": "2015-09-30T09:20:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0da0bfd09898b2d792707d10ff847ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba945-0dd4-404f-8d82-4c8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:05.000Z",
            "modified": "2015-09-30T09:20:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0dc1ff35f3b7ba2d461cc0cb66e96e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba945-9e98-4864-96a5-431d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:05.000Z",
            "modified": "2015-09-30T09:20:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0dea41a57d1e982b8d5843f44ad24e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba946-f5b0-4e05-af11-4996950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:06.000Z",
            "modified": "2015-09-30T09:20:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0e5b55c84383b07d2216d48c49e4c86']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba946-9038-43f5-b44e-446f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:06.000Z",
            "modified": "2015-09-30T09:20:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0e834b3ae9e555a25497139e05c8987']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba946-0820-44e4-b740-418c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:06.000Z",
            "modified": "2015-09-30T09:20:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0eb507d0a08a00412d50610b5589b32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba947-547c-4c83-9b87-4f54950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:07.000Z",
            "modified": "2015-09-30T09:20:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f0f0d75d26fb452c6f1c48040958a82d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba947-8e64-4d66-a0cc-474a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:07.000Z",
            "modified": "2015-09-30T09:20:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f1028b323bbf0ca5f81f8ef706020fb5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba947-6b70-491d-8502-4f0a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:07.000Z",
            "modified": "2015-09-30T09:20:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f1041461229d8db65c14e8efd243b447']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba948-8784-46c6-99b9-47ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:08.000Z",
            "modified": "2015-09-30T09:20:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f10a66cd7b753b66ff0f1bd7c417a032']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba948-9630-4df6-a132-4fc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:08.000Z",
            "modified": "2015-09-30T09:20:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f10fef878488e24bce62a099f05f075d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba949-91e0-468e-9d04-4dec950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:09.000Z",
            "modified": "2015-09-30T09:20:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f112bafbad0ab74c965b74d4bac52d18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba949-4b3c-42cd-b9a3-4d8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:09.000Z",
            "modified": "2015-09-30T09:20:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f118edd6e66926d460e689a6def3cef5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba949-3ec4-41e6-a532-4e3c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:09.000Z",
            "modified": "2015-09-30T09:20:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f1239f364e5c14d01f1f8c95a5aa6141']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94a-9a28-4f23-b25d-444a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:10.000Z",
            "modified": "2015-09-30T09:20:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f151578fac8f8f36a676e52ea0249f50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94a-dff0-4468-a3fa-468d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:10.000Z",
            "modified": "2015-09-30T09:20:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f153222c9dbe0bab699f41319e721617']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94b-37f8-4454-be8d-4122950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:10.000Z",
            "modified": "2015-09-30T09:20:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f15507aff5753076dc0caf68cae7d691']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94b-0f68-48df-8502-414c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:11.000Z",
            "modified": "2015-09-30T09:20:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f1a3bfd1c34be54a8edab42ac1bc1607']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94b-2a44-453e-b9ad-4852950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:11.000Z",
            "modified": "2015-09-30T09:20:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f1a3c05c4809b89f838a7f04d83c2e61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94c-0a60-47ec-810a-4a95950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:12.000Z",
            "modified": "2015-09-30T09:20:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f1b045fcb0d13b69f66a01fe7683aa64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94c-2d74-4c34-91e4-4e2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:12.000Z",
            "modified": "2015-09-30T09:20:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f1b855928e72cc7117c8b0b3f44d84f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94c-76cc-4e73-bd37-45a1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:12.000Z",
            "modified": "2015-09-30T09:20:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f1beb0a7d126c4ef4b36d25554eeb071']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94d-b8bc-45ed-b571-4c1c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:13.000Z",
            "modified": "2015-09-30T09:20:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f1ed116f3a03ec7548e412b2f8835247']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94d-8d90-4b90-8029-43d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:13.000Z",
            "modified": "2015-09-30T09:20:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f21232a71e24fa54acd2fc3e570b7fd5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94e-65a8-4bda-972a-43e0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:14.000Z",
            "modified": "2015-09-30T09:20:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f21633938a5cd1a7401882cd2eeb0a6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94e-9828-4aba-a09d-4da8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:14.000Z",
            "modified": "2015-09-30T09:20:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f21860cccb5fda26288a43cb4beed172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94e-2b34-4073-a144-447f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:14.000Z",
            "modified": "2015-09-30T09:20:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f21ac3a9f9004aef46c6cb89e1ef04ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94f-12d8-4ee5-acdf-47d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:15.000Z",
            "modified": "2015-09-30T09:20:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f21bab93f40f9512cdb182929b026597']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94f-8bc0-448a-9286-4683950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:15.000Z",
            "modified": "2015-09-30T09:20:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f21fb7075246c3a391df2a0d43377739']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba94f-601c-47aa-b6fd-4126950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:15.000Z",
            "modified": "2015-09-30T09:20:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f22c02158dc725762b0e8aeaddc894a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba950-86ec-487b-b182-470a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:16.000Z",
            "modified": "2015-09-30T09:20:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f252ae47c0abc87640f721493eb08c51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba950-4a54-490d-94aa-453c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:16.000Z",
            "modified": "2015-09-30T09:20:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f25d8dcc8e895529a9c27d52109e9dbd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba951-e668-4165-a16d-49b3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:17.000Z",
            "modified": "2015-09-30T09:20:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f25f59d9d570ddcf768b882b8cf32792']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba951-c394-4072-bb44-4c52950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:17.000Z",
            "modified": "2015-09-30T09:20:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2713b393e454b70f76ba56a7056e91d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba951-bbf0-4a42-ad6c-404f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:17.000Z",
            "modified": "2015-09-30T09:20:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f278d3ea0c6047d7442859f233bd85bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba952-8cd8-4e0a-8b77-4d65950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:18.000Z",
            "modified": "2015-09-30T09:20:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f288356a0019c4116a8bbaad3d0b10f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba952-7e54-475f-b1c2-4bbd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:18.000Z",
            "modified": "2015-09-30T09:20:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2889b2b472e43fd89983b76543ec427']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba952-9d40-475c-abd5-4f28950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:18.000Z",
            "modified": "2015-09-30T09:20:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f288fa8b9423e9e975063ea842ff5962']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba953-5b84-4acc-8133-449f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:19.000Z",
            "modified": "2015-09-30T09:20:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f291bb001f638675e7934c78224d9470']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba953-89ec-4ade-8d08-4440950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:19.000Z",
            "modified": "2015-09-30T09:20:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2a85c6cebac74ecc415872ee36769d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba954-5f18-47ca-a0d2-4c5c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:20.000Z",
            "modified": "2015-09-30T09:20:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2a9be3b2b474f601d01cb3c383ddce5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba954-a024-42e1-809a-434e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:20.000Z",
            "modified": "2015-09-30T09:20:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2ac8af431a0d350a326de6dd1ffaeaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba954-2c04-4ea3-9097-49e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:20.000Z",
            "modified": "2015-09-30T09:20:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2af84ed0be4e37b5353d8abacaf8dfb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba955-1eb4-48fe-9e9a-4515950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:21.000Z",
            "modified": "2015-09-30T09:20:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2b378570418a9863b35f9b16a478db6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba955-8104-4b97-b974-4fe3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:21.000Z",
            "modified": "2015-09-30T09:20:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2b99a90e543dd239ab7cb5fedd6fd8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba955-c6b8-4b19-9e24-47a7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:21.000Z",
            "modified": "2015-09-30T09:20:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2d2fe5e03618e6aa46d20236d682f27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba956-7914-4322-a12b-4d17950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:22.000Z",
            "modified": "2015-09-30T09:20:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2d5726c744ca1031a56977b41c5067f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba956-5900-41cf-acb8-4340950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:22.000Z",
            "modified": "2015-09-30T09:20:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2d5cc1019b592c7ea9a9385b4d19a13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba957-be20-4896-9e1d-417b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:23.000Z",
            "modified": "2015-09-30T09:20:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2dcee208db5b9cfc59530245b2b4eb5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba957-f310-4b79-9d79-47da950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:23.000Z",
            "modified": "2015-09-30T09:20:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2e9707467171eaceab77b04c3932f81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba957-ecc4-4866-9f75-416e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:23.000Z",
            "modified": "2015-09-30T09:20:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2e9fdf8301c129e20a25285ec237896']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba958-ca48-48bb-9c2d-4223950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:24.000Z",
            "modified": "2015-09-30T09:20:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f2f242a1138eb2d4d752aedefb429941']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba958-560c-4ff9-a511-4542950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:24.000Z",
            "modified": "2015-09-30T09:20:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f304d3eea13be7f2d8b1520f2b32db3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba958-e9f0-41c2-99a2-4430950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:24.000Z",
            "modified": "2015-09-30T09:20:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f308903338a66aed2f262d4859526544']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba959-cf44-4ab0-90e0-41e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:25.000Z",
            "modified": "2015-09-30T09:20:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f30c0294613014154fd6f371c5f65243']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba959-1bc0-4eee-8e8b-43b9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:25.000Z",
            "modified": "2015-09-30T09:20:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3122994955a993a8be9e90ca9e3da7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95a-4abc-47a4-9a7d-48ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:26.000Z",
            "modified": "2015-09-30T09:20:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f31a7f7178fbea66ad16fdc4affbae00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95a-4d3c-4030-a979-4f35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:26.000Z",
            "modified": "2015-09-30T09:20:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3481d55c5913b50e3dcd3d882d7963b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95a-a0a4-4cac-a0d6-41c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:26.000Z",
            "modified": "2015-09-30T09:20:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3498bd044c853bdf511bb96228460d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95b-a4e4-4dd6-bb1b-4360950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:27.000Z",
            "modified": "2015-09-30T09:20:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f34c915c4e1df66feeaf7e15c2571c76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95b-cdb4-4e65-b1dc-4698950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:27.000Z",
            "modified": "2015-09-30T09:20:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3572e78196224ae50daa5bf2db2aafc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95b-9e00-49a4-abd4-423a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:27.000Z",
            "modified": "2015-09-30T09:20:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f35c109b4ad9abc091403a8088ab2b40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95c-3548-453b-9456-4cad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:28.000Z",
            "modified": "2015-09-30T09:20:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f36113e6cb308d8d0e7fe50c0e962f1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95c-7404-4833-a197-4f9a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:28.000Z",
            "modified": "2015-09-30T09:20:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3687258ae48b52e853ac2205c0643ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95c-8d7c-4883-8fc2-409a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:28.000Z",
            "modified": "2015-09-30T09:20:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f36a02da2f7e1436429a85050281f4d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95d-d3f4-4b8f-a9ac-4632950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:29.000Z",
            "modified": "2015-09-30T09:20:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f37a3417dc5d0b32557b343c85b07a62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95d-b498-4f51-95f6-4aa2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:29.000Z",
            "modified": "2015-09-30T09:20:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f387974fbb0ea9596c69baec1dfcf8b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95e-15ac-440d-a844-4a57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:30.000Z",
            "modified": "2015-09-30T09:20:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f38916ab36af2f8cf64462e181ba8b0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95e-0e34-4992-95e3-465f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:30.000Z",
            "modified": "2015-09-30T09:20:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f39dc4a6ed45a6225988c17749d9cb55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95e-e970-473e-aa7f-479d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:30.000Z",
            "modified": "2015-09-30T09:20:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3a4570cc0505c03bd466f1710973f65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95f-4824-462b-a922-4731950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:31.000Z",
            "modified": "2015-09-30T09:20:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3ae4d57eec53f68b62aa903150cbd99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95f-5be8-4326-beb9-4a66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:31.000Z",
            "modified": "2015-09-30T09:20:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3b1999a9e05c56c2ec6788a1fd1d8b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba95f-d9b4-401f-a1ff-4169950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:31.000Z",
            "modified": "2015-09-30T09:20:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3b3647d385023d525fae9e45a559cbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba960-2684-47d8-922a-4e9e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:32.000Z",
            "modified": "2015-09-30T09:20:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3bc61dadab31f7ec7d757e1cadd9619']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba960-1ad0-446e-95d8-4312950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:32.000Z",
            "modified": "2015-09-30T09:20:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3c04f6c325ac3b9cb79b01a3adeed86']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba961-ca84-4636-ad8f-4862950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:33.000Z",
            "modified": "2015-09-30T09:20:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3c23d0e7448b1335c4ec73df50a063c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba961-4740-4ab4-badc-4fb2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:33.000Z",
            "modified": "2015-09-30T09:20:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3c36f042993192cc115287b02ab1bea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba961-9b88-4b2e-ab99-4489950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:33.000Z",
            "modified": "2015-09-30T09:20:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3c8049c1df9c9bda9de25f4fa3e94c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba962-72f0-43f0-9a1a-4458950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:34.000Z",
            "modified": "2015-09-30T09:20:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3d27e6a66862d30f6aca260bf2cc074']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba962-e588-4c09-996a-4846950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:34.000Z",
            "modified": "2015-09-30T09:20:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3d6fe3cfd03fd7b72cbdf21bcc76ce8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba962-df5c-4691-9b25-4fd3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:34.000Z",
            "modified": "2015-09-30T09:20:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3e8d0f52975ca41a3afc77f2e2d5c66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba963-b64c-4553-ad1b-4c1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:35.000Z",
            "modified": "2015-09-30T09:20:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3f149dc342bafe25caa2ae40f8da9c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba963-ea94-49f4-aff3-4feb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:35.000Z",
            "modified": "2015-09-30T09:20:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3f25cd198ff7e212ded635b53e6b8e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba964-1abc-425c-a036-48d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:36.000Z",
            "modified": "2015-09-30T09:20:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f3f306335009ccbbbb4097481e02441a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba964-513c-445a-95aa-44a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:36.000Z",
            "modified": "2015-09-30T09:20:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f40a2b40fc1b0fe0d072f2120042a250']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba964-029c-4e0b-835c-4bdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:36.000Z",
            "modified": "2015-09-30T09:20:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f414b9c24087d5a49ff89e915fe8b899']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba965-06d4-4380-a625-4917950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:37.000Z",
            "modified": "2015-09-30T09:20:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f415bb55839be6ee0cbd08cf5dcef064']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba965-6898-4681-bd00-4fa6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:37.000Z",
            "modified": "2015-09-30T09:20:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f41a6870b54a18abd852855f2485d25d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba965-8e88-4a7a-9bd1-4ecc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:37.000Z",
            "modified": "2015-09-30T09:20:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f41e9693df3ec7742f8cd09eac935ad3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba966-bdd4-478d-b82d-4aa9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:38.000Z",
            "modified": "2015-09-30T09:20:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f41f0895c1b77056514724040f8b8d9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba966-ad24-4d01-ac57-4bd8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:38.000Z",
            "modified": "2015-09-30T09:20:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f42a83cf6bc41d58a0d0ed5d609379e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba967-2080-45e4-95a5-409f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:39.000Z",
            "modified": "2015-09-30T09:20:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f432c3d04156c8611c8eac8bfc8a50e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba967-40bc-4886-802e-4fae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:39.000Z",
            "modified": "2015-09-30T09:20:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4462f0ff245f9684380c9c81a737b5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba967-841c-4fe5-b12a-4ffc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:39.000Z",
            "modified": "2015-09-30T09:20:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f446628d551fd74dc4b206323c609ad7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba968-3d74-4886-b93f-4c68950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:40.000Z",
            "modified": "2015-09-30T09:20:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4698f384d8da58e4723cf7060a66b4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba968-ec28-4800-aa6d-409f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:40.000Z",
            "modified": "2015-09-30T09:20:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f478d2ff50031ec176376aeec2e41668']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba969-4798-4937-b3eb-4334950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:40.000Z",
            "modified": "2015-09-30T09:20:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f47ce8593ce70ef3992070ad4bd939f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba969-42ec-472a-ac75-49c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:41.000Z",
            "modified": "2015-09-30T09:20:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4827c82111197f2e3242ee028e1309e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba969-d01c-4b23-a219-4fa7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:41.000Z",
            "modified": "2015-09-30T09:20:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f48adbd63748af5d7e67c08c3918882b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96a-d6b4-4eb6-9d7c-4302950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:42.000Z",
            "modified": "2015-09-30T09:20:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f48bed8290c99001e9551b7979cc51a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96a-3100-4563-8824-4123950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:42.000Z",
            "modified": "2015-09-30T09:20:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f49168e059f017e617833c7d0f776445']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96a-12ec-4fc5-b6f9-4dfc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:42.000Z",
            "modified": "2015-09-30T09:20:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f49f195e7f0403c2fdb256615a7e62be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96b-0348-4b37-9ac2-4e57950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:43.000Z",
            "modified": "2015-09-30T09:20:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4a000848470a01000a3d125283073c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96b-e4bc-4d1c-b6bd-43d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:43.000Z",
            "modified": "2015-09-30T09:20:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4ae2ca866ae2ebf38726d9bac3d3196']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96c-cad8-418d-bb7f-488a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:43.000Z",
            "modified": "2015-09-30T09:20:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4b760b979109a3c07114a6b421093f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96c-d4b4-4e64-83f5-48dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:44.000Z",
            "modified": "2015-09-30T09:20:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4bb23fdd38670df6eff63c0dd2f3eba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96c-09c4-47fe-aabf-4f8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:44.000Z",
            "modified": "2015-09-30T09:20:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4bd41f24d1a172af65afca105dd6a72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96d-5638-409c-949f-4a12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:45.000Z",
            "modified": "2015-09-30T09:20:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4c01bc366fbf01a79596d48cdbc99fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96d-f1b0-4010-87ca-4f41950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:45.000Z",
            "modified": "2015-09-30T09:20:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4c7c8f9f39759ca0268a6732df9d63a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96d-e2a0-49a0-a4c9-4433950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:45.000Z",
            "modified": "2015-09-30T09:20:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4c827a96ac96ab6f6d690f30f2087ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96e-ed34-4460-b2bd-497e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:46.000Z",
            "modified": "2015-09-30T09:20:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4dbccae1da9c103fc0eaf5433266ddc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96e-8984-44a4-beb9-4205950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:46.000Z",
            "modified": "2015-09-30T09:20:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4e2ea561c186a2b7acfd5d67894ce38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96e-63ac-4a90-beea-4236950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:46.000Z",
            "modified": "2015-09-30T09:20:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4e59255d379f13a6ee5d5d82b0957c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96f-cfa4-48c7-af2a-4f61950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:47.000Z",
            "modified": "2015-09-30T09:20:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4e8d4102261b0188cd5388e0b8c3f5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba96f-40dc-43b9-8a78-4079950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:47.000Z",
            "modified": "2015-09-30T09:20:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4e9f92b702c3c8ef82c1d9be8880ecb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba970-557c-4b45-838a-4a99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:48.000Z",
            "modified": "2015-09-30T09:20:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4ee47f1ec697eb71546d3e5d753f3fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba970-d010-427b-ac77-4e25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:48.000Z",
            "modified": "2015-09-30T09:20:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4eefbd6410ca94727ecdd04d46dabc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba970-eae0-44e0-b89c-41ad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:48.000Z",
            "modified": "2015-09-30T09:20:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f4f0d4d1a121cba690cb6fbfc1078646']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba971-3840-4c1f-98ff-4b3b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:49.000Z",
            "modified": "2015-09-30T09:20:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f504ef6e9a269e354de802872dc5e209']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba971-60e4-41a8-a665-4100950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:49.000Z",
            "modified": "2015-09-30T09:20:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f50a621575d99bc8d8ac3e937eac5e77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba972-fd20-4e34-a762-4e7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:49.000Z",
            "modified": "2015-09-30T09:20:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f50d020bfaef7a644157ac215f4e1b88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba972-bcf4-4d70-af25-4c85950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:50.000Z",
            "modified": "2015-09-30T09:20:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f50df6a0d0884ae9de5a6f23e468b80d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba972-6e5c-44d7-b7f4-41dd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:50.000Z",
            "modified": "2015-09-30T09:20:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5151ebddf3915066657fa2de95ebcef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba973-4010-4afd-9f28-4a12950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:51.000Z",
            "modified": "2015-09-30T09:20:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5155d9b4bd2f377d92c846630d1c65f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba973-07a0-46f9-879a-47ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:51.000Z",
            "modified": "2015-09-30T09:20:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5239b60f1c951e769313f257c8e6c05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba973-7d50-4be3-810e-4337950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:51.000Z",
            "modified": "2015-09-30T09:20:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f52b05b47503f7fb0b173fb9dc509500']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba974-0ce0-4eae-adf3-4be2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:52.000Z",
            "modified": "2015-09-30T09:20:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f52b39f427aa404b543782960568e965']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba974-cd88-493d-90be-47d5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:52.000Z",
            "modified": "2015-09-30T09:20:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f530ff8b58e38ee4b8a1cae42f2c712c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba975-1410-4e21-90ec-4ae8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:53.000Z",
            "modified": "2015-09-30T09:20:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f535c0aeb93563a0ad4c37de3bfc857e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba975-86f8-4d71-8a3a-449d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:53.000Z",
            "modified": "2015-09-30T09:20:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5360c5618c3035a09c77cb408cde60f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba975-b3d8-4974-81c9-4821950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:53.000Z",
            "modified": "2015-09-30T09:20:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5533eefcad15fc402fc8a0dc828e827']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba976-95e4-4837-a8c7-4fdc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:54.000Z",
            "modified": "2015-09-30T09:20:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f55688c192841d499d8b2ca8c35ed3a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba976-bdc4-40dc-a336-4a42950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:54.000Z",
            "modified": "2015-09-30T09:20:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5580e7e8dda72911921ba42a7cbb67a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba976-f588-4ed8-8694-4fc4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:54.000Z",
            "modified": "2015-09-30T09:20:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5592d28b7e348d0bebad2d2b73a6fac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba977-18a4-4cfe-9e68-4afd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:55.000Z",
            "modified": "2015-09-30T09:20:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5594beed2d68a9a385653c76fe94980']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba977-876c-4895-9103-4c76950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:55.000Z",
            "modified": "2015-09-30T09:20:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f55bcf87f994fca7180cd1905ffec9a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba978-10a0-4338-bc08-4069950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:55.000Z",
            "modified": "2015-09-30T09:20:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f56b6fa89937712f84e1aa5810a62580']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba978-6798-4210-8665-4e1e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:56.000Z",
            "modified": "2015-09-30T09:20:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5722d9195a5dcdb68e0c1fd713fb7e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba978-36bc-4fa4-95de-499e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:56.000Z",
            "modified": "2015-09-30T09:20:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f57db4de441ca868290c2fa1d7529ec9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba979-4b88-4552-8dac-42c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:57.000Z",
            "modified": "2015-09-30T09:20:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5877eb97b5ad2f8d996757d1d0fc324']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba979-2b98-443b-9c12-40ae950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:57.000Z",
            "modified": "2015-09-30T09:20:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5892c262479b5d12c4ab74b69653317']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba979-df90-45d8-854c-4c86950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:57.000Z",
            "modified": "2015-09-30T09:20:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f591779f885360b6ae6e596c9891e1f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97a-d7f8-4d1b-b358-4195950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:58.000Z",
            "modified": "2015-09-30T09:20:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f59c5a30c2c8360850b24fae19462611']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97a-a5b0-4487-9c1e-489b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:58.000Z",
            "modified": "2015-09-30T09:20:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5a57af883b42655d4d004d976d489f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97b-f620-4e42-aa8f-44e3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:59.000Z",
            "modified": "2015-09-30T09:20:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5aa9bb787f03dbdf223c47f56426d9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97b-5f3c-425e-80bc-4221950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:59.000Z",
            "modified": "2015-09-30T09:20:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5b860b7d0291953535fcec4d0489c95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97b-936c-4dda-8320-458d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:20:59.000Z",
            "modified": "2015-09-30T09:20:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5bbccbec62359ac834a8afa23360349']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:20:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97c-c19c-45e0-9fdb-48ca950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:00.000Z",
            "modified": "2015-09-30T09:21:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5be59fafc7c9e1610edce1b61109447']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97c-2c78-4b9a-a326-4053950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:00.000Z",
            "modified": "2015-09-30T09:21:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5e7881ca3339fe8b40dbf912e9259c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97c-e534-45ac-a05e-4228950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:00.000Z",
            "modified": "2015-09-30T09:21:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f5fa43c1f20b73ed066eb9b8e07532dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97d-386c-413e-988e-46ef950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:01.000Z",
            "modified": "2015-09-30T09:21:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f602bfa43f151301cde4a640132eb5ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97d-e04c-45dd-86fe-4ad5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:01.000Z",
            "modified": "2015-09-30T09:21:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f60621eab5e456a4632f890fb72b5eac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97e-a908-4673-b301-4678950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:02.000Z",
            "modified": "2015-09-30T09:21:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6135e69e138af9e929bbee28c4efefe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97e-c968-4c0b-9052-451d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:02.000Z",
            "modified": "2015-09-30T09:21:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f617a5e3eb0a50007ed44f795f12ac8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97e-2ec8-47a7-a92f-4501950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:02.000Z",
            "modified": "2015-09-30T09:21:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f62506d7149918cba3697b9877c009b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97f-6d14-443a-aefe-4db1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:03.000Z",
            "modified": "2015-09-30T09:21:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f62a07cac2edbd7a2b5186872b326831']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97f-57e8-4f8a-be97-46bf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:03.000Z",
            "modified": "2015-09-30T09:21:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f62a7df04cce76f2b88e3af2fed3400f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba97f-7104-4b75-82cc-4029950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:03.000Z",
            "modified": "2015-09-30T09:21:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f633d7db2975ede8d7aaaff791e37cda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba980-138c-4bfd-b304-4e8e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:04.000Z",
            "modified": "2015-09-30T09:21:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f633da8bf62e72c6c460bbdc8e31b7cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba980-cd28-4f21-a8e5-45f4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:04.000Z",
            "modified": "2015-09-30T09:21:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f64314fe6a7ddfa0afa9dbe3ebed4642']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba981-5c44-4d2f-a42b-43b0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:05.000Z",
            "modified": "2015-09-30T09:21:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f64a7aad5b6d8482ad63cdb8aa1a9d6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba981-bd8c-4df4-9fcc-4c0c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:05.000Z",
            "modified": "2015-09-30T09:21:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f652ed3430af60371071d54732daa0b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba981-5e6c-4900-9be8-47ed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:05.000Z",
            "modified": "2015-09-30T09:21:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6567eefa51aa6327203694bd464f874']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba982-d308-4668-b0a4-492c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:06.000Z",
            "modified": "2015-09-30T09:21:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f65af375b8c522522c3d5c95dd3fb1e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba982-600c-4ba9-b51a-4bff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:06.000Z",
            "modified": "2015-09-30T09:21:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f669e63f2ecb55cdc1306b8beaef2f76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba982-03e0-40c9-b640-4dc0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:06.000Z",
            "modified": "2015-09-30T09:21:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f66af8680f477c73719269117cf2f233']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba983-0414-4239-8c5f-41c4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:07.000Z",
            "modified": "2015-09-30T09:21:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f66b7807e4b59e3ba1fab85a30577fd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba983-3444-4c68-b7a8-47f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:07.000Z",
            "modified": "2015-09-30T09:21:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f678908017cf35c8821cad159f3835e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba984-3a64-4d51-bee4-497a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:08.000Z",
            "modified": "2015-09-30T09:21:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f68547b199ccc382ab55a79228af270e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba984-e7fc-4219-a615-48dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:08.000Z",
            "modified": "2015-09-30T09:21:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6866200ca4dbe90a4c0ddd3ba2b0298']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba984-7834-4494-959d-45df950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:08.000Z",
            "modified": "2015-09-30T09:21:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f68c1f3cf56502caefe79f72472846bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba985-a9e0-42bd-a716-4907950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:09.000Z",
            "modified": "2015-09-30T09:21:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f691d89193c03a64d73e4f11a7ee516f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba985-e8d4-4ea1-b191-4bd9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:09.000Z",
            "modified": "2015-09-30T09:21:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f692b810c501e838926512f3c183027a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba985-8e04-478e-adb8-4533950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:09.000Z",
            "modified": "2015-09-30T09:21:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6943e79a376386fc5639208595f6e2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba986-db70-44bb-bf01-4959950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:10.000Z",
            "modified": "2015-09-30T09:21:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f69a79a569c1efb319a4697a04421337']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba986-2874-425b-8dd7-4a37950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:10.000Z",
            "modified": "2015-09-30T09:21:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f69bfe74cb8ec16f81cfb0e065158de0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba987-0838-4a4d-8d82-4817950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:11.000Z",
            "modified": "2015-09-30T09:21:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6a5f95fe87b1fc461fba0adb09fd1f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba987-64e0-44b5-b924-4ab7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:11.000Z",
            "modified": "2015-09-30T09:21:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6ab40ffc7371f57ffe960f2ce134ecc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba987-811c-4306-9273-4dcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:11.000Z",
            "modified": "2015-09-30T09:21:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6b260d658cd809a0c18c4e53d95c86f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba988-db4c-45e4-8681-43db950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:12.000Z",
            "modified": "2015-09-30T09:21:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6b4bf7339f4e75553e122fc8faf9ecd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba988-fcd0-4e9e-9e17-4ac2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:12.000Z",
            "modified": "2015-09-30T09:21:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6bf8fa011dfd21da519479dfa104a0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba988-d9bc-4519-9732-4190950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:12.000Z",
            "modified": "2015-09-30T09:21:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6c832757de5da318cbe76e3da6212b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba989-94b8-4843-8941-4481950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:13.000Z",
            "modified": "2015-09-30T09:21:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6df30b326a4ae3ae873f619a6f4a0fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba989-12cc-4fe9-b70b-4053950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:13.000Z",
            "modified": "2015-09-30T09:21:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6ee5326e2758f3a044b2a1824ac92dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98a-2b80-48eb-b1d0-4384950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:14.000Z",
            "modified": "2015-09-30T09:21:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f6f9963b8830db9d85789c581459b6ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98a-6520-4286-8eae-44a3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:14.000Z",
            "modified": "2015-09-30T09:21:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f704455b76bbce0cf2c3618ffd76a55b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98a-1504-431e-9c3f-41e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:14.000Z",
            "modified": "2015-09-30T09:21:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f707a0342c264f8cf6733d5ec2a0577e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98b-67a4-4edb-bd0c-48ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:15.000Z",
            "modified": "2015-09-30T09:21:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f71ad2b74ea3dd5f487870dee8ed5abd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98b-ea6c-4cb7-978c-4c53950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:15.000Z",
            "modified": "2015-09-30T09:21:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f720334c2ff38a3db91fb7decf93ed62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98b-c2a0-4e81-950b-474d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:15.000Z",
            "modified": "2015-09-30T09:21:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f72c44a7e824fab3484f4fdac244c312']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98c-0134-4b30-b0ce-44d4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:16.000Z",
            "modified": "2015-09-30T09:21:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f73abba26125ee0b2fa579bc4cf7a054']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98c-af34-40c1-a886-4cc2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:16.000Z",
            "modified": "2015-09-30T09:21:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f73c425bc3477eb346f7269a8be95258']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98d-f53c-44c1-8947-4786950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:17.000Z",
            "modified": "2015-09-30T09:21:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f74abd0160da3fd69fbe82a1a764f01e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98d-4618-4c40-9455-4cdb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:17.000Z",
            "modified": "2015-09-30T09:21:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f74c9a12ed4c35b4a32a5a3f80e51ffc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98d-309c-4c8a-8b2b-4d6c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:17.000Z",
            "modified": "2015-09-30T09:21:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f74d1d75853ae44c75a3905c4a2fa8b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98e-37d8-4bb3-8e9b-41c0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:18.000Z",
            "modified": "2015-09-30T09:21:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f74d5d6bd1b565417f1c38c89bb425fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98e-7754-4700-aa4d-4745950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:18.000Z",
            "modified": "2015-09-30T09:21:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f751475aa753a147db57c449c77ecd3d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98e-dad4-4a11-80c2-4cad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:18.000Z",
            "modified": "2015-09-30T09:21:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f756b7e8a7c6bb7aa0868803c5990366']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98f-251c-4a25-932a-4418950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:19.000Z",
            "modified": "2015-09-30T09:21:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f76887680190af12fd87baf112cc50d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba98f-7dbc-4290-b5f6-4995950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:19.000Z",
            "modified": "2015-09-30T09:21:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f774ee4a90ed7a2f944bc9d2e1f89a20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba990-bd80-4ae5-88ba-40ea950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:20.000Z",
            "modified": "2015-09-30T09:21:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f778bb21032a00f4dbd2aa64c812df54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba990-7b70-4cc5-99ae-49f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:20.000Z",
            "modified": "2015-09-30T09:21:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7851acb903c289e5095294e47dfa40f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba990-8c2c-47bc-b02c-4ac8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:20.000Z",
            "modified": "2015-09-30T09:21:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f78a540fb23b5ce293786b57fe466993']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba991-4624-4908-b56f-4e20950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:21.000Z",
            "modified": "2015-09-30T09:21:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f78da47fffa256be3ef1dbe156bed595']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba991-379c-45ca-b729-4a56950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:21.000Z",
            "modified": "2015-09-30T09:21:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f790272b2bfb005f3e4dd17146403383']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba991-ae18-4f0e-8586-42cf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:21.000Z",
            "modified": "2015-09-30T09:21:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f79a17bb73c8ab78daa50b815d260dc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba992-975c-4bd7-a1f4-47e6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:22.000Z",
            "modified": "2015-09-30T09:21:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f79bf3b5af70ae57c2ea3afac9628ccc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba992-1550-437c-a70f-4c5b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:22.000Z",
            "modified": "2015-09-30T09:21:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f79f16a0b863c6caf07ad41faa9e9036']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba993-8ec4-4bb6-9e86-4a4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:23.000Z",
            "modified": "2015-09-30T09:21:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7a5272f0fa05ad056753a04ec529ff5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba993-c778-4672-b9b8-46ff950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:23.000Z",
            "modified": "2015-09-30T09:21:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7b721e939f9c55ed787abcc743c71d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba993-9ba0-4be3-8f44-42e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:23.000Z",
            "modified": "2015-09-30T09:21:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7bf3a11950da05af72047498097fed5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba994-6118-4d0f-a32c-4d23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:24.000Z",
            "modified": "2015-09-30T09:21:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7c2106e42eaa2d2ddc2dc601e9b370c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba994-dd20-41e1-9cb5-476d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:24.000Z",
            "modified": "2015-09-30T09:21:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7c7572e0897689f89a8f8f8a2a0e3e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba994-9ac8-4ca5-9064-4595950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:24.000Z",
            "modified": "2015-09-30T09:21:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7d56867eb0fdb6dee65f7c10e44a1ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba995-d4f0-4913-9602-4973950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:25.000Z",
            "modified": "2015-09-30T09:21:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7d7517838cf18571f4274dd4101c8db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba995-eabc-4456-8758-413c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:25.000Z",
            "modified": "2015-09-30T09:21:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7dc22351541a7022641209aa22112c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba996-dde0-4b77-86bc-457a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:26.000Z",
            "modified": "2015-09-30T09:21:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7dcd1d14eff4db96e41b9b80d3cd4d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba996-4f84-433c-a2ae-49a2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:26.000Z",
            "modified": "2015-09-30T09:21:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7e8dcbaa7869c5469b1031a250e923d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba996-4908-4bc3-b6fb-4806950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:26.000Z",
            "modified": "2015-09-30T09:21:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7ec90de356d74d4b0e9a83c47567df7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba997-715c-451a-93e0-4c6b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:27.000Z",
            "modified": "2015-09-30T09:21:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7ed458a7cabfc8b9f844b2225f8a650']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba997-5484-49a8-b4cb-481c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:27.000Z",
            "modified": "2015-09-30T09:21:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7f199aa41e13d4d2b3292ac912ab9db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba997-8d30-4bd4-bc35-4061950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:27.000Z",
            "modified": "2015-09-30T09:21:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f7f71750d3b1fe4fd9148d62ae346606']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba998-845c-42d6-9102-4bf5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:28.000Z",
            "modified": "2015-09-30T09:21:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8034d496a39e4399a4545f0b2da541a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba998-027c-40db-898c-49e4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:28.000Z",
            "modified": "2015-09-30T09:21:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f80a06d74d2dd10ee6b821f6c0e53aaf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba999-6168-4184-8422-4579950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:29.000Z",
            "modified": "2015-09-30T09:21:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f81c2fd96db775d0c6d003e14cd22269']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba999-6c4c-47d3-96ba-451c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:29.000Z",
            "modified": "2015-09-30T09:21:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f83818b65547fd7b5d68c6e17001afc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba999-4340-4cfe-b71e-4a3a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:29.000Z",
            "modified": "2015-09-30T09:21:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f838d544b3f7d4fd6246ba362ed5befb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99a-e634-4c8c-853a-4728950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:30.000Z",
            "modified": "2015-09-30T09:21:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f846009237b1652ee910065d6552ca04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99a-0d9c-465a-8e35-4ef1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:30.000Z",
            "modified": "2015-09-30T09:21:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f84dbf0780ed5674ce31b7475941086b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99a-80cc-49dd-b078-4cfe950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:30.000Z",
            "modified": "2015-09-30T09:21:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f84f0a322cd43b9a631a056df93bbad9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99b-5650-44d7-847e-4448950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:31.000Z",
            "modified": "2015-09-30T09:21:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f852388fbb4ffc22cf0c43699e9b2346']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99b-0a70-4eea-97c4-47f8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:31.000Z",
            "modified": "2015-09-30T09:21:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f865730a3ba9191fe4cb3184e7e626ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99c-7ce4-4cb3-9049-4a96950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:32.000Z",
            "modified": "2015-09-30T09:21:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f882d89fb93d8e26671447daf425c28f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99c-fba8-4371-a026-4094950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:32.000Z",
            "modified": "2015-09-30T09:21:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f885138e7c9ec2f0352cafe7e9421aa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99c-a3bc-4109-91f8-4bda950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:32.000Z",
            "modified": "2015-09-30T09:21:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8921fb6f239b86a624510198e83feda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99d-7f5c-4b01-a199-4727950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:33.000Z",
            "modified": "2015-09-30T09:21:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8940eda1da81f41d0903b8133d0d448']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99d-3880-4aa9-8a98-415e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:33.000Z",
            "modified": "2015-09-30T09:21:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f895b24dc38905b12bebe9d4b753e246']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99d-14bc-43f6-83e5-4f84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:33.000Z",
            "modified": "2015-09-30T09:21:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f89a93d1067283946ef2da39cf3e0b73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99e-37c8-4978-a7fd-48d7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:34.000Z",
            "modified": "2015-09-30T09:21:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8a74813007db8de4715a9754c7f5276']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99e-2f94-404a-b418-468e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:34.000Z",
            "modified": "2015-09-30T09:21:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8bc5fb79b3dd4ed5ac8d1e732dfbfb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99f-278c-4515-8420-4eb1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:35.000Z",
            "modified": "2015-09-30T09:21:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8c0c0e20997aad2f81d39189218b96c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99f-db30-42ec-bdb6-41dc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:35.000Z",
            "modified": "2015-09-30T09:21:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8c9bb6538fbb09d25241ec4379e6224']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba99f-a83c-48d0-8e6c-4c66950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:35.000Z",
            "modified": "2015-09-30T09:21:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8cc9850f3d040e4e1aebe65bb1b2155']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a0-df98-4731-9df0-4f62950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:36.000Z",
            "modified": "2015-09-30T09:21:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8cf307c0018a50d8a77d1c0a91fe8e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a0-9444-4016-a53e-4446950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:36.000Z",
            "modified": "2015-09-30T09:21:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8d62ed802c75f20c27d6440060cc80f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a0-b840-4f9b-aa2c-455c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:36.000Z",
            "modified": "2015-09-30T09:21:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8de404cbb7f765bda171359f34f3d2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a1-51b8-4c8a-bc63-4d30950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:37.000Z",
            "modified": "2015-09-30T09:21:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8e65f623c613822bc0b179fc5ffac21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a1-dbd0-48f7-9f0f-41e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:37.000Z",
            "modified": "2015-09-30T09:21:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f8ec11ad027e9eafb25c8f3a4ebe9bbf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a2-cf54-4cd0-9dc1-47a6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:38.000Z",
            "modified": "2015-09-30T09:21:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9054034eb8432afa222da9974ff95b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a2-b4f8-4ef8-a606-4dab950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:38.000Z",
            "modified": "2015-09-30T09:21:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9251b15bd02052deb02dd6e8a46654f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a2-ac74-4c48-805c-4cb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:38.000Z",
            "modified": "2015-09-30T09:21:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f928b7cb4fbcfd51a38355851b1c224b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a3-32fc-4952-ba2a-4071950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:39.000Z",
            "modified": "2015-09-30T09:21:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f92f34bd9f9d5f8db89a709616867343']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a3-38c8-4746-83df-447f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:39.000Z",
            "modified": "2015-09-30T09:21:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f93455d0b4c9277bd0802ccfdf473aaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a3-7778-4394-8ce1-4f44950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:39.000Z",
            "modified": "2015-09-30T09:21:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9402d871c0537cccbe4f32c77c55281']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a4-70ac-41d4-9bab-4a7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:40.000Z",
            "modified": "2015-09-30T09:21:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f94ee73d1107c798e63465c9e0ba737a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a4-5554-4312-98fa-4019950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:40.000Z",
            "modified": "2015-09-30T09:21:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f950c2e9bce8f344a78e4750cfc52f31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a5-6924-4a17-9863-4189950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:41.000Z",
            "modified": "2015-09-30T09:21:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f957f83898aa9ba31c114d6e04336eb9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a5-2d70-4e55-87a3-4df8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:41.000Z",
            "modified": "2015-09-30T09:21:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f95daa001f085c54836a9ec7f14a9a63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a5-17c8-4dde-b92b-4242950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:41.000Z",
            "modified": "2015-09-30T09:21:41.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f964c50972e8bd4b0f55d07580c4ca10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a6-8e70-478d-8661-4ac7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:42.000Z",
            "modified": "2015-09-30T09:21:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f96f52073ad7f44f2cbc078289e7a6ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a6-e4a4-4f17-b524-4017950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:42.000Z",
            "modified": "2015-09-30T09:21:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f97375725de780ca3074ce359bbcd019']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a6-1188-4ec4-a364-42f9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:42.000Z",
            "modified": "2015-09-30T09:21:42.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f977f005058ce8c913783e05f0f6d0a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a7-4620-4ed2-b76d-4d5a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:43.000Z",
            "modified": "2015-09-30T09:21:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9797c621890bffcc5b65d66513c453f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a7-6a24-4606-a640-404e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:43.000Z",
            "modified": "2015-09-30T09:21:43.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9922b7de6164c08002787e2e22a9c8d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a8-bdd0-4cd8-bc31-4bf1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:44.000Z",
            "modified": "2015-09-30T09:21:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f992f9caa16ceff8209dba10b5cd9cd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a8-57a0-499f-a766-434a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:44.000Z",
            "modified": "2015-09-30T09:21:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f99e318f7c6cf362b3630cea6c6279e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a8-4284-4607-9e0b-4914950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:44.000Z",
            "modified": "2015-09-30T09:21:44.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9a475836a279c44451faca4e16f7802']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a9-1490-48cf-9236-4b4f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:45.000Z",
            "modified": "2015-09-30T09:21:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9b7115bb7f0aa20e0de825be0e6785f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9a9-28c8-474d-8c92-4f0f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:45.000Z",
            "modified": "2015-09-30T09:21:45.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9cd98c53628e2f79ca7c5de6b3b5f58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9aa-45d8-4e76-93bf-46d1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:46.000Z",
            "modified": "2015-09-30T09:21:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9daf34b530224a130f9813c8f7d4464']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9aa-9934-4759-a4f4-4e7d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:46.000Z",
            "modified": "2015-09-30T09:21:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9e58dee2b525d4451531e397915af6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9aa-aed0-408e-9517-4aa4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:46.000Z",
            "modified": "2015-09-30T09:21:46.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9e70cd48c00e6fb46699d71fae93068']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ab-37f8-4d26-abdd-49b1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:47.000Z",
            "modified": "2015-09-30T09:21:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'f9f5c5d73f04f4ef889448951fe4f988']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ab-8378-41fa-91c0-4f02950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:47.000Z",
            "modified": "2015-09-30T09:21:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa093050c07ff74bd37a0f93c5aa7f2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ab-3c00-45ea-b0c2-446f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:47.000Z",
            "modified": "2015-09-30T09:21:47.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa11bbc910d4d4daeb0706b973180848']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ac-1d24-4e39-81fa-4628950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:48.000Z",
            "modified": "2015-09-30T09:21:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa15ad63877a468dd77e5ee6df3049b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ac-7638-4a07-9445-4041950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:48.000Z",
            "modified": "2015-09-30T09:21:48.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa1794a8cf4344cb52e958d92cdad731']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ad-8dc4-47d2-95c1-4f7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:49.000Z",
            "modified": "2015-09-30T09:21:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa22af060ba54b70e47f8bf8c2756492']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ad-85c8-4710-9814-4752950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:49.000Z",
            "modified": "2015-09-30T09:21:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa40b397a2bcdcf533422805fb2089a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ad-1108-4ecd-8fd1-4afd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:49.000Z",
            "modified": "2015-09-30T09:21:49.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa6b0b9fe0bae61233e6538549320c51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ae-e66c-4445-b591-495f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:50.000Z",
            "modified": "2015-09-30T09:21:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa7e599044c5630d9573c8ce8f0e2dde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ae-f948-47d4-9982-4a09950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:50.000Z",
            "modified": "2015-09-30T09:21:50.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa8361f4552afdd4ea3fef80a54d500b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9af-7eb8-4d97-b92d-4fe9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:51.000Z",
            "modified": "2015-09-30T09:21:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa8db5157be4f80185d579431a130f6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9af-bb50-4f3f-9ea7-41f6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:51.000Z",
            "modified": "2015-09-30T09:21:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa8fca8d9ca5a235e78ac42a8bd4b113']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9af-8114-42f6-8aa5-44a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:51.000Z",
            "modified": "2015-09-30T09:21:51.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fa97b3a37c01cf2563d646a143f730a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b0-7d38-4d7b-856c-4b03950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:52.000Z",
            "modified": "2015-09-30T09:21:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'faad8f834854d93a198d765ebeeb79dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b0-ecf4-4a24-b89d-45fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:52.000Z",
            "modified": "2015-09-30T09:21:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fab52875cecb6490d7f0e7260584ebb5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b0-9e50-45ad-943e-4722950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:52.000Z",
            "modified": "2015-09-30T09:21:52.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fab5d3956efa4a278119250235fa87ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b1-dab0-4c8a-a37d-4fb7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:53.000Z",
            "modified": "2015-09-30T09:21:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fab79ae8887922b8230e94891f910121']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b1-41cc-4092-825e-4109950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:53.000Z",
            "modified": "2015-09-30T09:21:53.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fac018b15927342cdaf20e63c76ca5e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b2-ffb0-4bac-bf19-40ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:54.000Z",
            "modified": "2015-09-30T09:21:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fac626dbec6f27dc6b71c674ea8e905b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b2-92f8-462e-8024-4dfa950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:54.000Z",
            "modified": "2015-09-30T09:21:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'faceb830c417c762688ed88b9ab4a56f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b2-58c0-4f22-a617-4559950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:54.000Z",
            "modified": "2015-09-30T09:21:54.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fad31dada879f764c2855c995fffdc12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b3-b038-4982-b9ab-49bd950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:55.000Z",
            "modified": "2015-09-30T09:21:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fad4d031a2c3d308a006e556d3f9f146']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b3-a840-4399-bc26-4642950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:55.000Z",
            "modified": "2015-09-30T09:21:55.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fadbaf22a193f6d5f2d6e2d0af0cdc2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b4-2b84-4bbe-8e87-46b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:56.000Z",
            "modified": "2015-09-30T09:21:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'faf3713f2b3b5e3ad9361bc2da9ceba6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b4-cc2c-4cef-a5c2-4db7950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:56.000Z",
            "modified": "2015-09-30T09:21:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fafd2e08ef1531022a84ffa586f2ce17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b4-c3ac-4cab-8f11-4018950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:56.000Z",
            "modified": "2015-09-30T09:21:56.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fb121ada9900fded0e7982120fa470b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b5-0590-406c-b5ff-44e5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:57.000Z",
            "modified": "2015-09-30T09:21:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fb14c4422d13c401f09d351d6be17ab8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b5-bc40-41fc-a4e0-4b7c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:57.000Z",
            "modified": "2015-09-30T09:21:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fb1d0a7a229f07fbce6b738f8ac29ccd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b5-3728-4989-bdcf-43d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:57.000Z",
            "modified": "2015-09-30T09:21:57.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fb342c9c1a412e12b962490d9a31cca7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b6-05e8-461c-9ca1-4644950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:58.000Z",
            "modified": "2015-09-30T09:21:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fb5fbf283deeeb517b1d84e595829abe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b6-dabc-4635-81b2-4322950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:58.000Z",
            "modified": "2015-09-30T09:21:58.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fb7909e1a7a6d1aa25f48d119e94a821']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b7-de18-4f5d-90de-4f94950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:59.000Z",
            "modified": "2015-09-30T09:21:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fb7c6912cdd922910247b67e8d6101e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b7-47b4-448d-9744-407d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:59.000Z",
            "modified": "2015-09-30T09:21:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fb7ca0d76f00faa65c785d4d2815a97c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b7-e108-4a0d-be7e-4fc2950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:21:59.000Z",
            "modified": "2015-09-30T09:21:59.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fb9a407ac93bf76392738ac183b5b300']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:21:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b8-d9c4-4111-9a08-4754950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:00.000Z",
            "modified": "2015-09-30T09:22:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fbb6da28b4fb5ea77328f9b0e2def105']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b8-b140-40a4-994b-4337950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:00.000Z",
            "modified": "2015-09-30T09:22:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fbbecc691f35b7ef9ebcf4bf0a53f473']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b8-2284-48be-9014-48ba950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:00.000Z",
            "modified": "2015-09-30T09:22:00.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fbc79af0f2c8a5c89fe8545019324100']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b9-853c-47f2-9ca4-4273950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:01.000Z",
            "modified": "2015-09-30T09:22:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fbcbec6073198c540b8be66b74c2008b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9b9-4d64-4e5c-b0a7-45e9950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:01.000Z",
            "modified": "2015-09-30T09:22:01.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fbd47d9de4d0ff977a8b885b71c0c58b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ba-47d4-4ab8-be38-4bf4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:02.000Z",
            "modified": "2015-09-30T09:22:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fbd56051c742b08ffcf37438c2e8f134']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ba-d0d0-460a-9bda-4a90950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:02.000Z",
            "modified": "2015-09-30T09:22:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fbd673d823d3c66449d436e1f4b95945']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ba-071c-4d06-9a62-4e19950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:02.000Z",
            "modified": "2015-09-30T09:22:02.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fbee04f3531176c827e64f323e85d3ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bb-2400-44c1-a6b5-422e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:03.000Z",
            "modified": "2015-09-30T09:22:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fbff0d051ad84b5889d2c0c36f819c30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bb-d884-477f-aef4-41d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:03.000Z",
            "modified": "2015-09-30T09:22:03.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc0b237c9e777c5a116160b56a60cfa1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bc-2a50-45fa-b9ad-48a8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:04.000Z",
            "modified": "2015-09-30T09:22:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc0eebf0a7f709739614fda4e900f82d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bc-1398-4fde-957b-4b99950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:04.000Z",
            "modified": "2015-09-30T09:22:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc24c595c4d1bb6eb3d4b61634f77e5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bc-adbc-43f6-bc6a-470b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:04.000Z",
            "modified": "2015-09-30T09:22:04.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc26d6cd60f08563b4a49d634fc44abd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bd-3aa0-46c0-9ad4-4459950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:05.000Z",
            "modified": "2015-09-30T09:22:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc2a3b3cc182eb6c65496d4c2978380a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bd-0a8c-4982-940b-474a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:05.000Z",
            "modified": "2015-09-30T09:22:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc40706db035332df5d7ca9e97e7eaef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bd-53e4-4a9c-a99a-4687950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:05.000Z",
            "modified": "2015-09-30T09:22:05.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc4738a809a3a1036c5a158d53f912c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9be-4d54-42ac-bf61-4eed950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:06.000Z",
            "modified": "2015-09-30T09:22:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc4a80acc14da6104b31dce6620b8db9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9be-68d8-435f-85fc-46d3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:06.000Z",
            "modified": "2015-09-30T09:22:06.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc4ab54aa8cf8ca8e87ced3d1957a021']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bf-528c-46eb-b2af-4ee3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:07.000Z",
            "modified": "2015-09-30T09:22:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc59b1f71f5e7c6d7c4ab5d7061766e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bf-2f00-4773-b370-49b4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:07.000Z",
            "modified": "2015-09-30T09:22:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc5d9eca7889e7380521156fc517c44d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9bf-843c-44e3-83ee-4629950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:07.000Z",
            "modified": "2015-09-30T09:22:07.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc694eff0b3e2f9635b1583d62cff56b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c0-667c-44f6-8087-439e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:08.000Z",
            "modified": "2015-09-30T09:22:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc6f57f51ed0646b8c9b3af5546299f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c0-4d64-41e1-8aad-4712950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:08.000Z",
            "modified": "2015-09-30T09:22:08.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc81db0cc4896cec19d869228a921172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c1-8130-4e15-af3e-4921950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:09.000Z",
            "modified": "2015-09-30T09:22:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc85faae0c8315cc7c1579f35e45baca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c1-8044-4236-8a17-4e77950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:09.000Z",
            "modified": "2015-09-30T09:22:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fc9ff989df9b50bd51346ed7fa5e9f29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c1-af68-4877-8710-4b18950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:09.000Z",
            "modified": "2015-09-30T09:22:09.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fca51673fc86fb7c759d364967a0467e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c2-ffc0-499c-ba2e-433e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:10.000Z",
            "modified": "2015-09-30T09:22:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fcac718fcdb49d40bdb85767ae4c533c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c2-ee54-457c-abe9-4e47950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:10.000Z",
            "modified": "2015-09-30T09:22:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fcc01b6d615c2888aa70c98e3c5792bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c2-2cb0-4519-b026-40cb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:10.000Z",
            "modified": "2015-09-30T09:22:10.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fcc9448b969cb4732a15f3d7d0683135']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c3-0d68-4e2c-ace8-4fdc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:11.000Z",
            "modified": "2015-09-30T09:22:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fccd4bed0737c61644eb1404a7ef462c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c3-efb0-4917-b5d1-48c5950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:11.000Z",
            "modified": "2015-09-30T09:22:11.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fcdbedcd38e1738bc2d11a8bd2c9277d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c4-c194-4c18-9615-463b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:12.000Z",
            "modified": "2015-09-30T09:22:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fce4b320e9a33ebd08edba53a7c53933']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c4-3b54-480c-ab68-4776950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:12.000Z",
            "modified": "2015-09-30T09:22:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fce6f388134d5ea0b4e32d2d8962a752']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c4-48c4-437e-820d-4097950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:12.000Z",
            "modified": "2015-09-30T09:22:12.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fced21bb330926f582e5057ae6ccbd6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c5-4c8c-4a2f-bab5-4255950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:13.000Z",
            "modified": "2015-09-30T09:22:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd0977132de9d164b5c340c0680c579e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c5-02e8-4f18-8a52-4ef6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:13.000Z",
            "modified": "2015-09-30T09:22:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd3ad76f0b7e5fe94482dcb05766650a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c5-78a0-47ff-8937-4a23950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:13.000Z",
            "modified": "2015-09-30T09:22:13.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd3f38f8fe713c3fdc47b8e9119f3f2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c6-ef48-4ac9-b8e7-4d49950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:14.000Z",
            "modified": "2015-09-30T09:22:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd41abc3acd3a45ea44292aa4a794a4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c6-b2a8-4b8d-9764-4cbf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:14.000Z",
            "modified": "2015-09-30T09:22:14.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd48ec16e4765f49bd786afddbc6ccb2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c7-85c8-43fa-8d86-4fc6950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:15.000Z",
            "modified": "2015-09-30T09:22:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd50a292881921c662c8beed60e1ddd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c7-3bb0-44c0-9d8a-4050950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:15.000Z",
            "modified": "2015-09-30T09:22:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd6f12a84d35331b6156a9911d7d85bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c7-4d60-49e9-944a-4f2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:15.000Z",
            "modified": "2015-09-30T09:22:15.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd70922ef7e69f73e28e17dbe981a5b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c8-6e70-496e-ab35-40d8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:16.000Z",
            "modified": "2015-09-30T09:22:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd71606900bbfea9f515d01fb99a376b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c8-5660-42ae-9ba7-4eb0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:16.000Z",
            "modified": "2015-09-30T09:22:16.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd75952659afbb74661f081cfe0d82c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c9-2580-4069-afa9-4bcf950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:17.000Z",
            "modified": "2015-09-30T09:22:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd75d550307af5591435fa5c4b7e2273']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c9-2660-4143-ad46-4836950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:17.000Z",
            "modified": "2015-09-30T09:22:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd833b9742a669eade517acb12e9c4fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9c9-0e48-4b74-a021-4cad950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:17.000Z",
            "modified": "2015-09-30T09:22:17.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd83db89a47f6c013cf07612bae8c410']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ca-72c4-4295-aea3-4d6f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:18.000Z",
            "modified": "2015-09-30T09:22:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd8a016dacd2e92db5bef52e9de7a47c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ca-8794-4834-aa5d-48c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:18.000Z",
            "modified": "2015-09-30T09:22:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fd972a539ab6800a4ebdf032e78a696b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ca-a92c-4202-a0ee-4632950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:18.000Z",
            "modified": "2015-09-30T09:22:18.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fdc78848fa63ef78a57455aea0da2b36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cb-8968-4f10-9e3d-4889950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:19.000Z",
            "modified": "2015-09-30T09:22:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fde12b9ec01ea6a7f0ccbfeb6ab5e613']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cb-ff50-47b6-ab0f-4336950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:19.000Z",
            "modified": "2015-09-30T09:22:19.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fde719e8732ba17cc7e3a2ac79444ee9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cc-868c-421c-bac6-4701950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:20.000Z",
            "modified": "2015-09-30T09:22:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fdec5c68eefa8a9e10a900582da82df1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cc-fb68-4875-a7e8-4a25950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:20.000Z",
            "modified": "2015-09-30T09:22:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fdfab84e9df8d19af920817262ea552f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cc-2108-47d0-9eab-4ce4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:20.000Z",
            "modified": "2015-09-30T09:22:20.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fdfccfbde4b54b233bdce1828a661b42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cd-a9dc-4bd7-8df8-4b33950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:21.000Z",
            "modified": "2015-09-30T09:22:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe04f99509a913658f0b1f14ea286ea6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cd-9620-4535-b2f0-458f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:21.000Z",
            "modified": "2015-09-30T09:22:21.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe118295ea35a99ce621dabf9ea859d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ce-c54c-4cb6-9a1d-40a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:22.000Z",
            "modified": "2015-09-30T09:22:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe121af43c7ec8f6015cb313bf9c3e47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ce-f0a0-4490-aa12-41c1950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:22.000Z",
            "modified": "2015-09-30T09:22:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe1e9db2578820a03c87df5ba2e34bea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9ce-5f48-4c29-b547-40fc950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:22.000Z",
            "modified": "2015-09-30T09:22:22.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe2c5c253eb36b32df1e6c2b5f31dd2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cf-a350-4ac2-b959-4366950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:23.000Z",
            "modified": "2015-09-30T09:22:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe41eee12b4e22ea54dca8ffeb0411c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cf-03f0-4b8d-aeec-4699950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:23.000Z",
            "modified": "2015-09-30T09:22:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe56bdc90c5fe711f342362baa5e55bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9cf-ea38-4fe9-981b-4b84950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:23.000Z",
            "modified": "2015-09-30T09:22:23.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe59f2861e423afe95fdb9fb2557854a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d0-b750-4a8b-a0bc-476a950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:24.000Z",
            "modified": "2015-09-30T09:22:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe6aa16af763fdb1d087f1f2a31a2088']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d0-ec84-487a-8ae0-4d2f950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:24.000Z",
            "modified": "2015-09-30T09:22:24.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe721b97ad60e2f2bfee414c9e4e8109']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d1-aadc-41b9-a700-4af3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:25.000Z",
            "modified": "2015-09-30T09:22:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe81599efe353ebf71df041ab5491491']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d1-1878-42b6-849e-44af950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:25.000Z",
            "modified": "2015-09-30T09:22:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe8a0bb337396b48c093c62a5dd0b337']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d1-dc64-42f0-80cc-41a0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:25.000Z",
            "modified": "2015-09-30T09:22:25.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe8bd3937919b1f3497484f4fd5ce2b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d2-f0a4-466f-9a3c-4f93950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:26.000Z",
            "modified": "2015-09-30T09:22:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe991b50db694c5cf0d8e3bacbede24f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d2-5370-4c85-9cf2-464c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:26.000Z",
            "modified": "2015-09-30T09:22:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fe9fdba44ea3a6bc29d8cee17410a124']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d2-d250-4bfe-b5b8-447c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:26.000Z",
            "modified": "2015-09-30T09:22:26.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fea691a4e244515675d6eafcf3789600']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d3-6ef0-4836-bf43-43a4950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:27.000Z",
            "modified": "2015-09-30T09:22:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fec6c7c5c27b52813e5226d05d8ee4c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d3-a2e8-44e7-9f26-4a4c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:27.000Z",
            "modified": "2015-09-30T09:22:27.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fec78fd73392eb1a97e0b03bd6456cda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d4-898c-4a99-a3bf-4703950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:28.000Z",
            "modified": "2015-09-30T09:22:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fec9a09d9bd8d4b8e4d09f5365e7145f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d4-6e9c-4866-abae-4c2b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:28.000Z",
            "modified": "2015-09-30T09:22:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'feca66aab458ee896540552297bcc89e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d4-3db4-4c84-81ed-4327950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:28.000Z",
            "modified": "2015-09-30T09:22:28.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fed62009b28ee275458b415a8408fd9e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d5-bc90-4a7b-8e94-4391950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:29.000Z",
            "modified": "2015-09-30T09:22:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fed755e66a7212cbe834eed394b0caf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d5-d340-498b-b817-452e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:29.000Z",
            "modified": "2015-09-30T09:22:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fedc520c66e792a8ae0d33ce2c9c17f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d5-2a88-4a5d-89d3-4d2e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:29.000Z",
            "modified": "2015-09-30T09:22:29.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff04631adecd653630b867734b3fe3cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d6-4ed8-47c6-9862-4cce950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:30.000Z",
            "modified": "2015-09-30T09:22:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff075c22241a60924fbc82bbff614efc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d6-97a4-4899-88b2-4734950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:30.000Z",
            "modified": "2015-09-30T09:22:30.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff1b06265c2014f14c2380150a5a0520']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d7-6ddc-4e3f-a6b5-4682950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:31.000Z",
            "modified": "2015-09-30T09:22:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff2af746d82d5a7855c71872fd18602e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d7-a7b0-406b-a0eb-4e40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:31.000Z",
            "modified": "2015-09-30T09:22:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff2e805f3a2e7696109df5b2cf87fb23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d7-26d0-4086-beec-4e4d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:31.000Z",
            "modified": "2015-09-30T09:22:31.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff4069b8e757c603784a96b79da86a5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d8-d540-4315-9e0f-4785950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:32.000Z",
            "modified": "2015-09-30T09:22:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff40d2ce516639a07453107079507d5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d8-0888-47c3-85fa-472d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:32.000Z",
            "modified": "2015-09-30T09:22:32.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff41cbe839b7c673068f1a570dddc9e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d9-574c-4506-a3fc-4b8c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:33.000Z",
            "modified": "2015-09-30T09:22:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff436be2c477cca1a97cb1dfb1fe7d66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d9-91ec-4333-82c1-4e32950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:33.000Z",
            "modified": "2015-09-30T09:22:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff5d595ea0893651e92cc4ae0cae0373']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9d9-5598-4c08-8351-4091950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:33.000Z",
            "modified": "2015-09-30T09:22:33.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff6150d2e493a2e06c7fc521e8dd7643']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9da-01c0-4fcf-a966-4067950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:34.000Z",
            "modified": "2015-09-30T09:22:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff6318a602ae080fe7b52dc1e455517c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9da-6ffc-4e08-b7a7-48f0950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:34.000Z",
            "modified": "2015-09-30T09:22:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff65b9be05f887e99d886ca534af42fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9da-088c-4229-b49c-4b8b950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:34.000Z",
            "modified": "2015-09-30T09:22:34.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff65be7f061f13307306723a7c0b1da4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9db-b57c-4727-bdac-4a39950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:35.000Z",
            "modified": "2015-09-30T09:22:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff71143c5fcf41f9526a41986c60c85d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9db-76e4-4234-a440-4231950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:35.000Z",
            "modified": "2015-09-30T09:22:35.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff772314faac172703f6244fe2be112f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9dc-66fc-48fe-8c2c-4078950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:36.000Z",
            "modified": "2015-09-30T09:22:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff821c3c5fe8c1296e10aeb6b92ecd02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9dc-f698-4b31-8664-4d35950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:36.000Z",
            "modified": "2015-09-30T09:22:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff86ac6689c701a74874b28868664658']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9dc-0df4-4136-8745-431e950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:36.000Z",
            "modified": "2015-09-30T09:22:36.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff8d0c988649fc3501899bd65bc1d4af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9dd-a434-4760-8872-4c40950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:37.000Z",
            "modified": "2015-09-30T09:22:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff93849a2ec2af8f6719ef7b8eeb9b11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9dd-75c4-44ae-9c01-4ffb950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:37.000Z",
            "modified": "2015-09-30T09:22:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff95c918d258ba942532ac3346402220']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9dd-4f28-4a88-a2a0-4c2c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:37.000Z",
            "modified": "2015-09-30T09:22:37.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ff9d6b9222eb1787aba42a356a71499f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9de-1034-4804-9dc1-40c3950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:38.000Z",
            "modified": "2015-09-30T09:22:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ffb894500a912f75c270c44bca48d2f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9de-5cdc-4c43-b09a-47e8950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:38.000Z",
            "modified": "2015-09-30T09:22:38.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ffbb576728ee551fcf2ba6729f97d1f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9df-2a0c-4ec4-9676-4d08950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:39.000Z",
            "modified": "2015-09-30T09:22:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ffc5ce7627333c505488250c12228583']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9df-cd58-4882-afda-4f82950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:39.000Z",
            "modified": "2015-09-30T09:22:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ffc890108759b1f6262f633d7d0d8a96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9df-5708-40b5-83d1-4483950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:39.000Z",
            "modified": "2015-09-30T09:22:39.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ffe2a176e83b308c323778f26f348bdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9e0-c0a0-4733-ad91-436d950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:40.000Z",
            "modified": "2015-09-30T09:22:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ffe5423e13d7b9083baa5d552b91f7af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9e0-3b6c-44d1-bf71-475c950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:40.000Z",
            "modified": "2015-09-30T09:22:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'ffe906e4f5b27cbc327c3ce9633e0a44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--560ba9e0-750c-48f7-bf91-4712950d210b",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2015-09-30T09:22:40.000Z",
            "modified": "2015-09-30T09:22:40.000Z",
            "description": "AppendixD_Extracted DC Configuration.csv",
            "pattern": "[file:hashes.MD5 = 'fffe1e7b667a9ae17a22a0a9fe6f8f70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2015-09-30T09:22:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"md5\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67517-5b58-45b2-84be-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:19.000Z",
            "modified": "2016-02-19T01:51:19.000Z",
            "description": "Automatically added (via 075a7e2d72e52561158c74eeab1b09a9)",
            "pattern": "[file:hashes.SHA1 = '3e18d7e8c40afac520963fef70134cfce27b96c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6751c-13d8-4453-ab67-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:24.000Z",
            "modified": "2016-02-19T01:51:24.000Z",
            "description": "Automatically added (via 075d362259fd317b25a72c59634fba53)",
            "pattern": "[file:hashes.SHA1 = 'c12847307d295aaa980409eb2ec19527c73c052e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67520-2608-4f95-b489-42ab950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:28.000Z",
            "modified": "2016-02-19T01:51:28.000Z",
            "description": "Automatically added (via 076b3088f53111156b25f6dc5a8d1461)",
            "pattern": "[file:hashes.SHA1 = '22e5fe9302d453edae7f6a9440b8f4f0728de918']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67524-dc88-4077-97ca-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:32.000Z",
            "modified": "2016-02-19T01:51:32.000Z",
            "description": "Automatically added (via 079dbe4f045665018e4727980c235660)",
            "pattern": "[file:hashes.SHA1 = 'ac49ee2e57555430268f4012f6afceea99903814']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67528-76f4-41e4-9c5c-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:36.000Z",
            "modified": "2016-02-19T01:51:36.000Z",
            "description": "Automatically added (via 07b31ab46f825aec601167001a05598e)",
            "pattern": "[file:hashes.SHA1 = '5c0ba1b0b31faac105bec60eedf7d4001c9ee6cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6752c-8ab0-46ec-b8ae-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:40.000Z",
            "modified": "2016-02-19T01:51:40.000Z",
            "description": "Automatically added (via 07fa004707e9f18e5bbae9f276c298e3)",
            "pattern": "[file:hashes.SHA1 = 'd3ffd275c4e4c5d4adec904bbc7f03797cdc8815']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67530-86f0-4f2c-900d-4647950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:44.000Z",
            "modified": "2016-02-19T01:51:44.000Z",
            "description": "Automatically added (via 08332c4fc47996c2ba82ea4ee724c2ae)",
            "pattern": "[file:hashes.SHA1 = 'cd0c209172e24ff0892ff811d8b092a477304e84']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67535-da7c-401e-ab8d-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:49.000Z",
            "modified": "2016-02-19T01:51:49.000Z",
            "description": "Automatically added (via 088af9b9ea658f266dba1256a9e94cde)",
            "pattern": "[file:hashes.SHA1 = '05d42c979d96f87081dcbdfc1fc07eb61f1fae62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67539-78ac-418f-8593-480b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:53.000Z",
            "modified": "2016-02-19T01:51:53.000Z",
            "description": "Automatically added (via 089491a43d87c87b89749c653cf7cce7)",
            "pattern": "[file:hashes.SHA1 = '0716fe10be59c3b7a441d80362034bdd9189f80a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6753d-56f0-48cd-8d26-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:57.000Z",
            "modified": "2016-02-19T01:51:57.000Z",
            "description": "Automatically added (via 0898b1684ba866e32e240f2973c64e8b)",
            "pattern": "[file:hashes.SHA1 = '0a091ac07a4053875694b5251edb5f2642a3e087']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67541-4378-4475-8d9d-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:01.000Z",
            "modified": "2016-02-19T01:52:01.000Z",
            "description": "Automatically added (via 08b87ee9497fe0b3313e339b8fac4aaa)",
            "pattern": "[file:hashes.SHA1 = '9b2c65c82569c5d981aa159f902c051abe9a1311']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67545-6e20-40f3-84b0-40a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:05.000Z",
            "modified": "2016-02-19T01:52:05.000Z",
            "description": "Automatically added (via 08d1647af46fbe1c8dfb68c3eeabeac6)",
            "pattern": "[file:hashes.SHA1 = '0d07ac0f0b1c7ca4b4074e034036b589fd66b394']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67549-64f0-453d-9be0-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:09.000Z",
            "modified": "2016-02-19T01:52:09.000Z",
            "description": "Automatically added (via 08d41f5a9633d3cd4f8734cdd286b033)",
            "pattern": "[file:hashes.SHA1 = '72d0514afc25070a23fcd1468d064f621f8ab1b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6754e-3ca8-4829-8af2-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:14.000Z",
            "modified": "2016-02-19T01:52:14.000Z",
            "description": "Automatically added (via 08e98238a42c604592167b55c3f3751c)",
            "pattern": "[file:hashes.SHA1 = 'a94be87fc3134a14425ad2f160fc91720609d88b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67552-7e34-460b-9720-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:18.000Z",
            "modified": "2016-02-19T01:52:18.000Z",
            "description": "Automatically added (via 091f35437ed4b846a099e931afea880a)",
            "pattern": "[file:hashes.SHA1 = '58b44cfb35a0e0cd1edfec3849d5b2d3bee1bdc7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67556-cc90-407a-85c2-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:22.000Z",
            "modified": "2016-02-19T01:52:22.000Z",
            "description": "Automatically added (via 096e66accbbbcd0cffd581204f541cf1)",
            "pattern": "[file:hashes.SHA1 = '88a1b1dc4868b45ec4439947540168c6eef449f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6755b-8608-4233-b7b4-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:27.000Z",
            "modified": "2016-02-19T01:52:27.000Z",
            "description": "Automatically added (via 097c12b03409023d672705d6a5d8bd63)",
            "pattern": "[file:hashes.SHA1 = '02c2f8522457809fdf03c8cf2afd49f8af815dcb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6755f-2408-4482-9b22-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:31.000Z",
            "modified": "2016-02-19T01:52:31.000Z",
            "description": "Automatically added (via 09a6005213762e13a857b5c4ed50559d)",
            "pattern": "[file:hashes.SHA1 = '3c663eca27350a344a966ae7907ffa8ad6298ff2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67563-ee90-4bb9-8260-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:35.000Z",
            "modified": "2016-02-19T01:52:35.000Z",
            "description": "Automatically added (via 09a8ddf3568c89e2ae7ee4c6d4ce595c)",
            "pattern": "[file:hashes.SHA1 = '9e561ac111583258ebf4c7b140de54abf6ef75b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67567-cf7c-4cdb-b249-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:39.000Z",
            "modified": "2016-02-19T01:52:39.000Z",
            "description": "Automatically added (via 09a904318fd287857df9652b4b07cc19)",
            "pattern": "[file:hashes.SHA1 = '0d60272da7650543194d595e7b1f135ad07201f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6756b-442c-4a25-a523-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:43.000Z",
            "modified": "2016-02-19T01:52:43.000Z",
            "description": "Automatically added (via 09bccf1e225fb69a39c05fe79421fe0b)",
            "pattern": "[file:hashes.SHA1 = '9e712b92435289a72ee6a7e4374781af1c630c0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67570-94b8-459c-9078-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:48.000Z",
            "modified": "2016-02-19T01:52:48.000Z",
            "description": "Automatically added (via 0a4033da2a6554dc4144d6adfaec3f6e)",
            "pattern": "[file:hashes.SHA1 = '19f173c37b67e6eca69d4daecaaf3f3100a3d939']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67574-1ac8-4101-8496-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:52.000Z",
            "modified": "2016-02-19T01:52:52.000Z",
            "description": "Automatically added (via 0ac52a88b85b5543e0bb4e444780ce5d)",
            "pattern": "[file:hashes.SHA1 = 'a14808de5b319f1d5243086e2c5c17c77e615a9c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67578-e214-45e1-b51e-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:56.000Z",
            "modified": "2016-02-19T01:52:56.000Z",
            "description": "Automatically added (via 0adeefaa5daf10b1cd1aa3a19d239a02)",
            "pattern": "[file:hashes.SHA1 = '6e4405e9a9a330f9b1cc343f4b62d1a339864166']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6757d-a424-4737-b457-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:01.000Z",
            "modified": "2016-02-19T01:53:01.000Z",
            "description": "Automatically added (via 0aeff2ca05c8b947fc81c843c0fae3fb)",
            "pattern": "[file:hashes.SHA1 = '8f1da7df4d5f39221d08807d2a9c281a6388023d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67581-036c-487c-8fa7-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:05.000Z",
            "modified": "2016-02-19T01:53:05.000Z",
            "description": "Automatically added (via 0af151515922e1198a4574df17c8789a)",
            "pattern": "[file:hashes.SHA1 = 'b460c78f1f8d428bdde821267c38441898988ebf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67585-fa20-4fad-b7da-46ca950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:09.000Z",
            "modified": "2016-02-19T01:53:09.000Z",
            "description": "Automatically added (via 0b12b8349724ce1bc92f6cde61b2383c)",
            "pattern": "[file:hashes.SHA1 = 'ae12075c48838647a30404055bc9be666d6be28f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67589-b604-47f5-88dd-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:13.000Z",
            "modified": "2016-02-19T01:53:13.000Z",
            "description": "Automatically added (via 0b8cff908ccce357ec5489595ef2f234)",
            "pattern": "[file:hashes.SHA1 = '746696aaf9a04af17a8e50cf495e36907ce98b4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6758e-06ec-4917-9fb3-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:18.000Z",
            "modified": "2016-02-19T01:53:18.000Z",
            "description": "Automatically added (via 0bd8cc9706c2ff34ccdce6ff1f4535f9)",
            "pattern": "[file:hashes.SHA1 = '06b05a0b142d9a3cb9042e7e9dcf903581cfc0c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67592-3f60-4220-8858-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:22.000Z",
            "modified": "2016-02-19T01:53:22.000Z",
            "description": "Automatically added (via 0beacb48dc08a7252e40edc898eb1e7f)",
            "pattern": "[file:hashes.SHA1 = 'cfc64f72339f4d527f87cf70e3cc3226748daa9e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67596-81a4-4ac1-b7d0-4fe3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:26.000Z",
            "modified": "2016-02-19T01:53:26.000Z",
            "description": "Automatically added (via 0c1c4a8174b9e21be98bc48f3e25ab7d)",
            "pattern": "[file:hashes.SHA1 = '92bf477e266df78fc95640d7c04ed0f7128b68f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6751a-c864-4311-be1b-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:21.000Z",
            "modified": "2016-02-19T01:51:21.000Z",
            "description": "Automatically added (via 075a7e2d72e52561158c74eeab1b09a9)",
            "pattern": "[file:hashes.SHA256 = 'c2e9733d650e7c79f5d7dee184d1e6d4a061bd5c329f615f6878c64714ca4378']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6751e-fbcc-49b9-ae7a-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:26.000Z",
            "modified": "2016-02-19T01:51:26.000Z",
            "description": "Automatically added (via 075d362259fd317b25a72c59634fba53)",
            "pattern": "[file:hashes.SHA256 = 'b87bce6fd6752b8620e26d6d30d70d2c42c1d6eb193f59e117c43c2b5b3e532c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67522-50e4-484a-9fcd-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:30.000Z",
            "modified": "2016-02-19T01:51:30.000Z",
            "description": "Automatically added (via 076b3088f53111156b25f6dc5a8d1461)",
            "pattern": "[file:hashes.SHA256 = '6018143f7c8a53acbe93537570a2c1af138a15e2a80d056c38c556e75d9ac532']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67526-8528-48bf-8801-4163950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:34.000Z",
            "modified": "2016-02-19T01:51:34.000Z",
            "description": "Automatically added (via 079dbe4f045665018e4727980c235660)",
            "pattern": "[file:hashes.SHA256 = 'c2c3baf8a20a062baac3fe50277b475a57ef2756af5f5e2149238b75b7ce4c1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6752a-c5d8-45f2-ac42-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:38.000Z",
            "modified": "2016-02-19T01:51:38.000Z",
            "description": "Automatically added (via 07b31ab46f825aec601167001a05598e)",
            "pattern": "[file:hashes.SHA256 = '0595efc19b5a7197838463cb35d31e888d0bb82b8bc515d914ae2e122f69de78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6752e-9dc4-4bfa-ad8a-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:42.000Z",
            "modified": "2016-02-19T01:51:42.000Z",
            "description": "Automatically added (via 07fa004707e9f18e5bbae9f276c298e3)",
            "pattern": "[file:hashes.SHA256 = '52566b6a9864adef907a6614dc255b485abbdbb143cde443e07d0d1d0f8fa760']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67533-5c38-4ce3-ae8f-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:47.000Z",
            "modified": "2016-02-19T01:51:47.000Z",
            "description": "Automatically added (via 08332c4fc47996c2ba82ea4ee724c2ae)",
            "pattern": "[file:hashes.SHA256 = 'ab6881d812563356f063e635cd1d3d289dc1cc6c8de8f0a00c958e9cb47bfaea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67537-d8dc-43a6-be6e-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:51.000Z",
            "modified": "2016-02-19T01:51:51.000Z",
            "description": "Automatically added (via 088af9b9ea658f266dba1256a9e94cde)",
            "pattern": "[file:hashes.SHA256 = '9a503f4347cd532dea562c11859a35250641283db8b8727c932cfd6bc55fdc10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6753b-7600-4594-9477-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:55.000Z",
            "modified": "2016-02-19T01:51:55.000Z",
            "description": "Automatically added (via 089491a43d87c87b89749c653cf7cce7)",
            "pattern": "[file:hashes.SHA256 = '213781957d0a525a2e574ed3e6c8e5a51c4379b5508d94253f5ab3689ac87f8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6753f-65dc-489e-a977-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:51:59.000Z",
            "modified": "2016-02-19T01:51:59.000Z",
            "description": "Automatically added (via 0898b1684ba866e32e240f2973c64e8b)",
            "pattern": "[file:hashes.SHA256 = '32f49c4f91b6abc967985bedbdd94d4a6338c9ab3e06151f30b438f36a03428d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:51:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67543-afe8-46f5-9de0-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:03.000Z",
            "modified": "2016-02-19T01:52:03.000Z",
            "description": "Automatically added (via 08b87ee9497fe0b3313e339b8fac4aaa)",
            "pattern": "[file:hashes.SHA256 = 'bf9afbc8eed55ab2c18a5b513fb1d0227cacb519fbfbcdc4b54c1537194a1737']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67547-533c-4316-8d5e-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:07.000Z",
            "modified": "2016-02-19T01:52:07.000Z",
            "description": "Automatically added (via 08d1647af46fbe1c8dfb68c3eeabeac6)",
            "pattern": "[file:hashes.SHA256 = '226108020cd87662114e8ffa6554bb75fb41343bf143a9e1cd8357fc0992380f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6754c-4eac-4ee2-bd93-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:12.000Z",
            "modified": "2016-02-19T01:52:12.000Z",
            "description": "Automatically added (via 08d41f5a9633d3cd4f8734cdd286b033)",
            "pattern": "[file:hashes.SHA256 = 'e9d16116cac209b66ab9ed312ae140b8d2e7157a69bf8fa61ecdbab8e38619e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67550-5344-4dd2-8b51-4251950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:16.000Z",
            "modified": "2016-02-19T01:52:16.000Z",
            "description": "Automatically added (via 08e98238a42c604592167b55c3f3751c)",
            "pattern": "[file:hashes.SHA256 = '53d210e4071f82b4b738bc7b2b1aae5831a37ae4372dfca3f09336838f50fb94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67554-cdac-4cb0-9a92-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:20.000Z",
            "modified": "2016-02-19T01:52:20.000Z",
            "description": "Automatically added (via 091f35437ed4b846a099e931afea880a)",
            "pattern": "[file:hashes.SHA256 = 'fcffa265533c49954dcb479561761ef7dc2edb1e6e478cd749ea8388a7779263']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67558-f350-424c-8fd1-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:24.000Z",
            "modified": "2016-02-19T01:52:24.000Z",
            "description": "Automatically added (via 096e66accbbbcd0cffd581204f541cf1)",
            "pattern": "[file:hashes.SHA256 = 'ed191a5e0cf7c03a3d53457da251c8d5bc579cf0c4a2c0a62d143089f96df31e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6755d-c5f4-4e2d-ac4d-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:29.000Z",
            "modified": "2016-02-19T01:52:29.000Z",
            "description": "Automatically added (via 097c12b03409023d672705d6a5d8bd63)",
            "pattern": "[file:hashes.SHA256 = 'f97176381b4aef724d12bd349ac82381ccd59f7c1e76ec4410aca7d51fe46e7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67561-e0bc-4c47-bf66-4740950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:33.000Z",
            "modified": "2016-02-19T01:52:33.000Z",
            "description": "Automatically added (via 09a6005213762e13a857b5c4ed50559d)",
            "pattern": "[file:hashes.SHA256 = '30284023322f722cf8222f48a1f94703927a8d82ce7fbf52c043676da61e47f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67565-3658-4337-8902-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:37.000Z",
            "modified": "2016-02-19T01:52:37.000Z",
            "description": "Automatically added (via 09a8ddf3568c89e2ae7ee4c6d4ce595c)",
            "pattern": "[file:hashes.SHA256 = '9ef37dcc85f1b569ce8af07506c6aade039aeca89e0c52292fce5dc7c24c9f48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67569-079c-4ba6-a867-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:41.000Z",
            "modified": "2016-02-19T01:52:41.000Z",
            "description": "Automatically added (via 09a904318fd287857df9652b4b07cc19)",
            "pattern": "[file:hashes.SHA256 = '84b28f957ccbca538e984de22b810cfc3b123833df0fff7de30ddbefdb62c889']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6756e-5504-45a2-b02e-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:46.000Z",
            "modified": "2016-02-19T01:52:46.000Z",
            "description": "Automatically added (via 09bccf1e225fb69a39c05fe79421fe0b)",
            "pattern": "[file:hashes.SHA256 = 'dd3952d72c80f81b04d66c279200d798834ed21f2f43bfb5da4b0716b90ba2ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67572-0fb0-4b13-94b5-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:50.000Z",
            "modified": "2016-02-19T01:52:50.000Z",
            "description": "Automatically added (via 0a4033da2a6554dc4144d6adfaec3f6e)",
            "pattern": "[file:hashes.SHA256 = 'ebdaee7f3f0ae7cfea53f85691d7ddeaeebd6e8f50bef612ad649e4506d3ab35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67576-24f4-4057-90e4-4132950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:54.000Z",
            "modified": "2016-02-19T01:52:54.000Z",
            "description": "Automatically added (via 0ac52a88b85b5543e0bb4e444780ce5d)",
            "pattern": "[file:hashes.SHA256 = '2ac74da9dafd07e93b951968441ed263b07af04bf9d86d6620335c27f512075b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6757a-5960-4f4c-893e-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:52:58.000Z",
            "modified": "2016-02-19T01:52:58.000Z",
            "description": "Automatically added (via 0adeefaa5daf10b1cd1aa3a19d239a02)",
            "pattern": "[file:hashes.SHA256 = '586819dd4d17976accef7660394a1ee56d89ed37abd86cbe86e85869f39466c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:52:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6757f-eda8-41f1-8ed9-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:03.000Z",
            "modified": "2016-02-19T01:53:03.000Z",
            "description": "Automatically added (via 0aeff2ca05c8b947fc81c843c0fae3fb)",
            "pattern": "[file:hashes.SHA256 = '63fe66ee5f6a7895b4afecdb48bb4ae739cfb56fa445fc7be0e300c22d1dc727']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67583-bd10-4c9b-bfc9-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:07.000Z",
            "modified": "2016-02-19T01:53:07.000Z",
            "description": "Automatically added (via 0af151515922e1198a4574df17c8789a)",
            "pattern": "[file:hashes.SHA256 = 'b75ce835f00e38b12f8ce3e7a0afc2b371e00807ba9ca8d0dfa239cd08c7e7d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67587-a214-4675-87a5-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:11.000Z",
            "modified": "2016-02-19T01:53:11.000Z",
            "description": "Automatically added (via 0b12b8349724ce1bc92f6cde61b2383c)",
            "pattern": "[file:hashes.SHA256 = 'bca821f0bf18882559de896f6355805c458d2a6c124c1212023ae53cb70947bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6758c-4418-4406-8e91-42ca950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:16.000Z",
            "modified": "2016-02-19T01:53:16.000Z",
            "description": "Automatically added (via 0b8cff908ccce357ec5489595ef2f234)",
            "pattern": "[file:hashes.SHA256 = 'eed5dc357fe54900f9cebb0dafb70242bf7d01487a8a9b55971cf7869fa7f956']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67590-e594-47c7-953b-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:20.000Z",
            "modified": "2016-02-19T01:53:20.000Z",
            "description": "Automatically added (via 0bd8cc9706c2ff34ccdce6ff1f4535f9)",
            "pattern": "[file:hashes.SHA256 = '8d3acac0e02afa5aad444e1fd6d8bf98b9a1f19ba62061add398b5b2d7581163']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67594-8d6c-4a20-9742-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:24.000Z",
            "modified": "2016-02-19T01:53:24.000Z",
            "description": "Automatically added (via 0beacb48dc08a7252e40edc898eb1e7f)",
            "pattern": "[file:hashes.SHA256 = 'b59573d20dff7b3241d76b47aebb98944dc5ba7ddaaa1ea83c6d7b0393980331']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6759b-75d0-4b6a-8a5b-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:31.000Z",
            "modified": "2016-02-19T01:53:31.000Z",
            "description": "Automatically added (via 0c396da286a0c206ec380c76121e3660)",
            "pattern": "[file:hashes.SHA1 = 'bdd624d81278381b3d3013285e7c7165f5680653']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6759f-bc60-4779-9311-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:35.000Z",
            "modified": "2016-02-19T01:53:35.000Z",
            "description": "Automatically added (via 0c82d247353520ca63f1037b4cdb7d78)",
            "pattern": "[file:hashes.SHA1 = 'd733f93297e67815fc604a8fd31c85024f475bcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675a3-2a50-44d2-b902-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:39.000Z",
            "modified": "2016-02-19T01:53:39.000Z",
            "description": "Automatically added (via 0ca9c2e05448a7bd5adbb4ec3972e4d3)",
            "pattern": "[file:hashes.SHA1 = '4b8acdb142685f307c81cdef6c37836c3d3fb9e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675a7-70bc-4950-897c-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:43.000Z",
            "modified": "2016-02-19T01:53:43.000Z",
            "description": "Automatically added (via 0cb6872a5c40fd0b87af80647320347b)",
            "pattern": "[file:hashes.SHA1 = 'e1f14c4943696c52f185473bff80d1c9919edd68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675ac-f248-486e-b941-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:48.000Z",
            "modified": "2016-02-19T01:53:48.000Z",
            "description": "Automatically added (via 0d0eb356b71b94304c03d10630c205dc)",
            "pattern": "[file:hashes.SHA1 = 'a5bf4400b81ac7e822f0738bb9293542f1ec478d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675b0-0400-4441-981d-4ae9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:52.000Z",
            "modified": "2016-02-19T01:53:52.000Z",
            "description": "Automatically added (via 0d16a4aea2f77f8ba5f054012a061586)",
            "pattern": "[file:hashes.SHA1 = '0ca20d762d3572f744dc78cf63b891e2768c1062']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675b4-a210-4f96-a962-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:56.000Z",
            "modified": "2016-02-19T01:53:56.000Z",
            "description": "Automatically added (via 0d1783fbd8a315ff4787dba725b2b39d)",
            "pattern": "[file:hashes.SHA1 = '224ed245e0209814f9c5180956f15dbda3682864']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675b9-4dd8-4532-971a-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:01.000Z",
            "modified": "2016-02-19T01:54:01.000Z",
            "description": "Automatically added (via 0d3f119936a6abc83fd1c76b862e787b)",
            "pattern": "[file:hashes.SHA1 = '72171cc1cbd4e7719f3c2a1a9036494e9e40dd66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675bd-a3e0-48c5-9b21-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:05.000Z",
            "modified": "2016-02-19T01:54:05.000Z",
            "description": "Automatically added (via 0d40b68cea3cacf08e60c4652b7d2821)",
            "pattern": "[file:hashes.SHA1 = 'f2bcbd7eb3bf6e3edb215fe3cc1cfa3f8d452175']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675c1-1ffc-4ae1-b0c4-4b2f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:09.000Z",
            "modified": "2016-02-19T01:54:09.000Z",
            "description": "Automatically added (via 0d815322ad28d2ee4f915a49287c74fa)",
            "pattern": "[file:hashes.SHA1 = '6ed8660815f4f0f5a6c4891cc5954c92b903333b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675c6-2c70-4b46-959e-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:14.000Z",
            "modified": "2016-02-19T01:54:14.000Z",
            "description": "Automatically added (via 0d99515a6f419c1852fa4a74c14845f3)",
            "pattern": "[file:hashes.SHA1 = 'd6529cfb992b3f9ef95b98c5b4fa0d17785399f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675ca-ba64-4020-b7d6-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:18.000Z",
            "modified": "2016-02-19T01:54:18.000Z",
            "description": "Automatically added (via 0db43b9e9855308969be581dcc3a4a69)",
            "pattern": "[file:hashes.SHA1 = 'ce294bf0cb3ffd13536d6fddf6e250f18d05d5e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675ce-b144-48a3-b49d-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:22.000Z",
            "modified": "2016-02-19T01:54:22.000Z",
            "description": "Automatically added (via 0dba8fa4562034e392471f21f80efc69)",
            "pattern": "[file:hashes.SHA1 = '002aaa6b5b5e09e0b801a399dca76f39088076c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675d3-b764-4c8a-88e1-417d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:27.000Z",
            "modified": "2016-02-19T01:54:27.000Z",
            "description": "Automatically added (via 0dc380b108f88b42f99f66e3a2759220)",
            "pattern": "[file:hashes.SHA1 = 'cd0954de4a5399a503b2c3be7538c3d6fa1c14a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675d7-e954-4765-834b-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:31.000Z",
            "modified": "2016-02-19T01:54:31.000Z",
            "description": "Automatically added (via 0dcff6eb43010534311679b9007cd248)",
            "pattern": "[file:hashes.SHA1 = '09a17712fc7886d4f0842ca97ba7898ecd1f08e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675db-a78c-44fe-b234-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:35.000Z",
            "modified": "2016-02-19T01:54:35.000Z",
            "description": "Automatically added (via 0dda0e40b1e5d06aade0d35c72688329)",
            "pattern": "[file:hashes.SHA1 = '2f2775777e906d2facee8c39ba8c8431a2e4bbe1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675e0-bb78-4c09-93c5-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:40.000Z",
            "modified": "2016-02-19T01:54:40.000Z",
            "description": "Automatically added (via 0e72c746b8a3c9695d0b2491a47f731f)",
            "pattern": "[file:hashes.SHA1 = 'ee5ac093831068d96f035709e6eef38358c2242c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675e4-1a44-412b-ba20-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:44.000Z",
            "modified": "2016-02-19T01:54:44.000Z",
            "description": "Automatically added (via 0eb5026819febe6f173d29417939cb81)",
            "pattern": "[file:hashes.SHA1 = '160be12b08fb03f17158eb8e5e53350ffaa7997e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675e9-1bb0-4218-8fe8-409a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:49.000Z",
            "modified": "2016-02-19T01:54:49.000Z",
            "description": "Automatically added (via 0eb5ba21ab800a271a1223d5f83c5ed9)",
            "pattern": "[file:hashes.SHA1 = '873e29b0a8d3e0dda0fb112acf9d0c8105fe37c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675ed-7b14-4e59-9d5c-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:53.000Z",
            "modified": "2016-02-19T01:54:53.000Z",
            "description": "Automatically added (via 0ef9f9ff485585f1e202004ff1e261a2)",
            "pattern": "[file:hashes.SHA1 = 'a42395096f105c832398f3fc1640e42038ebcfd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675f1-6274-48b1-b675-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:57.000Z",
            "modified": "2016-02-19T01:54:57.000Z",
            "description": "Automatically added (via 0f1baee51fdd57fc5a70d4d898b0ae6c)",
            "pattern": "[file:hashes.SHA1 = '40818b512dcef5b9305aa80044b41fb9b02888ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675f6-748c-4de7-95a6-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:02.000Z",
            "modified": "2016-02-19T01:55:02.000Z",
            "description": "Automatically added (via 0f1e4f8c53dce0e96cd233139d8e59fc)",
            "pattern": "[file:hashes.SHA1 = '090238e0221e59d217a455c3ffd8ead4be645eb2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675fa-534c-4910-b53b-4004950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:06.000Z",
            "modified": "2016-02-19T01:55:06.000Z",
            "description": "Automatically added (via 0f8282e015d1e651b6fbc7a7ec89dd31)",
            "pattern": "[file:hashes.SHA1 = '19c4db0b6c247f0c8bd2b64871e306b3739ac201']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675ff-565c-4bbb-895a-402d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:11.000Z",
            "modified": "2016-02-19T01:55:11.000Z",
            "description": "Automatically added (via 0f9dfa91fd461d96f68fdef11f3780f8)",
            "pattern": "[file:hashes.SHA1 = 'bd1ef52e2627a82b31e4779394642c9375285e00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67603-8274-4241-8afa-4f90950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:15.000Z",
            "modified": "2016-02-19T01:55:15.000Z",
            "description": "Automatically added (via 0fbc4232811601e97cca069450ecac19)",
            "pattern": "[file:hashes.SHA1 = 'dd55790d028d9e690a1d215bdc6abc1601f4275d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67608-47a4-4ca5-b39c-422d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:20.000Z",
            "modified": "2016-02-19T01:55:20.000Z",
            "description": "Automatically added (via 0ff725213b4539973e830a8529908c34)",
            "pattern": "[file:hashes.SHA1 = '60ac3d2fa59c02d8693f96061e70de94543f36d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6760c-64a0-482a-8623-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:24.000Z",
            "modified": "2016-02-19T01:55:24.000Z",
            "description": "Automatically added (via 102a92f7eed769627d35dd979ce87f1e)",
            "pattern": "[file:hashes.SHA1 = 'b668d0bac95b139e8d1caaba9a2a74121d232f59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67611-e7ac-47f7-9fb5-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:29.000Z",
            "modified": "2016-02-19T01:55:29.000Z",
            "description": "Automatically added (via 107936c99efebfeab44cc1fec20ca45e)",
            "pattern": "[file:hashes.SHA1 = '3e73f8232522cf7b20d7c446aa4b2c7a37b3f200']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67615-acd0-45ef-91d8-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:33.000Z",
            "modified": "2016-02-19T01:55:33.000Z",
            "description": "Automatically added (via 108f04ea17dbbe0cd8030eed06a3fe3e)",
            "pattern": "[file:hashes.SHA1 = '31581f0adfa0de7060c54b7b88b9b694fcca939a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6761a-dc88-4d58-9cfb-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:38.000Z",
            "modified": "2016-02-19T01:55:38.000Z",
            "description": "Automatically added (via 10c34043cf4dce528d824daab5b022d2)",
            "pattern": "[file:hashes.SHA1 = '6e4fbd825f040c645e7485a72ee723968f2ac843']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67598-2e0c-4859-8e69-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:28.000Z",
            "modified": "2016-02-19T01:53:28.000Z",
            "description": "Automatically added (via 0c1c4a8174b9e21be98bc48f3e25ab7d)",
            "pattern": "[file:hashes.SHA256 = 'c6a826ebda239b0657c2833d037d65ad939c485cfd20a841530fce2db031434f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6759d-6058-451a-8d5d-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:33.000Z",
            "modified": "2016-02-19T01:53:33.000Z",
            "description": "Automatically added (via 0c396da286a0c206ec380c76121e3660)",
            "pattern": "[file:hashes.SHA256 = '9c9eb5c232c491f9b036475d9f5316e2bfe0c3e980d8c99e70af9bf992274827']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675a1-ae88-4c03-9900-4025950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:37.000Z",
            "modified": "2016-02-19T01:53:37.000Z",
            "description": "Automatically added (via 0c82d247353520ca63f1037b4cdb7d78)",
            "pattern": "[file:hashes.SHA256 = '93f4be447ca85dbea9e7d372f673dcd4339b2e3943910482b8c5dc940edfe6ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675a5-5e74-4e1e-bf79-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:41.000Z",
            "modified": "2016-02-19T01:53:41.000Z",
            "description": "Automatically added (via 0ca9c2e05448a7bd5adbb4ec3972e4d3)",
            "pattern": "[file:hashes.SHA256 = 'a72a42bc9df89d7affe293f3afe2b6ac723b348ec79e3553041901c168c54d2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675aa-3440-42bf-ba33-4d82950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:46.000Z",
            "modified": "2016-02-19T01:53:46.000Z",
            "description": "Automatically added (via 0cb6872a5c40fd0b87af80647320347b)",
            "pattern": "[file:hashes.SHA256 = '28eeca9bb2c50212a8c3d363c3b2bd1b892805f5ed94429214e88003794f9279']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675ae-6090-4eb8-aecd-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:50.000Z",
            "modified": "2016-02-19T01:53:50.000Z",
            "description": "Automatically added (via 0d0eb356b71b94304c03d10630c205dc)",
            "pattern": "[file:hashes.SHA256 = '02b5a80484905dfac15938219f3112a25b983eb58aec047283efe3e264de65dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675b2-35ec-4599-b4b8-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:54.000Z",
            "modified": "2016-02-19T01:53:54.000Z",
            "description": "Automatically added (via 0d16a4aea2f77f8ba5f054012a061586)",
            "pattern": "[file:hashes.SHA256 = '6dfa0cc06ca74afe2aa3b775cede96634324664dc49a3bc490fed47c97e4a1aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675b6-4dd8-4836-b275-4068950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:53:58.000Z",
            "modified": "2016-02-19T01:53:58.000Z",
            "description": "Automatically added (via 0d1783fbd8a315ff4787dba725b2b39d)",
            "pattern": "[file:hashes.SHA256 = '65d9970ddf60a52be0bace222a258621614fe0891b3b40c553fe3af61bb84948']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:53:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675bb-20b8-43bb-8f1b-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:03.000Z",
            "modified": "2016-02-19T01:54:03.000Z",
            "description": "Automatically added (via 0d3f119936a6abc83fd1c76b862e787b)",
            "pattern": "[file:hashes.SHA256 = '68ca3fe5f0c2c3e77ba0430e0756a02fdc2ab7718d3b2a27979ae2ca67017f20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675bf-c6a8-4a46-9252-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:07.000Z",
            "modified": "2016-02-19T01:54:07.000Z",
            "description": "Automatically added (via 0d40b68cea3cacf08e60c4652b7d2821)",
            "pattern": "[file:hashes.SHA256 = '19a6e1f2fa2a9b4176110c1ba6729d968e1e9d68ce25421fc0e97008c67a4834']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675c3-b928-4738-990c-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:11.000Z",
            "modified": "2016-02-19T01:54:11.000Z",
            "description": "Automatically added (via 0d815322ad28d2ee4f915a49287c74fa)",
            "pattern": "[file:hashes.SHA256 = '1638e4d6c86eaae2e0a419cc4ff91090b74b609be497bdfe8673035d98c0859b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675c8-5b90-4076-be27-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:16.000Z",
            "modified": "2016-02-19T01:54:16.000Z",
            "description": "Automatically added (via 0d99515a6f419c1852fa4a74c14845f3)",
            "pattern": "[file:hashes.SHA256 = '05c90928c347760360d3c847eff27122ad51774fd15e44c74b5126b8717749b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675cc-6fd4-4bbb-8aab-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:20.000Z",
            "modified": "2016-02-19T01:54:20.000Z",
            "description": "Automatically added (via 0db43b9e9855308969be581dcc3a4a69)",
            "pattern": "[file:hashes.SHA256 = '83ae0b109b726933fbe27207964d673c9f72baf32e194c7f4a0385b0a8ffc09c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675d0-2040-46a6-a7d0-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:24.000Z",
            "modified": "2016-02-19T01:54:24.000Z",
            "description": "Automatically added (via 0dba8fa4562034e392471f21f80efc69)",
            "pattern": "[file:hashes.SHA256 = '557b37af3fb929f2e4bcfeb34d55975aec9d2e710e5cd5cffa5412911286c499']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675d5-4184-4912-b02a-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:29.000Z",
            "modified": "2016-02-19T01:54:29.000Z",
            "description": "Automatically added (via 0dc380b108f88b42f99f66e3a2759220)",
            "pattern": "[file:hashes.SHA256 = '36f56913a3202cd916d003ebcb4dcd1b1d93a7b036ae08d0ca2123df18083191']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675d9-2cf8-407b-9dbe-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:33.000Z",
            "modified": "2016-02-19T01:54:33.000Z",
            "description": "Automatically added (via 0dcff6eb43010534311679b9007cd248)",
            "pattern": "[file:hashes.SHA256 = 'a455b952e859b23e918d3930cb940020b6424003171ae21c2a53225d812e71e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675de-d144-4ca1-b242-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:38.000Z",
            "modified": "2016-02-19T01:54:38.000Z",
            "description": "Automatically added (via 0dda0e40b1e5d06aade0d35c72688329)",
            "pattern": "[file:hashes.SHA256 = 'ebfe20dd2da4ffdb2df17941d29c0269278a3efd9e3c2aef47535fef267d6fde']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675e2-c500-432c-b0ad-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:42.000Z",
            "modified": "2016-02-19T01:54:42.000Z",
            "description": "Automatically added (via 0e72c746b8a3c9695d0b2491a47f731f)",
            "pattern": "[file:hashes.SHA256 = 'e01b184b68b547815c0b71bc317b58470341ae98e62eda870a3b41f96746e761']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675e6-2550-4553-a8b5-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:46.000Z",
            "modified": "2016-02-19T01:54:46.000Z",
            "description": "Automatically added (via 0eb5026819febe6f173d29417939cb81)",
            "pattern": "[file:hashes.SHA256 = '24f200ff258636d77a7fa6cb92a05d45b280951481a27bd25982332de4f1e02d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675eb-33a4-433c-b31c-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:51.000Z",
            "modified": "2016-02-19T01:54:51.000Z",
            "description": "Automatically added (via 0eb5ba21ab800a271a1223d5f83c5ed9)",
            "pattern": "[file:hashes.SHA256 = '491751dfaf2e057ea0c9237c3791c6b137be31e44e53fdb06428a103c72cc187']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675ef-7544-49da-b9d0-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:54:55.000Z",
            "modified": "2016-02-19T01:54:55.000Z",
            "description": "Automatically added (via 0ef9f9ff485585f1e202004ff1e261a2)",
            "pattern": "[file:hashes.SHA256 = '9a15cc815644bb60d15a34d4d2d0dbb09f17253310d311ddf17e15ca36630dcc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:54:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675f4-b0f4-409c-8af5-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:00.000Z",
            "modified": "2016-02-19T01:55:00.000Z",
            "description": "Automatically added (via 0f1baee51fdd57fc5a70d4d898b0ae6c)",
            "pattern": "[file:hashes.SHA256 = 'f71eaf26356cff1df3d197a82aa764dbd5c61cd510b1058e00ae7724bc8fdf70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675f8-c0a4-4b9d-a7b1-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:04.000Z",
            "modified": "2016-02-19T01:55:04.000Z",
            "description": "Automatically added (via 0f1e4f8c53dce0e96cd233139d8e59fc)",
            "pattern": "[file:hashes.SHA256 = '58a52dcbabaddf71cb866b6cf309b810af99d2b89ef6bb6e212d61cd07bdfbcc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c675fc-9b80-4699-ae42-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:08.000Z",
            "modified": "2016-02-19T01:55:08.000Z",
            "description": "Automatically added (via 0f8282e015d1e651b6fbc7a7ec89dd31)",
            "pattern": "[file:hashes.SHA256 = '5fb569caee6cc1825f31290e814080181d013d81351a87bf834a184da42af523']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67601-81b8-447f-bbbd-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:13.000Z",
            "modified": "2016-02-19T01:55:13.000Z",
            "description": "Automatically added (via 0f9dfa91fd461d96f68fdef11f3780f8)",
            "pattern": "[file:hashes.SHA256 = '91537f9cd350c8153a66a482616526e45efecaeea1da973d59838b5e44878098']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67605-5b10-4580-8caa-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:17.000Z",
            "modified": "2016-02-19T01:55:17.000Z",
            "description": "Automatically added (via 0fbc4232811601e97cca069450ecac19)",
            "pattern": "[file:hashes.SHA256 = 'b57dc0aaee36b8275f7e9e5bd5bd9a7f8b99b5207f3c3568a6ac650698cac611']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6760a-7d94-4201-9fe3-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:22.000Z",
            "modified": "2016-02-19T01:55:22.000Z",
            "description": "Automatically added (via 0ff725213b4539973e830a8529908c34)",
            "pattern": "[file:hashes.SHA256 = 'ec6f730a8a21a85761bdd4187221c057e67834d7742890ba8428131cd24847ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6760e-a4c4-422d-b234-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:26.000Z",
            "modified": "2016-02-19T01:55:26.000Z",
            "description": "Automatically added (via 102a92f7eed769627d35dd979ce87f1e)",
            "pattern": "[file:hashes.SHA256 = '39c944772f5f304ad73e1c69167553f3ac81d8109b543181852ee6c3b05cd951']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67613-9194-4b2f-9643-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:31.000Z",
            "modified": "2016-02-19T01:55:31.000Z",
            "description": "Automatically added (via 107936c99efebfeab44cc1fec20ca45e)",
            "pattern": "[file:hashes.SHA256 = '17e5ce537005993fe3c9fe4aabdb77bcee2353cd7b5662282f1e99828e05d133']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67617-a648-4551-8c78-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:35.000Z",
            "modified": "2016-02-19T01:55:35.000Z",
            "description": "Automatically added (via 108f04ea17dbbe0cd8030eed06a3fe3e)",
            "pattern": "[file:hashes.SHA256 = '3f85c28452815fdb14bce5c01d518f45b2f6816967ad01b636be7aed78c5e203']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6761c-6630-472e-8fc5-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:40.000Z",
            "modified": "2016-02-19T01:55:40.000Z",
            "description": "Automatically added (via 10c34043cf4dce528d824daab5b022d2)",
            "pattern": "[file:hashes.SHA256 = '290575ae5da71480542ea14479821c88e44f9eb273c69fbca652b989efebfdbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6761e-089c-4fdb-a103-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:42.000Z",
            "modified": "2016-02-19T01:55:42.000Z",
            "description": "Automatically added (via 10e5cb4c43f90baa7bd2133eb7d57eaf)",
            "pattern": "[file:hashes.SHA1 = 'ef0c1c342486d04276291459931bce33fde16961']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67623-1570-4a50-bc95-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:47.000Z",
            "modified": "2016-02-19T01:55:47.000Z",
            "description": "Automatically added (via 1100a5a8888310601d723d605ac43f41)",
            "pattern": "[file:hashes.SHA1 = '55acb0b36c687bc033a7a68b289dd19ac0bfbf88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67627-0fbc-4c82-9980-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:51.000Z",
            "modified": "2016-02-19T01:55:51.000Z",
            "description": "Automatically added (via 111449f0611950b2f965c53730d43fa0)",
            "pattern": "[file:hashes.SHA1 = 'beb98d911b797704aa89f684773894e7161c42e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6762c-7748-4ccd-b3ee-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:56.000Z",
            "modified": "2016-02-19T01:55:56.000Z",
            "description": "Automatically added (via 1173aa4a118ed82d277ff67a6323b93f)",
            "pattern": "[file:hashes.SHA1 = 'ba1c4d8ee2ae2fe0e00f52b2d2c7948c06b4e3f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67631-2b9c-4496-94aa-4c73950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:01.000Z",
            "modified": "2016-02-19T01:56:01.000Z",
            "description": "Automatically added (via 11e2302467fb03270b2d30037cf4fabb)",
            "pattern": "[file:hashes.SHA1 = 'cb0a0c9951b84cf1d4b93fed327742e395cd918d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67635-e1a4-432f-80d2-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:05.000Z",
            "modified": "2016-02-19T01:56:05.000Z",
            "description": "Automatically added (via 11f4287e5da06a9da233a22f9d08d414)",
            "pattern": "[file:hashes.SHA1 = '0aeb174128503c098c52881bc50a5087b3fcfd9e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6763a-eaac-45ef-9cc3-43d4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:10.000Z",
            "modified": "2016-02-19T01:56:10.000Z",
            "description": "Automatically added (via 1293dd44f5a47ee627cd8d6b0a55465e)",
            "pattern": "[file:hashes.SHA1 = '17aab47268ac613d6c6ee574996c4163d30ad4bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6763e-a9a4-4f8a-8442-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:14.000Z",
            "modified": "2016-02-19T01:56:14.000Z",
            "description": "Automatically added (via 12a92e1a3bd200d7bc7ec2bdab9e3a5c)",
            "pattern": "[file:hashes.SHA1 = '219e8383f3dcae8c52a73eb68e8b98a5caff4a75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67643-6128-4810-920c-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:19.000Z",
            "modified": "2016-02-19T01:56:19.000Z",
            "description": "Automatically added (via 12b9d7da9264f610b05173fbfa947a68)",
            "pattern": "[file:hashes.SHA1 = '83ec093fa3f1a2f3ad023def64d08c33e90aa045']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67648-431c-4f9a-a3cf-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:24.000Z",
            "modified": "2016-02-19T01:56:24.000Z",
            "description": "Automatically added (via 12baceea670cb7d612418d5f0966ba4f)",
            "pattern": "[file:hashes.SHA1 = 'a57679b5a5dc59afd0233bbcc7cb4b3652922b7b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6764c-8f88-449b-a3f8-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:28.000Z",
            "modified": "2016-02-19T01:56:28.000Z",
            "description": "Automatically added (via 12c627eed4bcf515a42d32611f9df85f)",
            "pattern": "[file:hashes.SHA1 = '0d81986d8a439394b73c68d9ac04c02da02b9393']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67651-0b08-4c5c-89ef-4edc950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:33.000Z",
            "modified": "2016-02-19T01:56:33.000Z",
            "description": "Automatically added (via 133580c3cd9febd92394c94de4a3458b)",
            "pattern": "[file:hashes.SHA1 = '0a482e15ed8f8fa287a6c0c9613e770621b74b0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67656-2c1c-4c3f-91c6-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:38.000Z",
            "modified": "2016-02-19T01:56:38.000Z",
            "description": "Automatically added (via 1383d5fba86acff32d394b05dc228dc2)",
            "pattern": "[file:hashes.SHA1 = '2ded7102995eb2816acefe02e04e9d89c1501804']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6765a-9740-4919-87e5-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:42.000Z",
            "modified": "2016-02-19T01:56:42.000Z",
            "description": "Automatically added (via 138814329190e4bedac7d75bc0faec94)",
            "pattern": "[file:hashes.SHA1 = '42ae61e6432e06803e03bd69a032fd511fd2156c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67660-fba8-4292-b3a7-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:48.000Z",
            "modified": "2016-02-19T01:56:48.000Z",
            "description": "Automatically added (via 13f86b6d597801e02a0bf33ed6dc245e)",
            "pattern": "[file:hashes.SHA1 = '800a509dccd843591f0dca2a174bec26962d4aec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67664-2398-40a5-adb5-4ad9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:52.000Z",
            "modified": "2016-02-19T01:56:52.000Z",
            "description": "Automatically added (via 13fb14bb145c81ce5d4c18c1a4201066)",
            "pattern": "[file:hashes.SHA1 = '39ca73a258f8b4b64b82c72a43a56e8a6d1d20b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67669-1dbc-43f4-bb9d-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:57.000Z",
            "modified": "2016-02-19T01:56:57.000Z",
            "description": "Automatically added (via 1402d93254d563575f4f37e04d1612ea)",
            "pattern": "[file:hashes.SHA1 = '619be8a859295f0504d9cee2989ecf56b73ea898']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6766f-dd34-459a-95a8-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:03.000Z",
            "modified": "2016-02-19T01:57:03.000Z",
            "description": "Automatically added (via 1487ca8db10e87ac833f9fa8f4b70813)",
            "pattern": "[file:hashes.SHA1 = '737be42c66a65f789e9970cd1efdee1a538bc4db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67673-7048-463d-a734-4a05950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:07.000Z",
            "modified": "2016-02-19T01:57:07.000Z",
            "description": "Automatically added (via 15384b9643d668d00d308abb0f9ca8e8)",
            "pattern": "[file:hashes.SHA1 = '7fc6164011b328fc6a004fa5b6c863e78b2efb22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67678-85b0-495f-b704-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:12.000Z",
            "modified": "2016-02-19T01:57:12.000Z",
            "description": "Automatically added (via 153889e18a50ce33ceeab4e936fe8131)",
            "pattern": "[file:hashes.SHA1 = 'bc0774900a618d89f0118164f21b11591ee6378a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6767d-0b98-44fc-bbea-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:17.000Z",
            "modified": "2016-02-19T01:57:17.000Z",
            "description": "Automatically added (via 154cd9645588dc8b9eac436e4fb53df5)",
            "pattern": "[file:hashes.SHA1 = 'cb69ccb6e173d64827443b2855aeb999576cee69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67681-54c4-43b5-b447-41f8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:21.000Z",
            "modified": "2016-02-19T01:57:21.000Z",
            "description": "Automatically added (via 161eef26b267ce2d8bb4b94ed00d4345)",
            "pattern": "[file:hashes.SHA1 = '8f339d1276789bc85e0cd676f86769d6bd7f1173']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67686-f9e0-4af1-b9ce-41ff950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:26.000Z",
            "modified": "2016-02-19T01:57:26.000Z",
            "description": "Automatically added (via 1623c0e3e298ff4a4e7b60db04dac56d)",
            "pattern": "[file:hashes.SHA1 = '1065e753421d2346f2d8f364b639f47c0d81212c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6768b-b610-4ab1-b392-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:31.000Z",
            "modified": "2016-02-19T01:57:31.000Z",
            "description": "Automatically added (via 16712777f9a94fd0d83bb194daaf468d)",
            "pattern": "[file:hashes.SHA1 = '0f30dfd6023ea92b5bfb5dfa592e1da4b4b36277']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67690-1118-428b-992e-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:36.000Z",
            "modified": "2016-02-19T01:57:36.000Z",
            "description": "Automatically added (via 16722d0cc17608c5e0045718ca7b71e6)",
            "pattern": "[file:hashes.SHA1 = 'ff7b9af75433e7bf24fca1084783400d47c5bb36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67695-c568-45d2-b1d3-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:41.000Z",
            "modified": "2016-02-19T01:57:41.000Z",
            "description": "Automatically added (via 16776d5ec7f697bf88be4d7c840a09a2)",
            "pattern": "[file:hashes.SHA1 = '63377661cd94aa28a6010d05f393e5947c78abeb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67699-4bc4-49f0-a66e-451c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:45.000Z",
            "modified": "2016-02-19T01:57:45.000Z",
            "description": "Automatically added (via 1682c25ad101e865c71a844bde9e71e5)",
            "pattern": "[file:hashes.SHA1 = 'b978c3954670ccc1655b65cf24e08caaa24acf62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6769e-cea4-4a7e-b34f-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:50.000Z",
            "modified": "2016-02-19T01:57:50.000Z",
            "description": "Automatically added (via 1733fb5cd9c9c7cf307ae60a6f7d6602)",
            "pattern": "[file:hashes.SHA1 = '13719170419ff8f5fef5a49418a3e26e76f1b95f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676a3-0364-4f44-a26a-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:55.000Z",
            "modified": "2016-02-19T01:57:55.000Z",
            "description": "Automatically added (via 1787fe1710ae182d1d7b302274ec0a8f)",
            "pattern": "[file:hashes.SHA1 = 'd5aa6aa22c74fe4ba393e6a31b125c16145d86af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676a8-6bf4-4915-a646-4688950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:00.000Z",
            "modified": "2016-02-19T01:58:00.000Z",
            "description": "Automatically added (via 17b2111f3067c51faf692558e0cf9bf5)",
            "pattern": "[file:hashes.SHA1 = 'c89041a3703ff83e423d0b9498223b698a6931a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676ad-ce1c-4306-9cc1-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:05.000Z",
            "modified": "2016-02-19T01:58:05.000Z",
            "description": "Automatically added (via 17bfde877355bcd4e6935e90320b783b)",
            "pattern": "[file:hashes.SHA1 = '45ae953d07595175d8dfcc98fb51ba49e1eb495b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676b1-a2e0-43e4-8504-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:09.000Z",
            "modified": "2016-02-19T01:58:09.000Z",
            "description": "Automatically added (via 17e763f5ad9bd1d459f8f9ddc99807bd)",
            "pattern": "[file:hashes.SHA1 = '234040d0ce1023808a450e7718ee06843c8ed00f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676b6-cef0-4ad7-b0eb-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:14.000Z",
            "modified": "2016-02-19T01:58:14.000Z",
            "description": "Automatically added (via 180e2973f2cb564aa8eea6176659abf5)",
            "pattern": "[file:hashes.SHA1 = 'c15b044003f68c17602800acbfdd44582c3dd99a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676bb-1644-4ff6-b8db-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:19.000Z",
            "modified": "2016-02-19T01:58:19.000Z",
            "description": "Automatically added (via 18367138f7514a8f2d7505ee5616b4d4)",
            "pattern": "[file:hashes.SHA1 = 'c35ee229d939ff724fadcd71239fd22026e93f7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676c0-652c-4649-9db9-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:24.000Z",
            "modified": "2016-02-19T01:58:24.000Z",
            "description": "Automatically added (via 186b09188619576405bd5bc329033172)",
            "pattern": "[file:hashes.SHA1 = '80f496e7530a7520672ad70c4f4e8862908fe89a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676c5-38c8-4cbe-b808-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:29.000Z",
            "modified": "2016-02-19T01:58:29.000Z",
            "description": "Automatically added (via 1896c7398b63f695f04e63492f897138)",
            "pattern": "[file:hashes.SHA1 = '07a77ec3ce65d22c9663a5c079d7c9f6b4c1f661']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676ca-8614-4336-a516-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:34.000Z",
            "modified": "2016-02-19T01:58:34.000Z",
            "description": "Automatically added (via 18b648f0fbfde69fdebba0df5afb9c18)",
            "pattern": "[file:hashes.SHA1 = '07e1dad7d7abb63cd5119a273726ebff54b4014e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676ce-2c28-49be-afe0-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:38.000Z",
            "modified": "2016-02-19T01:58:38.000Z",
            "description": "Automatically added (via 18fec20777e178b7fe53a2d2c69dc941)",
            "pattern": "[file:hashes.SHA1 = 'bb6473f920f1f19504a599d93f671741e9ae552e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676d3-77f0-4e6d-9e05-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:43.000Z",
            "modified": "2016-02-19T01:58:43.000Z",
            "description": "Automatically added (via 192051becede2abf23ce135c41b80140)",
            "pattern": "[file:hashes.SHA1 = '4a32cde1cc7959073ad12dbf2af34caf770a4e47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676d8-2384-47e9-b492-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:48.000Z",
            "modified": "2016-02-19T01:58:48.000Z",
            "description": "Automatically added (via 195f11aee70766d6de3db38ff81ee02c)",
            "pattern": "[file:hashes.SHA1 = 'd291845e591e12c34162559946f09337cd9cdb0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676dd-99b8-4ee8-8a16-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:53.000Z",
            "modified": "2016-02-19T01:58:53.000Z",
            "description": "Automatically added (via 19c5d0ae05b1d57aa06dbad9ef7e0bb7)",
            "pattern": "[file:hashes.SHA1 = '37e217a9f596eba79301e27c14568e2ebfdc4904']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676e2-b584-4bc5-a2b4-44ac950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:58.000Z",
            "modified": "2016-02-19T01:58:58.000Z",
            "description": "Automatically added (via 19da41b166a16f06953454191510055f)",
            "pattern": "[file:hashes.SHA1 = '36e68529411013cc3876722453f2c8614582877d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676e7-63c8-48b7-8ed5-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:03.000Z",
            "modified": "2016-02-19T01:59:03.000Z",
            "description": "Automatically added (via 19e11653d41b8329803a74a8b452fec0)",
            "pattern": "[file:hashes.SHA1 = '447bcedce1b1bb145c3c76404e39a8067252dd50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676ec-f410-4100-8b07-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:08.000Z",
            "modified": "2016-02-19T01:59:08.000Z",
            "description": "Automatically added (via 19e1dfa260f2950a6f4e8c056b6a243d)",
            "pattern": "[file:hashes.SHA1 = '20a79ac177c3fbcf2069cd8d35d49b0db6c6e2cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676f1-4cb4-48ee-b274-4fa8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:13.000Z",
            "modified": "2016-02-19T01:59:13.000Z",
            "description": "Automatically added (via 19f765e2375caaff4d82decee1bdcc99)",
            "pattern": "[file:hashes.SHA1 = '994d41c86dac7667f67bff0836750873cd56ee51']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676f6-0404-4d75-9b7c-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:18.000Z",
            "modified": "2016-02-19T01:59:18.000Z",
            "description": "Automatically added (via 1a1a30e8bbf6a18c8c501f55c69a5c17)",
            "pattern": "[file:hashes.SHA1 = '04680192be9354257eba0e9ce165c85268c14ba0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676fb-bf40-47c3-b1b1-48fe950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:23.000Z",
            "modified": "2016-02-19T01:59:23.000Z",
            "description": "Automatically added (via 1a2ba8907e9f2fe1a888a9897f25c43b)",
            "pattern": "[file:hashes.SHA1 = '545441775e1c7f309148be0d478b5c819b896fcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67700-94c8-4010-b036-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:28.000Z",
            "modified": "2016-02-19T01:59:28.000Z",
            "description": "Automatically added (via 1a75fd31d03b39d53dabe676eeb6f39b)",
            "pattern": "[file:hashes.SHA1 = '000a53c8923e17253efa90c2133ea2e0525d6593']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67705-c6bc-4705-bfd5-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:33.000Z",
            "modified": "2016-02-19T01:59:33.000Z",
            "description": "Automatically added (via 1ab51d918452a06408479f848eeb9fdf)",
            "pattern": "[file:hashes.SHA1 = '896978c1faaab85655a8419c7fff2e2dd1c9755d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6770a-578c-4170-8306-4a57950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:38.000Z",
            "modified": "2016-02-19T01:59:38.000Z",
            "description": "Automatically added (via 1ab544d95bc02ac37220121823bb3457)",
            "pattern": "[file:hashes.SHA1 = '813a03114aa8967b19e3dfc22534cd1030c7d802']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6770f-6e0c-4851-9b48-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:43.000Z",
            "modified": "2016-02-19T01:59:43.000Z",
            "description": "Automatically added (via 1ac1314a1924ec8d17fc01509d13e27d)",
            "pattern": "[file:hashes.SHA1 = 'f6052ab77cf52cc9ff7b60cf329089766bfea1b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67714-b8c4-4c83-a01c-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:48.000Z",
            "modified": "2016-02-19T01:59:48.000Z",
            "description": "Automatically added (via 1b1508c0c26bf7ac427366f399604aed)",
            "pattern": "[file:hashes.SHA1 = '579e259c4b135cc420a4534ce3b73ce8c1ece58b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67719-0e44-4fcb-9e21-47e4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:53.000Z",
            "modified": "2016-02-19T01:59:53.000Z",
            "description": "Automatically added (via 1b602256187f19f2fd0ba95c790f72f7)",
            "pattern": "[file:hashes.SHA1 = '478526479fd204c6380095ca8d581bb26555dc77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6771e-2914-48ba-90ee-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:58.000Z",
            "modified": "2016-02-19T01:59:58.000Z",
            "description": "Automatically added (via 1be391f21ca31aaabca5c782bed63cdf)",
            "pattern": "[file:hashes.SHA1 = '506ad7d90d944691d5413e6386fcb82a6cbb30d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67724-18ac-499f-a12d-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:04.000Z",
            "modified": "2016-02-19T02:00:04.000Z",
            "description": "Automatically added (via 1d36b1071c0576d02ca6ee2ea020c7ae)",
            "pattern": "[file:hashes.SHA1 = '5e629b94c344c7774d68fa2ba6f778593c0219dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67729-ab30-4de0-9602-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:09.000Z",
            "modified": "2016-02-19T02:00:09.000Z",
            "description": "Automatically added (via 1e154b3ebaf45646bed4ab4a23067648)",
            "pattern": "[file:hashes.SHA1 = '204962894a218dd0ddcf62211a6616787ab46c8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6772e-104c-4102-9995-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:14.000Z",
            "modified": "2016-02-19T02:00:14.000Z",
            "description": "Automatically added (via 1e23af7c0907b96f72c69beb7aeb4da2)",
            "pattern": "[file:hashes.SHA1 = 'a9a1e75a441a57429999d63adc900b13f644d3c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67733-f9f0-4692-8e60-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:19.000Z",
            "modified": "2016-02-19T02:00:19.000Z",
            "description": "Automatically added (via 1e9e8874e9d47155860d0fa1efb55141)",
            "pattern": "[file:hashes.SHA1 = 'ecd0f26f5ff979ce63ce8381c1ac0e57b9b4ba10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67738-0fa0-42c1-93eb-4f12950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:24.000Z",
            "modified": "2016-02-19T02:00:24.000Z",
            "description": "Automatically added (via 1eb430ccf58e89c22791d684bd3e2c44)",
            "pattern": "[file:hashes.SHA1 = '5b3629ceb0dfaafabec2a32725ad63538976559f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6773d-4a14-4930-9507-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:29.000Z",
            "modified": "2016-02-19T02:00:29.000Z",
            "description": "Automatically added (via 1ecbef41fe5e1daa164de91c558bc409)",
            "pattern": "[file:hashes.SHA1 = '93b7b14fbed93d2b160d4b457a28a73422c1b602']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67741-dc54-43dc-8e8e-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:33.000Z",
            "modified": "2016-02-19T02:00:33.000Z",
            "description": "Automatically added (via 1f0fefcc9959c950a77e5d66d143d861)",
            "pattern": "[file:hashes.SHA1 = '8b0575b58ad11fdc04d22acbcb05d041cfaf782d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67746-c148-4b6c-8642-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:38.000Z",
            "modified": "2016-02-19T02:00:38.000Z",
            "description": "Automatically added (via 1fa2e969ffef74abd2e61b417b613f8c)",
            "pattern": "[file:hashes.SHA1 = '2cb2b4e89378794ec31f3fd9e3ad7a09cc0eed55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6774b-4914-4000-887a-4f21950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:43.000Z",
            "modified": "2016-02-19T02:00:43.000Z",
            "description": "Automatically added (via 1fe7bc821db5a9dffb5867dc6f1b9146)",
            "pattern": "[file:hashes.SHA1 = '4e92bc4d279f1716c882de792d75a5b658a121c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67750-f6a0-4fc0-8100-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:48.000Z",
            "modified": "2016-02-19T02:00:48.000Z",
            "description": "Automatically added (via 1fef1297e6723d9e4888bfb4fba1c682)",
            "pattern": "[file:hashes.SHA1 = 'f44c894a3d25ec625dc7aefb8f8773ac8985515b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67755-f1d4-443c-bb63-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:53.000Z",
            "modified": "2016-02-19T02:00:53.000Z",
            "description": "Automatically added (via 20052913b6c05c38daa32eb8898b3a56)",
            "pattern": "[file:hashes.SHA1 = '42de43f158a895876f04fceef7c44ee435887181']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6775a-d448-4976-b3d3-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:58.000Z",
            "modified": "2016-02-19T02:00:58.000Z",
            "description": "Automatically added (via 20159698df74719832e5ccddadd9fdec)",
            "pattern": "[file:hashes.SHA1 = 'b972df8c25e62fc9dbd5eda34f9b2449236d1366']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6775e-221c-431c-9aeb-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:02.000Z",
            "modified": "2016-02-19T02:01:02.000Z",
            "description": "Automatically added (via 202ac3c2241d3f0f2487765f5131b3e2)",
            "pattern": "[file:hashes.SHA1 = 'b8232702cb2d21ff8d71f3f52263c5562030dda4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67764-78e4-4790-988d-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:08.000Z",
            "modified": "2016-02-19T02:01:08.000Z",
            "description": "Automatically added (via 208fcea4fc1a134bce8e6e891cc73c5c)",
            "pattern": "[file:hashes.SHA1 = '04f19bf97cfc8e6c78ba4e5704c48671e5d3c1b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67769-7fd0-49ce-9052-47f9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:13.000Z",
            "modified": "2016-02-19T02:01:13.000Z",
            "description": "Automatically added (via 20b01b61db68c089219dccab4e206e2e)",
            "pattern": "[file:hashes.SHA1 = '0f56993c4a53e90c93a03cbe7850d0be0cd36a3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6776f-d9dc-4fa3-aaef-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:19.000Z",
            "modified": "2016-02-19T02:01:19.000Z",
            "description": "Automatically added (via 20c1f416747b13d5e14e5424dd4df512)",
            "pattern": "[file:hashes.SHA1 = '5c48c10412ca9b1e70dcce03c22b5e0395958544']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67774-0e48-43e5-a0c3-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:24.000Z",
            "modified": "2016-02-19T02:01:24.000Z",
            "description": "Automatically added (via 21328e6820cf2af844213678e0719b44)",
            "pattern": "[file:hashes.SHA1 = '9c2bf7181a1c2503bb48bb0592f0a7227b3adb48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67779-d8d8-45e9-8b69-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:29.000Z",
            "modified": "2016-02-19T02:01:29.000Z",
            "description": "Automatically added (via 21542b2eebdc2a3f7c8b466ce64d4360)",
            "pattern": "[file:hashes.SHA1 = '31ebbd2f1cbf22c29432f68ce7136912e6cf9ffb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6777f-5da8-4ec7-95ba-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:35.000Z",
            "modified": "2016-02-19T02:01:35.000Z",
            "description": "Automatically added (via 219c10c004785193f188edd40ca6dfd8)",
            "pattern": "[file:hashes.SHA1 = 'ea3b2c55e9a8e00a0869c475d5af4e5349846be2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67784-3934-4f09-93f9-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:40.000Z",
            "modified": "2016-02-19T02:01:40.000Z",
            "description": "Automatically added (via 21e5a62e27995fcf3faf59c486a52a45)",
            "pattern": "[file:hashes.SHA1 = 'c9d3870efee9d7ef832ef30f73d1baffa23b8cc4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6778a-bec0-4509-a4e4-4580950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:46.000Z",
            "modified": "2016-02-19T02:01:46.000Z",
            "description": "Automatically added (via 22089473bd8cabc50acfff550e3c8b77)",
            "pattern": "[file:hashes.SHA1 = '54061aac437264898715fd67cbc0ce69621397a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6778f-a994-45e6-90de-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:51.000Z",
            "modified": "2016-02-19T02:01:51.000Z",
            "description": "Automatically added (via 222c5a30450488bff62f521720586e14)",
            "pattern": "[file:hashes.SHA1 = 'f870ab11f4bcbba201bf93434fbe0f110a20fbc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67794-82cc-485e-a132-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:56.000Z",
            "modified": "2016-02-19T02:01:56.000Z",
            "description": "Automatically added (via 222f67cfa1e3609813817e0853606170)",
            "pattern": "[file:hashes.SHA1 = '649f97c0d100c5508dc3ab15c702b3c804e11f07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6779a-03ac-4061-862f-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:02.000Z",
            "modified": "2016-02-19T02:02:02.000Z",
            "description": "Automatically added (via 223d96adbdcbf479a64ae3036ab5c9ae)",
            "pattern": "[file:hashes.SHA1 = 'bf745255075070bb58997fd1d9a51380d0b8d8e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6779f-3128-4d12-890b-402a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:07.000Z",
            "modified": "2016-02-19T02:02:07.000Z",
            "description": "Automatically added (via 22566d2240944b350aa06178135f3343)",
            "pattern": "[file:hashes.SHA1 = 'b26a845ccfce405d970baec7d85e62e73d0bf2aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677a5-7be4-426c-8e60-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:13.000Z",
            "modified": "2016-02-19T02:02:13.000Z",
            "description": "Automatically added (via 226114ef4dd05e252dbcf50c3878961a)",
            "pattern": "[file:hashes.SHA1 = 'c5de3f8d466e4ab6ad5ba9085887503e09ecf95e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677ab-3b04-4c89-9af2-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:19.000Z",
            "modified": "2016-02-19T02:02:19.000Z",
            "description": "Automatically added (via 231c92a006a2d1945d9e0fb2229ac2cc)",
            "pattern": "[file:hashes.SHA1 = 'b1b8bb0ad245123a9b93a36e651613d73934bcc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677b1-7ce8-45ed-a6ff-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:25.000Z",
            "modified": "2016-02-19T02:02:25.000Z",
            "description": "Automatically added (via 232a67239f29eb06d38e59b46e376bba)",
            "pattern": "[file:hashes.SHA1 = '63ccacd7cdd6cfc2c09f236e61e50881340c2313']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677b6-78a8-436b-941c-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:30.000Z",
            "modified": "2016-02-19T02:02:30.000Z",
            "description": "Automatically added (via 234a2d23b44ee6a83fb1ae1b66477c38)",
            "pattern": "[file:hashes.SHA1 = 'eb53106b0f75f570838d61fe32ca0555be857b92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677bc-e760-4372-bc25-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:36.000Z",
            "modified": "2016-02-19T02:02:36.000Z",
            "description": "Automatically added (via 236d83be1cc5cbc963a7b9c7162c59de)",
            "pattern": "[file:hashes.SHA1 = '9de3d4096140ccb4f1983c4c0a710b47a92be4b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677c2-fac4-4088-a9a5-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:42.000Z",
            "modified": "2016-02-19T02:02:42.000Z",
            "description": "Automatically added (via 24ad4414c4f55419cfbd36f8c0640b31)",
            "pattern": "[file:hashes.SHA1 = 'ca804c1ea3161b50ee2696406a2c946b455f3609']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677c8-e67c-4efc-9915-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:48.000Z",
            "modified": "2016-02-19T02:02:48.000Z",
            "description": "Automatically added (via 24b34333a0be2fbd3b88962cccecc5b3)",
            "pattern": "[file:hashes.SHA1 = 'aa427e3b48a73c3d580f73c2f4c15afebe432a44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677ce-1b08-4625-aadc-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:54.000Z",
            "modified": "2016-02-19T02:02:54.000Z",
            "description": "Automatically added (via 254f1a910eb36aa692d578495bcef51c)",
            "pattern": "[file:hashes.SHA1 = '21586cff32d3f1903c8d19a3865bdbcd659a5d46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677d4-515c-4b21-927d-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:00.000Z",
            "modified": "2016-02-19T02:03:00.000Z",
            "description": "Automatically added (via 256d4c261f012c544eeb6c2e3a98cc33)",
            "pattern": "[file:hashes.SHA1 = '5407f42560eed7b3d58174205106db55bca92587']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677d9-497c-403a-8ecf-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:05.000Z",
            "modified": "2016-02-19T02:03:05.000Z",
            "description": "Automatically added (via 25a05619c950501950cba81ad33c3fdc)",
            "pattern": "[file:hashes.SHA1 = '4e4cde6ebc59d12f43d7489d4500c11c1623f67f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677df-8acc-4b7d-8e20-481e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:11.000Z",
            "modified": "2016-02-19T02:03:11.000Z",
            "description": "Automatically added (via 25f3443e34fd43da9a16066e42b67592)",
            "pattern": "[file:hashes.SHA1 = 'ce2aebc464f458bd07bb1536609cf219be58fde9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677e5-b864-4381-a03f-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:17.000Z",
            "modified": "2016-02-19T02:03:17.000Z",
            "description": "Automatically added (via 2645ac15ce6ebcb1cac53cb73e922cc8)",
            "pattern": "[file:hashes.SHA1 = 'b7cdaa541b64bc92cc6092dc6d1cb2f37f3f116c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677eb-b4e8-4ee5-afec-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:23.000Z",
            "modified": "2016-02-19T02:03:23.000Z",
            "description": "Automatically added (via 2654bd9949c12f3508c49c398cf6cdf2)",
            "pattern": "[file:hashes.SHA1 = '34a548539dcf5c52ab2dde5c382687de521a2dc2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677f1-6744-4726-a9ef-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:29.000Z",
            "modified": "2016-02-19T02:03:29.000Z",
            "description": "Automatically added (via 27374d824ef166726a6cedb32f09feab)",
            "pattern": "[file:hashes.SHA1 = '9d09c1ac3fcdeb250644fdbb6308c99001c84349']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677f7-df94-4ce2-8522-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:35.000Z",
            "modified": "2016-02-19T02:03:35.000Z",
            "description": "Automatically added (via 27de67b22c3784ff4b6389bd2fd11aa5)",
            "pattern": "[file:hashes.SHA1 = '337ddcdeaccae64b0821dbd5e40df3fee278ba22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677fd-51a4-40d5-85dd-424d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:41.000Z",
            "modified": "2016-02-19T02:03:41.000Z",
            "description": "Automatically added (via 28117c940c8dd6f76439ed89730600ce)",
            "pattern": "[file:hashes.SHA1 = '59b8fa7ac691ed60f18a5d12d63cbac298497e17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67803-7510-4563-97f8-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:47.000Z",
            "modified": "2016-02-19T02:03:47.000Z",
            "description": "Automatically added (via 2831a406aa926d2bb02036ef2379d6c4)",
            "pattern": "[file:hashes.SHA1 = '88be0646d41b02b9938b6146dc97e615b0fcfc23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67809-5564-4632-9f17-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:53.000Z",
            "modified": "2016-02-19T02:03:53.000Z",
            "description": "Automatically added (via 28413445a8889d2410c2de4eab6fe545)",
            "pattern": "[file:hashes.SHA1 = '9334accc95177faa092576f064e737019f1f536e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6780f-f234-4796-b354-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:59.000Z",
            "modified": "2016-02-19T02:03:59.000Z",
            "description": "Automatically added (via 28dfdc648b16906b4280565cb8d9e7bb)",
            "pattern": "[file:hashes.SHA1 = 'caaaa12199f9a3cc7bc090ae860bf2051941e692']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67815-1ed8-471b-9e75-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:05.000Z",
            "modified": "2016-02-19T02:04:05.000Z",
            "description": "Automatically added (via 295592ad2ef01d7fd6812cdb9ab2a3fd)",
            "pattern": "[file:hashes.SHA1 = 'ecb970b86dec4469424d840a6f6d6070b1286f62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6781b-4980-4a5b-873b-4d36950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:11.000Z",
            "modified": "2016-02-19T02:04:11.000Z",
            "description": "Automatically added (via 296a15d0a2ac0fb26b6c90d8fec92be7)",
            "pattern": "[file:hashes.SHA1 = '8808dac77e292d66ccd02e6858ed5981164436df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67821-4b54-4852-9c88-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:17.000Z",
            "modified": "2016-02-19T02:04:17.000Z",
            "description": "Automatically added (via 2a94cf2d932688fd871d485c5eb5ada3)",
            "pattern": "[file:hashes.SHA1 = '3cfe7e1bf98b95d463627fdbaef11e7809c91e1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67827-7f64-4b2d-ac93-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:23.000Z",
            "modified": "2016-02-19T02:04:23.000Z",
            "description": "Automatically added (via 2a9863202e5967e3c07c7a5c3c27eefe)",
            "pattern": "[file:hashes.SHA1 = '2714a324512fcac77764465e017ba566598c8778']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6782d-d070-488b-b444-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:29.000Z",
            "modified": "2016-02-19T02:04:29.000Z",
            "description": "Automatically added (via 2ad978dec0b17afe7d56db9b48101f93)",
            "pattern": "[file:hashes.SHA1 = '10c8760a5b329ae1900a405eba76541eadfc5b4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67833-4c90-407d-bf44-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:35.000Z",
            "modified": "2016-02-19T02:04:35.000Z",
            "description": "Automatically added (via 2ae9b442a96090c4b76d6b629b4fca19)",
            "pattern": "[file:hashes.SHA1 = '900da92be5fd890cfe1627d101453203d17d099e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67839-8170-4052-bac7-4019950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:41.000Z",
            "modified": "2016-02-19T02:04:41.000Z",
            "description": "Automatically added (via 2b05d17fe6de2c852a9dc28dd619779e)",
            "pattern": "[file:hashes.SHA1 = '8a839867fc24000604177ea05222cff4e6ecb53f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6783f-711c-4a20-ba82-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:47.000Z",
            "modified": "2016-02-19T02:04:47.000Z",
            "description": "Automatically added (via 2b069c1b50e28ab21d6b204b9d16dc74)",
            "pattern": "[file:hashes.SHA1 = '8aedb6ce4eeae746d03bfcc7d1d1892851ffd3c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67845-95b4-403b-81a3-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:53.000Z",
            "modified": "2016-02-19T02:04:53.000Z",
            "description": "Automatically added (via 2b0959649b85df2c89815e4e854021ac)",
            "pattern": "[file:hashes.SHA1 = 'f0ab47eb8695ebd51a16564355e1846ef70edcd5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6784b-91f4-4fd4-acec-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:59.000Z",
            "modified": "2016-02-19T02:04:59.000Z",
            "description": "Automatically added (via 2b47c774cc68033dd1b78fdf9df51bfe)",
            "pattern": "[file:hashes.SHA1 = '62c0bb9dd77d21d408b5e59c9d2d58a2b38427bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67851-72c4-469f-b75c-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:05.000Z",
            "modified": "2016-02-19T02:05:05.000Z",
            "description": "Automatically added (via 2b612d46c7f0a041595f4477edb07299)",
            "pattern": "[file:hashes.SHA1 = '3c9eeb6c11dda39a70d1861b2fdda92dd5f26fa1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67857-4d00-4059-860c-4b5e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:11.000Z",
            "modified": "2016-02-19T02:05:11.000Z",
            "description": "Automatically added (via 2b94f1b2efc0758d7b68489e17c19f49)",
            "pattern": "[file:hashes.SHA1 = '5180aa7a0b39b9e52974dbe6d818420d97eb53df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6785d-6f9c-4f16-b791-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:17.000Z",
            "modified": "2016-02-19T02:05:17.000Z",
            "description": "Automatically added (via 2bc04687c3972a6820cc851dd06442e9)",
            "pattern": "[file:hashes.SHA1 = '3521ece1fc37d9154bd7b881c3f3bd0ad1286980']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67863-ba90-4c01-b631-4a43950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:23.000Z",
            "modified": "2016-02-19T02:05:23.000Z",
            "description": "Automatically added (via 2c9fec93b8a4b74a2288d379a292ea98)",
            "pattern": "[file:hashes.SHA1 = '4c911f074426978d50136c8d32580569ffed77a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67869-1010-48c1-8ce0-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:29.000Z",
            "modified": "2016-02-19T02:05:29.000Z",
            "description": "Automatically added (via 2ca5f0afed7d2062c177b155637b6a55)",
            "pattern": "[file:hashes.SHA1 = '1209cac27e1d2f2bafd0847a3abb6a8fe65a5d75']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6786f-75f4-4bd3-b746-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:35.000Z",
            "modified": "2016-02-19T02:05:35.000Z",
            "description": "Automatically added (via 2cd9e6a0e9e5254ab2aec657d23da276)",
            "pattern": "[file:hashes.SHA1 = 'c848c75e994e89b7e0b3d77d1ab8967cc33671e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67875-3aa8-48e6-acae-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:41.000Z",
            "modified": "2016-02-19T02:05:41.000Z",
            "description": "Automatically added (via 2d388d76a81f0b313681684ce01853f7)",
            "pattern": "[file:hashes.SHA1 = '7bb641d601502ffd69799e69684bb3d171f03b98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6787b-6740-48ee-a0c9-42d3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:47.000Z",
            "modified": "2016-02-19T02:05:47.000Z",
            "description": "Automatically added (via 2d47771b022d104bd6a4389de2533511)",
            "pattern": "[file:hashes.SHA1 = '69553272228d0dbac41be57656573fc980cb36ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67881-afd0-418a-9a2c-49f9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:53.000Z",
            "modified": "2016-02-19T02:05:53.000Z",
            "description": "Automatically added (via 2d4bd3cb38b50f345b632874ff823610)",
            "pattern": "[file:hashes.SHA1 = '0759a8bb5ad7eb521ea47973ec1daaaa0efded83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67887-7e40-4a43-a811-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:59.000Z",
            "modified": "2016-02-19T02:05:59.000Z",
            "description": "Automatically added (via 2d667da6f04ad8ebb0f34c662f513ae2)",
            "pattern": "[file:hashes.SHA1 = 'd51916dc5eda3972eb6d0215574fbe9ba54a7047']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6788d-046c-4a8e-a826-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:05.000Z",
            "modified": "2016-02-19T02:06:05.000Z",
            "description": "Automatically added (via 2d8e4dbdd423a31dc6cdb21ae15c5f18)",
            "pattern": "[file:hashes.SHA1 = '662b5b21e3dfb43aefd0c3e4ab20b55e89fe672c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67894-a46c-45a9-9084-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:12.000Z",
            "modified": "2016-02-19T02:06:12.000Z",
            "description": "Automatically added (via 2dc5b92a2ed56478f331b59be1d496e9)",
            "pattern": "[file:hashes.SHA1 = '48c702de379f10933f07103726c0a04c03c0cf97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6789a-5304-4198-85fa-4195950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:18.000Z",
            "modified": "2016-02-19T02:06:18.000Z",
            "description": "Automatically added (via 2dd41d93743ba6f2014c41b8f6f54c72)",
            "pattern": "[file:hashes.SHA1 = '30dc04ae0d5f018488c5d58b482a076b05ee0f92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678a0-8d70-4f80-aaa9-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:24.000Z",
            "modified": "2016-02-19T02:06:24.000Z",
            "description": "Automatically added (via 2df5025256fa9086e6686e776e9b5af8)",
            "pattern": "[file:hashes.SHA1 = 'ff414e7ed62d70e1ad1b298ce43cb3e6b01e9fe0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678a6-8e14-4c36-8986-4e7f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:30.000Z",
            "modified": "2016-02-19T02:06:30.000Z",
            "description": "Automatically added (via 2e1bcedabf1d3df7342b7070541607bf)",
            "pattern": "[file:hashes.SHA1 = '8776a49a3a7bb5f5c5350571a083004222e42a67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678ac-3e2c-4437-9588-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:36.000Z",
            "modified": "2016-02-19T02:06:36.000Z",
            "description": "Automatically added (via 2e463b76aca46b41dbcb328a0116616a)",
            "pattern": "[file:hashes.SHA1 = 'af72a1dd9b5c2f57ff89fd14a441b298462ab530']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678b2-72b8-4c1d-bd3f-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:42.000Z",
            "modified": "2016-02-19T02:06:42.000Z",
            "description": "Automatically added (via 2eb8652be1025e8e130519d379852292)",
            "pattern": "[file:hashes.SHA1 = '75d927585647ddf5d66922cc9cd9db4df685850a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678b9-3e64-4d5d-bc2d-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:49.000Z",
            "modified": "2016-02-19T02:06:49.000Z",
            "description": "Automatically added (via 2ec5ab9bf3a990c29b2c1df4dfaf8c0d)",
            "pattern": "[file:hashes.SHA1 = 'da22281c46a93d3a113b50d7ca36628f06c48ada']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678c0-3f94-4fe6-836a-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:56.000Z",
            "modified": "2016-02-19T02:06:56.000Z",
            "description": "Automatically added (via 2f2d829127e98e9a92eb012473aa4322)",
            "pattern": "[file:hashes.SHA1 = '484b705358f325b6b8c5b47c5beeb9970bf59680']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678c7-0364-4b2a-96cd-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:03.000Z",
            "modified": "2016-02-19T02:07:03.000Z",
            "description": "Automatically added (via 2f3ebd6738431016a9aea0586a01603d)",
            "pattern": "[file:hashes.SHA1 = '22af5aa84fb21b41a9893bd72bb7fd133ee68203']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678ce-e45c-45c4-b261-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:10.000Z",
            "modified": "2016-02-19T02:07:10.000Z",
            "description": "Automatically added (via 2f73aa23923f2229c3492fa48e0df625)",
            "pattern": "[file:hashes.SHA1 = '5f220f1210a913f7a53cf53d81b9df8b216dd867']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678d5-502c-4fef-82f7-44cc950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:17.000Z",
            "modified": "2016-02-19T02:07:17.000Z",
            "description": "Automatically added (via 2fa4b346f9d431e8bbfa63e6f1dcf6a1)",
            "pattern": "[file:hashes.SHA1 = 'e8601bf601a9a2d0b1871fa49a05aab1cefec1b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678dc-fb74-4aa7-ac21-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:24.000Z",
            "modified": "2016-02-19T02:07:24.000Z",
            "description": "Automatically added (via 3010b4c11b089c73d70089a6675b830a)",
            "pattern": "[file:hashes.SHA1 = '47e45aa29417c25d125e4515797f7ddc175e9d78']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678e2-0c20-4a16-980a-4837950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:30.000Z",
            "modified": "2016-02-19T02:07:30.000Z",
            "description": "Automatically added (via 306478a90a524ae0b08a870e466733ec)",
            "pattern": "[file:hashes.SHA1 = '0d91a599c8aa442ed41657acca31595d91fb4e22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678e9-6e54-47ec-aa42-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:37.000Z",
            "modified": "2016-02-19T02:07:37.000Z",
            "description": "Automatically added (via 30b9fda5453b5dceb1c3ce8e43ff043a)",
            "pattern": "[file:hashes.SHA1 = '4b2783a227cb5d9382eeef9e87caca34ff1cad7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678ef-f924-4aa4-862d-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:43.000Z",
            "modified": "2016-02-19T02:07:43.000Z",
            "description": "Automatically added (via 30f22bc61773c9733e6c8685531c5534)",
            "pattern": "[file:hashes.SHA1 = '1936c91b8576f1897ec770e041a0bc3144f55e43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678f5-1ab4-4367-917e-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:49.000Z",
            "modified": "2016-02-19T02:07:49.000Z",
            "description": "Automatically added (via 310b705bd1073e629d57d5e80a31bfec)",
            "pattern": "[file:hashes.SHA1 = 'ab6ca2adbac05833496e1d90f5d3f9522d186bf6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678fc-bbbc-464a-a899-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:56.000Z",
            "modified": "2016-02-19T02:07:56.000Z",
            "description": "Automatically added (via 31289053b668188afd1837d15ed121dc)",
            "pattern": "[file:hashes.SHA1 = '202521dbb6dafecb47ed7c0e62ba55bdb56fa4d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67903-b4cc-4375-9f9a-408c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:03.000Z",
            "modified": "2016-02-19T02:08:03.000Z",
            "description": "Automatically added (via 313fa0e143ae458e67664493ad83cbca)",
            "pattern": "[file:hashes.SHA1 = '1ad81628fdb13971563145f9a6b1d3080e056ad9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67909-322c-4158-815c-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:09.000Z",
            "modified": "2016-02-19T02:08:09.000Z",
            "description": "Automatically added (via 31b4f00a9b9f097caa4652c2d929751a)",
            "pattern": "[file:hashes.SHA1 = 'fbfbe881887febd46ba69cc0ca63936d57211a32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67910-73a0-4d40-8afe-435f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:16.000Z",
            "modified": "2016-02-19T02:08:16.000Z",
            "description": "Automatically added (via 31ea54cbb755ef402ecfb3f083ab0117)",
            "pattern": "[file:hashes.SHA1 = 'c798a6b7fbbe7025a76c37cf88a20bbd506af36c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67916-9a64-4f11-b5a1-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:22.000Z",
            "modified": "2016-02-19T02:08:22.000Z",
            "description": "Automatically added (via 32425fd03bd49a8d5094da1bb2bf6754)",
            "pattern": "[file:hashes.SHA1 = '8bf34328c61269966dc53a4f0d17da140ded8c2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6791d-fb8c-496d-bf03-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:29.000Z",
            "modified": "2016-02-19T02:08:29.000Z",
            "description": "Automatically added (via 32edb5bd2a52ffbcaec77796069aabca)",
            "pattern": "[file:hashes.SHA1 = '75046c8d88ab5c8358ee1c22cf41b2f88f6ca938']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67924-58c4-4477-b892-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:36.000Z",
            "modified": "2016-02-19T02:08:36.000Z",
            "description": "Automatically added (via 32f0580e7e345623e9b440268fa367ef)",
            "pattern": "[file:hashes.SHA1 = 'da1ce3139e5710fa62e74f2b5ba92c8a4caeb2b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6792a-70bc-400d-a301-4cda950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:42.000Z",
            "modified": "2016-02-19T02:08:42.000Z",
            "description": "Automatically added (via 33306b3a847f45e642b5f2ef8312217a)",
            "pattern": "[file:hashes.SHA1 = '70f4149917a800b3f90ab2ffeca7d74c75ecfa34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67930-f074-41f1-ba15-4352950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:48.000Z",
            "modified": "2016-02-19T02:08:48.000Z",
            "description": "Automatically added (via 33761cfa58cdaad0bb0f8c4abddc8397)",
            "pattern": "[file:hashes.SHA1 = '6089a8a9e5895313822430e2f242997e43230f2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67937-dbf8-4729-a18b-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:55.000Z",
            "modified": "2016-02-19T02:08:55.000Z",
            "description": "Automatically added (via 33816327296234eb4bd34cdad11fb501)",
            "pattern": "[file:hashes.SHA1 = 'e245526690300614b8f35d9e2e512d480fa04b5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6793e-2f48-4bf4-b399-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:02.000Z",
            "modified": "2016-02-19T02:09:02.000Z",
            "description": "Automatically added (via 3390042b3fad4169f10b6ae66326c72f)",
            "pattern": "[file:hashes.SHA1 = '798440c0a40450d0a8d5da8eb55065bd90e1b765']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67944-5efc-461b-8b87-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:08.000Z",
            "modified": "2016-02-19T02:09:08.000Z",
            "description": "Automatically added (via 33b46d15605a29f56506d1389ad413d3)",
            "pattern": "[file:hashes.SHA1 = '4c58fc9ef81162cbee25fd0375a3f91a6957996b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6794b-c854-4927-a7a6-42a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:15.000Z",
            "modified": "2016-02-19T02:09:15.000Z",
            "description": "Automatically added (via 33c68e5e078ff94a8399829618ad6c1e)",
            "pattern": "[file:hashes.SHA1 = '7977b6ec25d87c16a0e84695787491252b95d840']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67952-35fc-45c5-b1fc-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:22.000Z",
            "modified": "2016-02-19T02:09:22.000Z",
            "description": "Automatically added (via 33ea3086c803dbaf8f668f9198aa20ca)",
            "pattern": "[file:hashes.SHA1 = '45303a650fc77dcf9631970da108afebd12bb483']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67959-6168-43a4-bcd5-49b4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:29.000Z",
            "modified": "2016-02-19T02:09:29.000Z",
            "description": "Automatically added (via 34940778cd3a7d766874e571f62729b4)",
            "pattern": "[file:hashes.SHA1 = '4ec9be50f04503cd3d10bc5009e21243ea141510']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6795f-10b0-4288-abaa-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:35.000Z",
            "modified": "2016-02-19T02:09:35.000Z",
            "description": "Automatically added (via 34a01014bc61ee99120d4fcdda9525c8)",
            "pattern": "[file:hashes.SHA1 = '8ad8fa2640a6e34a218abf736606580438499365']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67966-1d0c-414c-9d3e-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:42.000Z",
            "modified": "2016-02-19T02:09:42.000Z",
            "description": "Automatically added (via 34a5c260069e1df15efc00a382bd6740)",
            "pattern": "[file:hashes.SHA1 = '32d18ffcf737ae643106dff3d072a57bfb0f4cbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6796c-8c80-4dfa-bd2e-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:48.000Z",
            "modified": "2016-02-19T02:09:48.000Z",
            "description": "Automatically added (via 34a8af47c96bc6090aaaa12cda1fd3a8)",
            "pattern": "[file:hashes.SHA1 = '4fef6ad340fdb31cbe0b7b8c85b3547a505c56bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67973-00c4-4eb0-95ed-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:55.000Z",
            "modified": "2016-02-19T02:09:55.000Z",
            "description": "Automatically added (via 34de76a33b71700f9e006f5a2a20cc48)",
            "pattern": "[file:hashes.SHA1 = '472355a22c81fcbb953297afb5e340b1d5690edd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6797a-abd0-4827-aab1-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:02.000Z",
            "modified": "2016-02-19T02:10:02.000Z",
            "description": "Automatically added (via 34e27fe3bc8d4cb5f5c46720b1043b11)",
            "pattern": "[file:hashes.SHA1 = '5015b90a447c9ef8ad3ad0ffae4610f949352b5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67981-3e70-451f-96ed-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:09.000Z",
            "modified": "2016-02-19T02:10:09.000Z",
            "description": "Automatically added (via 35260e1c488da520cec1b6115367c016)",
            "pattern": "[file:hashes.SHA1 = '10cc9cab7c9cb612a20da7abaffa0fe8e26b56d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67987-4cf4-4004-a700-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:15.000Z",
            "modified": "2016-02-19T02:10:15.000Z",
            "description": "Automatically added (via 357b7caa52dadab6f22dc0c46811956e)",
            "pattern": "[file:hashes.SHA1 = '370c1399b41cebf0ec92bcf5e48708442e386487']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6798e-a8d8-4c69-abc5-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:22.000Z",
            "modified": "2016-02-19T02:10:22.000Z",
            "description": "Automatically added (via 35b896f6a11e8b22db9c6f3fece1b0dc)",
            "pattern": "[file:hashes.SHA1 = '2b554ebcfd86cc783550518972bbb7aa0fd83ee4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67995-fc1c-429d-a3c7-4fe9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:29.000Z",
            "modified": "2016-02-19T02:10:29.000Z",
            "description": "Automatically added (via 35f5be9282e424d5ad45b0b757872ec1)",
            "pattern": "[file:hashes.SHA1 = 'ddf9183166ef233f8bf5039967298e806c839d56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6799c-57cc-4cbe-93c8-497a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:36.000Z",
            "modified": "2016-02-19T02:10:36.000Z",
            "description": "Automatically added (via 3622d1f8299daf9dabe997df1b3cd86e)",
            "pattern": "[file:hashes.SHA1 = '76f120e735de88bc0d4c08867115e4d18eb1a548']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679a3-bf28-4ccf-8317-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:43.000Z",
            "modified": "2016-02-19T02:10:43.000Z",
            "description": "Automatically added (via 3632dbc3e51c18546e4b4f34c19a573c)",
            "pattern": "[file:hashes.SHA1 = 'e47a02344dd6dfb9a44281e4c79a648540c53201']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679ab-2084-484a-bbfb-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:51.000Z",
            "modified": "2016-02-19T02:10:51.000Z",
            "description": "Automatically added (via 36c3069f6dd68ce4282fe473f602f33b)",
            "pattern": "[file:hashes.SHA1 = '04344ba207b169fa5ebeae3f247d6579187e2a28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679b3-fe64-4872-9c6c-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:59.000Z",
            "modified": "2016-02-19T02:10:59.000Z",
            "description": "Automatically added (via 36e86735980b63cd796b76bd45c03d31)",
            "pattern": "[file:hashes.SHA1 = '441feafd3b01c71ef9983c837419981e314ed2cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679ba-a6f8-4a4a-b42c-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:06.000Z",
            "modified": "2016-02-19T02:11:06.000Z",
            "description": "Automatically added (via 36fe5942ca73ba7541bc638f7aa14686)",
            "pattern": "[file:hashes.SHA1 = 'fc4c1d35cf18f294476adf961b434772aff05d22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679c0-df04-4d5b-ba91-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:12.000Z",
            "modified": "2016-02-19T02:11:12.000Z",
            "description": "Automatically added (via 371189b677b4b8b32d3f43c219d40c0d)",
            "pattern": "[file:hashes.SHA1 = '7d99b5ff10cb8a6c1408502c52bcb8b043cab9fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679c7-c744-484a-a293-49d2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:19.000Z",
            "modified": "2016-02-19T02:11:19.000Z",
            "description": "Automatically added (via 37127c90db47ac085448df8e01c057c6)",
            "pattern": "[file:hashes.SHA1 = '321e8dd1fb9848136b4d8eed0ba3e605dfc55544']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679ce-3174-4fc0-a827-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:26.000Z",
            "modified": "2016-02-19T02:11:26.000Z",
            "description": "Automatically added (via 3738a7bad42df329f568dbf960497ba3)",
            "pattern": "[file:hashes.SHA1 = '72121c19fd1bc5efb8ae4d58b10a47994df7fec3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679d5-9c10-45ba-ba9e-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:33.000Z",
            "modified": "2016-02-19T02:11:33.000Z",
            "description": "Automatically added (via 375308d79df161b737f70b2da8973293)",
            "pattern": "[file:hashes.SHA1 = '6129089f09714945f78863154b37661552a2b0cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679dc-a0c4-45f6-8ef7-4e2b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:40.000Z",
            "modified": "2016-02-19T02:11:40.000Z",
            "description": "Automatically added (via 375f6b5ecfbb14edfec9b421d70ce972)",
            "pattern": "[file:hashes.SHA1 = 'a9ba06471786b0ceb0e8c7e79e5cc28dd6224ef1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679e3-873c-46d0-83dc-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:47.000Z",
            "modified": "2016-02-19T02:11:47.000Z",
            "description": "Automatically added (via 3772d766dc5b07a2f97d96b2327d49da)",
            "pattern": "[file:hashes.SHA1 = '06e38e347876fb86c29e0b2a0df2d82af7e0eb7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679e9-2edc-4ba2-ba0b-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:53.000Z",
            "modified": "2016-02-19T02:11:53.000Z",
            "description": "Automatically added (via 37740297c036c61b59717cb3b926cfe0)",
            "pattern": "[file:hashes.SHA1 = 'f6f776b528fb0947dc699ed4fd194ad2d1c71f18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679f1-dd00-4374-901d-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:01.000Z",
            "modified": "2016-02-19T02:12:01.000Z",
            "description": "Automatically added (via 38527f7f7024bc15a6edc953225ccf88)",
            "pattern": "[file:hashes.SHA1 = '1455ab42d72cec086405ea3311776354b882f268']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679f8-a1c8-4acd-9491-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:08.000Z",
            "modified": "2016-02-19T02:12:08.000Z",
            "description": "Automatically added (via 3872ebf4a51cd9a53837a1f39ff39c96)",
            "pattern": "[file:hashes.SHA1 = 'b30049d097d14ded8a078dc64ed07336e13a6c0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679ff-1f98-4db3-b8dc-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:15.000Z",
            "modified": "2016-02-19T02:12:15.000Z",
            "description": "Automatically added (via 38e7a6b63b382a71d04c0ff670b8ded5)",
            "pattern": "[file:hashes.SHA1 = '8b7e4a6f5e19a9ea48759228e46f3e13132ac075']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a06-da50-4368-ab90-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:22.000Z",
            "modified": "2016-02-19T02:12:22.000Z",
            "description": "Automatically added (via 3902b8681e54f6c2b789824b3d79a6fe)",
            "pattern": "[file:hashes.SHA1 = '40deece23758f915833ffdce87351f1830f28afd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a0e-fda4-4a65-a185-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:30.000Z",
            "modified": "2016-02-19T02:12:30.000Z",
            "description": "Automatically added (via 394024c648004352ed1a8f2d6fd5ff71)",
            "pattern": "[file:hashes.SHA1 = 'c0ab1141f4ccf925dca1b80e1b893150016763ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a15-4648-4e8a-9934-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:37.000Z",
            "modified": "2016-02-19T02:12:37.000Z",
            "description": "Automatically added (via 394519e00ffb584c122e31058cffcd91)",
            "pattern": "[file:hashes.SHA1 = '9fe5877c47657f29f22553993f4757578be4f46e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a1c-2d88-4810-83af-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:44.000Z",
            "modified": "2016-02-19T02:12:44.000Z",
            "description": "Automatically added (via 394a08a5f52e63d43650e53ecc31daf9)",
            "pattern": "[file:hashes.SHA1 = 'e8916af2f95116a2167f0219a343538e38050866']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a23-8bd4-42b4-a1b3-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:51.000Z",
            "modified": "2016-02-19T02:12:51.000Z",
            "description": "Automatically added (via 395c15bcd7ea066fa1446d02fb769f33)",
            "pattern": "[file:hashes.SHA1 = '158a961ccf565a3f468e261326b9adeb48aeb38c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a2a-74b4-4c0f-9fcc-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:58.000Z",
            "modified": "2016-02-19T02:12:58.000Z",
            "description": "Automatically added (via 3980b99cade8cf6a1f7b2a745a31a7f6)",
            "pattern": "[file:hashes.SHA1 = '7c133f5edc9bca76c084f6a7e20c9412f9c0f1e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a31-2360-4697-b35c-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:05.000Z",
            "modified": "2016-02-19T02:13:05.000Z",
            "description": "Automatically added (via 39becae963d67f0e2b33d3b1ae7e477a)",
            "pattern": "[file:hashes.SHA1 = '54bbcfde10fd1c23afabf7e70ddde9e584225c5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a38-ec38-4806-a110-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:12.000Z",
            "modified": "2016-02-19T02:13:12.000Z",
            "description": "Automatically added (via 39ec5d9cd9377a3c346c7f41ba943c9f)",
            "pattern": "[file:hashes.SHA1 = '12fc7e17759b9b23025e449275b64dcbe9ea85e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a3f-4a3c-42bd-ae12-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:19.000Z",
            "modified": "2016-02-19T02:13:19.000Z",
            "description": "Automatically added (via 39f4a94d6036ace24cd7a49067a57f71)",
            "pattern": "[file:hashes.SHA1 = 'dfda3c6c972cb0aa7db42203b6b97cd687be11a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a46-ef48-4dd1-af33-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:26.000Z",
            "modified": "2016-02-19T02:13:26.000Z",
            "description": "Automatically added (via 39fc6d33317529e6228d6f7fdfecebf2)",
            "pattern": "[file:hashes.SHA1 = '7cb50ac265c79d4eefa7aa920277da09beaf4f1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a4d-8ac8-4615-8897-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:33.000Z",
            "modified": "2016-02-19T02:13:33.000Z",
            "description": "Automatically added (via 3a1884d55a66ee7fb3e328fb186b3360)",
            "pattern": "[file:hashes.SHA1 = 'fac21949f122b1179d539b848cb82e59570c591d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a54-f880-45e8-9f72-48b8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:40.000Z",
            "modified": "2016-02-19T02:13:40.000Z",
            "description": "Automatically added (via 3a5368a25f03013733136d3154d9775f)",
            "pattern": "[file:hashes.SHA1 = 'a4e707d90eda9c792d0d44535de18dcc48a70584']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a5b-d414-4e5a-bb78-4c16950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:47.000Z",
            "modified": "2016-02-19T02:13:47.000Z",
            "description": "Automatically added (via 3a64efbaf65a997c6ce513feb7f27c98)",
            "pattern": "[file:hashes.SHA1 = '04cccf0566fe765b1cc4abdc84177f5945199637']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a62-2b48-4b7f-a61f-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:54.000Z",
            "modified": "2016-02-19T02:13:54.000Z",
            "description": "Automatically added (via 3b0564243894f4c2a36b21c949fd422e)",
            "pattern": "[file:hashes.SHA1 = '69e650cac66a2564f0665da432dec2e681aaa35d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a68-9c54-4918-a233-4a36950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:00.000Z",
            "modified": "2016-02-19T02:14:00.000Z",
            "description": "Automatically added (via 3b0b5b88bf297f1b17763f6bfbc027c1)",
            "pattern": "[file:hashes.SHA1 = 'ecdda06c639b70b7ee5d679f15b630f15a93645f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a6f-ddcc-4cc7-a01f-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:07.000Z",
            "modified": "2016-02-19T02:14:07.000Z",
            "description": "Automatically added (via 3b6e5a078a1ef33ae542e229f7f16b29)",
            "pattern": "[file:hashes.SHA1 = '59f294251d03ce38637e2d381cbb139cfdfd6f6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a76-4ce8-48f0-9f0b-4897950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:14.000Z",
            "modified": "2016-02-19T02:14:14.000Z",
            "description": "Automatically added (via 3bca2549a463597d21fd7c76cb609543)",
            "pattern": "[file:hashes.SHA1 = '86d7701356411cb81cf1e3db96defa333c3f654b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a7c-c440-4889-a23c-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:20.000Z",
            "modified": "2016-02-19T02:14:20.000Z",
            "description": "Automatically added (via 3c20fd354f220985e53161b7d626ed33)",
            "pattern": "[file:hashes.SHA1 = '7c9b633d78371b91dad97c0c2e283e9e7fde9e16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a83-17fc-425c-a5e8-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:27.000Z",
            "modified": "2016-02-19T02:14:27.000Z",
            "description": "Automatically added (via 3c4c4d788572a2c3764890d9212b108b)",
            "pattern": "[file:hashes.SHA1 = '66b9887f8a2422dc5b82a4db0f69dbd622692303']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a8b-34dc-485f-98c7-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:35.000Z",
            "modified": "2016-02-19T02:14:35.000Z",
            "description": "Automatically added (via 3c58279f2f4e40ebf97745bab8dcf52b)",
            "pattern": "[file:hashes.SHA1 = '1cde83fffc1862ea7c5b194278762d143660593b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a92-4400-4e0a-adde-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:42.000Z",
            "modified": "2016-02-19T02:14:42.000Z",
            "description": "Automatically added (via 3d0ad5ca44d4497aeb542c0eec77b7bf)",
            "pattern": "[file:hashes.SHA1 = 'e866d7a392ca515999c921cb94dce2b6cbf06170']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a99-ffd8-4910-88df-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:49.000Z",
            "modified": "2016-02-19T02:14:49.000Z",
            "description": "Automatically added (via 3d3f740f7b9e3cfad729b208e3d43fa5)",
            "pattern": "[file:hashes.SHA1 = '4ee06d0c1006a7f8b4633f16200c12ccb1d161fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67aa0-5150-4dec-a20f-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:56.000Z",
            "modified": "2016-02-19T02:14:56.000Z",
            "description": "Automatically added (via 3db731ee0837b67382b9b0e7ed147e80)",
            "pattern": "[file:hashes.SHA1 = '56b9a725c7bc14d60861cec6061343b6bf1a5e1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67aa7-50fc-4213-8a0e-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:03.000Z",
            "modified": "2016-02-19T02:15:03.000Z",
            "description": "Automatically added (via 3dc6f36a407edb43f6489ae6ae2c0bc7)",
            "pattern": "[file:hashes.SHA1 = '479603c2d456b49625633e861ad8e732668a6d3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67aae-2124-4e45-a393-45a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:10.000Z",
            "modified": "2016-02-19T02:15:10.000Z",
            "description": "Automatically added (via 3debf0c9b2d98b02333823993b218018)",
            "pattern": "[file:hashes.SHA1 = '67b1ef694600ac031a7a52a93db7e8ea847ae884']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ab6-d4d4-4ee7-ac06-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:18.000Z",
            "modified": "2016-02-19T02:15:18.000Z",
            "description": "Automatically added (via 3e1eb2eff331cf7493ba04dd44aa3e37)",
            "pattern": "[file:hashes.SHA1 = '7a7b8544a272fa64d8b6292addc006aa9cf4995b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67abd-b4f4-40d2-b1fd-48c2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:25.000Z",
            "modified": "2016-02-19T02:15:25.000Z",
            "description": "Automatically added (via 3ef04635af870d5af8f700f40ff37803)",
            "pattern": "[file:hashes.SHA1 = '1c4af7a0aba785fff4c2dfdb8744a7e8765f715e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ac4-4bb0-4327-976d-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:32.000Z",
            "modified": "2016-02-19T02:15:32.000Z",
            "description": "Automatically added (via 4005268f70b792e3e9d97d36f6ebfaea)",
            "pattern": "[file:hashes.SHA1 = '8e8365b8ffc92801f9928d0c49aa57612dd487d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67acb-9d70-4f04-9559-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:39.000Z",
            "modified": "2016-02-19T02:15:39.000Z",
            "description": "Automatically added (via 40260ee6bccbcab5323b7b1da0a8fee6)",
            "pattern": "[file:hashes.SHA1 = '227d8ef3dcdbaee8f006591891565d9634e9b2dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ad1-d028-4ced-98e9-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:45.000Z",
            "modified": "2016-02-19T02:15:45.000Z",
            "description": "Automatically added (via 403df5e5cb949e2d9e95e8001a5c810a)",
            "pattern": "[file:hashes.SHA1 = '8cb3e8b877911e1eec89c1dc8a4bf93f5544b6df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ad8-83e0-4b7e-a716-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:52.000Z",
            "modified": "2016-02-19T02:15:52.000Z",
            "description": "Automatically added (via 40563315219a686ed41a0a11526143c1)",
            "pattern": "[file:hashes.SHA1 = '5ed183c25c93350130346ef0f24cfd1fd8ee8f6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67adf-91b4-405b-9e27-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:59.000Z",
            "modified": "2016-02-19T02:15:59.000Z",
            "description": "Automatically added (via 40c23be3b053d14bb0106652dc7790ed)",
            "pattern": "[file:hashes.SHA1 = 'be8447581ad869b1c922e2fa18eabf72b19ae48d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ae6-fd68-4b3d-b6ff-42c0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:06.000Z",
            "modified": "2016-02-19T02:16:06.000Z",
            "description": "Automatically added (via 40f4ca699ca50c20f3143a58cbf68fed)",
            "pattern": "[file:hashes.SHA1 = '1d1e46c90e69ddf6c9eb4311e844db5e76cb856d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67aed-57f0-4373-8c32-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:13.000Z",
            "modified": "2016-02-19T02:16:13.000Z",
            "description": "Automatically added (via 4117e79af52472a42d31954473280c05)",
            "pattern": "[file:hashes.SHA1 = '866cfa399ee542fc365efaaaa483ee0f0c318942']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67af4-76f4-4f57-9752-44f9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:20.000Z",
            "modified": "2016-02-19T02:16:20.000Z",
            "description": "Automatically added (via 411c5275d117382da445032c7c67cd33)",
            "pattern": "[file:hashes.SHA1 = '62197675a6ca78206024ccb201319abe498b4f44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67afb-4464-4339-9683-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:27.000Z",
            "modified": "2016-02-19T02:16:27.000Z",
            "description": "Automatically added (via 412439e1b3195e0eb310a78515afcb36)",
            "pattern": "[file:hashes.SHA1 = 'b22a240763dc00f51880876755114b08f026fd12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b02-c5dc-4641-9b16-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:34.000Z",
            "modified": "2016-02-19T02:16:34.000Z",
            "description": "Automatically added (via 4181cad84e7aa595781c6cdd13da9c08)",
            "pattern": "[file:hashes.SHA1 = '746856d547b7f6115120d4c4a30808701d1a5b65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b09-4134-4f95-9b08-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:41.000Z",
            "modified": "2016-02-19T02:16:41.000Z",
            "description": "Automatically added (via 41a628703f48532b88ba29d28a2f1af8)",
            "pattern": "[file:hashes.SHA1 = '00b83088f7cb70d257a1d387ef270200f03b14a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b10-2784-4f3f-9844-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:48.000Z",
            "modified": "2016-02-19T02:16:48.000Z",
            "description": "Automatically added (via 41be2f40cb605b0a5c354642a642ca0f)",
            "pattern": "[file:hashes.SHA1 = '42e557f8aef199ae5568b57405ef06b5c58cd51e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b18-72d0-47b3-9bed-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:56.000Z",
            "modified": "2016-02-19T02:16:56.000Z",
            "description": "Automatically added (via 41f4d8d7c9edce3616f6bbcf92dafe40)",
            "pattern": "[file:hashes.SHA1 = '8569fef7787386673af79a3cca60a71bc3348bd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b1f-6040-4571-afd0-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:03.000Z",
            "modified": "2016-02-19T02:17:03.000Z",
            "description": "Automatically added (via 421d225207844761c94464bd623bebdd)",
            "pattern": "[file:hashes.SHA1 = 'e4731068089d753b37ef4b8c3f9b39ca46c52925']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b25-9954-42b3-a2d1-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:09.000Z",
            "modified": "2016-02-19T02:17:09.000Z",
            "description": "Automatically added (via 422d42a5f920ced6920e28537c5fe21f)",
            "pattern": "[file:hashes.SHA1 = 'df2427a70346f8c54fef70a4cc09f961a7e497e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b2d-d1b8-45ee-86ad-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:17.000Z",
            "modified": "2016-02-19T02:17:17.000Z",
            "description": "Automatically added (via 426bc4e5e81976a9524fcc38577b1c37)",
            "pattern": "[file:hashes.SHA1 = 'a512c0fb1b9f022ac50a5bfe0089fa4ff214fcab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b34-f16c-43e4-b4e1-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:24.000Z",
            "modified": "2016-02-19T02:17:24.000Z",
            "description": "Automatically added (via 427e08b0dfcff9d738bed44f044a90d9)",
            "pattern": "[file:hashes.SHA1 = '707a2132db93dbee7f9c2528c56f3a41bc3d665c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b3b-102c-42dd-b76a-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:31.000Z",
            "modified": "2016-02-19T02:17:31.000Z",
            "description": "Automatically added (via 42dd4f69a3513995d0656e28f1356d4c)",
            "pattern": "[file:hashes.SHA1 = 'bc62ee6fd3ffdd2a2a17b7140b853bf4e5bb0f2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b44-72dc-4027-ad8d-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:40.000Z",
            "modified": "2016-02-19T02:17:40.000Z",
            "description": "Automatically added (via 434330d8fc4ad7320642d458bb03275e)",
            "pattern": "[file:hashes.SHA1 = '6d412b7f89d2d1694878d75b111f884fa06be8e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b4b-9fc4-474b-81f6-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:47.000Z",
            "modified": "2016-02-19T02:17:47.000Z",
            "description": "Automatically added (via 434e3c0f88dc2be141a636f13a52355f)",
            "pattern": "[file:hashes.SHA1 = '4ce7b2fe6a77008ce330e197b6d2ef65b51ef29e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b53-ba80-43fb-9f96-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:55.000Z",
            "modified": "2016-02-19T02:17:55.000Z",
            "description": "Automatically added (via 436d5e791b1b0ba846358830fad51fd8)",
            "pattern": "[file:hashes.SHA1 = 'dbae586dc75bf830de753ce1889342055f7dc060']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b5a-25a8-469f-b971-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:02.000Z",
            "modified": "2016-02-19T02:18:02.000Z",
            "description": "Automatically added (via 43b7abd1ad30f9c8fdf79da3e089aed4)",
            "pattern": "[file:hashes.SHA1 = '0fdfc3241cc6f26bcbeab61e5771dba36d7b5451']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b62-9820-4469-bed2-4afb950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:10.000Z",
            "modified": "2016-02-19T02:18:10.000Z",
            "description": "Automatically added (via 43c2f9a9472879c7757ff1b176bda126)",
            "pattern": "[file:hashes.SHA1 = 'f29600b805e30b7fe06465012d39f6f041517e33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b69-4b00-43e4-a166-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:17.000Z",
            "modified": "2016-02-19T02:18:17.000Z",
            "description": "Automatically added (via 43cf0209369f01e305dd0735a77d6d47)",
            "pattern": "[file:hashes.SHA1 = 'f424e679987942d9d3ba0a24b0801fc4f975336e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b70-0ae4-44da-9258-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:24.000Z",
            "modified": "2016-02-19T02:18:24.000Z",
            "description": "Automatically added (via 43d15954b82bb13928b71e538c036eb4)",
            "pattern": "[file:hashes.SHA1 = '3d8e0c14a7afe9167321803e44c138c28fc25f39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b77-eaf8-4731-91d7-4344950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:31.000Z",
            "modified": "2016-02-19T02:18:31.000Z",
            "description": "Automatically added (via 440a9ce18b74a50ce8205229fe25ac4b)",
            "pattern": "[file:hashes.SHA1 = '928aeecac6cd43176a09bf0d52135f81e76adf6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b7f-df64-4029-b2a9-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:39.000Z",
            "modified": "2016-02-19T02:18:39.000Z",
            "description": "Automatically added (via 44517a5d6a7d9190e2b5239b5023f4c0)",
            "pattern": "[file:hashes.SHA1 = 'd14725b9a805632e2f4a46bbed3b308d13687b0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b86-0614-41ce-8837-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:46.000Z",
            "modified": "2016-02-19T02:18:46.000Z",
            "description": "Automatically added (via 446a967645eeeef101a1056db607674a)",
            "pattern": "[file:hashes.SHA1 = '16bc441db57d03984008945de40a2443e5e49aa9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b8e-47f8-402c-a32a-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:54.000Z",
            "modified": "2016-02-19T02:18:54.000Z",
            "description": "Automatically added (via 45060a92a013b78a1598adc39fedbfab)",
            "pattern": "[file:hashes.SHA1 = '99a242207f27d38d1641526ecf91f04f5889a6a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b95-5550-4824-9888-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:01.000Z",
            "modified": "2016-02-19T02:19:01.000Z",
            "description": "Automatically added (via 458116c14e5708beede32a2b2c1a89fb)",
            "pattern": "[file:hashes.SHA1 = '326739110778a96293f7b0a1b9656aa8f1a5a30b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b9c-e9cc-4e55-af32-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:08.000Z",
            "modified": "2016-02-19T02:19:08.000Z",
            "description": "Automatically added (via 45cd03bb7e3b7adccdedb34edcba9acc)",
            "pattern": "[file:hashes.SHA1 = '1bc645b3ff0fa1a7c0519452ba51f70550e32e64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ba3-3bbc-4830-b702-4431950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:15.000Z",
            "modified": "2016-02-19T02:19:15.000Z",
            "description": "Automatically added (via 4618dcc70400955218d3c58d96d566e0)",
            "pattern": "[file:hashes.SHA1 = '014f1254e02ad746a8d1c6df25eff87db040ab18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67baa-f88c-4d84-84e8-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:22.000Z",
            "modified": "2016-02-19T02:19:22.000Z",
            "description": "Automatically added (via 461e5e3b10c6ba2a02fe6e83ffc868d2)",
            "pattern": "[file:hashes.SHA1 = '184b2e7b7256da911489968b6c9166f56cc0d6c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bb2-9e98-4418-bc25-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:30.000Z",
            "modified": "2016-02-19T02:19:30.000Z",
            "description": "Automatically added (via 46644b9cc51e259321c6a13613c9541e)",
            "pattern": "[file:hashes.SHA1 = '4ebe01301495651bd241f396293902b8cd8a97cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bba-dd74-4c48-8d0b-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:38.000Z",
            "modified": "2016-02-19T02:19:38.000Z",
            "description": "Automatically added (via 466f256bf690e0a8d9e0590d933a70be)",
            "pattern": "[file:hashes.SHA1 = 'a037286c95178cfe1753b9ea57c2ebbbbf5abd02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bc1-ac40-4ea1-bd97-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:45.000Z",
            "modified": "2016-02-19T02:19:45.000Z",
            "description": "Automatically added (via 46a201a237d3b2f8aa1106d1406911c5)",
            "pattern": "[file:hashes.SHA1 = 'eeec1a86f4099034d3b1c341614590da04e1a533']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bc9-ca98-4a34-bc06-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:53.000Z",
            "modified": "2016-02-19T02:19:53.000Z",
            "description": "Automatically added (via 46c70ebc759bcc2feb43c2dfdf6f520b)",
            "pattern": "[file:hashes.SHA1 = 'dbabe002392a86f6f47a06a72770d70ab8750992']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bd1-ebc0-43bc-87a3-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:01.000Z",
            "modified": "2016-02-19T02:20:01.000Z",
            "description": "Automatically added (via 4788ac1775e30e1abb17b6672af2250e)",
            "pattern": "[file:hashes.SHA1 = '5b3a517dd74a0c845aa668bd8c91fdf4f717e06e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bd8-e3d8-417b-89b0-41a9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:08.000Z",
            "modified": "2016-02-19T02:20:08.000Z",
            "description": "Automatically added (via 47f15f2f75fc8eabd2c407fbf3016df7)",
            "pattern": "[file:hashes.SHA1 = '3e84b8c529fee968a2ebcc80c297cb424175baca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bdf-38fc-4b6b-92dc-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:15.000Z",
            "modified": "2016-02-19T02:20:15.000Z",
            "description": "Automatically added (via 47f6ce80997f529eec4abd4bb5b0d2c3)",
            "pattern": "[file:hashes.SHA1 = 'cdb81080373d7b41b9b8c5de28726d97902c71b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67be6-5228-45ed-8374-4980950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:22.000Z",
            "modified": "2016-02-19T02:20:22.000Z",
            "description": "Automatically added (via 4806944254ac14fef12c99e0dd421b1f)",
            "pattern": "[file:hashes.SHA1 = '8f9983b196bbd511e793ebb21f2ce5a2dd277272']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bed-fff0-436e-926d-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:29.000Z",
            "modified": "2016-02-19T02:20:29.000Z",
            "description": "Automatically added (via 4841dc4c9a6c5da49d6cf59cdd18cdf7)",
            "pattern": "[file:hashes.SHA1 = '91e27b0b2074b66bbd429acc8ec9867fda87c405']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bf4-a740-418a-b26f-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:36.000Z",
            "modified": "2016-02-19T02:20:36.000Z",
            "description": "Automatically added (via 489ae7a4ac8b3eb495bb3f88bc789da7)",
            "pattern": "[file:hashes.SHA1 = '24ffa07ce8d380427a8a92b1516f3b3bc90535f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bfb-8938-4796-9a1b-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:43.000Z",
            "modified": "2016-02-19T02:20:43.000Z",
            "description": "Automatically added (via 48c2d1a86b99c47749e3cbdff0ef2059)",
            "pattern": "[file:hashes.SHA1 = '49c70ecae17611ef041d3ba45b81dd71eac41ae1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c03-a7f4-4ed4-bff8-47a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:51.000Z",
            "modified": "2016-02-19T02:20:51.000Z",
            "description": "Automatically added (via 48d38b0c3cd6e6c37c98164652d679d7)",
            "pattern": "[file:hashes.SHA1 = 'b5e7e3e2b46a77fcef29ada4ed245ddf7913a6b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c0a-c064-419f-9476-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:58.000Z",
            "modified": "2016-02-19T02:20:58.000Z",
            "description": "Automatically added (via 48eea3cdb1f2523f59db45f2caeed2e9)",
            "pattern": "[file:hashes.SHA1 = 'a1cac1d0b34791a8c08487cde3f7747ae724e8eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c12-23dc-41da-94d5-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:06.000Z",
            "modified": "2016-02-19T02:21:06.000Z",
            "description": "Automatically added (via 490021f0f12540d96cfb885faf25ef45)",
            "pattern": "[file:hashes.SHA1 = '0d63d40571725b54c3f34ffc19dc5546ea7f80b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c1a-34bc-467e-88b8-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:14.000Z",
            "modified": "2016-02-19T02:21:14.000Z",
            "description": "Automatically added (via 491c81c012b8cf245c25bdf742276443)",
            "pattern": "[file:hashes.SHA1 = '358e73310a0a306ae38f1b0413469be1dd8506f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c23-ab48-437e-82a7-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:23.000Z",
            "modified": "2016-02-19T02:21:23.000Z",
            "description": "Automatically added (via 4933612c53100182e26d17f9d93afe55)",
            "pattern": "[file:hashes.SHA1 = 'ce82240b06e807adeb3603e1192af428c56ed1d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c2b-1da4-4008-a2cf-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:31.000Z",
            "modified": "2016-02-19T02:21:31.000Z",
            "description": "Automatically added (via 49772e265fe6564d3ce77825d7a5f6d5)",
            "pattern": "[file:hashes.SHA1 = 'd022ee2675c8daddd2698e17dfce375d668d5447']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c33-e7a0-4268-93c3-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:39.000Z",
            "modified": "2016-02-19T02:21:39.000Z",
            "description": "Automatically added (via 498def7a131a7d081095c04249258314)",
            "pattern": "[file:hashes.SHA1 = 'c223e45188588027b4546ba1acb41adbbdd94dc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c3b-5acc-4c28-8370-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:47.000Z",
            "modified": "2016-02-19T02:21:47.000Z",
            "description": "Automatically added (via 49a06a2329a6642d2f9ae27074f33e0b)",
            "pattern": "[file:hashes.SHA1 = '8a0cb89ac70d52bbc000f7db2322a5b0f4ad54b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c43-ea5c-4c2d-a668-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:55.000Z",
            "modified": "2016-02-19T02:21:55.000Z",
            "description": "Automatically added (via 49ba823efd4dfe4b37529e35ffc9af2b)",
            "pattern": "[file:hashes.SHA1 = '169ac9f3a1b5b142cfa7d4562415961a541bf7ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c4a-f368-4eb8-acf4-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:02.000Z",
            "modified": "2016-02-19T02:22:02.000Z",
            "description": "Automatically added (via 49d4311f72098e0c8ecf8f7c4346c008)",
            "pattern": "[file:hashes.SHA1 = '890a9cb1be2d3e98263f10e8017d1ef97c3808af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c52-4bdc-4a16-be4f-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:10.000Z",
            "modified": "2016-02-19T02:22:10.000Z",
            "description": "Automatically added (via 49d5de3215be492fc9aa71427aa0b1a7)",
            "pattern": "[file:hashes.SHA1 = 'f2015c33055ea905b92fdac6599d3d0a0201f411']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c5a-7c24-4f52-bb9c-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:18.000Z",
            "modified": "2016-02-19T02:22:18.000Z",
            "description": "Automatically added (via 49f1edcd6ca7c0def16454bf9fd63d75)",
            "pattern": "[file:hashes.SHA1 = '56d6689240d3342b57c94dd6697f58eb01111727']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c62-ffb0-45a5-a4ce-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:26.000Z",
            "modified": "2016-02-19T02:22:26.000Z",
            "description": "Automatically added (via 4a489b47c3ea402853ea79695456c1b5)",
            "pattern": "[file:hashes.SHA1 = 'dcbb69ee7ec3de57dc00f4719b1942442e024a18']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c6a-c49c-4fb8-b3a4-4446950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:34.000Z",
            "modified": "2016-02-19T02:22:34.000Z",
            "description": "Automatically added (via 4a6ce8c04850753e4fd333e15aeb1599)",
            "pattern": "[file:hashes.SHA1 = '4ca792a25ffb17630ce4ae67f8c5e0885c60fcc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c73-ca68-421d-b6b3-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:43.000Z",
            "modified": "2016-02-19T02:22:43.000Z",
            "description": "Automatically added (via 4add6fe52631ed7d2204cb9a7d829689)",
            "pattern": "[file:hashes.SHA1 = '26ae2e27f80138c01a8538eb042120d87713ef3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c7c-9778-40d5-b35f-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:52.000Z",
            "modified": "2016-02-19T02:22:52.000Z",
            "description": "Automatically added (via 4b1c64dffb5d5fe13572869b0d6fcb15)",
            "pattern": "[file:hashes.SHA1 = 'c520b701d6aeb4dd43d6f37d98a79652af0e779c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c84-d1fc-4d2b-aa1a-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:00.000Z",
            "modified": "2016-02-19T02:23:00.000Z",
            "description": "Automatically added (via 4b2f5c66c225efe468f5b45acbc85818)",
            "pattern": "[file:hashes.SHA1 = 'ab0792acc17807c55e5fd4849879273348e1b1a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c8b-16b8-4f41-adaa-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:07.000Z",
            "modified": "2016-02-19T02:23:07.000Z",
            "description": "Automatically added (via 4b4298cea473f6c78b652e48f1138595)",
            "pattern": "[file:hashes.SHA1 = '713b51f4f443e5ed49e5d66456a944b2a969cac6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c93-7f50-4ac1-bb97-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:15.000Z",
            "modified": "2016-02-19T02:23:15.000Z",
            "description": "Automatically added (via 4b53f282e7eca382febb1019b6c74aac)",
            "pattern": "[file:hashes.SHA1 = 'e4d50b2028181513d5a270f455360fc60875bced']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c9b-ec5c-4497-9252-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:23.000Z",
            "modified": "2016-02-19T02:23:23.000Z",
            "description": "Automatically added (via 4b6ea55672044a35df760ebd03bd9e53)",
            "pattern": "[file:hashes.SHA1 = 'db465ee6a6a6f8eafe893b698a13262ed09da4ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ca3-12f4-4bca-8ef9-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:31.000Z",
            "modified": "2016-02-19T02:23:31.000Z",
            "description": "Automatically added (via 4baeefcd85effcad2da595b74711a482)",
            "pattern": "[file:hashes.SHA1 = 'e8c12681654fdb437d576790b28721d2f6a558d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cab-4004-4ef7-944a-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:39.000Z",
            "modified": "2016-02-19T02:23:39.000Z",
            "description": "Automatically added (via 4bf235082e06bf699313bc2b9d1b23d1)",
            "pattern": "[file:hashes.SHA1 = '6738ddc6d8458a31290876accbbbf316dae18407']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cb3-9e9c-408f-8374-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:47.000Z",
            "modified": "2016-02-19T02:23:47.000Z",
            "description": "Automatically added (via 4c037fc7f159f2aa31086d763cc10a6d)",
            "pattern": "[file:hashes.SHA1 = '0606e2d750827e487aad5f3bfd3e1a38f9f5437d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cbb-5570-405f-ad49-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:55.000Z",
            "modified": "2016-02-19T02:23:55.000Z",
            "description": "Automatically added (via 4c0eb88ecb1620f9a80bf1589ddb549a)",
            "pattern": "[file:hashes.SHA1 = 'd46d96200f3e2e4d5bb074fc3eec377a94e1d7af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cc3-5a34-419c-8bcc-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:03.000Z",
            "modified": "2016-02-19T02:24:03.000Z",
            "description": "Automatically added (via 4cb118582d2d4df56a56c99efcebe1c5)",
            "pattern": "[file:hashes.SHA1 = '2399a8644f78962115f3f53f12cebe8073a52cfe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ccb-9d90-4a4a-b5af-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:11.000Z",
            "modified": "2016-02-19T02:24:11.000Z",
            "description": "Automatically added (via 4cfc451e3ac1f04fd13f3db2d7f917b7)",
            "pattern": "[file:hashes.SHA1 = '90eee1fe1e7196900c6ac755ab6b9580347e0eaf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cd3-0b30-4dd5-857a-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:19.000Z",
            "modified": "2016-02-19T02:24:19.000Z",
            "description": "Automatically added (via 4d00904acfd5bf1c7b4d0ad1cdf0b515)",
            "pattern": "[file:hashes.SHA1 = '71e12afe282e1ac856ebc7ac2bcbbb740c15fbfa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cdb-0340-47a3-8200-4b71950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:27.000Z",
            "modified": "2016-02-19T02:24:27.000Z",
            "description": "Automatically added (via 4d01310b74e708cdf046532b2d8785de)",
            "pattern": "[file:hashes.SHA1 = '43a2553320cca9029721c55120c075fa55e178de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ce2-5658-4cec-a853-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:34.000Z",
            "modified": "2016-02-19T02:24:34.000Z",
            "description": "Automatically added (via 4d1d08022994e0c4a5a4cbc604f7c50e)",
            "pattern": "[file:hashes.SHA1 = 'caa69a3bfb466f4b35040441adc23a5e892d00b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cea-f738-4e79-86a8-46b9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:42.000Z",
            "modified": "2016-02-19T02:24:42.000Z",
            "description": "Automatically added (via 4d41db1d80d9649fc55322cfdd4c8400)",
            "pattern": "[file:hashes.SHA1 = '3cd768d2a2d52e25ec6a7834e775ea8ac1c4d8fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cf2-6a64-43c8-8c12-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:50.000Z",
            "modified": "2016-02-19T02:24:50.000Z",
            "description": "Automatically added (via 4d5a952b22c0812155db01f7ba0dae98)",
            "pattern": "[file:hashes.SHA1 = '802b6141741574070a70913baeb9413149cc69b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cfa-7628-42c9-9d85-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:58.000Z",
            "modified": "2016-02-19T02:24:58.000Z",
            "description": "Automatically added (via 4d7657f853316546b8161fe11e22abe2)",
            "pattern": "[file:hashes.SHA1 = '12b834979c8c554b1897c02528f4978c40e5f2a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d02-4e24-4bb2-9efa-4e4b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:06.000Z",
            "modified": "2016-02-19T02:25:06.000Z",
            "description": "Automatically added (via 4db968d4d8202ee9372ad291914edfb3)",
            "pattern": "[file:hashes.SHA1 = '763ff11e4aed050844a643eef1052af615bce622']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d0a-dc84-4af2-89f8-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:14.000Z",
            "modified": "2016-02-19T02:25:14.000Z",
            "description": "Automatically added (via 4df879718487039aabf9178814fd860e)",
            "pattern": "[file:hashes.SHA1 = '82f797ab74699aef87bcdd5650bfc3db64691b8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d11-0e4c-46e3-8bcd-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:21.000Z",
            "modified": "2016-02-19T02:25:21.000Z",
            "description": "Automatically added (via 4e67ecd2f2eb24f4a8c2ecaf947131a6)",
            "pattern": "[file:hashes.SHA1 = '36a55b157ca5ff5389297f2eaa0668fd0474352a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d19-c368-4baf-9ca6-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:29.000Z",
            "modified": "2016-02-19T02:25:29.000Z",
            "description": "Automatically added (via 4e849a1473cec009ea170087c081b11f)",
            "pattern": "[file:hashes.SHA1 = '63ba0285a2443821828f4c7ee1f5284fdb08b96d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d21-ae64-43a3-bb00-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:37.000Z",
            "modified": "2016-02-19T02:25:37.000Z",
            "description": "Automatically added (via 4ed27792c3048846c160308e1b39f2c2)",
            "pattern": "[file:hashes.SHA1 = '07f9b19e5e6c636582d79ebf8cda29ddaef83082']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d29-83a4-4e25-8e7a-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:45.000Z",
            "modified": "2016-02-19T02:25:45.000Z",
            "description": "Automatically added (via 4ee9bcfedbff94364ac4c5a45bdec7cd)",
            "pattern": "[file:hashes.SHA1 = 'c7f8557c510f00832801874c0f943a7b26fb78e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d31-5924-4f8f-84e4-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:53.000Z",
            "modified": "2016-02-19T02:25:53.000Z",
            "description": "Automatically added (via 4f1d8c8e846d8875558ec5ee85e0c2e4)",
            "pattern": "[file:hashes.SHA1 = '392e8e80a1c1b352da77ffda1cd991f78707c258']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d39-7438-4044-852b-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:01.000Z",
            "modified": "2016-02-19T02:26:01.000Z",
            "description": "Automatically added (via 4f43ff21bd5bd97975a7396e3feae01d)",
            "pattern": "[file:hashes.SHA1 = 'eb6a83a7f0d6a16b908fdee7c684eb19e616f065']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d40-0390-4816-9600-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:08.000Z",
            "modified": "2016-02-19T02:26:08.000Z",
            "description": "Automatically added (via 4f4688795a930890d2e50eba90b9d1f3)",
            "pattern": "[file:hashes.SHA1 = 'f851600ca5b32bb58a81a05dd1d2bd7be84e8935']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d48-adb0-49a8-942e-4244950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:16.000Z",
            "modified": "2016-02-19T02:26:16.000Z",
            "description": "Automatically added (via 4f46dd16826c02b906f24300d153bc2a)",
            "pattern": "[file:hashes.SHA1 = '4bae7906f3da3d7f179d9d4f031bfb38aee2c2d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d50-b4fc-42b6-9b00-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:24.000Z",
            "modified": "2016-02-19T02:26:24.000Z",
            "description": "Automatically added (via 4f97466c9fe0c1991468cdbd6b1c93e2)",
            "pattern": "[file:hashes.SHA1 = '1637c212c60d349162afe08ab2e7c2bb181129ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d58-5010-47ea-b8c2-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:32.000Z",
            "modified": "2016-02-19T02:26:32.000Z",
            "description": "Automatically added (via 4fefde4cc142c7264e463ec1a1d885b2)",
            "pattern": "[file:hashes.SHA1 = 'ef2fb99be2f73d4aeb140e096a093c16f3f3cac3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d5f-928c-45da-98c2-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:39.000Z",
            "modified": "2016-02-19T02:26:39.000Z",
            "description": "Automatically added (via 50250fcfd1f43a3f6cd2dc767a7a8b3d)",
            "pattern": "[file:hashes.SHA1 = 'aa4cd0d174ce3521e65da11f5b953896cfe4d20b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d67-bf7c-4676-b474-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:46.000Z",
            "modified": "2016-02-19T02:26:46.000Z",
            "description": "Automatically added (via 5028bca89c19900f0fd218b0a1570e21)",
            "pattern": "[file:hashes.SHA1 = '1cb7d9b260b62175b72e880c606c352d702dd664']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d6e-833c-4ada-a9ac-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:54.000Z",
            "modified": "2016-02-19T02:26:54.000Z",
            "description": "Automatically added (via 5096740c2596ea42aa9338ca5917d885)",
            "pattern": "[file:hashes.SHA1 = '36e2036a77a84e04677dac77c3a778e5127bfa2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d76-0948-494d-a3e7-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:02.000Z",
            "modified": "2016-02-19T02:27:02.000Z",
            "description": "Automatically added (via 50e501b17ea3820ba64d13fe4e82825a)",
            "pattern": "[file:hashes.SHA1 = 'edb1e03efb48422e55ff782004d4560a2581b67b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d7e-693c-4fb2-903d-4527950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:10.000Z",
            "modified": "2016-02-19T02:27:10.000Z",
            "description": "Automatically added (via 50e9da4ce446dc74b9d82da9a47093c7)",
            "pattern": "[file:hashes.SHA1 = '923fdcd43ef6aaa141458cf7c1bb33a95ebd3112']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d86-7d18-4375-81b0-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:18.000Z",
            "modified": "2016-02-19T02:27:18.000Z",
            "description": "Automatically added (via 513cff34a785f3fac68a9e95ea29df0e)",
            "pattern": "[file:hashes.SHA1 = 'a92ae393cda77fec3d75d25b3513a05b3c56e7fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d8e-66b4-4d9a-ae53-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:26.000Z",
            "modified": "2016-02-19T02:27:26.000Z",
            "description": "Automatically added (via 5180d0d580de5a9bd7ca07b3a6e47472)",
            "pattern": "[file:hashes.SHA1 = 'db89131d53a17111302cd0eb6654e3bc2947d1d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d95-78a4-4c76-9f12-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:33.000Z",
            "modified": "2016-02-19T02:27:33.000Z",
            "description": "Automatically added (via 519baba9a218e80431ade47f5f4f231e)",
            "pattern": "[file:hashes.SHA1 = '717c723b36694387fced586270d50e47b854c804']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d9e-bc04-4eec-bc61-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:42.000Z",
            "modified": "2016-02-19T02:27:42.000Z",
            "description": "Automatically added (via 5256990919ea719d101f7474cfa0476c)",
            "pattern": "[file:hashes.SHA1 = '2836eace7c13145716f6d313b1178693e7f40407']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67da7-3578-4fd5-b7ef-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:51.000Z",
            "modified": "2016-02-19T02:27:51.000Z",
            "description": "Automatically added (via 5293f5cb3697ce0cb8c7f28d028d8892)",
            "pattern": "[file:hashes.SHA1 = 'a359c559c29b4362489486ec80855e6b71412070']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67db0-8424-422a-9423-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:00.000Z",
            "modified": "2016-02-19T02:28:00.000Z",
            "description": "Automatically added (via 52d8c2aa337c9c3c315fb4f5018d354e)",
            "pattern": "[file:hashes.SHA1 = '8cf49f7af12637b709d7e318271a97021775a2f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67db9-b39c-4ecc-aea2-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:09.000Z",
            "modified": "2016-02-19T02:28:09.000Z",
            "description": "Automatically added (via 530278991f3fe488611fcaab944f4cf9)",
            "pattern": "[file:hashes.SHA1 = '9173c86a174bb67d504896b44f958f6bdabc141d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dc0-61a4-406d-8256-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:16.000Z",
            "modified": "2016-02-19T02:28:16.000Z",
            "description": "Automatically added (via 530fa4501ebb2cab81870303e2548059)",
            "pattern": "[file:hashes.SHA1 = '82275bff0c5739186f96a8ce6c550a6a1303feef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dc8-3174-478c-975c-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:24.000Z",
            "modified": "2016-02-19T02:28:24.000Z",
            "description": "Automatically added (via 537569675cdfd3dbf95b5ed141457bb8)",
            "pattern": "[file:hashes.SHA1 = 'f82ab94f33072e1c607331072c9311e6aafa7acf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dd1-c750-4dc7-9346-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:33.000Z",
            "modified": "2016-02-19T02:28:33.000Z",
            "description": "Automatically added (via 53b600ade2b20a397dae5185f5d8d694)",
            "pattern": "[file:hashes.SHA1 = '08c5ae14f07a2cdef5f9fb065647c41468991d77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dd9-6834-43a1-b2d4-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:41.000Z",
            "modified": "2016-02-19T02:28:41.000Z",
            "description": "Automatically added (via 53b666e4e2d9cec823d4a98761bdd89e)",
            "pattern": "[file:hashes.SHA1 = '950f5805554e80661de50ae31d73b8f237134f7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67de0-66b8-4961-8fe5-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:48.000Z",
            "modified": "2016-02-19T02:28:48.000Z",
            "description": "Automatically added (via 53fbb1e7e759233dfcf4e46a10c2bff4)",
            "pattern": "[file:hashes.SHA1 = 'ca68cfdea732ae68c342b9ee963a059a1c7c9d69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67de8-cce4-4ae1-9130-44e1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:56.000Z",
            "modified": "2016-02-19T02:28:56.000Z",
            "description": "Automatically added (via 5453f46d406a4af23b9918aba112650f)",
            "pattern": "[file:hashes.SHA1 = '7f11b4199db0a790de5940dfba942a9f900aee57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67df0-e030-4682-a8eb-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:04.000Z",
            "modified": "2016-02-19T02:29:04.000Z",
            "description": "Automatically added (via 546c54f2664176329715d172f600f45b)",
            "pattern": "[file:hashes.SHA1 = 'd3863565be0392ac211e93821f40643cf742138e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67df8-1a54-4d57-872e-41d1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:12.000Z",
            "modified": "2016-02-19T02:29:12.000Z",
            "description": "Automatically added (via 548e0dd1e7c8591a2af7e8648a6f9dc3)",
            "pattern": "[file:hashes.SHA1 = 'd4a4645b2388d7cac1e024fe0e6130573a469408']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e00-c568-4017-a6b3-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:20.000Z",
            "modified": "2016-02-19T02:29:20.000Z",
            "description": "Automatically added (via 5498de731732a83a1b172485b0cfd2b7)",
            "pattern": "[file:hashes.SHA1 = '4fc65c7ae5864ac35072dee2cca5ed6ba042b76d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e09-268c-45ba-b6dc-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:29.000Z",
            "modified": "2016-02-19T02:29:29.000Z",
            "description": "Automatically added (via 54bf5e4574b7b712224fee9417e90317)",
            "pattern": "[file:hashes.SHA1 = '604258edbc37e8055073fb116c4c5230905072ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e11-2cac-44e0-b517-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:37.000Z",
            "modified": "2016-02-19T02:29:37.000Z",
            "description": "Automatically added (via 54bff23bdc7d1df24255923cc036882a)",
            "pattern": "[file:hashes.SHA1 = '463a1d252a02f41eeaa0438620e3897dc791fc94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e1a-c87c-4f5e-813d-4b9a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:46.000Z",
            "modified": "2016-02-19T02:29:46.000Z",
            "description": "Automatically added (via 54e1059398d9529e3a8ddac86de2a7c8)",
            "pattern": "[file:hashes.SHA1 = '75ecc7c1da4731649ea7541e73061cdd30773700']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e22-c5b8-4300-8f93-4ebf950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:54.000Z",
            "modified": "2016-02-19T02:29:54.000Z",
            "description": "Automatically added (via 55b6691b4453bec719deeb42fd3d1a1a)",
            "pattern": "[file:hashes.SHA1 = '4cb82d0c75cf9acfe58913b86edf981ef93da20d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e2a-970c-4bcf-b99e-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:02.000Z",
            "modified": "2016-02-19T02:30:02.000Z",
            "description": "Automatically added (via 55efd387dc99cab2add470dcf8687e44)",
            "pattern": "[file:hashes.SHA1 = 'f782cedc1911e65dddbb4f1fe38306a7bb2b9918']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e32-fbbc-4cbe-8ebc-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:10.000Z",
            "modified": "2016-02-19T02:30:10.000Z",
            "description": "Automatically added (via 562ee31e4b4a08e93b16583e9f91a6f0)",
            "pattern": "[file:hashes.SHA1 = '65739f081d3a33ee8d0368efe90950bf65d59ae2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e3a-e2c8-4285-87e4-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:18.000Z",
            "modified": "2016-02-19T02:30:18.000Z",
            "description": "Automatically added (via 566411553172f7f138a122b0468985bd)",
            "pattern": "[file:hashes.SHA1 = 'de59252b39a3728d06dcbf2c490786dec623ce47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e42-266c-4b01-b9a2-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:26.000Z",
            "modified": "2016-02-19T02:30:26.000Z",
            "description": "Automatically added (via 56cba55628ab54dcf9c315d3d68a2f82)",
            "pattern": "[file:hashes.SHA1 = 'ad78141913779decab993e69321a404602ede6e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e4a-68dc-46fa-ae2c-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:34.000Z",
            "modified": "2016-02-19T02:30:34.000Z",
            "description": "Automatically added (via 56d7b4f7a4680e2d23868455add42cdf)",
            "pattern": "[file:hashes.SHA1 = '40f75f0ad94e3986be709c353b3e9fd496a00bcc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e53-4988-4bd3-a931-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:43.000Z",
            "modified": "2016-02-19T02:30:43.000Z",
            "description": "Automatically added (via 56f6c72efa6ca1de0b026916e7701627)",
            "pattern": "[file:hashes.SHA1 = 'dd000d3956fc2e2bde78faabdb338464d102be62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e5b-7704-4c8b-9c27-4440950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:51.000Z",
            "modified": "2016-02-19T02:30:51.000Z",
            "description": "Automatically added (via 56ffbee40485ab0f5d6770434e51c4b0)",
            "pattern": "[file:hashes.SHA1 = '7f476e777d69a6383455380b9a0f59465d10a8b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e62-d110-451d-904f-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:58.000Z",
            "modified": "2016-02-19T02:30:58.000Z",
            "description": "Automatically added (via 571bb85dbfb7c00340646173bd2571b8)",
            "pattern": "[file:hashes.SHA1 = '40ef972aae80555a78c380c40d9513e6e128618c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e6a-e6b8-4e78-b02a-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:06.000Z",
            "modified": "2016-02-19T02:31:06.000Z",
            "description": "Automatically added (via 573641e4236631d20b5c6caba6420260)",
            "pattern": "[file:hashes.SHA1 = '93418a1bef4ecb02132ba266ae8aadea5b56a441']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e71-0334-4875-b161-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:13.000Z",
            "modified": "2016-02-19T02:31:13.000Z",
            "description": "Automatically added (via 5740c1075ec70fa2579734bf06b62d17)",
            "pattern": "[file:hashes.SHA1 = '2b8b7bdd467336bd7801687286fc93835da3e5cd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e79-856c-49da-8b17-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:21.000Z",
            "modified": "2016-02-19T02:31:21.000Z",
            "description": "Automatically added (via 583f02be634f83d05d1094ebc336bcef)",
            "pattern": "[file:hashes.SHA1 = '0395d60e8f105f26ec7ed8f9bd1a3ca7e778d558']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e81-98f4-4b00-9df2-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:29.000Z",
            "modified": "2016-02-19T02:31:29.000Z",
            "description": "Automatically added (via 58656a012354b630071e3a6ad7c034fb)",
            "pattern": "[file:hashes.SHA1 = '0f7df2f0a455be718e5173f59f37b5eaf979dccd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e89-a844-4af8-b207-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:37.000Z",
            "modified": "2016-02-19T02:31:37.000Z",
            "description": "Automatically added (via 587b82dcda2ddaf9082f2812b5732246)",
            "pattern": "[file:hashes.SHA1 = '2e3dcb45b9545c1f549a87ad5ef5c550dde73854']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e92-2f00-4cdb-bc0a-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:46.000Z",
            "modified": "2016-02-19T02:31:46.000Z",
            "description": "Automatically added (via 588fcee07679a08cf7873650c385d904)",
            "pattern": "[file:hashes.SHA1 = '701df1f3a83b2e74a350d71a61ff23c3936dd2ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e99-9290-4ed8-abfe-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:53.000Z",
            "modified": "2016-02-19T02:31:53.000Z",
            "description": "Automatically added (via 58ac2f2e4cc19bd406776678993fc9a3)",
            "pattern": "[file:hashes.SHA1 = 'a412232a0faa71a08ba96188f787dc1c688e87df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ea1-87ec-4e9f-8409-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:01.000Z",
            "modified": "2016-02-19T02:32:01.000Z",
            "description": "Automatically added (via 58d70a631212545bf605a31d9e9df631)",
            "pattern": "[file:hashes.SHA1 = 'ad54b569bcf4a628ced00b8b8a31a2b75c47038c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ea9-a098-4d06-baeb-49a5950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:09.000Z",
            "modified": "2016-02-19T02:32:09.000Z",
            "description": "Automatically added (via 58d9319ad2f5f63f32d7d90dbf0ba4c6)",
            "pattern": "[file:hashes.SHA1 = 'fceed0a754ca33da93ca25ad029408c75f6268d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67eb1-fa78-4069-b5d3-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:17.000Z",
            "modified": "2016-02-19T02:32:17.000Z",
            "description": "Automatically added (via 592f3cf5895898472c845d8d82a60c10)",
            "pattern": "[file:hashes.SHA1 = '67a19ad99425852e504124311cf01aecdddad44d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67eb8-b880-4467-9f85-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:24.000Z",
            "modified": "2016-02-19T02:32:24.000Z",
            "description": "Automatically added (via 5976b64ec844c5ef4196d74fa9806c52)",
            "pattern": "[file:hashes.SHA1 = '72e7655d97b837c26176a1576a246f96745e719b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ec0-3670-4b3d-8892-4d64950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:32.000Z",
            "modified": "2016-02-19T02:32:32.000Z",
            "description": "Automatically added (via 59976a782fb3135671134e73220f603e)",
            "pattern": "[file:hashes.SHA1 = '434d82752d274835dca3cbb554dd2d32d865923e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ec8-7544-4a94-853d-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:40.000Z",
            "modified": "2016-02-19T02:32:40.000Z",
            "description": "Automatically added (via 59e9719ca98e123ec5df78c13b77fced)",
            "pattern": "[file:hashes.SHA1 = '811a85cdcf5e94a4d65d1c19e74664aaafc298c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ed0-fc64-4005-8c5e-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:48.000Z",
            "modified": "2016-02-19T02:32:48.000Z",
            "description": "Automatically added (via 59fa56ad62c1535b3bdbf3300c13faf9)",
            "pattern": "[file:hashes.SHA1 = 'c7540ce881edbfa07eabaf6eaaef47f4aefec9a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ed8-d39c-47f1-a696-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:56.000Z",
            "modified": "2016-02-19T02:32:56.000Z",
            "description": "Automatically added (via 5a1d93b361d1cb794afd3071a5eacb03)",
            "pattern": "[file:hashes.SHA1 = '32ba4298ebb332ba46140842da62501c72f4762f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ee1-aa10-45ab-bc41-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:05.000Z",
            "modified": "2016-02-19T02:33:05.000Z",
            "description": "Automatically added (via 5a646f616870f509199bd96cca6c1bb3)",
            "pattern": "[file:hashes.SHA1 = '6e2bfd062550325214cffebe6ec2e1215c6c0e43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ee9-10a4-4b6f-8390-4e6e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:13.000Z",
            "modified": "2016-02-19T02:33:13.000Z",
            "description": "Automatically added (via 5a79bcb711f41a2081ffa73ed56a7e79)",
            "pattern": "[file:hashes.SHA1 = '59969428b4cb25b40982d0cf0c22e4be7c90e7fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ef2-13e4-47dc-8bdc-4a47950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:22.000Z",
            "modified": "2016-02-19T02:33:22.000Z",
            "description": "Automatically added (via 5a9c26a17aa63da18e2f3301271fe8c1)",
            "pattern": "[file:hashes.SHA1 = 'abc881d00ca851402937ecfcd29f03b21410c48c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67efa-800c-4c58-9474-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:30.000Z",
            "modified": "2016-02-19T02:33:30.000Z",
            "description": "Automatically added (via 5a9cd0d4f30ce8c43afaf9041acbe49a)",
            "pattern": "[file:hashes.SHA1 = '9b0edd90b8b31587fb68539eb77b089928d0d42f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f02-a08c-4282-a23b-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:38.000Z",
            "modified": "2016-02-19T02:33:38.000Z",
            "description": "Automatically added (via 5ac08cd5947f68bf917ccf0522fa628e)",
            "pattern": "[file:hashes.SHA1 = '8d64b40a13270b5f91e49a49292b864f48a067bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f0a-f560-48f0-9443-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:46.000Z",
            "modified": "2016-02-19T02:33:46.000Z",
            "description": "Automatically added (via 5b15fb90ccec6b1273a0dae20233267d)",
            "pattern": "[file:hashes.SHA1 = '8af1b8755b58cdf2a079903c8da6c141f9aa9fc9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f12-f494-4269-8d38-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:54.000Z",
            "modified": "2016-02-19T02:33:54.000Z",
            "description": "Automatically added (via 5bf4da8e21dd9c291dc45e2c1bd144d8)",
            "pattern": "[file:hashes.SHA1 = '739ad50e534e0b51a14689252aa194a35c05ad50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f1a-2630-446c-9dad-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:02.000Z",
            "modified": "2016-02-19T02:34:02.000Z",
            "description": "Automatically added (via 5c0c47a31ee1097f64365a37ccb466d3)",
            "pattern": "[file:hashes.SHA1 = 'afac794278ada3a591def3f2ea957027e967d6da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f22-7e60-4010-9ea8-4f71950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:10.000Z",
            "modified": "2016-02-19T02:34:10.000Z",
            "description": "Automatically added (via 5c0f062f831b5cf3cdcd1955a9d3884d)",
            "pattern": "[file:hashes.SHA1 = '9b36080cb98f4a769b4fd686eb3d5399a835d30d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f2a-a578-42d5-81d0-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:18.000Z",
            "modified": "2016-02-19T02:34:18.000Z",
            "description": "Automatically added (via 5c6369ff5ca2ea5a1647cac592fe73c3)",
            "pattern": "[file:hashes.SHA1 = 'f79db2ebfeaa6c9e73cea00a5793dbd9e775e9d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f32-7430-4152-8bce-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:26.000Z",
            "modified": "2016-02-19T02:34:26.000Z",
            "description": "Automatically added (via 5c66f516465205406511ecc828f5012e)",
            "pattern": "[file:hashes.SHA1 = '71084282a98bf1d4018e1be353f2243813fbae95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f3a-74c0-4c3f-ad6a-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:34.000Z",
            "modified": "2016-02-19T02:34:34.000Z",
            "description": "Automatically added (via 5cbd6680bd9efa694cf4660c31d58b49)",
            "pattern": "[file:hashes.SHA1 = '2eb869d525f9acd93295c95b14421570b007a878']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f42-01ac-4405-8a4a-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:42.000Z",
            "modified": "2016-02-19T02:34:42.000Z",
            "description": "Automatically added (via 5d061b5243b3589309b7b7d7ad76def6)",
            "pattern": "[file:hashes.SHA1 = 'b1c90389abb801dd0e0d3de02c3a6698d817da34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f4a-62c4-4f14-9697-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:50.000Z",
            "modified": "2016-02-19T02:34:50.000Z",
            "description": "Automatically added (via 5d5554fb0dbd32d6edba3cd62fa179e1)",
            "pattern": "[file:hashes.SHA1 = '12634e5fa8f88030f6f8daafc47252ddae20f3b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f52-413c-458a-907c-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:58.000Z",
            "modified": "2016-02-19T02:34:58.000Z",
            "description": "Automatically added (via 5dc07ff6ec990ef03b6ce8848ab46b5b)",
            "pattern": "[file:hashes.SHA1 = '04a7a135f62e4aa6bd0d6f64584f3933b2d25ad9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f5a-52c0-45e4-9d1e-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:06.000Z",
            "modified": "2016-02-19T02:35:06.000Z",
            "description": "Automatically added (via 5dfb5432542a63045eb91a3798b7f88a)",
            "pattern": "[file:hashes.SHA1 = '5608c9da0eca54b63cc693733780fc2c7f9f7196']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f62-985c-4ecd-9001-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:14.000Z",
            "modified": "2016-02-19T02:35:14.000Z",
            "description": "Automatically added (via 5dfddf866227708fa6ed4e8e9833acd4)",
            "pattern": "[file:hashes.SHA1 = 'a234414e80fc27907dc092c1d5b26125dd80407d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f6b-57e0-42ad-8825-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:23.000Z",
            "modified": "2016-02-19T02:35:23.000Z",
            "description": "Automatically added (via 5e1d7f56ccad472b46e4265866a8a4d3)",
            "pattern": "[file:hashes.SHA1 = '9bdccd9d232bf5ae671b1b2ee796da1670daff49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f73-0d40-43f9-935b-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:31.000Z",
            "modified": "2016-02-19T02:35:31.000Z",
            "description": "Automatically added (via 5e2db0759cc52c3381e7a1384694e7fe)",
            "pattern": "[file:hashes.SHA1 = 'd0ddda91d9ff19be3a399f7756bc47663ae2286d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f7b-06b4-4f41-922d-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:39.000Z",
            "modified": "2016-02-19T02:35:39.000Z",
            "description": "Automatically added (via 5e32d6a631cbf18488a34727680d9d77)",
            "pattern": "[file:hashes.SHA1 = 'e8fd736e5f3fed2e358f0f508b16f1f5ca8bab99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f84-f288-4794-9f94-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:48.000Z",
            "modified": "2016-02-19T02:35:48.000Z",
            "description": "Automatically added (via 5e34d67887904eff19decfa446b7ed05)",
            "pattern": "[file:hashes.SHA1 = '0c39896bc3360c6413c621e5211a09339186cd19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f8c-b330-4f6b-8e5c-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:56.000Z",
            "modified": "2016-02-19T02:35:56.000Z",
            "description": "Automatically added (via 5e8d36b27849c5f43f919dd6775c2331)",
            "pattern": "[file:hashes.SHA1 = '8be06d3fa253e47f4e131e442eaa43609a87792a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f95-8c90-4649-90bd-4e80950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:05.000Z",
            "modified": "2016-02-19T02:36:05.000Z",
            "description": "Automatically added (via 5ed3035a99ea8cd1ceb86b01d26cbeed)",
            "pattern": "[file:hashes.SHA1 = '3e45f95da714fd1ae10e121d42609e4996828e6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f9d-88b0-4364-addc-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:13.000Z",
            "modified": "2016-02-19T02:36:13.000Z",
            "description": "Automatically added (via 5ef44db2bb8744e024c57e050b976533)",
            "pattern": "[file:hashes.SHA1 = 'f0f8adfc20c423b5a75e6a538c4e4cdef2636360']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fa5-ca70-4638-a75b-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:21.000Z",
            "modified": "2016-02-19T02:36:21.000Z",
            "description": "Automatically added (via 5f299ca4a5ae1aee5b7bd09808066846)",
            "pattern": "[file:hashes.SHA1 = 'b3d4bf8e37a62a16d53d14ea3c532ba4f30510f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fad-2bb8-4f48-a5f4-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:29.000Z",
            "modified": "2016-02-19T02:36:29.000Z",
            "description": "Automatically added (via 5f3ad6793b517e78632b607fd15d29bc)",
            "pattern": "[file:hashes.SHA1 = 'e445e3d1feebe2f82d7e5e8441ed04939a5437ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fb5-46b8-4250-aa03-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:37.000Z",
            "modified": "2016-02-19T02:36:37.000Z",
            "description": "Automatically added (via 5f5714f3f945513cd29fbaf01dc2907c)",
            "pattern": "[file:hashes.SHA1 = '1c7c4a9d7179358ec4c0fbc87c007ab309c722df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fbd-1288-4917-8d42-4b35950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:45.000Z",
            "modified": "2016-02-19T02:36:45.000Z",
            "description": "Automatically added (via 5fdd8ec1538d6c99ed08959643bf49f7)",
            "pattern": "[file:hashes.SHA1 = '66f1f663d37050eaa241a2916c751a15ee980030']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fc5-02a0-4f3c-8ded-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:53.000Z",
            "modified": "2016-02-19T02:36:53.000Z",
            "description": "Automatically added (via 6064cc39273f5d5342b43a8a51ba6864)",
            "pattern": "[file:hashes.SHA1 = 'af086f1ea71da7a40e91541a37277bd65a08e176']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fcd-e1bc-440f-bbd0-49c6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:01.000Z",
            "modified": "2016-02-19T02:37:01.000Z",
            "description": "Automatically added (via 60b24e748a64264f4fae9f16b2ca23c2)",
            "pattern": "[file:hashes.SHA1 = 'c3d5fbe63a87c3178ae9f57a01f040b9b71a6b2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fd5-ecd4-4fdb-8aa9-4eb4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:09.000Z",
            "modified": "2016-02-19T02:37:09.000Z",
            "description": "Automatically added (via 60d0e01b425cd91f836f0b8a7ad0774e)",
            "pattern": "[file:hashes.SHA1 = 'd99cad0ae977ff44c7b854a084e08bf330896f13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fde-ee50-487f-b9c3-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:18.000Z",
            "modified": "2016-02-19T02:37:18.000Z",
            "description": "Automatically added (via 61585d25112c90331cc1d90e4e0f7693)",
            "pattern": "[file:hashes.SHA1 = '1a92999634d83a720837469a943517e12c4f3aae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fe6-38b0-42e5-871f-47a9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:26.000Z",
            "modified": "2016-02-19T02:37:26.000Z",
            "description": "Automatically added (via 6171344636619d697a634d9f17f2ec78)",
            "pattern": "[file:hashes.SHA1 = '98fe900c2ffa6959ab7c9a7f292e06b0124a4107']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fee-2350-4f6c-8f3f-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:34.000Z",
            "modified": "2016-02-19T02:37:34.000Z",
            "description": "Automatically added (via 61715df14430272c3919c798303c8404)",
            "pattern": "[file:hashes.SHA1 = 'c5bd35d15a9dbcca8b6db755e258a91f50bbd7f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ff6-4918-43d1-8503-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:42.000Z",
            "modified": "2016-02-19T02:37:42.000Z",
            "description": "Automatically added (via 61855d7984394af22608d72746ef3a29)",
            "pattern": "[file:hashes.SHA1 = '12b778cd9b040538d9c30ef912a22f40b4006079']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ffe-163c-48c3-af44-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:50.000Z",
            "modified": "2016-02-19T02:37:50.000Z",
            "description": "Automatically added (via 61899ae0740bd011b764c0edce2f5ee2)",
            "pattern": "[file:hashes.SHA1 = '7db41ad44633804430b3a098e424fc270f42ae81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68006-bc2c-46fb-a4fb-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:58.000Z",
            "modified": "2016-02-19T02:37:58.000Z",
            "description": "Automatically added (via 62465a99bc0167e4062847b8f92e87db)",
            "pattern": "[file:hashes.SHA1 = '2b62cb44d3c937719af6686948cb21b3333416a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6800f-91e0-4838-be45-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:07.000Z",
            "modified": "2016-02-19T02:38:07.000Z",
            "description": "Automatically added (via 62711722512617a63145df4d7bd3ed78)",
            "pattern": "[file:hashes.SHA1 = 'a66131aef278b09e3eee431500be6dff73978228']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68018-8478-4d7e-a458-4530950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:16.000Z",
            "modified": "2016-02-19T02:38:16.000Z",
            "description": "Automatically added (via 6276a32e4bbfaad7bbf5f53c576c42a2)",
            "pattern": "[file:hashes.SHA1 = '49809fcf8979a6008df7870ba371a564c61de0a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68021-0ee4-4809-a811-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:25.000Z",
            "modified": "2016-02-19T02:38:25.000Z",
            "description": "Automatically added (via 62a844486cd21c8dd3c82d9d802e365f)",
            "pattern": "[file:hashes.SHA1 = '48d7e015b1739040e02b0cfd682f0c084449604f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68029-0c70-4146-8235-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:33.000Z",
            "modified": "2016-02-19T02:38:33.000Z",
            "description": "Automatically added (via 62d2f6a93da9d0fa731b54e341f2ee5b)",
            "pattern": "[file:hashes.SHA1 = '1ba9c0a3f8730caf7d8b292ae699286e4cf896c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68032-0a70-4be9-abc5-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:42.000Z",
            "modified": "2016-02-19T02:38:42.000Z",
            "description": "Automatically added (via 62fa5fe07bdbb0ca8b57837b2df1e573)",
            "pattern": "[file:hashes.SHA1 = 'f54674ff9289fbbe85aacf1c750f7d4f8b89cc57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6803a-08b0-438b-b47a-421a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:50.000Z",
            "modified": "2016-02-19T02:38:50.000Z",
            "description": "Automatically added (via 6309611e0bf6d343d1a98fd7875d10b3)",
            "pattern": "[file:hashes.SHA1 = '577b1e97b6a2a89c213913ff2cd76a28271d88d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68042-57dc-4d5a-91a7-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:58.000Z",
            "modified": "2016-02-19T02:38:58.000Z",
            "description": "Automatically added (via 63387c03369a0b18008b51ad79557063)",
            "pattern": "[file:hashes.SHA1 = '78a64b08dd66377fbf08c2e88f1ac717b061bcd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6804b-9a54-4dbd-be5c-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:07.000Z",
            "modified": "2016-02-19T02:39:07.000Z",
            "description": "Automatically added (via 6350fafe9dbfcd0e926ad177a7929c77)",
            "pattern": "[file:hashes.SHA1 = '8b0e972eab749cdb93abdd01fb9e47630066bf73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68053-9790-45c1-901b-470f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:15.000Z",
            "modified": "2016-02-19T02:39:15.000Z",
            "description": "Automatically added (via 6351d22825d6539944ded313ea5f2b08)",
            "pattern": "[file:hashes.SHA1 = '6b13a24f6a2fa87ae75a6c57b0230606ce728909']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6805b-e0c4-4002-8d4f-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:23.000Z",
            "modified": "2016-02-19T02:39:23.000Z",
            "description": "Automatically added (via 63753079dc6a5d2fc6d65ef9136bf904)",
            "pattern": "[file:hashes.SHA1 = 'adf7e8c7f1994cec718cec67687b67aeede1fe3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68064-73c8-4e37-8457-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:32.000Z",
            "modified": "2016-02-19T02:39:32.000Z",
            "description": "Automatically added (via 63a78423be4006a70dacd1d9a23f8c43)",
            "pattern": "[file:hashes.SHA1 = '0bf08e04d8452444cf2fb4072e810e00a043ab0c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6806c-c220-46b9-a258-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:40.000Z",
            "modified": "2016-02-19T02:39:40.000Z",
            "description": "Automatically added (via 63afcc988580d0931b5c74c0095700e2)",
            "pattern": "[file:hashes.SHA1 = '636f43d3a0d402bbff9a6645740e17471a39018b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68074-46d8-4362-aff5-4b77950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:48.000Z",
            "modified": "2016-02-19T02:39:48.000Z",
            "description": "Automatically added (via 63ef6a174f444de00765566a6dcf23ed)",
            "pattern": "[file:hashes.SHA1 = '68904adb656a448f0c6c435a31ed1928d588a9b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6807d-4a54-4d26-ba86-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:57.000Z",
            "modified": "2016-02-19T02:39:57.000Z",
            "description": "Automatically added (via 63f2453b68acf7e99064b7e7e70da832)",
            "pattern": "[file:hashes.SHA1 = 'd225d1c5e617b4597cfa40248521ffa50e737a24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68086-df94-4c4e-b681-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:06.000Z",
            "modified": "2016-02-19T02:40:06.000Z",
            "description": "Automatically added (via 6428908970adf820bb09b25bf47f8f8a)",
            "pattern": "[file:hashes.SHA1 = 'f5fce41fe57262a6b609ccc5d779724e138c4c91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6808e-e4d0-4844-89ad-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:14.000Z",
            "modified": "2016-02-19T02:40:14.000Z",
            "description": "Automatically added (via 6442a0e60abf3c3bdfce7435e9161e45)",
            "pattern": "[file:hashes.SHA1 = 'ca16e38da372396090d16efb50120f93ac3cdaac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68097-7510-4a65-a2fc-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:23.000Z",
            "modified": "2016-02-19T02:40:23.000Z",
            "description": "Automatically added (via 645d2c84535267e4982e06920d95b4d7)",
            "pattern": "[file:hashes.SHA1 = '21cfe90556230d554eecdb554960cf281aa73e68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6809f-9cac-4b0c-82ab-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:31.000Z",
            "modified": "2016-02-19T02:40:31.000Z",
            "description": "Automatically added (via 649cdfd5ac763df955bb37c196c5310d)",
            "pattern": "[file:hashes.SHA1 = 'a7edafa9f81c27689fe337ee8c2ba961549e8217']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680a7-ce44-4853-8b95-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:39.000Z",
            "modified": "2016-02-19T02:40:39.000Z",
            "description": "Automatically added (via 649e3ab10fd1872a3fc5045786fe976e)",
            "pattern": "[file:hashes.SHA1 = '9bfc7739dfb4d9b3ac039fa2c59bb8f79b1bef6b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680af-6c1c-418d-814a-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:47.000Z",
            "modified": "2016-02-19T02:40:47.000Z",
            "description": "Automatically added (via 64f5cfa09f7b1d0500cf723849bb54bc)",
            "pattern": "[file:hashes.SHA1 = '9c9d90925a8a94f221b231b73725cb3e52c859b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680b8-ed88-483e-bc99-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:56.000Z",
            "modified": "2016-02-19T02:40:56.000Z",
            "description": "Automatically added (via 65553580bc75d69a6b4499e932a90f75)",
            "pattern": "[file:hashes.SHA1 = 'abac0f0fe1e1a0a64d71c1aba41476247de15513']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680c1-d5ec-476b-8147-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:05.000Z",
            "modified": "2016-02-19T02:41:05.000Z",
            "description": "Automatically added (via 6591f3d21b9b7c84a4949a40416f10ab)",
            "pattern": "[file:hashes.SHA1 = '22182b750bbf73e5ebe227dae568d5dd21f04fa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680cb-76d8-43b8-82ec-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:15.000Z",
            "modified": "2016-02-19T02:41:15.000Z",
            "description": "Automatically added (via 659351d021e216d4329a76fb558da7d3)",
            "pattern": "[file:hashes.SHA1 = 'b99df3561c67f27b12ad4daf0da219292403a53d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680d4-bacc-459d-873a-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:24.000Z",
            "modified": "2016-02-19T02:41:24.000Z",
            "description": "Automatically added (via 65e82c099ac7526e1ae8d17c50234a6c)",
            "pattern": "[file:hashes.SHA1 = '5a3f6e39e6be6e48d953337508be859e4b0d9855']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680dd-7398-4875-8364-4526950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:33.000Z",
            "modified": "2016-02-19T02:41:33.000Z",
            "description": "Automatically added (via 661af3ede4240c9320d8aa8132158a89)",
            "pattern": "[file:hashes.SHA1 = 'fa52083b7c9a6b417ddeb3abfd08ab0a35c2bff5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680e6-a310-4b95-9977-407d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:42.000Z",
            "modified": "2016-02-19T02:41:42.000Z",
            "description": "Automatically added (via 66305e65d0feafa5933c2ade06bb4041)",
            "pattern": "[file:hashes.SHA1 = '894e3c3503fd97dd0da53b4cc683db42def55745']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680f0-aabc-4eea-8cf0-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:52.000Z",
            "modified": "2016-02-19T02:41:52.000Z",
            "description": "Automatically added (via 664cec0ae7bcf4b3c079b0bfa67d56ad)",
            "pattern": "[file:hashes.SHA1 = '72edd7851c64f2f1936308027feeaea776492d0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680fa-0100-4fe4-b427-4ded950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:02.000Z",
            "modified": "2016-02-19T02:42:02.000Z",
            "description": "Automatically added (via 6660e25213dfca8e51bd9150f548ae0b)",
            "pattern": "[file:hashes.SHA1 = '1af8c0a3093f884e07ba818c681a22126e1f55cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68104-d1a4-45cd-abb1-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:12.000Z",
            "modified": "2016-02-19T02:42:12.000Z",
            "description": "Automatically added (via 669491dda16b3ac078d878575b5ec585)",
            "pattern": "[file:hashes.SHA1 = '9d844e2fbafaefd124aa923a04e29a158cf7994e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6810d-63bc-48fd-8d87-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:21.000Z",
            "modified": "2016-02-19T02:42:21.000Z",
            "description": "Automatically added (via 66aae26b41db39c7fe70705456e9cbee)",
            "pattern": "[file:hashes.SHA1 = 'b3ab8173d9819880ed0cedcb8c59d29344f91e44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68117-4584-4548-bf8b-42e2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:31.000Z",
            "modified": "2016-02-19T02:42:31.000Z",
            "description": "Automatically added (via 66b271ec0849849ff7b2548af6dd824a)",
            "pattern": "[file:hashes.SHA1 = '8136eb961453d5b44675c57af8f1d9f8e5f14252']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6811f-3c08-4af8-abfc-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:39.000Z",
            "modified": "2016-02-19T02:42:39.000Z",
            "description": "Automatically added (via 6739304f1db705ec40bb560c84a22b3f)",
            "pattern": "[file:hashes.SHA1 = 'fec80f7919f37b8d6ceb25bd394594e9abe67375']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68128-889c-4311-8df4-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:48.000Z",
            "modified": "2016-02-19T02:42:48.000Z",
            "description": "Automatically added (via 6744bbf302c735fd7c73e19d805cb018)",
            "pattern": "[file:hashes.SHA1 = '1cc4b88a4a8bbbd72c7d8d873a5a48b2e510cc56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68130-0fb8-4ab7-ba76-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:56.000Z",
            "modified": "2016-02-19T02:42:56.000Z",
            "description": "Automatically added (via 67478481b5b749f1c6ad1e0517cba15b)",
            "pattern": "[file:hashes.SHA1 = 'b5456b2b9c52c1533a3c6951ef06f5fc232472f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6813a-2e70-4df6-bac2-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:06.000Z",
            "modified": "2016-02-19T02:43:06.000Z",
            "description": "Automatically added (via 676395b6bb8253d113feb602f3b9d7ea)",
            "pattern": "[file:hashes.SHA1 = 'a7ee5baf573e9d9995c6794673782c493ec55f54']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68144-2b98-479a-a6f7-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:16.000Z",
            "modified": "2016-02-19T02:43:16.000Z",
            "description": "Automatically added (via 68b6687c28bf2ba97e473e97bd948f19)",
            "pattern": "[file:hashes.SHA1 = 'baa42a7ceb318097ecbff1d15ec6e3244a578c95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6814e-544c-4037-9fb1-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:26.000Z",
            "modified": "2016-02-19T02:43:26.000Z",
            "description": "Automatically added (via 694fcf4c494375cea82e727d2fca3616)",
            "pattern": "[file:hashes.SHA1 = '143dca135126f2f7f88a86a0f63cd893210d877f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68158-9244-40ad-ad54-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:36.000Z",
            "modified": "2016-02-19T02:43:36.000Z",
            "description": "Automatically added (via 6953f552d08985ef2e8d4deee8c59baf)",
            "pattern": "[file:hashes.SHA1 = '97c8c6baed59f85874e51756c79d11185f9e34a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68163-1d40-4278-aa3f-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:47.000Z",
            "modified": "2016-02-19T02:43:47.000Z",
            "description": "Automatically added (via 699f1ebc6fd7881c0b7943930286144d)",
            "pattern": "[file:hashes.SHA1 = '5ea0f93f9d382e474799e0da871f283499598c5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6816d-faf0-4131-84e9-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:57.000Z",
            "modified": "2016-02-19T02:43:57.000Z",
            "description": "Automatically added (via 69bc2188c29b1852bc1b376a0116e2a0)",
            "pattern": "[file:hashes.SHA1 = 'ac6058f76395963e8627ee31f06d2e760b1d22ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68176-f464-421f-8330-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:06.000Z",
            "modified": "2016-02-19T02:44:06.000Z",
            "description": "Automatically added (via 6a23195821c68de443ba6b76448784da)",
            "pattern": "[file:hashes.SHA1 = '6f956fca4aa64f6ee81a2b3c53a0ddf82fa21fed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68180-7624-4a05-9fa2-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:16.000Z",
            "modified": "2016-02-19T02:44:16.000Z",
            "description": "Automatically added (via 6a6244118378d4f205ceb425743ee6af)",
            "pattern": "[file:hashes.SHA1 = 'c08a7767dacf8778c2f419d06634aae4e1a2dfa6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68189-c504-43f2-a46a-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:25.000Z",
            "modified": "2016-02-19T02:44:25.000Z",
            "description": "Automatically added (via 6aab72f6454f46e632c0aa9cc3cba184)",
            "pattern": "[file:hashes.SHA1 = '2c3935accc96affa2b30e1ccd4bf7280ab95e847']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68193-1b18-45f8-bef3-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:35.000Z",
            "modified": "2016-02-19T02:44:35.000Z",
            "description": "Automatically added (via 6ad6618466429bd61ab7217c94f38c73)",
            "pattern": "[file:hashes.SHA1 = '99c796aca7af65c8006b10079e5204379307d57b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6819c-cc30-4450-b5ad-4aab950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:44.000Z",
            "modified": "2016-02-19T02:44:44.000Z",
            "description": "Automatically added (via 6b5cdaf09a00b83ceac915d1ea75c692)",
            "pattern": "[file:hashes.SHA1 = '9d5e8cad61e489c9f1415541cfa9131f19ed021d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681a6-3ed0-45d1-a102-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:54.000Z",
            "modified": "2016-02-19T02:44:54.000Z",
            "description": "Automatically added (via 6c1e8df569e8b2799ecdd0bc1b390f2c)",
            "pattern": "[file:hashes.SHA1 = '7b7a88bfe6b03053fdfb7fd3253c38a574d55e5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681b0-0c8c-4a2e-b462-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:04.000Z",
            "modified": "2016-02-19T02:45:04.000Z",
            "description": "Automatically added (via 6d029b7ecd09296440caf7f75d41a6b0)",
            "pattern": "[file:hashes.SHA1 = '698a9bb165e13e2cf7c9a713e16e53a223146979']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681b9-98d4-4454-964e-49e0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:13.000Z",
            "modified": "2016-02-19T02:45:13.000Z",
            "description": "Automatically added (via 6d0f75e9d35dd718e2379be464814595)",
            "pattern": "[file:hashes.SHA1 = '35e3767df9436044461d1e507e67ad821aa6eb15']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681c2-53f0-445a-863b-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:22.000Z",
            "modified": "2016-02-19T02:45:22.000Z",
            "description": "Automatically added (via 6d2d41fe8e4590a4b5c2ab7b6cc066fd)",
            "pattern": "[file:hashes.SHA1 = '9791cbf9311367fe29629e1cdf71a25ac480d983']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681cc-c4c0-4f19-b1f0-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:32.000Z",
            "modified": "2016-02-19T02:45:32.000Z",
            "description": "Automatically added (via 6d31bd9369ecd340b728c47458661a71)",
            "pattern": "[file:hashes.SHA1 = '6c4d1ba5325c9b0148c24fc3ea2278dee1501f03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681d6-f760-4ec7-8cfa-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:42.000Z",
            "modified": "2016-02-19T02:45:42.000Z",
            "description": "Automatically added (via 6d341f94814948b487f998dd2b5e5919)",
            "pattern": "[file:hashes.SHA1 = '92b305cc106087d11bb5c95c1f0e22f4b0fef5da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681df-3ab8-4c67-b755-4280950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:51.000Z",
            "modified": "2016-02-19T02:45:51.000Z",
            "description": "Automatically added (via 6d8282a88c693ceabe0c61ac1dd8af64)",
            "pattern": "[file:hashes.SHA1 = 'f8e67bcfaf41c51fceb2b9358cfb04c90a714359']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681e9-d978-4561-af92-40a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:01.000Z",
            "modified": "2016-02-19T02:46:01.000Z",
            "description": "Automatically added (via 6de8c91e4affc1852e1b277035496053)",
            "pattern": "[file:hashes.SHA1 = '703b9caa3e7abdf58e58f952be3f953c6f1117b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681f3-0c3c-4c8c-9d9a-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:11.000Z",
            "modified": "2016-02-19T02:46:11.000Z",
            "description": "Automatically added (via 6ded244e76931be71177001fa4c1fc6f)",
            "pattern": "[file:hashes.SHA1 = 'f58fc374450b9bb61772c127ae000cd884ae68a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681fc-0f90-4152-b13b-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:20.000Z",
            "modified": "2016-02-19T02:46:20.000Z",
            "description": "Automatically added (via 6e408cd3b6e32c0ee073aa43bcfd4ea6)",
            "pattern": "[file:hashes.SHA1 = '49ba6c4ae0a695b8fa485be7dc169d9b5b49bfc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68206-5518-4572-a535-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:30.000Z",
            "modified": "2016-02-19T02:46:30.000Z",
            "description": "Automatically added (via 6e4ccd9bfecfa328c559018c600a1cba)",
            "pattern": "[file:hashes.SHA1 = '7e14fe7188f71743bf4a5f5e824340b941bc0481']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68210-a54c-4ea8-9951-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:40.000Z",
            "modified": "2016-02-19T02:46:40.000Z",
            "description": "Automatically added (via 6e8747bfa3f07a0763a4ce12cfbcaee5)",
            "pattern": "[file:hashes.SHA1 = 'bfd0c2b87d92732b2842ccc74b31f49222d760d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6821a-5260-47d7-803c-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:50.000Z",
            "modified": "2016-02-19T02:46:50.000Z",
            "description": "Automatically added (via 6ee00ae41ec5d34d801937b42edf7255)",
            "pattern": "[file:hashes.SHA1 = 'c8c039e5bc4fa0983638139aac81b9104cf24de0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68223-6020-460a-9e0d-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:59.000Z",
            "modified": "2016-02-19T02:46:59.000Z",
            "description": "Automatically added (via 6ee80b1f795689193fab16554fecfc73)",
            "pattern": "[file:hashes.SHA1 = '64b86513f4c9ce2a7f4a293a1ebf0b104fa938f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6822d-4f94-4bd0-8eb1-4b90950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:09.000Z",
            "modified": "2016-02-19T02:47:09.000Z",
            "description": "Automatically added (via 6ef75c52444b75c6d36acc23bab04a1a)",
            "pattern": "[file:hashes.SHA1 = '13c8a2fdb425e3b297baaad6889ae1a13b82f318']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68236-2564-4b9f-9d17-4926950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:18.000Z",
            "modified": "2016-02-19T02:47:18.000Z",
            "description": "Automatically added (via 6f0059c09d2647d36d4040dbe18d9b59)",
            "pattern": "[file:hashes.SHA1 = '9d83637ba274e523c212aa6e0776528100fd9925']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68240-8620-44c1-8274-4090950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:28.000Z",
            "modified": "2016-02-19T02:47:28.000Z",
            "description": "Automatically added (via 6f4ba5101e475428da2039a439de5098)",
            "pattern": "[file:hashes.SHA1 = 'b9a75b9a0904a2d5572ff2630c8d16c3ef20d019']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6824a-ccf4-49d8-9a9c-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:38.000Z",
            "modified": "2016-02-19T02:47:38.000Z",
            "description": "Automatically added (via 6f66ffacc1011bfdd4a4d0b3abc356c8)",
            "pattern": "[file:hashes.SHA1 = '8a8eead53733211715631fb2c893d79c21b9cc49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68254-a784-456f-a81e-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:48.000Z",
            "modified": "2016-02-19T02:47:48.000Z",
            "description": "Automatically added (via 6f7fc54b43b725e0038d83d005e5984e)",
            "pattern": "[file:hashes.SHA1 = 'c38251f95571e1ff5e47e8acf99f7a225e1aa17b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6825e-0f38-4f46-999b-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:58.000Z",
            "modified": "2016-02-19T02:47:58.000Z",
            "description": "Automatically added (via 706815c4636c0cc86d1d00cfe27fd018)",
            "pattern": "[file:hashes.SHA1 = '2b5b14de7dbf8b2c8413c076721b3a07079423f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68268-e864-4c13-89bb-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:08.000Z",
            "modified": "2016-02-19T02:48:08.000Z",
            "description": "Automatically added (via 70e4943f44bf3bd3f1743303e3a4d0f7)",
            "pattern": "[file:hashes.SHA1 = 'b32870af306078aba345717788e3cfd9def65e72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68271-1df0-4417-8ee0-4244950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:17.000Z",
            "modified": "2016-02-19T02:48:17.000Z",
            "description": "Automatically added (via 713d9d30d1c7f3db3b332e37de83f020)",
            "pattern": "[file:hashes.SHA1 = 'b05fa1948478ac8300a841c557c0f38bdcaf4fbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6827c-7100-414a-8179-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:28.000Z",
            "modified": "2016-02-19T02:48:28.000Z",
            "description": "Automatically added (via 71c9337aa440174dec4c18adfd7b8d5a)",
            "pattern": "[file:hashes.SHA1 = '1575fb3fcc9d6e9e8823a4164f69a8d77ac70d73']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68288-edd4-4645-86d9-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:40.000Z",
            "modified": "2016-02-19T02:48:40.000Z",
            "description": "Automatically added (via 71e537385b2a0ee22c671bbcd2b208cb)",
            "pattern": "[file:hashes.SHA1 = 'abb05cc01c18e95316109e022ea3250a199240ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68292-a674-4da0-a6af-454d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:50.000Z",
            "modified": "2016-02-19T02:48:50.000Z",
            "description": "Automatically added (via 721dcd256be01a8c59f4229a83bb053c)",
            "pattern": "[file:hashes.SHA1 = 'c4e15eb75a009678bdc891918782dc0fd559e684']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6829c-2a44-4c29-860c-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:00.000Z",
            "modified": "2016-02-19T02:49:00.000Z",
            "description": "Automatically added (via 72a5a130fdd7c4032781a1d58fed9af7)",
            "pattern": "[file:hashes.SHA1 = 'e6d31dbe2aa17d59c4cd17431121bef0da443ed7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682a6-0f70-45de-b8ed-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:10.000Z",
            "modified": "2016-02-19T02:49:10.000Z",
            "description": "Automatically added (via 72aa176d310d8b6334eba59db4568ee1)",
            "pattern": "[file:hashes.SHA1 = '0d3594dc85741b1f9cbca062eeee5b5559a5cbcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682b0-6418-4e2f-b6b9-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:20.000Z",
            "modified": "2016-02-19T02:49:20.000Z",
            "description": "Automatically added (via 72f1b61aa8a12d2ce7f9ef94925d9a76)",
            "pattern": "[file:hashes.SHA1 = '73d13dc0c6420a50497d78f6588a1d16a42c504f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682ba-61d0-41ff-85f0-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:30.000Z",
            "modified": "2016-02-19T02:49:30.000Z",
            "description": "Automatically added (via 730a9a2eaa4a33bf9f0bcccc72e65b5a)",
            "pattern": "[file:hashes.SHA1 = 'c328939c93e16bed825dddb4c0fe53a7ac163ed1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682c4-cdf8-4b5e-8237-4377950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:40.000Z",
            "modified": "2016-02-19T02:49:40.000Z",
            "description": "Automatically added (via 733679a83a0dfe2da4aebb26f237f096)",
            "pattern": "[file:hashes.SHA1 = '66f6d86764f697bb2b37823db7dbcd64c2a03fe0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682ce-08c0-4b2e-a59f-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:50.000Z",
            "modified": "2016-02-19T02:49:50.000Z",
            "description": "Automatically added (via 73556660c0f2ad42974fb309f01a45a1)",
            "pattern": "[file:hashes.SHA1 = '58bc72afd86ebd56d5bb0ec3584ef13b35686dbd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682d8-5bfc-4412-8198-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:00.000Z",
            "modified": "2016-02-19T02:50:00.000Z",
            "description": "Automatically added (via 737ad50c27a64287b911a9ecad99a362)",
            "pattern": "[file:hashes.SHA1 = '80f7cb79f25d5665a81399cfb53ce2eff4de1486']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682e1-e940-47f4-b48c-4b4b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:09.000Z",
            "modified": "2016-02-19T02:50:09.000Z",
            "description": "Automatically added (via 73860601876c0db8e8226be6d8e886a9)",
            "pattern": "[file:hashes.SHA1 = '2eca1c96e70e403ad898acb5dfc66208d1b7b522']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682eb-64e4-4d5d-87e0-47ee950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:19.000Z",
            "modified": "2016-02-19T02:50:19.000Z",
            "description": "Automatically added (via 738d6a9ed10051868d025dd638ca0302)",
            "pattern": "[file:hashes.SHA1 = 'c4b7cefb60c5801b8a19f5163f046938c253a97a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682f4-9a70-4b77-98fb-42d3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:28.000Z",
            "modified": "2016-02-19T02:50:28.000Z",
            "description": "Automatically added (via 73a88fbb19ee7d08d7c13a5cf8bbd0a1)",
            "pattern": "[file:hashes.SHA1 = 'ea8c28a7833b4936f24bd9701e7cccead06efeec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682fe-8788-4cd3-9f75-4741950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:38.000Z",
            "modified": "2016-02-19T02:50:38.000Z",
            "description": "Automatically added (via 7452948372e58f80d9404640f6ea87c0)",
            "pattern": "[file:hashes.SHA1 = 'f8941540cc119bf345cf7160be14fe2952f8cd6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68306-287c-4933-b2a3-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:46.000Z",
            "modified": "2016-02-19T02:50:46.000Z",
            "description": "Automatically added (via 745450aefc4b6b9d8e039ddd2ea784db)",
            "pattern": "[file:hashes.SHA1 = 'e2ddb148187d0d6839c5a33b5cceb71004e3ec1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6830f-3890-4bbf-b593-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:55.000Z",
            "modified": "2016-02-19T02:50:55.000Z",
            "description": "Automatically added (via 7489435adccf5344738a3bfb3e0d184c)",
            "pattern": "[file:hashes.SHA1 = '1991be9d13dbc77d57396089d8d18f15950bc58d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68318-9f8c-4bd8-a727-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:04.000Z",
            "modified": "2016-02-19T02:51:04.000Z",
            "description": "Automatically added (via 74cdcee5b0ecb15e12464ced94d5e5e3)",
            "pattern": "[file:hashes.SHA1 = '17516428a579018c94370719640277d4dcaa693a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68321-a4f4-484e-8a02-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:13.000Z",
            "modified": "2016-02-19T02:51:13.000Z",
            "description": "Automatically added (via 74dc44ec5607dab2315b817756283755)",
            "pattern": "[file:hashes.SHA1 = '9bd6951c6545c6f604da120d582f986e76587058']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6832a-feec-4f8b-9988-48f0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:22.000Z",
            "modified": "2016-02-19T02:51:22.000Z",
            "description": "Automatically added (via 7534d5c418f5b0d5b7937f6a8733e28c)",
            "pattern": "[file:hashes.SHA1 = '2dd08f20ad82062fbb2d5d9902ab8aefe11a9e7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68333-6a14-42de-b1b7-4234950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:31.000Z",
            "modified": "2016-02-19T02:51:31.000Z",
            "description": "Automatically added (via 75be6fd319183e9eeff7247ce44de97f)",
            "pattern": "[file:hashes.SHA1 = '3c58fd6e4a366a5992edfb426a87e40c1586945c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6833b-fe20-437b-aa57-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:39.000Z",
            "modified": "2016-02-19T02:51:39.000Z",
            "description": "Automatically added (via 76402e5f7b65508628b1493be4f5e16f)",
            "pattern": "[file:hashes.SHA1 = 'd7b3b971595e347f2c1f09d1d4b6d3f21fe2dfa2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68344-9570-43c4-8daa-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:48.000Z",
            "modified": "2016-02-19T02:51:48.000Z",
            "description": "Automatically added (via 7667ca9ed6154684ec3f12cef816bb1f)",
            "pattern": "[file:hashes.SHA1 = 'c026245968f03a786faac5083768bcc19ac99df9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6834f-8c68-468b-8f0b-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:59.000Z",
            "modified": "2016-02-19T02:51:59.000Z",
            "description": "Automatically added (via 77014601da5648514ee3174d35a5fb77)",
            "pattern": "[file:hashes.SHA1 = '8d19574ed0cef4b6bb54d3e2288514b248c7eab1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68359-2590-4053-bd33-4134950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:09.000Z",
            "modified": "2016-02-19T02:52:09.000Z",
            "description": "Automatically added (via 77538c93a4b609482a44d8ddf5077768)",
            "pattern": "[file:hashes.SHA1 = 'b650e24c7ade50fad9bed4c8481080e12f9e6726']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68364-fd78-423f-833e-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:20.000Z",
            "modified": "2016-02-19T02:52:20.000Z",
            "description": "Automatically added (via 775bf30117b411863bf85ce2c2c09a7b)",
            "pattern": "[file:hashes.SHA1 = '7323e210db3fdcd0664ec2da6470ae43c9b1c1ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6836f-78dc-4ce8-9c7e-4e32950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:31.000Z",
            "modified": "2016-02-19T02:52:31.000Z",
            "description": "Automatically added (via 7810fdbd1e4ecc5fe85d3f2fef5268fb)",
            "pattern": "[file:hashes.SHA1 = '953cc1deaade00d85420e8634f819b53c8150c6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68379-63f4-497a-9cde-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:41.000Z",
            "modified": "2016-02-19T02:52:41.000Z",
            "description": "Automatically added (via 78a0e765dab05219834e5b4841f2ba62)",
            "pattern": "[file:hashes.SHA1 = 'efc20f06461132f66880b8d255f44d0c1211db88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68382-6618-4f51-9739-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:50.000Z",
            "modified": "2016-02-19T02:52:50.000Z",
            "description": "Automatically added (via 78be81777132ccb3c5588970b11fed72)",
            "pattern": "[file:hashes.SHA1 = 'bcb83379dcd5d66814f5cd51e6ecc40ded6cc664']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6838b-a858-4a7e-895f-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:59.000Z",
            "modified": "2016-02-19T02:52:59.000Z",
            "description": "Automatically added (via 78cb2b48acc04000177a4cedd1ca799f)",
            "pattern": "[file:hashes.SHA1 = '279a37b0ad800f9173c634913039637221aa119d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68394-b5e4-4a13-ae99-494e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:08.000Z",
            "modified": "2016-02-19T02:53:08.000Z",
            "description": "Automatically added (via 7934ad47736324f3532a63218407f0c7)",
            "pattern": "[file:hashes.SHA1 = 'fa1461c7b6d87fb3f0270ca7f51a695dee4fc4f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6839f-d4e4-4550-9790-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:19.000Z",
            "modified": "2016-02-19T02:53:19.000Z",
            "description": "Automatically added (via 7979a338fdbdde2255361a20b50dcd61)",
            "pattern": "[file:hashes.SHA1 = '59d220b368ab305709f1e27507df9d7a9ccb024e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683a9-55f4-42c7-a897-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:29.000Z",
            "modified": "2016-02-19T02:53:29.000Z",
            "description": "Automatically added (via 799159b25b2b844f21c316597d38e874)",
            "pattern": "[file:hashes.SHA1 = '2a2afd8db9f3deacecd4424ba19c44ce628d4aa8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683b3-2d4c-4fa8-a1d2-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:39.000Z",
            "modified": "2016-02-19T02:53:39.000Z",
            "description": "Automatically added (via 7a0a0d432159a6e700e2f0b661a82a17)",
            "pattern": "[file:hashes.SHA1 = 'c018fd080f2225d258f0ac414e9c748627fee8ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683be-ac3c-4f5d-be23-480b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:50.000Z",
            "modified": "2016-02-19T02:53:50.000Z",
            "description": "Automatically added (via 7a6409ad73854547fb6f506c96549e68)",
            "pattern": "[file:hashes.SHA1 = '746ca041a0979f045e8676e17e344d28006ebda5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683c9-3b70-4dde-83a9-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:01.000Z",
            "modified": "2016-02-19T02:54:01.000Z",
            "description": "Automatically added (via 7ad16ca71797f7282d3902195097295c)",
            "pattern": "[file:hashes.SHA1 = 'c206e3e78b8eefd122cc9e67725cc6cd6fa56633']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683d3-322c-42a9-9425-4487950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:11.000Z",
            "modified": "2016-02-19T02:54:11.000Z",
            "description": "Automatically added (via 7b05362a5ab6b761f07e1917b439c692)",
            "pattern": "[file:hashes.SHA1 = '7a978884f7b92c597c74cb17673a77eea52f6ff5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683dc-f660-4299-9dc0-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:20.000Z",
            "modified": "2016-02-19T02:54:20.000Z",
            "description": "Automatically added (via 7b34e2a48203ca737883e219d7dfd986)",
            "pattern": "[file:hashes.SHA1 = 'cc83c508f1b9b6deef5dad1f8987c73169256634']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683e5-dd98-4185-9ef4-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:29.000Z",
            "modified": "2016-02-19T02:54:29.000Z",
            "description": "Automatically added (via 7b383732c367f69a94091abd839e194a)",
            "pattern": "[file:hashes.SHA1 = '07a6260cfb062e5c894f908d42a808491912b9e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683ee-f9c0-4bc6-a877-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:38.000Z",
            "modified": "2016-02-19T02:54:38.000Z",
            "description": "Automatically added (via 7b5f570bde189d8e797ab97bea9878ed)",
            "pattern": "[file:hashes.SHA1 = '6a4f03b138986bcc069c0dc9a84e8c4a673649db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683f7-eaf0-4fd9-9e1c-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:47.000Z",
            "modified": "2016-02-19T02:54:47.000Z",
            "description": "Automatically added (via 7b910d8497ff46dc80c6c1765dcbc008)",
            "pattern": "[file:hashes.SHA1 = '382b997392cdef3596669a38cf78abfea541410f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68400-1200-4f33-a4af-4254950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:56.000Z",
            "modified": "2016-02-19T02:54:56.000Z",
            "description": "Automatically added (via 7bb64267b4073795c114dbf1eec3f0d0)",
            "pattern": "[file:hashes.SHA1 = '75f756e76bc53c66fdfea1a02f55c63ccacb945c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68409-b5b8-49ca-b958-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:05.000Z",
            "modified": "2016-02-19T02:55:05.000Z",
            "description": "Automatically added (via 7bcb5e9ad6bc56c263db052483306aa6)",
            "pattern": "[file:hashes.SHA1 = '1361e169831f0084eed968da5480d79c9f6589a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68412-ed8c-4858-adc9-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:14.000Z",
            "modified": "2016-02-19T02:55:14.000Z",
            "description": "Automatically added (via 7c723ebdd25a78fabf7fc564a1a35780)",
            "pattern": "[file:hashes.SHA1 = '5b0b699e252be96d661ce2748f725ca294636356']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6841c-bb98-4ce0-a218-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:24.000Z",
            "modified": "2016-02-19T02:55:24.000Z",
            "description": "Automatically added (via 7cb3cc8b74d23ab2635453432a9fdb7d)",
            "pattern": "[file:hashes.SHA1 = '4aea9516677fdcd212f638deb8ce72c87ebd890f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68425-d3d8-4045-a851-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:33.000Z",
            "modified": "2016-02-19T02:55:33.000Z",
            "description": "Automatically added (via 7d206f173155a715737a9ca4c43dad27)",
            "pattern": "[file:hashes.SHA1 = '3aa8af738a8e7a9683e7523b324a716d835ca8f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6842e-9d8c-44b7-afad-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:42.000Z",
            "modified": "2016-02-19T02:55:42.000Z",
            "description": "Automatically added (via 7d32f40d19f9948daba516a1b7347baf)",
            "pattern": "[file:hashes.SHA1 = 'd40f8d12e662a93c2adba6dfb03eba297d0f15e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68437-21c4-417b-93dd-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:51.000Z",
            "modified": "2016-02-19T02:55:51.000Z",
            "description": "Automatically added (via 7e4176000a38daa5579ac2cd2f6ccc2f)",
            "pattern": "[file:hashes.SHA1 = 'cbc8c0de875ec6b24310e862c6302e48b39b7f66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68440-9ebc-47f2-a79f-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:00.000Z",
            "modified": "2016-02-19T02:56:00.000Z",
            "description": "Automatically added (via 7e64ada99de09763b9707c296ffc4921)",
            "pattern": "[file:hashes.SHA1 = 'e6f0cf1dff8ee5e37b2a788192a8d6ab37e4ae74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6844a-1608-467a-b08a-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:10.000Z",
            "modified": "2016-02-19T02:56:10.000Z",
            "description": "Automatically added (via 7e6f16acc882367e3cb991ad4c57e18f)",
            "pattern": "[file:hashes.SHA1 = 'ef325cd629b39ef7d5887efafa090663c5cded29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68453-3564-4939-8e74-4f16950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:19.000Z",
            "modified": "2016-02-19T02:56:19.000Z",
            "description": "Automatically added (via 7e8b46859dc8acd1f11de7cdffbb4c95)",
            "pattern": "[file:hashes.SHA1 = '8fd4c48a7ec05c8d3250d1e9139c74f9634b7a12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6845c-76ec-403d-a37e-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:28.000Z",
            "modified": "2016-02-19T02:56:28.000Z",
            "description": "Automatically added (via 7eaa9fa68ac3e513062683a918da77ee)",
            "pattern": "[file:hashes.SHA1 = 'fee196a300069207afc77096ea098a5ee5946876']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68465-c224-419c-bfbd-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:37.000Z",
            "modified": "2016-02-19T02:56:37.000Z",
            "description": "Automatically added (via 7eb4b6850bfae2604f8cde1e6f254a22)",
            "pattern": "[file:hashes.SHA1 = '907e34867c66787c0e7a183084d20fed99a3fbdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6846e-fa00-4edd-b8f0-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:46.000Z",
            "modified": "2016-02-19T02:56:46.000Z",
            "description": "Automatically added (via 7f6268574d0183966a6f1a4f23c2e88a)",
            "pattern": "[file:hashes.SHA1 = '7acf1b94af5986231057809233ac2fa3cea4246b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68478-b0e4-4f38-b3b9-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:56.000Z",
            "modified": "2016-02-19T02:56:56.000Z",
            "description": "Automatically added (via 7fc34f971d98c9adda7862512c72dd7c)",
            "pattern": "[file:hashes.SHA1 = '314b85021a352297b51c05b78fffa52c94ab946e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68482-4594-4f81-b74e-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:06.000Z",
            "modified": "2016-02-19T02:57:06.000Z",
            "description": "Automatically added (via 7fd364031618c690a9ac8bfad1f0a165)",
            "pattern": "[file:hashes.SHA1 = '7b05d271e990c67b8a005c1db7f444fefde23657']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6848c-5f84-43fc-8a7a-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:16.000Z",
            "modified": "2016-02-19T02:57:16.000Z",
            "description": "Automatically added (via 80201986189b1e57f98d7c917af6ba54)",
            "pattern": "[file:hashes.SHA1 = 'c9fd940d907f466d79aa415c6ae756f29b4a0b55']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68495-6c0c-4b4d-94f5-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:25.000Z",
            "modified": "2016-02-19T02:57:25.000Z",
            "description": "Automatically added (via 807d8f33606aba3034a7250718eb89c5)",
            "pattern": "[file:hashes.SHA1 = '45298bbe11f81da3cd8a119f864bead8516162d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6849f-af50-40e0-a914-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:35.000Z",
            "modified": "2016-02-19T02:57:35.000Z",
            "description": "Automatically added (via 80e41cab83a474fd7402b1bc019a18b1)",
            "pattern": "[file:hashes.SHA1 = 'c74076287694f081ef9289825cfbd5faf7de03d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684a8-f4a4-4ab5-8b0e-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:44.000Z",
            "modified": "2016-02-19T02:57:44.000Z",
            "description": "Automatically added (via 810203cb1b823be2983199047cee2fc9)",
            "pattern": "[file:hashes.SHA1 = '4c3a9579d2ec38e41565ad17a61c18b469879ac7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684b1-574c-4b8b-b45f-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:53.000Z",
            "modified": "2016-02-19T02:57:53.000Z",
            "description": "Automatically added (via 8130903ccfe3fca24e9dfdc91c95b19b)",
            "pattern": "[file:hashes.SHA1 = 'b5f5d1b4da5f7b978576d9140b4a497213bada07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684bb-79f8-4b1a-b159-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:03.000Z",
            "modified": "2016-02-19T02:58:03.000Z",
            "description": "Automatically added (via 813458da8f310c7b8a3245886d581fde)",
            "pattern": "[file:hashes.SHA1 = '0903270753f2b88f545abdc2414d3d4cbf7af5b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684c5-1c34-4ae5-8c6c-4627950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:13.000Z",
            "modified": "2016-02-19T02:58:13.000Z",
            "description": "Automatically added (via 8260c5ed352ca95eec2be5513f191817)",
            "pattern": "[file:hashes.SHA1 = 'cedd16f2c216904b337a19a7d43f8e207657a430']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684cf-0490-461e-bce1-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:23.000Z",
            "modified": "2016-02-19T02:58:23.000Z",
            "description": "Automatically added (via 82e5e742aa85a35339af929f2f55e18a)",
            "pattern": "[file:hashes.SHA1 = '3ca339e8160e66d044af7f64e12bde44dc4f8142']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684d9-e9d4-4696-bf4e-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:33.000Z",
            "modified": "2016-02-19T02:58:33.000Z",
            "description": "Automatically added (via 83701556da94ea8f5aca91aa0f13341d)",
            "pattern": "[file:hashes.SHA1 = '493ebec5809dd393e58e949f050dd0bd74f54f41']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684e3-efd4-477c-b115-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:43.000Z",
            "modified": "2016-02-19T02:58:43.000Z",
            "description": "Automatically added (via 83afd1c0b781ad9effcbb84f5e5bc6de)",
            "pattern": "[file:hashes.SHA1 = 'e13a7a94ddab940553376e823f3fa0de23bfc184']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684ed-41a0-49ba-aa77-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:53.000Z",
            "modified": "2016-02-19T02:58:53.000Z",
            "description": "Automatically added (via 83d4bc883069c6bf653cd882e67deb1c)",
            "pattern": "[file:hashes.SHA1 = '138371f0767a2efdbfddc987cfb8269e02799ffc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684f8-2200-460b-a5f9-4224950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:04.000Z",
            "modified": "2016-02-19T02:59:04.000Z",
            "description": "Automatically added (via 83f661be7f1e929a79715557479bb721)",
            "pattern": "[file:hashes.SHA1 = 'f68d3171173d4bd87cb09f3f8e96f703900c8420']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68501-29e0-4c68-976c-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:13.000Z",
            "modified": "2016-02-19T02:59:13.000Z",
            "description": "Automatically added (via 84498812f8bf0b5e3fa31f2b3e05143c)",
            "pattern": "[file:hashes.SHA1 = 'fd94e6de8b8cae53a5f8a8eb6b98c396abf6bed1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6850a-2128-49cb-b25e-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:22.000Z",
            "modified": "2016-02-19T02:59:22.000Z",
            "description": "Automatically added (via 844bddcdc15d77d7251f537ddd08a098)",
            "pattern": "[file:hashes.SHA1 = '85fae798ec5757cedd1ef34ff8fc1606b7348fd4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68514-e4e0-4518-9158-401f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:32.000Z",
            "modified": "2016-02-19T02:59:32.000Z",
            "description": "Automatically added (via 84e1353dc2077a1509419516f69d9dd8)",
            "pattern": "[file:hashes.SHA1 = 'f72ae962d69f29535187a39aa27fce6a515ca09b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6851d-cf8c-4d59-a738-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:41.000Z",
            "modified": "2016-02-19T02:59:41.000Z",
            "description": "Automatically added (via 84e8ec54213189271f63aa2b4cfb12c3)",
            "pattern": "[file:hashes.SHA1 = '8c0ba3b29c58597d4cf633eb48510379fa85d187']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68528-9bb4-4283-8f56-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:52.000Z",
            "modified": "2016-02-19T02:59:52.000Z",
            "description": "Automatically added (via 85a3561562a7cab776136458306a8c76)",
            "pattern": "[file:hashes.SHA1 = '85793631704e9021e6cb1b3d20c0d7c1c3d5d146']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68531-d47c-48a8-945f-45ec950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:01.000Z",
            "modified": "2016-02-19T03:00:01.000Z",
            "description": "Automatically added (via 85b8d1e5bac613a70d0cf842197f0256)",
            "pattern": "[file:hashes.SHA1 = '2c355351255059f7f3ab70bd7324aeb3e1f1b0e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6853b-8af4-401f-a581-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:11.000Z",
            "modified": "2016-02-19T03:00:11.000Z",
            "description": "Automatically added (via 85fcd14bcb9ddf6d369ec04c9db89f7c)",
            "pattern": "[file:hashes.SHA1 = 'fb01a2206407d77a0500a8739f5ccb3b046efe8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68545-688c-40ed-83d6-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:21.000Z",
            "modified": "2016-02-19T03:00:21.000Z",
            "description": "Automatically added (via 867d5be056532baad87977ef0675d300)",
            "pattern": "[file:hashes.SHA1 = '7657b200d946ead1ddd4c6084a3ff8f1de088b7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6854f-e678-4312-a153-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:31.000Z",
            "modified": "2016-02-19T03:00:31.000Z",
            "description": "Automatically added (via 870284b33a9144048cdad061239a8070)",
            "pattern": "[file:hashes.SHA1 = '5187c891531ebfe8e1b2d89490373060ac4ff0f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68559-b238-46c9-909f-4d95950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:41.000Z",
            "modified": "2016-02-19T03:00:41.000Z",
            "description": "Automatically added (via 8720ebd2f4a9700981993277464eab57)",
            "pattern": "[file:hashes.SHA1 = 'e463c532fa6cc3bd724a810bdb4609d9311b1950']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68563-6b94-48f7-8b42-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:51.000Z",
            "modified": "2016-02-19T03:00:51.000Z",
            "description": "Automatically added (via 8732462a2c153c588afda530741727f5)",
            "pattern": "[file:hashes.SHA1 = '0a2ece60dac0883c7cb6704371fc2c30c5cbd910']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6856e-6fd8-4776-901e-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:02.000Z",
            "modified": "2016-02-19T03:01:02.000Z",
            "description": "Automatically added (via 878162c4ff4f06c0a3dd4375c1f6e657)",
            "pattern": "[file:hashes.SHA1 = 'cd25f50dbfde8040a00cb2348a5328d6f3f5a73f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68579-1e74-4606-93f9-4a7b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:13.000Z",
            "modified": "2016-02-19T03:01:13.000Z",
            "description": "Automatically added (via 87dc61e638c94154bb51fcdedafa805f)",
            "pattern": "[file:hashes.SHA1 = 'cc8ef96b3fe183073f36e513d03e666cdf5ffe97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68583-2924-4bb9-b86e-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:23.000Z",
            "modified": "2016-02-19T03:01:23.000Z",
            "description": "Automatically added (via 880cdbf6056eb66db12203dd3aba5762)",
            "pattern": "[file:hashes.SHA1 = '5cc8f93dac86e4d2fdd25025ff158e048069b3bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6858d-3ab0-4a83-b251-4d19950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:33.000Z",
            "modified": "2016-02-19T03:01:33.000Z",
            "description": "Automatically added (via 89064bcf121ed7c7fea6f7d6bb3ff884)",
            "pattern": "[file:hashes.SHA1 = '53db3951e48cb0e4640735b6be9b61ed72a2618f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68597-7804-407d-b906-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:43.000Z",
            "modified": "2016-02-19T03:01:43.000Z",
            "description": "Automatically added (via 891a7c1b2a79ff5947fbe30d21265088)",
            "pattern": "[file:hashes.SHA1 = '2cec1b06b8e01e70eda4008e1f8f4811e4e0fb68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685a1-bd18-4150-951a-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:53.000Z",
            "modified": "2016-02-19T03:01:53.000Z",
            "description": "Automatically added (via 8ab123a83d6ea63265c5cd92d6c46484)",
            "pattern": "[file:hashes.SHA1 = '5e14a4c1a4e6f468f0e9f24c13491cba466b47de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685ac-e228-4de0-80bd-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:04.000Z",
            "modified": "2016-02-19T03:02:04.000Z",
            "description": "Automatically added (via 8b24d39ac0e60a2b85e8e463778f5869)",
            "pattern": "[file:hashes.SHA1 = 'e8b72ba36178bb34bffb3abcffcabc7cf7a7dfaf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685b6-29f4-4a6f-af5c-4cb6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:14.000Z",
            "modified": "2016-02-19T03:02:14.000Z",
            "description": "Automatically added (via 8b614249c3ef30b43d3dbcb9f101069c)",
            "pattern": "[file:hashes.SHA1 = '8986b56a527fd60ef2ac1ff67807d4010155a35d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685c0-50d0-43a8-be00-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:24.000Z",
            "modified": "2016-02-19T03:02:24.000Z",
            "description": "Automatically added (via 8bc89b86788c3d3740665c8fadc0e6bd)",
            "pattern": "[file:hashes.SHA1 = '1d642dcbd5c52b8c55c8acace0917bd94b202461']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685c9-e948-4246-82bf-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:33.000Z",
            "modified": "2016-02-19T03:02:33.000Z",
            "description": "Automatically added (via 8bed0c756c4b8afb7a8728f930f1f0b0)",
            "pattern": "[file:hashes.SHA1 = '54b3a6cde42b2248a2699ed04c3153147fe9140f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685d4-c750-4254-ae20-45e0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:44.000Z",
            "modified": "2016-02-19T03:02:44.000Z",
            "description": "Automatically added (via 8bf9cc74038ff5013531ce95612dc1c4)",
            "pattern": "[file:hashes.SHA1 = '767f443e6ef21a42e1cfff907342d2a1d41a122c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685df-2d44-47b5-bb64-47f0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:55.000Z",
            "modified": "2016-02-19T03:02:55.000Z",
            "description": "Automatically added (via 8c3c2c822145efe575d524be67d10a76)",
            "pattern": "[file:hashes.SHA1 = 'f3fac54a851f3a527cfaca85b047a76ea4d82016']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685e9-7248-40dd-8120-4092950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:05.000Z",
            "modified": "2016-02-19T03:03:05.000Z",
            "description": "Automatically added (via 8c88a2aac4903e838b3b898176134371)",
            "pattern": "[file:hashes.SHA1 = 'f6e3dcfad6ea06630ff6c8b26ca8e7fd8ae6eece']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685f2-c374-4cd2-9e6e-4734950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:14.000Z",
            "modified": "2016-02-19T03:03:14.000Z",
            "description": "Automatically added (via 8caee22b1b7a798950ea49dc6740a185)",
            "pattern": "[file:hashes.SHA1 = '7c5654baa182252bb326632ec35f92c4ce44a6c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685fd-32a8-4816-a275-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:25.000Z",
            "modified": "2016-02-19T03:03:25.000Z",
            "description": "Automatically added (via 8d58abe634f63d1f0c2416290ecfc6c0)",
            "pattern": "[file:hashes.SHA1 = 'f7ca7c91260472bcd2074a76ba3faf0e8706a8c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68606-6d98-4480-8f1e-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:34.000Z",
            "modified": "2016-02-19T03:03:34.000Z",
            "description": "Automatically added (via 8d762a19a969abf14dc88b5f954c8af4)",
            "pattern": "[file:hashes.SHA1 = '375f345c00cad7ecc75355e83b813148b88e41c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68611-24bc-445b-bb17-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:45.000Z",
            "modified": "2016-02-19T03:03:45.000Z",
            "description": "Automatically added (via 8d91909267d89d1fbd2dee9c1a0a46d7)",
            "pattern": "[file:hashes.SHA1 = '246304c73c129f082d9f273e3f445c070d50d591']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6861c-e814-4db4-89a5-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:56.000Z",
            "modified": "2016-02-19T03:03:56.000Z",
            "description": "Automatically added (via 8dbea848dfa8049ba1dff567d85fd933)",
            "pattern": "[file:hashes.SHA1 = '191efd73eed6d5cf0327ee4a32d868738f458161']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68626-11c0-490c-974d-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:06.000Z",
            "modified": "2016-02-19T03:04:06.000Z",
            "description": "Automatically added (via 8e077461395033cb918ba343aeb6aa80)",
            "pattern": "[file:hashes.SHA1 = 'a7a3fe7ff45b7f05816b9773aa888d090d1d18f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68630-4c98-4169-9ad5-478a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:16.000Z",
            "modified": "2016-02-19T03:04:16.000Z",
            "description": "Automatically added (via 8e2e0fd8e0c203811264b9775756309d)",
            "pattern": "[file:hashes.SHA1 = '9645d6663b2af0b07f2c0559f947363e9f0646fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6863b-d788-40b9-970f-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:27.000Z",
            "modified": "2016-02-19T03:04:27.000Z",
            "description": "Automatically added (via 8e390fb708f55ed8aa93c833d329603b)",
            "pattern": "[file:hashes.SHA1 = 'f67507db15856c57e572fb7a9888111a71a10fe0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68647-27b8-4b23-bf96-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:39.000Z",
            "modified": "2016-02-19T03:04:39.000Z",
            "description": "Automatically added (via 8e4eb9f374e2a566067dcab66b2f2117)",
            "pattern": "[file:hashes.SHA1 = 'e7e66c5912daab83512e2aaa9bbb450726e414c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68652-187c-4300-b029-44fb950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:50.000Z",
            "modified": "2016-02-19T03:04:50.000Z",
            "description": "Automatically added (via 8e541e2bfaecd004f2287fb893b43768)",
            "pattern": "[file:hashes.SHA1 = '34dd5534a9ca175fc8646753a5ec6c2c9d8ea09a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6865d-e128-433f-a319-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:01.000Z",
            "modified": "2016-02-19T03:05:01.000Z",
            "description": "Automatically added (via 8e5e9d5b3aafe341260107fe1804ff04)",
            "pattern": "[file:hashes.SHA1 = '41ba6572ce70ce8a82e9fb4885b05cf8e7d41489']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68667-bcf8-43bc-9002-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:11.000Z",
            "modified": "2016-02-19T03:05:11.000Z",
            "description": "Automatically added (via 8ede8a566df6a10a30943751718c7290)",
            "pattern": "[file:hashes.SHA1 = '5ed7e545761b7f42b92adf4766e1cc58c05c2225']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68671-a6f4-45f5-bd5f-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:21.000Z",
            "modified": "2016-02-19T03:05:21.000Z",
            "description": "Automatically added (via 8f4d7d7f964d8e6a9492cc1e6ae60a57)",
            "pattern": "[file:hashes.SHA1 = 'f603be443b6ffecfb15c55d3e1fe9451ca1921db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6867b-a5ac-4fe8-873f-458f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:31.000Z",
            "modified": "2016-02-19T03:05:31.000Z",
            "description": "Automatically added (via 8f903c4126566e56b09c87f7d3bcdfa2)",
            "pattern": "[file:hashes.SHA1 = '5d74111071248154691a5237f4c2f3717d619006']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68686-b25c-49c3-9ec3-4388950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:42.000Z",
            "modified": "2016-02-19T03:05:42.000Z",
            "description": "Automatically added (via 8fe4e770f45cc8292b7811d5ea17bdbb)",
            "pattern": "[file:hashes.SHA1 = 'a952b42222fbe5e8864dd888691444a81677993c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68691-03b4-4ec6-b4e1-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:53.000Z",
            "modified": "2016-02-19T03:05:53.000Z",
            "description": "Automatically added (via 8ff010c24d2f49b595dc3b8e20bb680f)",
            "pattern": "[file:hashes.SHA1 = '84f8fe054a0c799dfad4a5200900557fe244e938']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6869c-4038-4700-bd22-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:04.000Z",
            "modified": "2016-02-19T03:06:04.000Z",
            "description": "Automatically added (via 90731f599d665b2905fcf734a37e2fda)",
            "pattern": "[file:hashes.SHA1 = '511c5f8c19a98524951e40f27865e82ff0ff5355']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686a7-4b10-4d01-a222-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:15.000Z",
            "modified": "2016-02-19T03:06:15.000Z",
            "description": "Automatically added (via 909a6cdf0b557f3fe4713e30466ac051)",
            "pattern": "[file:hashes.SHA1 = 'a274dba7ae1f9af42e2fa25eb87aae684013d461']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686b2-8a00-4556-a36d-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:26.000Z",
            "modified": "2016-02-19T03:06:26.000Z",
            "description": "Automatically added (via 90a7a78407cd8440803263a59d3f6d47)",
            "pattern": "[file:hashes.SHA1 = 'cbcb3a199b8f90b2872ebc6e3c1b05d662f3dbec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686bc-30ac-462e-bbf5-49de950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:36.000Z",
            "modified": "2016-02-19T03:06:36.000Z",
            "description": "Automatically added (via 90d86b3aabcd7a077a707cbec93a2408)",
            "pattern": "[file:hashes.SHA1 = 'd8cdddb82d941fbc9118ec93465457e1d410fca0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686c7-a89c-4203-b9e8-4872950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:47.000Z",
            "modified": "2016-02-19T03:06:47.000Z",
            "description": "Automatically added (via 9145cb28866228b585eb8df080c5e4d2)",
            "pattern": "[file:hashes.SHA1 = 'ba2b1f3c0a7d3314c34b21cea299f54ebf7c5722']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686d3-2574-4f35-862e-4c20950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:59.000Z",
            "modified": "2016-02-19T03:06:59.000Z",
            "description": "Automatically added (via 91929600053c8c3f7ed5c7d1b576a89d)",
            "pattern": "[file:hashes.SHA1 = '46d3889ebafd0e647b31493ae84d6b16e38408ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686de-2200-4358-8537-44b7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:10.000Z",
            "modified": "2016-02-19T03:07:10.000Z",
            "description": "Automatically added (via 91b89635ef51583199e52731ded3ff9d)",
            "pattern": "[file:hashes.SHA1 = '70ac9b05fcabbb6d7fa287523dc64c7cc336b9e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686ea-3fcc-4b71-b6b8-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:22.000Z",
            "modified": "2016-02-19T03:07:22.000Z",
            "description": "Automatically added (via 91f7eafdcfeb064e5bb5e909a7a8525f)",
            "pattern": "[file:hashes.SHA1 = '7f879dbccb33626862b2b197aa110d47c1d4ad1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686f5-ca2c-4c88-8d99-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:33.000Z",
            "modified": "2016-02-19T03:07:33.000Z",
            "description": "Automatically added (via 921f27e9a14f1ec3e8d7883b97825f2b)",
            "pattern": "[file:hashes.SHA1 = '459d1c1a8c88032d9e313e17fe6bf183e5096309']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68700-17e8-4b81-925d-4c51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:44.000Z",
            "modified": "2016-02-19T03:07:44.000Z",
            "description": "Automatically added (via 9291ad30707ef88ee857ea10be86d2d9)",
            "pattern": "[file:hashes.SHA1 = '882cbf828db4ea301ffa985a741e2da8b72b47ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6870b-89a4-40ed-a054-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:55.000Z",
            "modified": "2016-02-19T03:07:55.000Z",
            "description": "Automatically added (via 92b6023799844e58a8e85f6417b31750)",
            "pattern": "[file:hashes.SHA1 = '621e505995e853fedcced27eb4d2ad9471587cc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68716-1344-4f43-a5a1-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:06.000Z",
            "modified": "2016-02-19T03:08:06.000Z",
            "description": "Automatically added (via 939c2998dcf5ad1b2cff4ef5bf005873)",
            "pattern": "[file:hashes.SHA1 = '36475e4b4d7445b2b8c3f67b665225df63fbeffe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68721-b6c0-474c-9eb0-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:17.000Z",
            "modified": "2016-02-19T03:08:17.000Z",
            "description": "Automatically added (via 93a7357a9d27ea6b190b21b3e7ef568e)",
            "pattern": "[file:hashes.SHA1 = '055a0c9072be46f611af6b811f158eddcb3772f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6872c-888c-4d6e-b263-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:28.000Z",
            "modified": "2016-02-19T03:08:28.000Z",
            "description": "Automatically added (via 93ae9e599785652a7711619f9c8405aa)",
            "pattern": "[file:hashes.SHA1 = 'de4b4e6e8d283d08630f0314faf4667f931b060c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68738-4520-4699-a476-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:40.000Z",
            "modified": "2016-02-19T03:08:40.000Z",
            "description": "Automatically added (via 940177d224de266277fd610f7be3f67b)",
            "pattern": "[file:hashes.SHA1 = 'f81521258830f4bc20e6a3e4d7e1632a275cdc87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68743-8514-438a-b8b4-42b5950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:51.000Z",
            "modified": "2016-02-19T03:08:51.000Z",
            "description": "Automatically added (via 941932368005709a2fece9bbe0856411)",
            "pattern": "[file:hashes.SHA1 = 'cdc7e2a42495c865a43166157dadba4a1225daf9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6874e-3500-4971-896f-44c7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:02.000Z",
            "modified": "2016-02-19T03:09:02.000Z",
            "description": "Automatically added (via 9443dc350f8b3503274131851647993e)",
            "pattern": "[file:hashes.SHA1 = '84f83b312ed0b563533c269047ff24f46a55c1fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68758-3e90-4568-8b64-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:12.000Z",
            "modified": "2016-02-19T03:09:12.000Z",
            "description": "Automatically added (via 947b3fda93bb61b3abba842e7a375d27)",
            "pattern": "[file:hashes.SHA1 = '5ff4a7892653268e7d8a45e5419f184ba4d54cc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68763-4890-4e1d-833f-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:23.000Z",
            "modified": "2016-02-19T03:09:23.000Z",
            "description": "Automatically added (via 94887a429862c0a987fa7afa58320eee)",
            "pattern": "[file:hashes.SHA1 = 'fa0cefc7a3fd8074d9e1ebf2e3b846e7b9dd3b6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6876d-d258-4152-86f3-44b7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:33.000Z",
            "modified": "2016-02-19T03:09:33.000Z",
            "description": "Automatically added (via 94a28c69cea5e965357dc5f3e68a6154)",
            "pattern": "[file:hashes.SHA1 = '673e0e033bad1fd1d23a1482a9141f24c51c30f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68777-204c-4979-a964-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:43.000Z",
            "modified": "2016-02-19T03:09:43.000Z",
            "description": "Automatically added (via 94b569ce46b47f355269e4ee0d6d80f4)",
            "pattern": "[file:hashes.SHA1 = '14d261738a48939168822f850b5b7afbe1322321']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68781-5410-42ff-b1a4-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:53.000Z",
            "modified": "2016-02-19T03:09:53.000Z",
            "description": "Automatically added (via 94e233b77184dd8d7d3f1356f7cc98a6)",
            "pattern": "[file:hashes.SHA1 = 'c4e464909f87420ab1068d87d21cdb102b635c6c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6878a-4d98-4855-9b91-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:02.000Z",
            "modified": "2016-02-19T03:10:02.000Z",
            "description": "Automatically added (via 94ebca4720bb0df7c2c9054b3f8b91f7)",
            "pattern": "[file:hashes.SHA1 = '545978779f7d171e30b1910136f93c7678f5daa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68794-06f4-4765-b37e-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:12.000Z",
            "modified": "2016-02-19T03:10:12.000Z",
            "description": "Automatically added (via 94feb16ad48435e44dd49a402c363a06)",
            "pattern": "[file:hashes.SHA1 = 'b4e1fa165acc70483cf2bc592c1c84d16f1e6fb1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6879e-0784-4e26-8ce8-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:22.000Z",
            "modified": "2016-02-19T03:10:22.000Z",
            "description": "Automatically added (via 95001062ecfc5d823680520c28f379bd)",
            "pattern": "[file:hashes.SHA1 = 'c1b23d0538239fa2145116a21c0d4ed965d49592']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687a8-5550-4a5f-93da-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:32.000Z",
            "modified": "2016-02-19T03:10:32.000Z",
            "description": "Automatically added (via 952ae74a7c773d5ed820fe013548b64a)",
            "pattern": "[file:hashes.SHA1 = '0a61666a932b5573a9c30bb291e5003377956754']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687b1-7388-4440-9c53-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:41.000Z",
            "modified": "2016-02-19T03:10:41.000Z",
            "description": "Automatically added (via 959a97905ef7bfbb71dc904e588c4345)",
            "pattern": "[file:hashes.SHA1 = 'ee53e2ce8dc423a791d230e32eaed7ebf0c45505']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687bb-fe44-43a7-b738-4105950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:51.000Z",
            "modified": "2016-02-19T03:10:51.000Z",
            "description": "Automatically added (via 95ca11ed57081235b46dc93054b83444)",
            "pattern": "[file:hashes.SHA1 = 'a9c2a2f5441ef66aacfccab5b34d7b601f830351']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687c5-ee6c-4591-a25f-46e6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:01.000Z",
            "modified": "2016-02-19T03:11:01.000Z",
            "description": "Automatically added (via 95eec4ea07e5f52d43cdafae72ebe61b)",
            "pattern": "[file:hashes.SHA1 = 'b7d6eaa399a02fcb2634cec8f44d6ca584479df8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687cf-5c10-48f0-b0d7-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:11.000Z",
            "modified": "2016-02-19T03:11:11.000Z",
            "description": "Automatically added (via 96822e0bfca3a399f9faf2d85bedd6f9)",
            "pattern": "[file:hashes.SHA1 = '1aa8a708661be5988bdf52be9d0db628eed2496a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687d9-6e90-430a-9627-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:21.000Z",
            "modified": "2016-02-19T03:11:21.000Z",
            "description": "Automatically added (via 96aeab8e49bcd83219a07d5b9f024458)",
            "pattern": "[file:hashes.SHA1 = '3c59d224d054c2a379cd392b3511ddcfe7583be7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687e2-fc34-4c05-9660-4edc950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:30.000Z",
            "modified": "2016-02-19T03:11:30.000Z",
            "description": "Automatically added (via 96b6e7b50b6af8286020a74a579bbb7c)",
            "pattern": "[file:hashes.SHA1 = '8b1fe60ad149b0316424fd656e30981b7821ce28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687ec-f208-4ddb-b2de-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:40.000Z",
            "modified": "2016-02-19T03:11:40.000Z",
            "description": "Automatically added (via 96c15e9bf5f330e5aa0901f664b2262b)",
            "pattern": "[file:hashes.SHA1 = 'd13f59bc5ba82072b2974cc33385e15d674a9dd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687f6-36d0-45ca-8a54-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:50.000Z",
            "modified": "2016-02-19T03:11:50.000Z",
            "description": "Automatically added (via 9722bc5bf4b380f322c3d0371d4739e7)",
            "pattern": "[file:hashes.SHA1 = '650c643afe80fc2eb6e7b597963899c989065dba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68800-17ec-4ec9-a1a5-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:00.000Z",
            "modified": "2016-02-19T03:12:00.000Z",
            "description": "Automatically added (via 97f3accbe8cd8d210ea6f805aa46ca83)",
            "pattern": "[file:hashes.SHA1 = '93d610268f590154f09ecefbc6f4fc95fdb5368e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6880b-a61c-4961-87ca-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:11.000Z",
            "modified": "2016-02-19T03:12:11.000Z",
            "description": "Automatically added (via 98c1d0d37a8874cdf45605170c573c21)",
            "pattern": "[file:hashes.SHA1 = 'cf3ab8cd55f69c75985d1c4147471d349d931d5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68816-4560-4c4b-8afe-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:22.000Z",
            "modified": "2016-02-19T03:12:22.000Z",
            "description": "Automatically added (via 9995eef9f45e38fd16136a11a9a2d18b)",
            "pattern": "[file:hashes.SHA1 = '9be27f0ed74272cc72727d9142e38baea9ede9e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68820-3820-426c-88da-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:32.000Z",
            "modified": "2016-02-19T03:12:32.000Z",
            "description": "Automatically added (via 999b35e2e3702ee12e3199db8b9538e8)",
            "pattern": "[file:hashes.SHA1 = '32be17d6a49f7558aa3a4026c599715deba0034e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6882a-ff70-4346-81a6-4963950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:42.000Z",
            "modified": "2016-02-19T03:12:42.000Z",
            "description": "Automatically added (via 99be31ec1cfea5b1a173859b0a7eb321)",
            "pattern": "[file:hashes.SHA1 = '43be843419d33d6963b2b08d5d938b222b3319f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68833-cea4-4b7c-b815-488c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:51.000Z",
            "modified": "2016-02-19T03:12:51.000Z",
            "description": "Automatically added (via 99c2fb7f08d9a1280c74775a799136da)",
            "pattern": "[file:hashes.SHA1 = 'f42cbffeb31e275cb185c6a1b57c4130045d9524']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6883e-ad10-4a7e-9621-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:02.000Z",
            "modified": "2016-02-19T03:13:02.000Z",
            "description": "Automatically added (via 99fc1ea1def014ca6017733a75029677)",
            "pattern": "[file:hashes.SHA1 = 'e78e92d29d69c47a002968528d85730bc7dd676e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68848-8380-46ee-9006-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:12.000Z",
            "modified": "2016-02-19T03:13:12.000Z",
            "description": "Automatically added (via 99fce7d78d7b4ca41ca40d27801ae74e)",
            "pattern": "[file:hashes.SHA1 = 'f1ff7c7438168b30f1d0d50dfc6348f257923360']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68852-5afc-4991-80f9-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:22.000Z",
            "modified": "2016-02-19T03:13:22.000Z",
            "description": "Automatically added (via 9a5070319e4b8ecdf88e43f3cce6ec6f)",
            "pattern": "[file:hashes.SHA1 = '30764c8fb9f46b34f694ec2339d7dd9529162341']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6885d-1464-40cc-8987-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:33.000Z",
            "modified": "2016-02-19T03:13:33.000Z",
            "description": "Automatically added (via 9ac1a59a25eef5ad2a3c18199263e36d)",
            "pattern": "[file:hashes.SHA1 = 'def0183faa989b2bacb86e3316af4f5e6f37b2e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68866-efb8-41e6-94c7-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:42.000Z",
            "modified": "2016-02-19T03:13:42.000Z",
            "description": "Automatically added (via 9af054cd13e6452720a34e35454aedb9)",
            "pattern": "[file:hashes.SHA1 = '7a4a5bb591f97ef584a4cc30ccdfb438bbb988f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68870-5ef8-4b08-a5a8-4ad8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:52.000Z",
            "modified": "2016-02-19T03:13:52.000Z",
            "description": "Automatically added (via 9b09670a56750d8a9d8c4e6635d4985a)",
            "pattern": "[file:hashes.SHA1 = 'c3355ff17de602bd6eff4e198d173a3943b56439']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6887a-bdc8-498b-8034-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:02.000Z",
            "modified": "2016-02-19T03:14:02.000Z",
            "description": "Automatically added (via 9b27dc3f2167adc59bfd4f6f850522d5)",
            "pattern": "[file:hashes.SHA1 = '95c6a98fce97feba4399973cced7decc419cf597']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68884-b4a0-4b59-9d1c-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:12.000Z",
            "modified": "2016-02-19T03:14:12.000Z",
            "description": "Automatically added (via 9ba9323e117c2876e1b5cb4bcbe66687)",
            "pattern": "[file:hashes.SHA1 = 'd8e3f6638d03ddecf3ed06b3f45fba0a0d56a452']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6888e-6a1c-4cb8-8c5a-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:22.000Z",
            "modified": "2016-02-19T03:14:22.000Z",
            "description": "Automatically added (via 9bbd1783af17ca8bc6c1ef6dd8680dc8)",
            "pattern": "[file:hashes.SHA1 = 'ffed1c830792fc72c9d192d5a09e2610c4e4acba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68898-b340-4255-bc9f-4285950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:32.000Z",
            "modified": "2016-02-19T03:14:32.000Z",
            "description": "Automatically added (via 9bbfa7d43ba406487036ffe13c21d293)",
            "pattern": "[file:hashes.SHA1 = '21bc127eb0def494d1a40d1f96f209999cab718d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688a2-20c4-434a-ab3f-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:42.000Z",
            "modified": "2016-02-19T03:14:42.000Z",
            "description": "Automatically added (via 9bd2bba31a453f7dd9b98ae56bd0e89a)",
            "pattern": "[file:hashes.SHA1 = 'c4392af86d3745d0b8b304408b6334ae48057f27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688ac-9b68-4f4c-8b01-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:52.000Z",
            "modified": "2016-02-19T03:14:52.000Z",
            "description": "Automatically added (via 9bd665d7784d2228d6c96c2a7a213c4e)",
            "pattern": "[file:hashes.SHA1 = 'ff4c738c133856027e289f7aadd1788f79d5c66c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688b6-f830-4936-a542-4b45950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:02.000Z",
            "modified": "2016-02-19T03:15:02.000Z",
            "description": "Automatically added (via 9be913dfb13e04e45a050cb18f3bb020)",
            "pattern": "[file:hashes.SHA1 = '5ff172e81ac5f41b843e2fe39b5795cb45b989d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688c0-abf0-42a5-9045-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:12.000Z",
            "modified": "2016-02-19T03:15:12.000Z",
            "description": "Automatically added (via 9c5f07b09e26561a778c6b203fd48504)",
            "pattern": "[file:hashes.SHA1 = '6ef7f3ddd072dc2a4335a9b831e8c0b5067b80da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688ca-46ec-4ca0-a2a0-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:22.000Z",
            "modified": "2016-02-19T03:15:22.000Z",
            "description": "Automatically added (via 9cc952984ae7de0382efb913cffea15a)",
            "pattern": "[file:hashes.SHA1 = '24d9c577b69edde73e85362b2fc5a2d12fd4e967']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688d4-cbf8-4fa6-bad8-4d70950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:32.000Z",
            "modified": "2016-02-19T03:15:32.000Z",
            "description": "Automatically added (via 9ce00665092ec301648d7636dc295ea0)",
            "pattern": "[file:hashes.SHA1 = 'c0ba0fc59290936582e2d55f330328de7ff13213']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688de-7d70-44a7-837a-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:42.000Z",
            "modified": "2016-02-19T03:15:42.000Z",
            "description": "Automatically added (via 9d22ce973dd1ed0dae33aa850bbe803f)",
            "pattern": "[file:hashes.SHA1 = '93005c9676728636c47feb798b51df489b0b608c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688e8-26b8-40d4-97bc-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:52.000Z",
            "modified": "2016-02-19T03:15:52.000Z",
            "description": "Automatically added (via 9d5bbd3545f41ada6c5eb0dc5fb9da05)",
            "pattern": "[file:hashes.SHA1 = '07626e04a4f9dfd0b02445ee8363b34ca935caa5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688f2-1ba0-4496-8bac-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:02.000Z",
            "modified": "2016-02-19T03:16:02.000Z",
            "description": "Automatically added (via 9dc8ab42cd80c1dbf0a0c00712744c8f)",
            "pattern": "[file:hashes.SHA1 = '6c53555195303e8de795be9329d8ade8d45aab27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688fc-6478-439b-a385-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:12.000Z",
            "modified": "2016-02-19T03:16:12.000Z",
            "description": "Automatically added (via 9dd8e777e1e860311f83b1e6b79c3bae)",
            "pattern": "[file:hashes.SHA1 = '14f3a2d28ccc928b8a773973dc03597be6b57168']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68906-2920-4d12-9e03-476d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:22.000Z",
            "modified": "2016-02-19T03:16:22.000Z",
            "description": "Automatically added (via 9e331a34b32ab1e91e1cdf4f2fb4d284)",
            "pattern": "[file:hashes.SHA1 = 'dbd8e591cab221dd7b31e9d0b50ebc78d26ac2b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68910-7280-4404-92f0-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:32.000Z",
            "modified": "2016-02-19T03:16:32.000Z",
            "description": "Automatically added (via 9ee1278b61a3a2f3844c73bbd1c83219)",
            "pattern": "[file:hashes.SHA1 = 'da908fb35f974dcfa272f83a84d5f4989a279a23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6891a-262c-43fd-9a33-48bf950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:42.000Z",
            "modified": "2016-02-19T03:16:42.000Z",
            "description": "Automatically added (via 9efa2aea3c1243e2e353539386d37ae2)",
            "pattern": "[file:hashes.SHA1 = 'e40f1291b71fd779185f922469086bd37d96d201']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68924-df80-4dba-bac7-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:52.000Z",
            "modified": "2016-02-19T03:16:52.000Z",
            "description": "Automatically added (via 9f5a2117cd10ca40933c51d331a66901)",
            "pattern": "[file:hashes.SHA1 = 'a6b7852b988859051ba631f1f12538b3fcf878f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6892e-16c4-46bc-b7b3-40c7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:02.000Z",
            "modified": "2016-02-19T03:17:02.000Z",
            "description": "Automatically added (via 9f6fc09e53b15d037e900d332f9d3686)",
            "pattern": "[file:hashes.SHA1 = '3c1bef384a0e7c5b363b68c9bd4ba7129eb356a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68938-3d50-4222-a819-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:12.000Z",
            "modified": "2016-02-19T03:17:12.000Z",
            "description": "Automatically added (via 9ffcef9450b4527f578aa2f07eb0b577)",
            "pattern": "[file:hashes.SHA1 = '824d52f8b044895cc17bebb7d5810ed004c019dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68942-e1c8-40c7-bf3d-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:22.000Z",
            "modified": "2016-02-19T03:17:22.000Z",
            "description": "Automatically added (via a0040a40dd9047ee6ad6a2dea96e831f)",
            "pattern": "[file:hashes.SHA1 = '01d7e86d5706d642c9b87bf9f4c330c32e9458ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6894d-2b64-4165-8e86-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:33.000Z",
            "modified": "2016-02-19T03:17:33.000Z",
            "description": "Automatically added (via a02df67f98a22df33e2e9bdc77dea9e7)",
            "pattern": "[file:hashes.SHA1 = 'c2c2636da1c6ea166fe3b845ef0e64c260fc75c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68957-a924-4f74-86bd-4674950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:43.000Z",
            "modified": "2016-02-19T03:17:43.000Z",
            "description": "Automatically added (via a0acead0b30a72eabddbcc6809d51b40)",
            "pattern": "[file:hashes.SHA1 = 'ba8d927f1e498652a5abe86a4033a443130ac1ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68961-7a20-4819-9987-479c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:53.000Z",
            "modified": "2016-02-19T03:17:53.000Z",
            "description": "Automatically added (via a0acf513e2c3e540dfc86387b7a3557e)",
            "pattern": "[file:hashes.SHA1 = '7078cc84fa8503d28d4b8fabf3163936f178cd4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6896b-3108-4d47-ba01-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:03.000Z",
            "modified": "2016-02-19T03:18:03.000Z",
            "description": "Automatically added (via a0ae72b44a024b46aec41bafc5012685)",
            "pattern": "[file:hashes.SHA1 = 'a4dd28aff0c0b84a63d49e9d9733e11775bf4c14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68976-5d28-4b7d-b13e-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:14.000Z",
            "modified": "2016-02-19T03:18:14.000Z",
            "description": "Automatically added (via a0bcf5e7335cf43541d6679c326849d6)",
            "pattern": "[file:hashes.SHA1 = '74640f4954c6c380ff9c71940f9f60f5aa89b468']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68980-a6fc-41b8-9e7c-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:24.000Z",
            "modified": "2016-02-19T03:18:24.000Z",
            "description": "Automatically added (via a0ebf82db54eb8ccf38ca7aa6b67b9fd)",
            "pattern": "[file:hashes.SHA1 = '1a0c7b81e8a40e6f27298fa2af99b3689adfc548']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6898a-7b40-4c36-9901-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:34.000Z",
            "modified": "2016-02-19T03:18:34.000Z",
            "description": "Automatically added (via a107ffcadfa41a7a1157e82a0e5323b9)",
            "pattern": "[file:hashes.SHA1 = '94c094a40aa3bee3e2eb373871073d7d44879fea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68994-60dc-4d77-91ac-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:44.000Z",
            "modified": "2016-02-19T03:18:44.000Z",
            "description": "Automatically added (via a11fb5e3256439e89b9cf0006c89fd98)",
            "pattern": "[file:hashes.SHA1 = 'cacc6aa395eeb3a1548153b448e9410b3ea3d67b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6899e-e77c-4203-879b-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:54.000Z",
            "modified": "2016-02-19T03:18:54.000Z",
            "description": "Automatically added (via a182f4b5ffa12c67b922a45923665c20)",
            "pattern": "[file:hashes.SHA1 = 'a6d71252dedd9fbfe82634bd339fa8e39b2ee048']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689a8-bec4-40e9-bbb1-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:04.000Z",
            "modified": "2016-02-19T03:19:04.000Z",
            "description": "Automatically added (via a1e78bd1da7db859d681e448c1095307)",
            "pattern": "[file:hashes.SHA1 = 'a1b73f41fe33fa8a170905d85e48c8d54a6aca9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689b3-3804-4eba-b9d3-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:15.000Z",
            "modified": "2016-02-19T03:19:15.000Z",
            "description": "Automatically added (via a22cd5fa4d9ef666ec589a762c430c46)",
            "pattern": "[file:hashes.SHA1 = '8cb42d0d216b2545b2e3c511c7fbbe545cc71f9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689be-49f0-4237-9337-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:26.000Z",
            "modified": "2016-02-19T03:19:26.000Z",
            "description": "Automatically added (via a2d1caa712ee3e9a7d2550746ad70a3a)",
            "pattern": "[file:hashes.SHA1 = '39f5a4790f4502b5decdcbf9836fa5696f055b79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689cb-de0c-429a-ae90-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:39.000Z",
            "modified": "2016-02-19T03:19:39.000Z",
            "description": "Automatically added (via a34cca407bee8be26de943cc6bd35658)",
            "pattern": "[file:hashes.SHA1 = '808aa60f5a7cdc54e81340349afd53f8fa8f5256']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689d7-39ac-42b9-97ef-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:51.000Z",
            "modified": "2016-02-19T03:19:51.000Z",
            "description": "Automatically added (via a39f8bc8eecbc743a843f2ae59363cbe)",
            "pattern": "[file:hashes.SHA1 = 'e56d74f9372e21d35b10573ec501fc1bea7712de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689e2-9b28-422f-ae0c-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:02.000Z",
            "modified": "2016-02-19T03:20:02.000Z",
            "description": "Automatically added (via a3a9554d723f03db65fc1b5956c89979)",
            "pattern": "[file:hashes.SHA1 = '0d8ebd1d3221c0d554271551f4cf6a051f0da4d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689ec-0428-4625-9d46-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:12.000Z",
            "modified": "2016-02-19T03:20:12.000Z",
            "description": "Automatically added (via a3c472bf330e88795f3e5a791bde781a)",
            "pattern": "[file:hashes.SHA1 = '58f03e379e031c78a49d12608f71bf142bce41b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689f7-1714-4cd5-8624-459f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:23.000Z",
            "modified": "2016-02-19T03:20:23.000Z",
            "description": "Automatically added (via a3cb548ea839f76c2ce7b52d877eccf2)",
            "pattern": "[file:hashes.SHA1 = 'a24c635887b83d27203f3ed16c8c1429f1075198']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a01-5764-4790-b64a-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:33.000Z",
            "modified": "2016-02-19T03:20:33.000Z",
            "description": "Automatically added (via a43f95c30ee389bee085124bc032e8a2)",
            "pattern": "[file:hashes.SHA1 = '41dbc8f081a6a0ffbb71a39ee228085fd10ed038']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a0c-b86c-4091-be28-4fc3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:44.000Z",
            "modified": "2016-02-19T03:20:44.000Z",
            "description": "Automatically added (via a45630b050e3e55c7f5fdfafc0f4bfa4)",
            "pattern": "[file:hashes.SHA1 = 'c69b69b4b5a9766d5a4c2b2c2d7978043e70f93b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a18-0268-4c87-b5eb-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:56.000Z",
            "modified": "2016-02-19T03:20:56.000Z",
            "description": "Automatically added (via a46593a35e996044d82e01dfbd11f03b)",
            "pattern": "[file:hashes.SHA1 = '5935be27bb559b44fe6c58676e4cab3fae614537']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a24-16d4-42c8-9718-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:08.000Z",
            "modified": "2016-02-19T03:21:08.000Z",
            "description": "Automatically added (via a487fb9afb3571270e7c52e0eba667a9)",
            "pattern": "[file:hashes.SHA1 = '3ebb76e619557618b976861cef7338066cbb9bed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a2f-f5e4-4b50-a3b5-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:19.000Z",
            "modified": "2016-02-19T03:21:19.000Z",
            "description": "Automatically added (via a4b1a888498090530d2377b9b0d40c2c)",
            "pattern": "[file:hashes.SHA1 = 'ea0f60be26cf48b67009abb274a2134e19f773e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a3b-608c-4529-8a98-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:31.000Z",
            "modified": "2016-02-19T03:21:31.000Z",
            "description": "Automatically added (via a4bfe3792b7f938d56dfe9efc2529574)",
            "pattern": "[file:hashes.SHA1 = 'a3ff5c7bd4fc0fbfc8fe2284e4afe8cb3d0470e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a47-c3d0-40f5-bd11-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:43.000Z",
            "modified": "2016-02-19T03:21:43.000Z",
            "description": "Automatically added (via a4e2f5194d1299af1a4b4b3802f6b55b)",
            "pattern": "[file:hashes.SHA1 = '3fd1c2b14d6833754537002f5efbd787db1fb58c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a52-aa64-4a5e-aba9-4599950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:54.000Z",
            "modified": "2016-02-19T03:21:54.000Z",
            "description": "Automatically added (via a4f950c759af9ccf3d654e799f870ed6)",
            "pattern": "[file:hashes.SHA1 = '21cc5a5b26d2b3283485c755bcc47b7992391dd1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a5e-01f0-4d6e-a26c-4cc7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:06.000Z",
            "modified": "2016-02-19T03:22:06.000Z",
            "description": "Automatically added (via a54115cd454d5ef754a6d13b76ac6565)",
            "pattern": "[file:hashes.SHA1 = 'dae2247459980317a66bc3a4640955e273bb3a99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a6a-bf84-4b39-8e42-4eb8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:18.000Z",
            "modified": "2016-02-19T03:22:18.000Z",
            "description": "Automatically added (via a55093c7e27e8dbe30803519136278bd)",
            "pattern": "[file:hashes.SHA1 = '6d970c3adfed484669bf0d529d82a1d422b21cea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a75-6ac4-45f9-92f8-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:29.000Z",
            "modified": "2016-02-19T03:22:29.000Z",
            "description": "Automatically added (via a5a8b69be617604873f5d3cd2ff8dc13)",
            "pattern": "[file:hashes.SHA1 = '3e14a6046f04b935a020bd8f3e7f8dd7839de2b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a81-d868-4439-95c5-4bc0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:41.000Z",
            "modified": "2016-02-19T03:22:41.000Z",
            "description": "Automatically added (via a5f03038b40a4fcde86d52a81098320b)",
            "pattern": "[file:hashes.SHA1 = '50e7ee60da65b9c9eae11da2f82e042199ae826c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a8d-48bc-4a54-b9fe-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:53.000Z",
            "modified": "2016-02-19T03:22:53.000Z",
            "description": "Automatically added (via a60f0e2a355da86a4baa9485b13f40a1)",
            "pattern": "[file:hashes.SHA1 = '696ae8f72b771c75cc9e35215b0d7d9de30060e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a98-9aec-43f7-9b9b-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:04.000Z",
            "modified": "2016-02-19T03:23:04.000Z",
            "description": "Automatically added (via a6118285107c9a1f233edf9cf9435d3a)",
            "pattern": "[file:hashes.SHA1 = '8bce38aab25654e3eb5eb83192cf5a1bd464c4bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68aa4-6570-4a0a-97be-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:16.000Z",
            "modified": "2016-02-19T03:23:16.000Z",
            "description": "Automatically added (via a62eb223e0985948868a5096684a32cc)",
            "pattern": "[file:hashes.SHA1 = '45399a8d3ba39a9eaf7ee30a98bcc98b95605364']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ab1-92ec-42fb-8877-4c1a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:29.000Z",
            "modified": "2016-02-19T03:23:29.000Z",
            "description": "Automatically added (via a70b32426d06f28f29a9a389cb8c748b)",
            "pattern": "[file:hashes.SHA1 = '245bfe644f9c465209242972b1345d0e35a044b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68abd-0634-47f6-9caa-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:41.000Z",
            "modified": "2016-02-19T03:23:41.000Z",
            "description": "Automatically added (via a72e0451cbd38a66363c423a1be5a067)",
            "pattern": "[file:hashes.SHA1 = '5fe4c68564491ed0175d43cce5e37c527ecfe573']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68aca-f9e8-437f-b35e-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:54.000Z",
            "modified": "2016-02-19T03:23:54.000Z",
            "description": "Automatically added (via a78478a0328735b5b330811c1143fbb1)",
            "pattern": "[file:hashes.SHA1 = '4b81e35bbde70e84963d1ff3cdb8f6345ac5db80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ad6-9930-4143-86e2-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:24:06.000Z",
            "modified": "2016-02-19T03:24:06.000Z",
            "description": "Automatically added (via a789d7ea0866387e62fed3e01acae986)",
            "pattern": "[file:hashes.SHA1 = '4ca5993832d4ef7181e9d61f026774592ea212af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:24:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ae2-3c0c-4fb0-8037-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:24:18.000Z",
            "modified": "2016-02-19T03:24:18.000Z",
            "description": "Automatically added (via a7a73e39585bb65c086a0637636e09c7)",
            "pattern": "[file:hashes.SHA1 = '4d76f14a434df827d972c3c65efef5231a1aefbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:24:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68aee-7078-4272-92b9-45ea950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:24:30.000Z",
            "modified": "2016-02-19T03:24:30.000Z",
            "description": "Automatically added (via a7bec8c4fdf4a6b6a01ae2e1378d3089)",
            "pattern": "[file:hashes.SHA1 = '877f25f1cd020ed0f072309c25a2faa496ff7fa1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:24:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68afa-e178-4dbd-a2c8-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:24:42.000Z",
            "modified": "2016-02-19T03:24:42.000Z",
            "description": "Automatically added (via a7c7aaead75e768d8836b923cdd85194)",
            "pattern": "[file:hashes.SHA1 = '8290ed640202fd84cba5a17465f0bc409e0ea6e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:24:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b06-9d14-48a5-b55e-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:24:54.000Z",
            "modified": "2016-02-19T03:24:54.000Z",
            "description": "Automatically added (via a841b80deb4021fe0992346efa376df9)",
            "pattern": "[file:hashes.SHA1 = 'a751997af17424b0b1a9b1386767c3192913404a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:24:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b11-7790-4c43-8777-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:05.000Z",
            "modified": "2016-02-19T03:25:05.000Z",
            "description": "Automatically added (via a84743aff65238fb470080f47a9dee2d)",
            "pattern": "[file:hashes.SHA1 = '20c7eababbdb05527357545ec8677708e6369fd1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b1d-deac-4ff8-8799-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:17.000Z",
            "modified": "2016-02-19T03:25:17.000Z",
            "description": "Automatically added (via a867a60ca64c2e1369bbac8bead24d16)",
            "pattern": "[file:hashes.SHA1 = '35fe4debb5046678244cd2841d650de02d722c05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b29-d414-4e3e-8355-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:29.000Z",
            "modified": "2016-02-19T03:25:29.000Z",
            "description": "Automatically added (via a8a1f0996c3e2555f8f1bb62659b6b34)",
            "pattern": "[file:hashes.SHA1 = 'd14fe87550c5d7663d88ae9e2d6d90e120e28b3f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b35-ba00-49fa-ab1b-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:41.000Z",
            "modified": "2016-02-19T03:25:41.000Z",
            "description": "Automatically added (via a8a75220abd699b4331694fb05fb8c55)",
            "pattern": "[file:hashes.SHA1 = 'de63b6655e7b1c558a2c88f7eed296197733c3c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b41-6858-4adc-8304-457f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:53.000Z",
            "modified": "2016-02-19T03:25:53.000Z",
            "description": "Automatically added (via a8bc8d72b02fce82be1ca480c6f682b5)",
            "pattern": "[file:hashes.SHA1 = 'e4e5a34657fad9061267119935a8f11de6ee0941']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b4c-03b0-4f72-b486-4c79950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:04.000Z",
            "modified": "2016-02-19T03:26:04.000Z",
            "description": "Automatically added (via a8d805311c505aff21613e9f9858ecc6)",
            "pattern": "[file:hashes.SHA1 = '9d1461f68c96d5fd15972b020c977d900cf2e978']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b57-4c0c-40f6-815d-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:15.000Z",
            "modified": "2016-02-19T03:26:15.000Z",
            "description": "Automatically added (via a8ec12ec7d1f2b829756e3c6b3d8be72)",
            "pattern": "[file:hashes.SHA1 = '238c46fbc8471426cf1ae2718b4793930ebee290']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b62-af18-42eb-9d00-4d2f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:26.000Z",
            "modified": "2016-02-19T03:26:26.000Z",
            "description": "Automatically added (via a90796d1daef998e8f1f280209e17cbe)",
            "pattern": "[file:hashes.SHA1 = 'bf60a079871d6823237180d47fa267698fd5119d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b6d-b204-43cb-bf31-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:37.000Z",
            "modified": "2016-02-19T03:26:37.000Z",
            "description": "Automatically added (via a94384de1133039b03b76fdc645f3f36)",
            "pattern": "[file:hashes.SHA1 = '4f33271def351d43d3521ed124bd6850dc1f5db3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b77-de28-4e68-94f6-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:47.000Z",
            "modified": "2016-02-19T03:26:47.000Z",
            "description": "Automatically added (via a94d29697079a38d943edba7f61cf453)",
            "pattern": "[file:hashes.SHA1 = 'fef8946b25f191da61b467ef3c567db1ddf5f43f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b82-7474-4a4b-ab5e-4876950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:58.000Z",
            "modified": "2016-02-19T03:26:58.000Z",
            "description": "Automatically added (via a94ea4ae0756dfa6d789399a659ed0ff)",
            "pattern": "[file:hashes.SHA1 = '8069652974b107c420ecf244eb3284676a2c8710']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b8d-9b90-41ba-9e61-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:09.000Z",
            "modified": "2016-02-19T03:27:09.000Z",
            "description": "Automatically added (via a9f2ccc6c0f030430b393dd119bf0487)",
            "pattern": "[file:hashes.SHA1 = '2c3c557bf95414129d1fd7ac5007645d1e0486ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b97-ff10-48a9-88eb-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:19.000Z",
            "modified": "2016-02-19T03:27:19.000Z",
            "description": "Automatically added (via aa4315a8e239727a7aded003f1fa07a8)",
            "pattern": "[file:hashes.SHA1 = '14337b8189dc54b8059f54457209f86b3c997dfd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ba2-8de8-4834-a8fd-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:30.000Z",
            "modified": "2016-02-19T03:27:30.000Z",
            "description": "Automatically added (via aa7e601964fef573253b0a56a88a8ad9)",
            "pattern": "[file:hashes.SHA1 = '5396d59f79cc27dd5a6b838553ddaa8140e3631d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bad-0598-491c-a4ee-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:41.000Z",
            "modified": "2016-02-19T03:27:41.000Z",
            "description": "Automatically added (via abc5029e141500e29e344e4b03c59135)",
            "pattern": "[file:hashes.SHA1 = '89a44942fda4490864b2f6d767e1b6dd2d90f7bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bb8-7f44-44cb-8cab-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:52.000Z",
            "modified": "2016-02-19T03:27:52.000Z",
            "description": "Automatically added (via abe7b88bfedbdeb58fe4eccde1763cf5)",
            "pattern": "[file:hashes.SHA1 = 'de999a4293791e1a77adb3686b56bde72546801e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bc2-8384-44fa-bad1-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:02.000Z",
            "modified": "2016-02-19T03:28:02.000Z",
            "description": "Automatically added (via ac58decd0d0eaeba5940173f5f0aa537)",
            "pattern": "[file:hashes.SHA1 = '9320311ebc7f31d0837ed09d874e0a61895e6496']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bcd-26ec-46aa-a503-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:13.000Z",
            "modified": "2016-02-19T03:28:13.000Z",
            "description": "Automatically added (via ac7fc1838b226a9932578aee6e62ca06)",
            "pattern": "[file:hashes.SHA1 = '325b4d0570c9742d678190449ea1939940540c1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bd8-97f4-4e55-8233-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:24.000Z",
            "modified": "2016-02-19T03:28:24.000Z",
            "description": "Automatically added (via ad7bf23e21ccc5d311142ebf7f09caea)",
            "pattern": "[file:hashes.SHA1 = '8f78058c86e6f9e0b01d354f18dc7bd7d62e65ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68be3-68ac-4436-94c1-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:35.000Z",
            "modified": "2016-02-19T03:28:35.000Z",
            "description": "Automatically added (via ada9da93eb15a0d98c90e5d46d14fef3)",
            "pattern": "[file:hashes.SHA1 = 'db27455282831d9e851c12ccc42660fb494a524a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bed-bba4-4a6c-8a31-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:45.000Z",
            "modified": "2016-02-19T03:28:45.000Z",
            "description": "Automatically added (via adae629fcd2d7bc5e71c28661cad5174)",
            "pattern": "[file:hashes.SHA1 = '8bc57335e63b1e7afb07234911a4d2b7e2c92601']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bf8-a5c4-4c38-b781-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:56.000Z",
            "modified": "2016-02-19T03:28:56.000Z",
            "description": "Automatically added (via ae5963a91661223d264267e4c9ce2226)",
            "pattern": "[file:hashes.SHA1 = '43093ea1c8cf60cb6d0b11f79a7068008bedd8fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c02-f5f0-4bca-8fc9-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:06.000Z",
            "modified": "2016-02-19T03:29:06.000Z",
            "description": "Automatically added (via ae91eb7768ab8ad3c2216acf0cefbd38)",
            "pattern": "[file:hashes.SHA1 = 'd8be1cb19fa5667bd4a5f9227bf16133d4561139']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c0c-6df4-4191-bf1f-458e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:16.000Z",
            "modified": "2016-02-19T03:29:16.000Z",
            "description": "Automatically added (via aec99d53916bf62e2e155b6e51a279bf)",
            "pattern": "[file:hashes.SHA1 = 'e8db05e1e06ed301a5520c34bf5495be2245f890']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c17-01ac-4b3e-982a-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:27.000Z",
            "modified": "2016-02-19T03:29:27.000Z",
            "description": "Automatically added (via af6b650f2b8058a7468c242f6defb04a)",
            "pattern": "[file:hashes.SHA1 = 'bf924ec4176fac40afcdc1f49d1f3cb550acc8a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c21-e558-43e8-8c01-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:37.000Z",
            "modified": "2016-02-19T03:29:37.000Z",
            "description": "Automatically added (via af76bd50a8501950ab93506ed9b45881)",
            "pattern": "[file:hashes.SHA1 = 'b5a4762a9e48c17e906af92ecc8d1a4c87287a0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c2c-cf88-4b5a-986c-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:48.000Z",
            "modified": "2016-02-19T03:29:48.000Z",
            "description": "Automatically added (via af981c29d0c898194c755c5dc491ab92)",
            "pattern": "[file:hashes.SHA1 = '25f7c2b99e3c6032903cbfecae3e475243b4f6af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c38-9b48-4eea-9205-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:00.000Z",
            "modified": "2016-02-19T03:30:00.000Z",
            "description": "Automatically added (via afe32e0121ac62e6e3afa4c394f29dbd)",
            "pattern": "[file:hashes.SHA1 = '21a5c553408630a86922463785bb21634ac206d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c45-0a18-4650-afb6-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:13.000Z",
            "modified": "2016-02-19T03:30:13.000Z",
            "description": "Automatically added (via b0a979bc8ef3cec3c74ef2eeabb63b28)",
            "pattern": "[file:hashes.SHA1 = '7e4f1fa327830004d476c48b5d4e5490a42506ac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c50-4758-4b0b-b390-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:24.000Z",
            "modified": "2016-02-19T03:30:24.000Z",
            "description": "Automatically added (via b0adb7911b583c2b37c61068972acc01)",
            "pattern": "[file:hashes.SHA1 = '80a811f7856b17e92ab47f79d6cc7610865bc38e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c5d-9050-4df0-bba9-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:37.000Z",
            "modified": "2016-02-19T03:30:37.000Z",
            "description": "Automatically added (via b123492916b04043f5da860f00f3cf0a)",
            "pattern": "[file:hashes.SHA1 = 'f93344406f1e423bd53ab934cb92c3a6a16a080f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c68-2e74-4823-82ad-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:48.000Z",
            "modified": "2016-02-19T03:30:48.000Z",
            "description": "Automatically added (via b12facfbb19c9704970e30828bcd37b1)",
            "pattern": "[file:hashes.SHA1 = '8f0bb4752a8a99d29ace29b3a76a4fb50bf18d5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c74-1c1c-41f6-99f4-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:00.000Z",
            "modified": "2016-02-19T03:31:00.000Z",
            "description": "Automatically added (via b14e3ea855e37229883cfc11e0e6fee4)",
            "pattern": "[file:hashes.SHA1 = 'c0b0701311dceea0504853d213162a870e2b480c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c81-d378-40e2-9810-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:13.000Z",
            "modified": "2016-02-19T03:31:13.000Z",
            "description": "Automatically added (via b1c31bb75a4317056c71c25074d4ada8)",
            "pattern": "[file:hashes.SHA1 = 'b8449fca31adb45208ae04787f598d3e2b6b11db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c8d-c3e0-4d71-ad84-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:25.000Z",
            "modified": "2016-02-19T03:31:25.000Z",
            "description": "Automatically added (via b27609e183489c44faf7d4421218c571)",
            "pattern": "[file:hashes.SHA1 = 'bd116f3436d8df42c6d3daeb75de9247985de574']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c99-6b78-4ce8-a9a6-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:37.000Z",
            "modified": "2016-02-19T03:31:37.000Z",
            "description": "Automatically added (via b3214695c413a762aefe8edb32e98cce)",
            "pattern": "[file:hashes.SHA1 = 'dd4edf14b8e02e743f11cd3fe68a0e21cf18818f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ca5-1fa8-40f1-9e37-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:49.000Z",
            "modified": "2016-02-19T03:31:49.000Z",
            "description": "Automatically added (via b330410fcdc13ca1370e6e957244b172)",
            "pattern": "[file:hashes.SHA1 = '3d2108ff431e8cc0aa6133f806b8ceef22f0bb44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cb5-e2b8-43b2-9bb9-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:05.000Z",
            "modified": "2016-02-19T03:32:05.000Z",
            "description": "Automatically added (via b3487cf4d7038fcbf016d463b3f1baad)",
            "pattern": "[file:hashes.SHA1 = '118f27dd5a91cc5aaedc526661b565a26a4da6be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cc0-0300-41a6-91de-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:16.000Z",
            "modified": "2016-02-19T03:32:16.000Z",
            "description": "Automatically added (via b35597962e58078c59a6dbc084196d39)",
            "pattern": "[file:hashes.SHA1 = 'f9f60a155a65fd80f771b1b633d6a33855d127c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ccb-82b8-4907-b366-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:27.000Z",
            "modified": "2016-02-19T03:32:27.000Z",
            "description": "Automatically added (via b3a7a31569c5458d26ac32ee9c3eaaaa)",
            "pattern": "[file:hashes.SHA1 = 'ab148989566c39e523ff91fca0b88ac8c8ae748f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cd7-1fec-4baa-a899-4434950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:39.000Z",
            "modified": "2016-02-19T03:32:39.000Z",
            "description": "Automatically added (via b3ad9022f7299367de95102f5b187c01)",
            "pattern": "[file:hashes.SHA1 = '050428c3969af1d26b1f0879b1969a5e684a8f1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ce2-e048-4af9-af7b-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:50.000Z",
            "modified": "2016-02-19T03:32:50.000Z",
            "description": "Automatically added (via b3afe6b9762f13eb179c1f28b211034c)",
            "pattern": "[file:hashes.SHA1 = '4747ba01541b4b6d9bd9d62115899bf3f6b9bcd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ced-56b4-41b3-b700-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:01.000Z",
            "modified": "2016-02-19T03:33:01.000Z",
            "description": "Automatically added (via b3dafd00e7dfe9c4450b7da6872ecb40)",
            "pattern": "[file:hashes.SHA1 = '69f4eabc36f5fc07a2df5149e3b8276e9715b1d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cf9-1630-42a5-b15f-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:13.000Z",
            "modified": "2016-02-19T03:33:13.000Z",
            "description": "Automatically added (via b40d1b2eb402ccc31eee33c994d6883e)",
            "pattern": "[file:hashes.SHA1 = '459d00e0f276071f4bdcdd7d77540ea9b35bf4c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d05-af68-482c-a4b6-4e1a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:25.000Z",
            "modified": "2016-02-19T03:33:25.000Z",
            "description": "Automatically added (via b4354b6abc04b278630ca8961f980e64)",
            "pattern": "[file:hashes.SHA1 = '6b03d793b0b2e9e4015c53597464c09575a60c03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d10-b3a8-450e-abd2-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:36.000Z",
            "modified": "2016-02-19T03:33:36.000Z",
            "description": "Automatically added (via b49bc80746500a39609a8ac01a21bd25)",
            "pattern": "[file:hashes.SHA1 = '010e7c61dc914974ba7b22ddf6b0c48716442f35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d1c-1290-4410-965b-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:48.000Z",
            "modified": "2016-02-19T03:33:48.000Z",
            "description": "Automatically added (via b5292e44ae6d084dce62e3d11de5b736)",
            "pattern": "[file:hashes.SHA1 = '9a78d4b72b42ce164636bd36502b797393475671']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d28-2e64-4253-a5de-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:00.000Z",
            "modified": "2016-02-19T03:34:00.000Z",
            "description": "Automatically added (via b5685244da19c863c29c063f7138c099)",
            "pattern": "[file:hashes.SHA1 = 'fc18b5f9736cefd0c4fe49a7f0e2e4d6f58ea7ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d34-9504-4c22-b3e8-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:12.000Z",
            "modified": "2016-02-19T03:34:12.000Z",
            "description": "Automatically added (via b5af883f5a0dfd40d6941eb4332c3262)",
            "pattern": "[file:hashes.SHA1 = '89420e5ecda65bc2ced6f8a8cb9bd3d4d8b8a77f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d40-5284-4c3a-9dd9-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:24.000Z",
            "modified": "2016-02-19T03:34:24.000Z",
            "description": "Automatically added (via b5c9785563fdf8e1481983560a21f550)",
            "pattern": "[file:hashes.SHA1 = '839ffc4ea46bb06f3e007d78d7535849b2cdff82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d4b-1774-4b3f-ada6-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:35.000Z",
            "modified": "2016-02-19T03:34:35.000Z",
            "description": "Automatically added (via b5fdc78b1b225321c681c6d4a807c8c3)",
            "pattern": "[file:hashes.SHA1 = '430b71960060690515b6223a33aaee53387240da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d56-ca5c-4c11-98f1-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:46.000Z",
            "modified": "2016-02-19T03:34:46.000Z",
            "description": "Automatically added (via b60c26edfcb2e880e8d0421304f0def5)",
            "pattern": "[file:hashes.SHA1 = 'c495cecda8a0fe1fa36e6e24c675414384bec999']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d62-6b0c-431e-b5c5-42a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:58.000Z",
            "modified": "2016-02-19T03:34:58.000Z",
            "description": "Automatically added (via b6495b2240417a466302d24c0111288c)",
            "pattern": "[file:hashes.SHA1 = 'f9322e940c46948f9d0a3f812c6ffb0812318751']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d6d-7ea0-4be9-b1cf-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:09.000Z",
            "modified": "2016-02-19T03:35:09.000Z",
            "description": "Automatically added (via b65da314ce294433092ea0aca6a9f022)",
            "pattern": "[file:hashes.SHA1 = '3509a4eea38c572ca5f7f21faa609874bc18ca97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d79-3e18-4e37-a8e3-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:21.000Z",
            "modified": "2016-02-19T03:35:21.000Z",
            "description": "Automatically added (via b68a4c23f4adcd250ab62e3fa727cad6)",
            "pattern": "[file:hashes.SHA1 = '4d00a5da4b1c25000d412683d5b1911334064045']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d86-d0a0-4e67-b84f-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:34.000Z",
            "modified": "2016-02-19T03:35:34.000Z",
            "description": "Automatically added (via b6b053caa3e5e6ad01a825c3cb39e59e)",
            "pattern": "[file:hashes.SHA1 = '6227f0eb1294575ef2eee2120f3a0fa925788a2f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d92-cb14-43b8-8376-42cc950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:46.000Z",
            "modified": "2016-02-19T03:35:46.000Z",
            "description": "Automatically added (via b6c303bb4909fe83c1f45ba2b69846f3)",
            "pattern": "[file:hashes.SHA1 = '9058e5ce0ce7d4980ce595fda8ade8c65f873538']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d9e-e270-43ca-a1d7-4e75950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:58.000Z",
            "modified": "2016-02-19T03:35:58.000Z",
            "description": "Automatically added (via b6c8b83b0aee3965caa90d94620d5e55)",
            "pattern": "[file:hashes.SHA1 = '3f3db5df3364b57b3f4fac0851ec4be0a359b57a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68daa-cda4-4d0f-a412-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:10.000Z",
            "modified": "2016-02-19T03:36:10.000Z",
            "description": "Automatically added (via cb26cd4c08800901dfb66b657a099910)",
            "pattern": "[file:hashes.SHA1 = '1d59bc0969f9548cb6ab465000a3b170c05f6146']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68db5-433c-44b4-b0ec-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:21.000Z",
            "modified": "2016-02-19T03:36:21.000Z",
            "description": "Automatically added (via b71e8a9bb2dab9e7b1378b2d03b71984)",
            "pattern": "[file:hashes.SHA1 = '51cfd5158078372c0ad96f265e9c015f0838ab56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68dc1-04c4-4df4-a48d-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:33.000Z",
            "modified": "2016-02-19T03:36:33.000Z",
            "description": "Automatically added (via c590dd3c437a6aef5bc03b63e2cf8722)",
            "pattern": "[file:hashes.SHA1 = '315ffbb812b0dd8438dc679405a96fac21fc8b9a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68dcd-8e68-4d51-9ef6-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:45.000Z",
            "modified": "2016-02-19T03:36:45.000Z",
            "description": "Automatically added (via b730f68d3b7b7442b5414b45976ea894)",
            "pattern": "[file:hashes.SHA1 = '65454fafec66028409f0b5c612e999d12af8a036']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68dd8-54f0-46bd-9686-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:56.000Z",
            "modified": "2016-02-19T03:36:56.000Z",
            "description": "Automatically added (via caeb865a208a632e676bfca9d246729b)",
            "pattern": "[file:hashes.SHA1 = '4cfebf62c1334e17793c9520ee689d009a059172']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68de3-10dc-4357-8f8b-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:07.000Z",
            "modified": "2016-02-19T03:37:07.000Z",
            "description": "Automatically added (via cae1ad8b41d49d6ce56b16385cc49b33)",
            "pattern": "[file:hashes.SHA1 = '756827c06c5b0a584c160fbb2dabcf27853e3f9a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68def-e528-45f3-a724-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:19.000Z",
            "modified": "2016-02-19T03:37:19.000Z",
            "description": "Automatically added (via c599c8d2d8dc76e55d4c9f18648e9b8c)",
            "pattern": "[file:hashes.SHA1 = 'bf72509fa1faf179984eb12d7f02083073d686cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68dfa-7ad4-457a-879c-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:30.000Z",
            "modified": "2016-02-19T03:37:30.000Z",
            "description": "Automatically added (via b7879a6cf6cc1087177027bd44d22288)",
            "pattern": "[file:hashes.SHA1 = '0573fe8959d36915d690a4750ff26c9ac23906f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e05-b738-49d1-b8a9-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:41.000Z",
            "modified": "2016-02-19T03:37:41.000Z",
            "description": "Automatically added (via b78a8a51f103764327765ca96d789504)",
            "pattern": "[file:hashes.SHA1 = '4a96d3fc9f8d857a43b95f49d41db241658952c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e11-8f94-4b29-9be5-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:53.000Z",
            "modified": "2016-02-19T03:37:53.000Z",
            "description": "Automatically added (via cad7f6d622036865ff2c66131e009d9b)",
            "pattern": "[file:hashes.SHA1 = 'ae3ce56aa7e4aa3a2cc33d121d12ff3c02f19cba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e1e-1c8c-4c39-a74e-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:06.000Z",
            "modified": "2016-02-19T03:38:06.000Z",
            "description": "Automatically added (via b7f0cdf0b9e0c06ebe3fe0c7e08abd98)",
            "pattern": "[file:hashes.SHA1 = '769ffe0a8f34720ddaad59ecdd9b0c4d152d8af2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e29-1728-4138-86d5-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:17.000Z",
            "modified": "2016-02-19T03:38:17.000Z",
            "description": "Automatically added (via c5b0c159343d30b28cc3d4b12da2f85d)",
            "pattern": "[file:hashes.SHA1 = '9c8eb462509339412dc985754a763003b87227fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e36-6660-4279-b5de-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:30.000Z",
            "modified": "2016-02-19T03:38:30.000Z",
            "description": "Automatically added (via c5b3b7f58faf0b7a831c31a2ea103163)",
            "pattern": "[file:hashes.SHA1 = 'e0063f75a715c3f23966c95dfb679ba8b8a5ec24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e41-85fc-4d7e-aa1e-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:41.000Z",
            "modified": "2016-02-19T03:38:41.000Z",
            "description": "Automatically added (via b8c7da5f37c0a83822c1087124884ea5)",
            "pattern": "[file:hashes.SHA1 = '9feef025bce3c1e6c2720623198df0911b8aae90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e4d-140c-46ec-a444-4def950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:53.000Z",
            "modified": "2016-02-19T03:38:53.000Z",
            "description": "Automatically added (via b8d0f87408c4f8d2ea01b0bb3f82e1e3)",
            "pattern": "[file:hashes.SHA1 = '8f9548f0cabf7a74be7e2075f82218f71f959f13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e58-027c-4cad-98ce-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:04.000Z",
            "modified": "2016-02-19T03:39:04.000Z",
            "description": "Automatically added (via b8d3ab5f1bb39ad1b1bbd00b054a4c84)",
            "pattern": "[file:hashes.SHA1 = 'd650d906d5bcd00678c9114fc4941af3b7d3926e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e64-3b48-42b9-9ea2-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:16.000Z",
            "modified": "2016-02-19T03:39:16.000Z",
            "description": "Automatically added (via b8dc290d9df001ef32a0c4b25ef2a23b)",
            "pattern": "[file:hashes.SHA1 = 'ad2b0659ad2e3209621c45d6bb4c20ed523569d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e71-1094-4fca-8135-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:29.000Z",
            "modified": "2016-02-19T03:39:29.000Z",
            "description": "Automatically added (via b8eade0367a50ead8e6843ee7381109c)",
            "pattern": "[file:hashes.SHA1 = '424b6f1c01912859c689d79817c0801a3adbb56e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e7c-1824-4435-96dd-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:40.000Z",
            "modified": "2016-02-19T03:39:40.000Z",
            "description": "Automatically added (via b8ef17ff1dec429b39fc5a0132ae0f84)",
            "pattern": "[file:hashes.SHA1 = '418dbc3d4415c90451c1e526996718c40856d6ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e88-0fb0-4ab1-9e60-4442950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:52.000Z",
            "modified": "2016-02-19T03:39:52.000Z",
            "description": "Automatically added (via ca0ff5b7b63d7bf64da20d900aef5a42)",
            "pattern": "[file:hashes.SHA1 = 'd24ac538316430a97aa4c2901dfcac65d53168a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e94-ca54-4184-a364-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:40:04.000Z",
            "modified": "2016-02-19T03:40:04.000Z",
            "description": "Automatically added (via c9f247c5cc8a51ef051b68a6e69c92e7)",
            "pattern": "[file:hashes.SHA1 = '0a4ab83c87f506fc2ee8acaa34fec3e3aed792b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:40:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ea1-0798-4865-8681-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:40:17.000Z",
            "modified": "2016-02-19T03:40:17.000Z",
            "description": "Automatically added (via c5e654e0dc6512b519c22efb583ef895)",
            "pattern": "[file:hashes.SHA1 = '0ffa2d6ec2e483fcdb24791fa4fd26a19e363ac4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:40:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ead-2ca8-477e-acd2-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:40:29.000Z",
            "modified": "2016-02-19T03:40:29.000Z",
            "description": "Automatically added (via c9e6db39f75364fe592cf031fcc16b16)",
            "pattern": "[file:hashes.SHA1 = '329bc516cd6707cc73ebd29bded45e40117ead01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:40:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68eba-10b4-4499-ae6f-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:40:42.000Z",
            "modified": "2016-02-19T03:40:42.000Z",
            "description": "Automatically added (via c9d422564eaf9b87eba9a58ff574662d)",
            "pattern": "[file:hashes.SHA1 = '999b66c11029d0f3f15c71328bd7afdcc1ab319a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:40:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ec6-9930-4da0-8c81-4459950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:40:54.000Z",
            "modified": "2016-02-19T03:40:54.000Z",
            "description": "Automatically added (via c9a1ceeddc34b9e12df2ea2932e4ddff)",
            "pattern": "[file:hashes.SHA1 = 'ca40db3c60dcd958a18f6ec90b36a5505f89bd8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:40:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ed3-a3ec-4626-8981-4592950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:07.000Z",
            "modified": "2016-02-19T03:41:07.000Z",
            "description": "Automatically added (via b945282a540027f5183aebfa69175bd8)",
            "pattern": "[file:hashes.SHA1 = 'a951c02d015b86c2c8a74c2a30b07fd97909139c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ee0-2df4-4ef5-b062-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:20.000Z",
            "modified": "2016-02-19T03:41:20.000Z",
            "description": "Automatically added (via b959eb6239bcd90633b66313508f6225)",
            "pattern": "[file:hashes.SHA1 = '2463139f61c7f8f4b7d585b546d15e298cd546d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68eec-6fb8-4c49-8019-4e00950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:32.000Z",
            "modified": "2016-02-19T03:41:32.000Z",
            "description": "Automatically added (via c98ce2e779803436ea5b151261a3d260)",
            "pattern": "[file:hashes.SHA1 = '23375814ae81589dd58c8197f8666f8ffa3a2d17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ef7-b25c-437e-9bb9-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:43.000Z",
            "modified": "2016-02-19T03:41:43.000Z",
            "description": "Automatically added (via b968f5e8b50dde6f5b0e8a0e8fd87cd4)",
            "pattern": "[file:hashes.SHA1 = 'f134aa8a9de9ba3053397a8066b28b21d04644df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f03-9634-4781-bd89-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:55.000Z",
            "modified": "2016-02-19T03:41:55.000Z",
            "description": "Automatically added (via c9727dc838d0a520f34d6554824f2806)",
            "pattern": "[file:hashes.SHA1 = '1d16af31f9810e662f870ca441940a3e9969ba42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f10-2094-4103-8d60-45d2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:08.000Z",
            "modified": "2016-02-19T03:42:08.000Z",
            "description": "Automatically added (via b995c362c4897ce1f9c59661baca637f)",
            "pattern": "[file:hashes.SHA1 = '184e141064330ad4eafe06863504fac8855f6d28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f1d-3c14-461d-bb88-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:21.000Z",
            "modified": "2016-02-19T03:42:21.000Z",
            "description": "Automatically added (via b99938742a898abcd803e42e6d432c93)",
            "pattern": "[file:hashes.SHA1 = '0b990a947223232e6bc5968a22c7212208ea497f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f2a-0d74-46fe-affb-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:34.000Z",
            "modified": "2016-02-19T03:42:34.000Z",
            "description": "Automatically added (via c91c1d568dbdb615b749bbb6f4f88624)",
            "pattern": "[file:hashes.SHA1 = 'd8527076bcf737b7d7cbe059cc7a014aceff0da5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f37-afd8-4275-b82b-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:47.000Z",
            "modified": "2016-02-19T03:42:47.000Z",
            "description": "Automatically added (via b9cd3e70e42f18a46bd1e641ed1f2bca)",
            "pattern": "[file:hashes.SHA1 = '2e47881d5f7bbbab24f2c31df6715508204994e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f43-3db8-4368-81d6-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:59.000Z",
            "modified": "2016-02-19T03:42:59.000Z",
            "description": "Automatically added (via b9f2d31d8ebf2b168d5de11b57c21254)",
            "pattern": "[file:hashes.SHA1 = 'f0a7e7e0e5da5a99dc81d449f2c8b10d241544d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f4e-3630-44a3-95ab-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:43:10.000Z",
            "modified": "2016-02-19T03:43:10.000Z",
            "description": "Automatically added (via b9fc95160a640ef2c1675a28dbe331f0)",
            "pattern": "[file:hashes.SHA1 = '6ec42bf8eda806b08c5a4b8fd4a5e0ed2d973566']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:43:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f5a-a25c-43b1-8490-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:43:22.000Z",
            "modified": "2016-02-19T03:43:22.000Z",
            "description": "Automatically added (via ba2f2a169f27fd5749884c9478e09974)",
            "pattern": "[file:hashes.SHA1 = '5403a950eca86c4aab8c7395019b4841411eaaac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:43:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f68-d8e4-43ea-b4e0-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:43:36.000Z",
            "modified": "2016-02-19T03:43:36.000Z",
            "description": "Automatically added (via ba60aa30376dbae0b29ed6133c3b3781)",
            "pattern": "[file:hashes.SHA1 = 'fa12700b37cf3cb3198d40433c52dc8f5033a3c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:43:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f75-f898-4cbb-a126-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:43:49.000Z",
            "modified": "2016-02-19T03:43:49.000Z",
            "description": "Automatically added (via ba854bd7ed34a7de658b07a8c0fc70f7)",
            "pattern": "[file:hashes.SHA1 = '05826383a04547b33f5c3340085d55540442cbdd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:43:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f82-3ad0-48ea-97cb-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:44:02.000Z",
            "modified": "2016-02-19T03:44:02.000Z",
            "description": "Automatically added (via ba9fc031a9abc2f4ec30d17bbdbf49d6)",
            "pattern": "[file:hashes.SHA1 = '817ba8c8917e8e62289c9e0e223c6d23b1e1314e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:44:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f90-f0f4-4aeb-8d33-458a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:44:16.000Z",
            "modified": "2016-02-19T03:44:16.000Z",
            "description": "Automatically added (via c87174ddd67450c1e5b714e11a2948a1)",
            "pattern": "[file:hashes.SHA1 = 'd016ef5740a8ba488c9e39df95992384d3dd71a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:44:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f9d-1790-4d54-a26e-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:44:29.000Z",
            "modified": "2016-02-19T03:44:29.000Z",
            "description": "Automatically added (via bab65428ff0e49234013d7804249a63a)",
            "pattern": "[file:hashes.SHA1 = '7203457df8c493f4d7f8a6272bcb69c8e34126a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:44:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68faa-1d8c-4e08-994c-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:44:42.000Z",
            "modified": "2016-02-19T03:44:42.000Z",
            "description": "Automatically added (via c86939fbf886e23d2c274b0a29865953)",
            "pattern": "[file:hashes.SHA1 = '37d2ac855cf08fd1cf2f69d673c6f64dbf28e5ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:44:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fb8-b85c-4f49-86f7-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:44:56.000Z",
            "modified": "2016-02-19T03:44:56.000Z",
            "description": "Automatically added (via c86318c6f9567e888c03b7662cd38a3f)",
            "pattern": "[file:hashes.SHA1 = '48b2eff0fa0cd0936b67b1ca37866cd974d01724']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:44:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fc7-ebd0-4a58-829f-425c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:45:11.000Z",
            "modified": "2016-02-19T03:45:11.000Z",
            "description": "Automatically added (via c6dff48a0cc08450862a5395c641f7b6)",
            "pattern": "[file:hashes.SHA1 = 'c104ef927d83daf7c41f017c29d58fc7bd1259db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:45:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fd4-5638-4282-8b3f-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:45:24.000Z",
            "modified": "2016-02-19T03:45:24.000Z",
            "description": "Automatically added (via c6e12786e4c798b3f1b2695ff16a7ba6)",
            "pattern": "[file:hashes.SHA1 = '8fac42ed7134bb1eff5ac09f1e3a740fc6ed5727']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:45:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fe1-7d84-4b5f-b1ee-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:45:37.000Z",
            "modified": "2016-02-19T03:45:37.000Z",
            "description": "Automatically added (via bc0685378c6e6bb5247b70da3a2eb7f8)",
            "pattern": "[file:hashes.SHA1 = 'a21915ea15d1be3d5addf2a1f0897ec8c1c628e1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fef-cce4-4e84-be04-4628950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:45:51.000Z",
            "modified": "2016-02-19T03:45:51.000Z",
            "description": "Automatically added (via c7030abd1e1c2122531f355f89955eed)",
            "pattern": "[file:hashes.SHA1 = '60f0c15bf18156025b08a909f7e8fa695f05c335']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:45:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69001-915c-4bd4-8b59-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:46:09.000Z",
            "modified": "2016-02-19T03:46:09.000Z",
            "description": "Automatically added (via bc0d18d205596db556355a53b65faace)",
            "pattern": "[file:hashes.SHA1 = '47c1ecd9abdf17766671bb28234475323b99dad6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:46:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6900f-3020-4710-90f3-44fa950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:46:23.000Z",
            "modified": "2016-02-19T03:46:23.000Z",
            "description": "Automatically added (via c78b3ce6a4287e71ead07b9d31121124)",
            "pattern": "[file:hashes.SHA1 = '6e2a010dd01802b94bf33ba44319f6cd038836d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:46:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6901d-2b50-4753-bd20-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:46:37.000Z",
            "modified": "2016-02-19T03:46:37.000Z",
            "description": "Automatically added (via c7832811c95ea041cbc423074bd12df4)",
            "pattern": "[file:hashes.SHA1 = '03510b66cb1327ba8e499bf659dd5cf84dacd3a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:46:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6902b-6f6c-4fe1-b988-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:46:51.000Z",
            "modified": "2016-02-19T03:46:51.000Z",
            "description": "Automatically added (via c75da9507ec26eb93bd267ddfc127ed0)",
            "pattern": "[file:hashes.SHA1 = '7b5d400c2844c38eec42a2344fb6e090090dd8f1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:46:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69038-69e0-4951-990f-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:47:04.000Z",
            "modified": "2016-02-19T03:47:04.000Z",
            "description": "Automatically added (via c726e1e0ad128bfb626ff3719e200252)",
            "pattern": "[file:hashes.SHA1 = '94912d5a9fee67708c6d65f1baadd93c5ec90e95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69046-c22c-4365-b80e-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:47:18.000Z",
            "modified": "2016-02-19T03:47:18.000Z",
            "description": "Automatically added (via bccd8807a247ce25d21425af40ab81f3)",
            "pattern": "[file:hashes.SHA1 = '825c4ceecb70407b7631a2ae6355334647c2dbae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:47:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69054-7794-4911-9976-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:47:32.000Z",
            "modified": "2016-02-19T03:47:32.000Z",
            "description": "Automatically added (via bcdf9656b56a089016fef7143de72559)",
            "pattern": "[file:hashes.SHA1 = '76b1edcaafb6118844327e1159565cc08859c743']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:47:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69061-709c-451c-beda-4135950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:47:45.000Z",
            "modified": "2016-02-19T03:47:45.000Z",
            "description": "Automatically added (via bd03d24c25693717b0f74d800e4d38ec)",
            "pattern": "[file:hashes.SHA1 = 'ff2e52e884d21ba28b07db119ca0a9bc3e40031f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:47:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6906f-92ec-4c05-9b95-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:47:59.000Z",
            "modified": "2016-02-19T03:47:59.000Z",
            "description": "Automatically added (via bd628ba5d0beabd4f86d3146e3be83b7)",
            "pattern": "[file:hashes.SHA1 = 'c1e8ca8120c8768342f6ee4b1005e1b0a17eb6af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:47:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6907c-28cc-4fa2-83d2-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:48:12.000Z",
            "modified": "2016-02-19T03:48:12.000Z",
            "description": "Automatically added (via bd691ee2bcb3c227d218c4a28a808b4a)",
            "pattern": "[file:hashes.SHA1 = 'd4692e9dee1a1d96ff004ae32ea7ca48e7893f1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:48:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6908a-3738-4998-a181-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:48:26.000Z",
            "modified": "2016-02-19T03:48:26.000Z",
            "description": "Automatically added (via be58fda953d6e41c8b9ec6447b15a65f)",
            "pattern": "[file:hashes.SHA1 = 'efa02bb3826b44e82dc9013e66e875ff3b40a083']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:48:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69097-9a80-4a11-9665-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:48:39.000Z",
            "modified": "2016-02-19T03:48:39.000Z",
            "description": "Automatically added (via bf20dc2ef2d574523a4cd550e89ce283)",
            "pattern": "[file:hashes.SHA1 = '847f415530a805db59a5a71114f5d3b12fd79cdf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:48:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690a5-9e1c-4547-a117-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:48:53.000Z",
            "modified": "2016-02-19T03:48:53.000Z",
            "description": "Automatically added (via bf396b8a9aaf40b94da4afc7ebeb061f)",
            "pattern": "[file:hashes.SHA1 = '3c87280edb69d2949fe46bb1156bf7ce0c144a81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:48:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690b2-1f40-4ff1-8cf4-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:49:06.000Z",
            "modified": "2016-02-19T03:49:06.000Z",
            "description": "Automatically added (via bf912c8597403263eed7b2a2afd67bab)",
            "pattern": "[file:hashes.SHA1 = '0b89cb5afac2d8abe379a06a53d60cd256419f77']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:49:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690c0-6ed0-4015-a528-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:49:20.000Z",
            "modified": "2016-02-19T03:49:20.000Z",
            "description": "Automatically added (via bffa06e3cd976efceeb646c56804753d)",
            "pattern": "[file:hashes.SHA1 = '892546521f226da3a02fe10170af0f223b6e0ebe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:49:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690cd-570c-4c01-a0d8-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:49:33.000Z",
            "modified": "2016-02-19T03:49:33.000Z",
            "description": "Automatically added (via c01e9c39570127749b4ac484188373a3)",
            "pattern": "[file:hashes.SHA1 = '7d8a506372e05f485e4da80894518c6b4b6f00f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:49:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690db-bdd0-4fd3-820e-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:49:47.000Z",
            "modified": "2016-02-19T03:49:47.000Z",
            "description": "Automatically added (via c022ef2fb26e93db3c3750dc6cdb9d3b)",
            "pattern": "[file:hashes.SHA1 = 'ecf37bf8de801acf8d7d4e9ed5974f66c4b889a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:49:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690e8-9664-47cc-a47b-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:50:00.000Z",
            "modified": "2016-02-19T03:50:00.000Z",
            "description": "Automatically added (via c038f08b68a2514457ad8071b09c4fe3)",
            "pattern": "[file:hashes.SHA1 = 'b2413bc082c8c99c7c4a942eea56b30fc176a139']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:50:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690f4-105c-4399-a246-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:50:12.000Z",
            "modified": "2016-02-19T03:50:12.000Z",
            "description": "Automatically added (via c03dd589b4ffee2319fccc8dab473a7c)",
            "pattern": "[file:hashes.SHA1 = 'f5116851ee574beddad8cc80d9bf28cebd899810']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:50:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69101-4a9c-4a4c-bc40-41c8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:50:25.000Z",
            "modified": "2016-02-19T03:50:25.000Z",
            "description": "Automatically added (via c03e7a2dab23f6002e45f94a20002af5)",
            "pattern": "[file:hashes.SHA1 = '3c4e16bab16f5eded5105a0b328c03769aa1f1cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:50:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69110-f6a4-4d9b-a3de-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:50:40.000Z",
            "modified": "2016-02-19T03:50:40.000Z",
            "description": "Automatically added (via c0928bfd527344aeea2ef2b81b3feeec)",
            "pattern": "[file:hashes.SHA1 = '562e954637b69f0e5827cb8f9e63de211ceb6731']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:50:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6911d-d544-49c9-b429-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:50:53.000Z",
            "modified": "2016-02-19T03:50:53.000Z",
            "description": "Automatically added (via c0ace7ddea0048bb4326de39878bbcc3)",
            "pattern": "[file:hashes.SHA1 = 'f2cc9d8a5664ddb54d35f9600a7ea01cf38a4c66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:50:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6912b-3f0c-454f-8aac-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:51:07.000Z",
            "modified": "2016-02-19T03:51:07.000Z",
            "description": "Automatically added (via c0af5bba330bdbe6bf558a245489e672)",
            "pattern": "[file:hashes.SHA1 = '8e9828154624d5ac49caaccd9df73f21be940de6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:51:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69138-d00c-4807-8957-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:51:20.000Z",
            "modified": "2016-02-19T03:51:20.000Z",
            "description": "Automatically added (via c0d149a03370d57f5c4b9799af8e4ff1)",
            "pattern": "[file:hashes.SHA1 = '17b99a57976aab931265af297a29fd58b934e4d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:51:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69146-5410-4cfb-b96c-4d43950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:51:34.000Z",
            "modified": "2016-02-19T03:51:34.000Z",
            "description": "Automatically added (via c0ea2f142f279332a62a8922ab555504)",
            "pattern": "[file:hashes.SHA1 = '7087e8f8abfb3de9cfa7173fd3df8c4480708bae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:51:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69153-7d7c-48d3-90da-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:51:47.000Z",
            "modified": "2016-02-19T03:51:47.000Z",
            "description": "Automatically added (via c12bbb73cc9e68553079f4d5606e68f4)",
            "pattern": "[file:hashes.SHA1 = '006c8f284e8434d21852a8e0de234c62a1c9829e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:51:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69161-b2fc-4942-956e-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:52:01.000Z",
            "modified": "2016-02-19T03:52:01.000Z",
            "description": "Automatically added (via c1765ff61bd63281179fda2beeb72cc9)",
            "pattern": "[file:hashes.SHA1 = '4df680dc8fe378759c9f4e49ff118a9d864ebb5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:52:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6916e-f4f4-4909-b627-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:52:14.000Z",
            "modified": "2016-02-19T03:52:14.000Z",
            "description": "Automatically added (via c1ae88909876f9f31365e7a461dff17b)",
            "pattern": "[file:hashes.SHA1 = '4afcba99675316699c4591a7ac206d1bab551ba7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:52:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6917c-8754-4cdd-81f3-43a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:52:28.000Z",
            "modified": "2016-02-19T03:52:28.000Z",
            "description": "Automatically added (via c2fd936150093731096fc46a30e45e19)",
            "pattern": "[file:hashes.SHA1 = '7323e1fe32e9f4645193c57d5893580b86baa109']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:52:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6918a-d2d4-4c0b-9c49-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:52:42.000Z",
            "modified": "2016-02-19T03:52:42.000Z",
            "description": "Automatically added (via c302d17cac1e4365e0f85e688e9aebcc)",
            "pattern": "[file:hashes.SHA1 = '1c48d29e9088e04aea44f1edbd699a58415ddf1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:52:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69198-5118-4c06-9060-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:52:56.000Z",
            "modified": "2016-02-19T03:52:56.000Z",
            "description": "Automatically added (via c32425a9fcd6839e6dd151fe766c6eba)",
            "pattern": "[file:hashes.SHA1 = '78b8494ab4d1c1dfcabbc1a8a04cd7e3762824f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:52:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691a6-91d4-4e6a-8153-45a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:53:10.000Z",
            "modified": "2016-02-19T03:53:10.000Z",
            "description": "Automatically added (via c3f33d7812f6fd54df55f31f36ba37d6)",
            "pattern": "[file:hashes.SHA1 = 'be5d45aa073e48eec4fa43380c629e9f684b2310']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:53:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691b4-60d4-448d-8c5a-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:53:24.000Z",
            "modified": "2016-02-19T03:53:24.000Z",
            "description": "Automatically added (via c450ed478ffa988091e8a894db1e0251)",
            "pattern": "[file:hashes.SHA1 = 'd43fa2b26885ff5314c830ec72f2f660b2c89e00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691c1-7048-42bb-9ac0-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:53:37.000Z",
            "modified": "2016-02-19T03:53:37.000Z",
            "description": "Automatically added (via c4892faf578befa3f946905336f3c5a0)",
            "pattern": "[file:hashes.SHA1 = '8d7085b59b99332799a8b7dc5d7fa125b26b3381']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:53:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691cf-ed80-4a93-a241-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:53:51.000Z",
            "modified": "2016-02-19T03:53:51.000Z",
            "description": "Automatically added (via c49ddf3e79a9c96f2430112105e16ffb)",
            "pattern": "[file:hashes.SHA1 = 'dbbdfc6c5edbe75dc45a813787c3612ebb9351d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:53:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691dc-63ec-43ef-bdc2-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:54:04.000Z",
            "modified": "2016-02-19T03:54:04.000Z",
            "description": "Automatically added (via c4b2f3a73648fa790f11426bccc5faf2)",
            "pattern": "[file:hashes.SHA1 = '4a3f4b65dfd6ef877b4e81ed434a6907338ec62c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:54:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691ea-8330-4fce-aa1f-4661950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:54:18.000Z",
            "modified": "2016-02-19T03:54:18.000Z",
            "description": "Automatically added (via c4d6962fc5059b9f6b3889468bbfff7f)",
            "pattern": "[file:hashes.SHA1 = 'b19ffcc768b9f4ffbb3b082723082a165078c528']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:54:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691f7-5338-4cf1-b453-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:54:31.000Z",
            "modified": "2016-02-19T03:54:31.000Z",
            "description": "Automatically added (via c4dacd706a1a81c350d050e623c57bd6)",
            "pattern": "[file:hashes.SHA1 = '101bf0225ab9ae970846decbee73d9fe2786f339']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:54:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69205-b668-4226-b659-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:54:45.000Z",
            "modified": "2016-02-19T03:54:45.000Z",
            "description": "Automatically added (via c4e19d2ab26c78cf64c2d9b33a12163f)",
            "pattern": "[file:hashes.SHA1 = 'f1ebd662aac1390ad25551363f297cb377102c3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:54:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69214-0568-4a9d-ab0f-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:55:00.000Z",
            "modified": "2016-02-19T03:55:00.000Z",
            "description": "Automatically added (via c50918a5008e51f619d6cf393c3b13a5)",
            "pattern": "[file:hashes.SHA1 = '1ef451b50a16953e89035c92c50f3668efc9ff1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:55:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69220-cfd4-4bcf-9d28-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:55:12.000Z",
            "modified": "2016-02-19T03:55:12.000Z",
            "description": "Automatically added (via c50e17a4e781ffd9cf71d18dc97e2b2b)",
            "pattern": "[file:hashes.SHA1 = '7de14f76430b283d20be4a0f997356a2d6a603d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:55:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6922e-9800-4cde-97dc-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:55:26.000Z",
            "modified": "2016-02-19T03:55:26.000Z",
            "description": "Automatically added (via c54044197ca177d5da855edde84c326c)",
            "pattern": "[file:hashes.SHA1 = 'eb23d24a89ac2c8c4af86259de818e0eda091c64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:55:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6923c-2274-41e7-ad0d-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:55:40.000Z",
            "modified": "2016-02-19T03:55:40.000Z",
            "description": "Automatically added (via c54e7b97c073c22a2fe371864ebc97ff)",
            "pattern": "[file:hashes.SHA1 = '10d8fc50fda9ae9e3c52f028a8523be4f1a77355']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:55:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69249-b8d4-4edd-96d3-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:55:53.000Z",
            "modified": "2016-02-19T03:55:53.000Z",
            "description": "Automatically added (via c569bd7aca121c816f2d38695ebedb8b)",
            "pattern": "[file:hashes.SHA1 = '482fe9115d833d09f2928049a16ffe8c17e773db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:55:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69257-7ebc-4c0e-8e0d-4853950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:56:07.000Z",
            "modified": "2016-02-19T03:56:07.000Z",
            "description": "Automatically added (via cb70c20c985814907d3a3c873c3062a8)",
            "pattern": "[file:hashes.SHA1 = '1f9045e5349ddeb961ca94613b860b97045986c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69265-d208-4975-8b06-4c4c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:56:21.000Z",
            "modified": "2016-02-19T03:56:21.000Z",
            "description": "Automatically added (via cb7372b32120af2878c41bdfa7a8bad3)",
            "pattern": "[file:hashes.SHA1 = 'cce4fe2b6c732151ea9c45a5982a043764d930a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69273-9410-4838-8ec5-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:56:35.000Z",
            "modified": "2016-02-19T03:56:35.000Z",
            "description": "Automatically added (via cc2f1b26d89dcc5eba5fed16d07da83f)",
            "pattern": "[file:hashes.SHA1 = '3f2ee71426027f6319ec9e05cdc833d539a01a12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69280-6d28-4941-9f8c-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:56:48.000Z",
            "modified": "2016-02-19T03:56:48.000Z",
            "description": "Automatically added (via cc345b2474915309375af26287b04ea8)",
            "pattern": "[file:hashes.SHA1 = 'abf0fa0a021219af7accdd0157182ba965c5435e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:56:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6928e-f6f4-4116-9259-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:57:02.000Z",
            "modified": "2016-02-19T03:57:02.000Z",
            "description": "Automatically added (via cc383679781033096118dbc3d02bf55e)",
            "pattern": "[file:hashes.SHA1 = 'dddcd992aef9d5379551ef30bdc921394ccc5362']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:57:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6929b-08f4-4fea-b065-4799950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:57:15.000Z",
            "modified": "2016-02-19T03:57:15.000Z",
            "description": "Automatically added (via cc6bf0a0f963783edf6847fe70f816b8)",
            "pattern": "[file:hashes.SHA1 = '4231d71e678fcea15af4d71939c14eeebab34359']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:57:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692a9-d158-4d17-9630-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:57:29.000Z",
            "modified": "2016-02-19T03:57:29.000Z",
            "description": "Automatically added (via ccb9273a7cbbfbc74abf92831a9cf9ad)",
            "pattern": "[file:hashes.SHA1 = 'f98ad4bc42b5e3b2da652d72775e31bcbda3b770']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:57:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692b6-644c-4152-a72e-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:57:42.000Z",
            "modified": "2016-02-19T03:57:42.000Z",
            "description": "Automatically added (via cd30e8f1110e719df01b224bb29828f5)",
            "pattern": "[file:hashes.SHA1 = '3c09c5ffb9cbb8089baededf74b44d9bab37ee08']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:57:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692c4-7b78-4e0b-83cf-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:57:56.000Z",
            "modified": "2016-02-19T03:57:56.000Z",
            "description": "Automatically added (via ce20549f36862e9493f4777e1d617ca6)",
            "pattern": "[file:hashes.SHA1 = '8d25a2670a7b905b8af1377a01715531e24eb255']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:57:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692d1-9548-4e43-a623-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:58:09.000Z",
            "modified": "2016-02-19T03:58:09.000Z",
            "description": "Automatically added (via ce3ad8bbc0435d09e727a203d5ab3630)",
            "pattern": "[file:hashes.SHA1 = '70e6484b84814e69446fd757ed35af6f82816d0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:58:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692df-2be8-4267-be08-44f5950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:58:23.000Z",
            "modified": "2016-02-19T03:58:23.000Z",
            "description": "Automatically added (via ce3cd9b9b5d64bbcbc6546d9ce3cb38a)",
            "pattern": "[file:hashes.SHA1 = '04b9114bb7a94305b1979542b1041529f9276f1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:58:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692ed-fc9c-45e4-8e3d-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:58:37.000Z",
            "modified": "2016-02-19T03:58:37.000Z",
            "description": "Automatically added (via ce6bf84a926ac18abca9795a8847e1c4)",
            "pattern": "[file:hashes.SHA1 = '0c29a99e6bfec2271611f3cdc8a5f8a1693fe174']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:58:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692fa-6ce8-4b07-ba6b-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:58:50.000Z",
            "modified": "2016-02-19T03:58:50.000Z",
            "description": "Automatically added (via cea943514acc6ea106bb77ffb0abd985)",
            "pattern": "[file:hashes.SHA1 = '032ed8439d4a2ba6d8870462f05003fa4766d71d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:58:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69308-a830-462d-bc45-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:59:04.000Z",
            "modified": "2016-02-19T03:59:04.000Z",
            "description": "Automatically added (via ced5b5c4d8458b8214a94cdde78e090b)",
            "pattern": "[file:hashes.SHA1 = '54556f08a6b82ef4d37ef88f2d29acf9fe69ba37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:59:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69315-dd8c-425d-834a-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:59:17.000Z",
            "modified": "2016-02-19T03:59:17.000Z",
            "description": "Automatically added (via cf082b39a364c6ce2c283d702dbacf4f)",
            "pattern": "[file:hashes.SHA1 = 'c41289fa0c883b6ad8e2cb2bf62748ae751d7667']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:59:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69323-7010-41fa-8618-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:59:31.000Z",
            "modified": "2016-02-19T03:59:31.000Z",
            "description": "Automatically added (via cf2c66915a0e32ebb65973fc72e52d42)",
            "pattern": "[file:hashes.SHA1 = 'f83f36d34462203685547504b5f31750ea41e3b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:59:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69331-1ad4-413d-9125-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:59:45.000Z",
            "modified": "2016-02-19T03:59:45.000Z",
            "description": "Automatically added (via cf43025073d977b40c5ca803b70db117)",
            "pattern": "[file:hashes.SHA1 = '40e7afc5daa4c1837b17882d4225e0862ee38182']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:59:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6933f-d29c-4b65-bc95-4017950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:59:59.000Z",
            "modified": "2016-02-19T03:59:59.000Z",
            "description": "Automatically added (via cf528dae41c11e5e512eb11c26e238ee)",
            "pattern": "[file:hashes.SHA1 = '3435ab589f34fe22205eeb9a24787f5447e5daec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:59:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6934b-7308-47be-be0f-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:00:11.000Z",
            "modified": "2016-02-19T04:00:11.000Z",
            "description": "Automatically added (via cf8ef0e539ac759b2860c6e4088dce73)",
            "pattern": "[file:hashes.SHA1 = '6892224871c8638cdca9df1ae5b4eca7f37c2911']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:00:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69357-3ab0-47ba-a005-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:00:23.000Z",
            "modified": "2016-02-19T04:00:23.000Z",
            "description": "Automatically added (via cfa352a314ae821cd3ed7c91682063f0)",
            "pattern": "[file:hashes.SHA1 = '49f50dfc87ffc21b59922c2c46972c878dfb2277']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:00:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69365-b31c-4f9e-81ba-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:00:37.000Z",
            "modified": "2016-02-19T04:00:37.000Z",
            "description": "Automatically added (via cfcb624798e538a8c8ebe7564114a25b)",
            "pattern": "[file:hashes.SHA1 = '08e465826b168a60f90269fdfa55ba754280866e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:00:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69372-0a1c-4f22-be2f-441d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:00:50.000Z",
            "modified": "2016-02-19T04:00:50.000Z",
            "description": "Automatically added (via d0268f18891e3a893bcbd471cdacf028)",
            "pattern": "[file:hashes.SHA1 = 'b65088c2f16fa6a0e394fab8ab1d42baa7036bba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:00:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69381-041c-46bb-b12d-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:01:05.000Z",
            "modified": "2016-02-19T04:01:05.000Z",
            "description": "Automatically added (via d04bb6b365feb395db841ee152f09a74)",
            "pattern": "[file:hashes.SHA1 = 'f224fbe500e08e334abe1ecafcf3560709ab7229']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:01:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6938f-852c-44ab-9116-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:01:19.000Z",
            "modified": "2016-02-19T04:01:19.000Z",
            "description": "Automatically added (via d16ccf1912591766c12097717e8fb6d3)",
            "pattern": "[file:hashes.SHA1 = '4271f2f8bc018ca2d86fc177b2d6eb2167bc1092']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:01:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6939d-d6a4-4519-9071-4450950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:01:33.000Z",
            "modified": "2016-02-19T04:01:33.000Z",
            "description": "Automatically added (via d19d4c103d32b4827b495909eba9cde1)",
            "pattern": "[file:hashes.SHA1 = 'e124f33a47cc369c54b4985a9cd0790e102d9404']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:01:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693ab-904c-4060-90f4-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:01:47.000Z",
            "modified": "2016-02-19T04:01:47.000Z",
            "description": "Automatically added (via d1fe7c4511f05c60689267855126cd5c)",
            "pattern": "[file:hashes.SHA1 = 'c72887e7bbbaaebe27da9ac0f59882d7c2e81fe3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:01:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693b9-ea00-43a7-9ad6-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:02:01.000Z",
            "modified": "2016-02-19T04:02:01.000Z",
            "description": "Automatically added (via d216b7f570c42de5df5bf4dfca77a467)",
            "pattern": "[file:hashes.SHA1 = '5ba481fd4b1060355ec5b71b924baefa99d1a552']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:02:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693c7-8480-49d3-abf6-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:02:15.000Z",
            "modified": "2016-02-19T04:02:15.000Z",
            "description": "Automatically added (via d2284596d092dfdd4cb8874f3dba638a)",
            "pattern": "[file:hashes.SHA1 = 'e9bfbd2df7be7a69cd1545a24f7705dd6041a1b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:02:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693d5-4b84-4acd-b7e1-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:02:29.000Z",
            "modified": "2016-02-19T04:02:29.000Z",
            "description": "Automatically added (via d29540749f462a47ce7e1771a6c56e98)",
            "pattern": "[file:hashes.SHA1 = '8cca3a2f183e30ea5812f668ca7792ecb816d75a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:02:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693e3-0c84-4e80-af90-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:02:43.000Z",
            "modified": "2016-02-19T04:02:43.000Z",
            "description": "Automatically added (via d3090c27c2ed5ba7f1b18818260a6bce)",
            "pattern": "[file:hashes.SHA1 = 'dff6c70f269de6870399c1e4ffa0d2f942eefe32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:02:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693f0-86a4-4c87-b0c3-4c77950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:02:56.000Z",
            "modified": "2016-02-19T04:02:56.000Z",
            "description": "Automatically added (via d34535b46374a6708d3d9a843f3bb9ca)",
            "pattern": "[file:hashes.SHA1 = '2409ab39e66aa4348e8e69d2ef4c3547ba651502']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:02:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693fe-4f58-4982-a198-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:03:10.000Z",
            "modified": "2016-02-19T04:03:10.000Z",
            "description": "Automatically added (via d3c8cfb166f584f1d7b95ae9d1914e09)",
            "pattern": "[file:hashes.SHA1 = '6107b91ebdf4ae2af55ae663618d66a61ab03d2a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:03:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6940c-871c-4d35-b7a0-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:03:24.000Z",
            "modified": "2016-02-19T04:03:24.000Z",
            "description": "Automatically added (via d3cb3767e72d279ccc83d7912b39b2e2)",
            "pattern": "[file:hashes.SHA1 = '3896ed9d8ff03d7e40fd838c281b3b2cb0eb1abf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:03:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6941a-9434-42a3-8dbf-420d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:03:38.000Z",
            "modified": "2016-02-19T04:03:38.000Z",
            "description": "Automatically added (via d42864f29199091a1a0dc58a5993aa2e)",
            "pattern": "[file:hashes.SHA1 = 'eae7d0035eb84d68c34bd663fbd3f69b9710861f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:03:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69428-99f4-47a6-8d46-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:03:52.000Z",
            "modified": "2016-02-19T04:03:52.000Z",
            "description": "Automatically added (via d42927547f9dd44d620a6ff4eb40b6b6)",
            "pattern": "[file:hashes.SHA1 = '516929f97dff064844247d521eb66dd9205230e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:03:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69435-6da8-4e92-bb48-4e0c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:04:05.000Z",
            "modified": "2016-02-19T04:04:05.000Z",
            "description": "Automatically added (via d44976433a411f4d227a89153cdc2045)",
            "pattern": "[file:hashes.SHA1 = '7fbaad8760f186bac7ae6438f3ff8b2fdc0c0251']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:04:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69443-96c0-4c3a-91ea-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:04:19.000Z",
            "modified": "2016-02-19T04:04:19.000Z",
            "description": "Automatically added (via d45aaa14cccdd11549b4d15a9f2dd7db)",
            "pattern": "[file:hashes.SHA1 = 'f89ecb095010de51dffdffdf8a8004d6f9cbe4f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:04:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69451-a4a4-4f72-bde6-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:04:33.000Z",
            "modified": "2016-02-19T04:04:33.000Z",
            "description": "Automatically added (via d45b7cd3c8cdf9fe617db1f0cd7ac6b7)",
            "pattern": "[file:hashes.SHA1 = '2cb5fad1532a5773f7755f4ab9804b642802ab66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:04:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6945f-c590-41f7-a9c3-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:04:47.000Z",
            "modified": "2016-02-19T04:04:47.000Z",
            "description": "Automatically added (via d4a2d215e144ee6908aaf7949829d4b4)",
            "pattern": "[file:hashes.SHA1 = '7ec921bf6077dc49fbc1ce2804f19a245fdea977']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:04:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6946e-b764-4aaa-9bbe-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:05:02.000Z",
            "modified": "2016-02-19T04:05:02.000Z",
            "description": "Automatically added (via d521b152a91efcd30e1a6208012a1240)",
            "pattern": "[file:hashes.SHA1 = '816c545e23447cb0f40b8f91c342b8e09bd0db5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:05:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6947b-c940-4d5a-8196-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:05:15.000Z",
            "modified": "2016-02-19T04:05:15.000Z",
            "description": "Automatically added (via d5a09cc5064747a24460ffcfd8784e7f)",
            "pattern": "[file:hashes.SHA1 = '429baa986655dfcdb464ab565a3323bb1b5a7de8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:05:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69489-b7dc-4ea9-8288-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:05:29.000Z",
            "modified": "2016-02-19T04:05:29.000Z",
            "description": "Automatically added (via d5af48bce881e1c76bc55361517a4234)",
            "pattern": "[file:hashes.SHA1 = '0410b4427f8c3d2f887a0680f3e0a8dac69a8dbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:05:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69497-41e0-40fb-b89e-4655950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:05:43.000Z",
            "modified": "2016-02-19T04:05:43.000Z",
            "description": "Automatically added (via d5e8d86072e9967c49509ecd3ffa1f1f)",
            "pattern": "[file:hashes.SHA1 = '9e8900f16a7ce9b793ae0fda4216763f412a2064']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:05:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694a5-d4f0-45b6-a6f5-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:05:57.000Z",
            "modified": "2016-02-19T04:05:57.000Z",
            "description": "Automatically added (via d686e644b3f1b63d28af6a8ac20add08)",
            "pattern": "[file:hashes.SHA1 = 'ccd8f0ad63dee8f5b5ef72e6af769b8defdc93b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:05:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694b3-0c48-47f6-ad43-4eb6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:06:11.000Z",
            "modified": "2016-02-19T04:06:11.000Z",
            "description": "Automatically added (via d6c3bd3b31aed811ba5414bed8dd561d)",
            "pattern": "[file:hashes.SHA1 = 'd9908eaf9d72fc2ec48514d5522ca534ef208a59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:06:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694c1-6798-49ea-8f86-4a49950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:06:25.000Z",
            "modified": "2016-02-19T04:06:25.000Z",
            "description": "Automatically added (via d725a8ebaacddfc3325d993ea3bb105b)",
            "pattern": "[file:hashes.SHA1 = '3369e0b740bfc541a09fc78c87836474bd6edf06']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:06:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694cf-9b98-4d40-b5c2-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:06:39.000Z",
            "modified": "2016-02-19T04:06:39.000Z",
            "description": "Automatically added (via d7554e7f0c7b2f1f82a8c542d0db1fac)",
            "pattern": "[file:hashes.SHA1 = 'de88daddb9caf3825078439c438681d9105991eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:06:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694dd-c364-4b4e-88d2-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:06:53.000Z",
            "modified": "2016-02-19T04:06:53.000Z",
            "description": "Automatically added (via d862eac8f3a088288142324170e5a053)",
            "pattern": "[file:hashes.SHA1 = '0a771926913ab602d91022723b50da2db14182e7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:06:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694ec-e07c-44a0-8fd9-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:07:08.000Z",
            "modified": "2016-02-19T04:07:08.000Z",
            "description": "Automatically added (via d9368251f8fcdd2c0b1d3cd8a2747549)",
            "pattern": "[file:hashes.SHA1 = 'e3368b898db19afcfa314568f181d1086d5ecdb3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:07:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694fa-e6ec-48e3-9bf7-4ab2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:07:22.000Z",
            "modified": "2016-02-19T04:07:22.000Z",
            "description": "Automatically added (via d982daa64419b5401e18904ce3e676df)",
            "pattern": "[file:hashes.SHA1 = '917546d6c01da96de80974c0bacff8671d443203']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:07:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69508-7f84-4723-ab2e-4c83950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:07:36.000Z",
            "modified": "2016-02-19T04:07:36.000Z",
            "description": "Automatically added (via d9a75270b09df3da50d39ce0d0c6a5ce)",
            "pattern": "[file:hashes.SHA1 = '3d74c5790c388d70ad3a2f4fdcfcd47f3f4c17c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:07:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69516-6824-4011-a7fe-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:07:50.000Z",
            "modified": "2016-02-19T04:07:50.000Z",
            "description": "Automatically added (via da2408e7854de7419f4781f69de353fd)",
            "pattern": "[file:hashes.SHA1 = 'c385558e3296ab86f8e5bcb4376e75643ed6276e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:07:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69523-e220-4a40-a3a2-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:08:03.000Z",
            "modified": "2016-02-19T04:08:03.000Z",
            "description": "Automatically added (via da29089228811144f6f837649da3dae4)",
            "pattern": "[file:hashes.SHA1 = 'e3d25d670c0c54cfd16790e7f83e007c0ef4fb87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:08:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69531-12c4-4922-a5e6-439f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:08:17.000Z",
            "modified": "2016-02-19T04:08:17.000Z",
            "description": "Automatically added (via da4956ff6663e6677d28ef024b887da5)",
            "pattern": "[file:hashes.SHA1 = 'e8300dc73c76ea87aaffecec63ab881d00efa761']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:08:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6953f-8d48-4a4d-a88d-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:08:31.000Z",
            "modified": "2016-02-19T04:08:31.000Z",
            "description": "Automatically added (via da5f2aa9dc572c88e432970663dd841b)",
            "pattern": "[file:hashes.SHA1 = '012f4df1e77abaefd86180b71af0735566f08ae1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:08:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6954d-0fe4-44fc-9c0a-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:08:45.000Z",
            "modified": "2016-02-19T04:08:45.000Z",
            "description": "Automatically added (via dabe4a9f16f08717de64d614f01250ad)",
            "pattern": "[file:hashes.SHA1 = '1a56357fc492ad697ed15fc537bf51ec2a5ab4a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:08:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6955b-c174-4f43-8012-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:08:59.000Z",
            "modified": "2016-02-19T04:08:59.000Z",
            "description": "Automatically added (via db5f317ecc325ce82763d8cc36fa4952)",
            "pattern": "[file:hashes.SHA1 = '8f43d802cdb75d12989dabb64cc6ffbfd3d8f962']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:08:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69568-1070-473c-b31f-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:09:12.000Z",
            "modified": "2016-02-19T04:09:12.000Z",
            "description": "Automatically added (via dbd28e676df7d721557582e912697493)",
            "pattern": "[file:hashes.SHA1 = '791448eb374e5557eda5dfeb68e0e460bab512e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:09:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69575-31ec-4f35-bee4-419b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:09:25.000Z",
            "modified": "2016-02-19T04:09:25.000Z",
            "description": "Automatically added (via dbe8df7dddc1bbfb8d68d14650e6a5fe)",
            "pattern": "[file:hashes.SHA1 = '563a2b9c4c395c3440a0606ae0d03c1a28b8699b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:09:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69583-ae08-41ec-8302-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:09:39.000Z",
            "modified": "2016-02-19T04:09:39.000Z",
            "description": "Automatically added (via dc375cdf1833e934902439abf1c3a5d7)",
            "pattern": "[file:hashes.SHA1 = 'bcbdb8fc6129a54dc9f502eded00dd3820890cad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:09:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69591-9788-42d6-acfc-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:09:53.000Z",
            "modified": "2016-02-19T04:09:53.000Z",
            "description": "Automatically added (via dc9dfda06cbd4e180169f572e638db90)",
            "pattern": "[file:hashes.SHA1 = '32a2c0cda114a4cc80bf2a1d6c6ffe9a34190c63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:09:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6959f-e9f8-4167-b6a5-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:10:07.000Z",
            "modified": "2016-02-19T04:10:07.000Z",
            "description": "Automatically added (via dd553612cddd579d58b416a7770f43d5)",
            "pattern": "[file:hashes.SHA1 = '9f0974c3db2ac3c3d32a78ea8b0d061f4ad4ec50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:10:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695ab-ac5c-4f32-8803-44b9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:10:19.000Z",
            "modified": "2016-02-19T04:10:19.000Z",
            "description": "Automatically added (via dd62a8c3e2e7ecbc567c6c578355dbff)",
            "pattern": "[file:hashes.SHA1 = '8726dc7bf622da34b385a9f4141425f43a399ce7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:10:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695b8-9654-4728-aff1-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:10:32.000Z",
            "modified": "2016-02-19T04:10:32.000Z",
            "description": "Automatically added (via dda651157ea3d2bd16a218e58fc4fe53)",
            "pattern": "[file:hashes.SHA1 = 'd5d61bc4c182ecdf37a02a35708ee8412f6e0207']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:10:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695c5-fab0-4d4d-bb42-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:10:45.000Z",
            "modified": "2016-02-19T04:10:45.000Z",
            "description": "Automatically added (via ddbe5c78294ced2248f3b5d6df145824)",
            "pattern": "[file:hashes.SHA1 = '63dd892b1a00d8d8082e37c403f28f38e7129728']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:10:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695d4-ee3c-472b-ad63-4d68950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:11:00.000Z",
            "modified": "2016-02-19T04:11:00.000Z",
            "description": "Automatically added (via dde599022afd1035094e9f5fe4875ecf)",
            "pattern": "[file:hashes.SHA1 = 'a2a5becb725d2b249cf3d56fc524feb111c44adf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:11:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695e3-5918-4616-8850-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:11:15.000Z",
            "modified": "2016-02-19T04:11:15.000Z",
            "description": "Automatically added (via de36646773cccc74d22655beaa55dae3)",
            "pattern": "[file:hashes.SHA1 = '8a252d9451e37b9cf617a038a9721769a7dc173d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:11:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695f2-3230-44e4-8a16-4d0d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:11:30.000Z",
            "modified": "2016-02-19T04:11:30.000Z",
            "description": "Automatically added (via de426311c33cac5f5857b5c90b2dc59c)",
            "pattern": "[file:hashes.SHA1 = '953d66a00f8727fa02481e394bea6537a0697360']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:11:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69600-8478-4841-b3c1-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:11:44.000Z",
            "modified": "2016-02-19T04:11:44.000Z",
            "description": "Automatically added (via de508f6ed90a2186ee32ba7612e849ab)",
            "pattern": "[file:hashes.SHA1 = 'bcb718271ba2f1dc6604153e06b86eb51f057d8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:11:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6960d-d880-4078-9257-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:11:57.000Z",
            "modified": "2016-02-19T04:11:57.000Z",
            "description": "Automatically added (via de6ab36033b8a632bc37afb1a96172e7)",
            "pattern": "[file:hashes.SHA1 = '11f88c6e9821bb29f70efaccb10b53e37eb4db95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:11:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6961a-4068-4275-80cc-4ea6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:12:10.000Z",
            "modified": "2016-02-19T04:12:10.000Z",
            "description": "Automatically added (via de7f2f6908aa93552c130f6bbab99468)",
            "pattern": "[file:hashes.SHA1 = '280bcfb2874955a23176cfdacdf1e4a83b62398b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:12:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69627-f1f8-490c-b7bc-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:12:23.000Z",
            "modified": "2016-02-19T04:12:23.000Z",
            "description": "Automatically added (via df0d224b4c40b1e80d866cbd6289daa2)",
            "pattern": "[file:hashes.SHA1 = '9bd16a416781c80a8bdf1191d7ef946ab9b63d99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:12:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69633-6110-4bc4-9688-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:12:35.000Z",
            "modified": "2016-02-19T04:12:35.000Z",
            "description": "Automatically added (via df1d2c221d96cb0f2d8597116e5450ba)",
            "pattern": "[file:hashes.SHA1 = '73e2b099646b64a2a88d51fb09551515b6595261']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:12:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6963f-e4b4-465c-ba09-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:12:47.000Z",
            "modified": "2016-02-19T04:12:47.000Z",
            "description": "Automatically added (via df21c152c6ec8ec16d149ca86682030e)",
            "pattern": "[file:hashes.SHA1 = 'bf26b03a6ddde493847b88e8e2d6a12df862502c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:12:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6964c-0ab8-4161-831c-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:13:00.000Z",
            "modified": "2016-02-19T04:13:00.000Z",
            "description": "Automatically added (via df3dc6a2ebeadb2c73984a52b6cc1d1b)",
            "pattern": "[file:hashes.SHA1 = '8bc18f14c74f414ec5bd7b03f46f19fbaf5c1103']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:13:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69659-78e4-4fc9-a67c-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:13:13.000Z",
            "modified": "2016-02-19T04:13:13.000Z",
            "description": "Automatically added (via dff72577e43712e48522a7b683a18737)",
            "pattern": "[file:hashes.SHA1 = 'e5cce5de2b320a1ed4c15678dfc0398e6fa6bbf1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:13:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69667-30d0-4328-a1bd-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:13:27.000Z",
            "modified": "2016-02-19T04:13:27.000Z",
            "description": "Automatically added (via dffe4c124f6e4c0013b740fd0dea4f26)",
            "pattern": "[file:hashes.SHA1 = '0fe6d29cd78fcff561c4844503f3409b0e6539e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:13:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69675-0fd8-4459-a51c-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:13:41.000Z",
            "modified": "2016-02-19T04:13:41.000Z",
            "description": "Automatically added (via e042f571b043eac745d1330b80d192f5)",
            "pattern": "[file:hashes.SHA1 = '6ec7cb6f74e4f351e169119a2a199bc46974a253']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:13:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69684-cc1c-450e-b79d-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:13:56.000Z",
            "modified": "2016-02-19T04:13:56.000Z",
            "description": "Automatically added (via e0714b710104fb53d1dc0141cdfe3677)",
            "pattern": "[file:hashes.SHA1 = 'f7ca5a62922e06329099cf7d3ab8e21a0868adfc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:13:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69692-99d4-4570-8396-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:14:10.000Z",
            "modified": "2016-02-19T04:14:10.000Z",
            "description": "Automatically added (via e08ea493e1ccabe0d0a6ec1970a92a90)",
            "pattern": "[file:hashes.SHA1 = '85e1e592c17274b61dcd50e3327b5a53d6f081f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:14:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6969f-f408-41e0-b19f-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:14:23.000Z",
            "modified": "2016-02-19T04:14:23.000Z",
            "description": "Automatically added (via e0aa1c82ef6249467f25f08693704987)",
            "pattern": "[file:hashes.SHA1 = '9bf5b2a6fdd9b7542631e64d3b05327efe30b468']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:14:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696ac-ae08-42f4-9d9c-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:14:36.000Z",
            "modified": "2016-02-19T04:14:36.000Z",
            "description": "Automatically added (via e268d952f72120d31cd53639758e17e0)",
            "pattern": "[file:hashes.SHA1 = 'c566066c155a62397cc65b3746db098f2fef837a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:14:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696bb-17e0-46fe-9ccb-447f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:14:51.000Z",
            "modified": "2016-02-19T04:14:51.000Z",
            "description": "Automatically added (via e26b0bfbad9b0e9b0684f1cd8628cda7)",
            "pattern": "[file:hashes.SHA1 = '121591f0fe4929a731c38385a3170df7686d8e74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:14:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696c8-af0c-4328-b298-4418950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:15:04.000Z",
            "modified": "2016-02-19T04:15:04.000Z",
            "description": "Automatically added (via e27cd69b88f801750f9036415f6747cb)",
            "pattern": "[file:hashes.SHA1 = '454f859a6546da1a94a7a1420d151565f89c49c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:15:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696d5-f52c-496a-ab82-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:15:17.000Z",
            "modified": "2016-02-19T04:15:17.000Z",
            "description": "Automatically added (via e2988ba6a22cc2603e0cb15fa65effba)",
            "pattern": "[file:hashes.SHA1 = '5e68bf522e55175071f1757b03e7cced80528241']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:15:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696e4-761c-4a08-9ae8-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:15:32.000Z",
            "modified": "2016-02-19T04:15:32.000Z",
            "description": "Automatically added (via e2ac5ad49e85390b712a1e77c29d9ce6)",
            "pattern": "[file:hashes.SHA1 = 'daea1a4a0c73afca5142f588296393674b577e7f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:15:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696f2-47c8-4fec-b561-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:15:46.000Z",
            "modified": "2016-02-19T04:15:46.000Z",
            "description": "Automatically added (via e2e5647127042800eabb4b63e240ba99)",
            "pattern": "[file:hashes.SHA1 = '98f72ac8aa29b26e6b0e01b09bc06f4fa33e40a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:15:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69701-4c64-410f-b900-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:16:01.000Z",
            "modified": "2016-02-19T04:16:01.000Z",
            "description": "Automatically added (via e3131e70e00ef94a55a23414a05f56dd)",
            "pattern": "[file:hashes.SHA1 = '17bddceab518ad329bc64b3557298405ee5b0681']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:16:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6970e-8ba4-4310-8f81-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:16:14.000Z",
            "modified": "2016-02-19T04:16:14.000Z",
            "description": "Automatically added (via e357247218cbb56eb704eafd05f5f20a)",
            "pattern": "[file:hashes.SHA1 = '0edb92cd519a94d69995fe1d728e71c9cdffa437']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:16:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6971b-7f4c-4dab-810d-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:16:27.000Z",
            "modified": "2016-02-19T04:16:27.000Z",
            "description": "Automatically added (via e3630084a22c347778ce8ae82d065bf5)",
            "pattern": "[file:hashes.SHA1 = 'df136a5800240f070b6030761da5401c028aeaa3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:16:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69729-8fc0-4c5f-995b-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:16:41.000Z",
            "modified": "2016-02-19T04:16:41.000Z",
            "description": "Automatically added (via e3bb7bcbe0b76fd10b709cd88105d4a5)",
            "pattern": "[file:hashes.SHA1 = '8ad799999ca5f931727e5680a45496bf952d1749']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:16:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69738-1568-496d-985b-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:16:56.000Z",
            "modified": "2016-02-19T04:16:56.000Z",
            "description": "Automatically added (via e3db93e86c1d6dc382112321514eae14)",
            "pattern": "[file:hashes.SHA1 = 'fdd068eaf03711e1ff6b1d69c6a1094cb6205bba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:16:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69746-7578-4ab9-befc-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:17:10.000Z",
            "modified": "2016-02-19T04:17:10.000Z",
            "description": "Automatically added (via e40c2a0a02424c080ae49c95f4e7d5a5)",
            "pattern": "[file:hashes.SHA1 = '682db97ea904b56170de8f75a16a2e3ca8fa7b4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:17:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69756-52bc-43f5-92df-443f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:17:26.000Z",
            "modified": "2016-02-19T04:17:26.000Z",
            "description": "Automatically added (via e48ec2082968cf20b5b23b3362894086)",
            "pattern": "[file:hashes.SHA1 = '4727e7fefc2ca8ca3e4b19dad4a29bf0901a7317']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:17:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69763-56c8-461d-8548-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:17:39.000Z",
            "modified": "2016-02-19T04:17:39.000Z",
            "description": "Automatically added (via e4991f07cd275d8ae3701906f1ce08fc)",
            "pattern": "[file:hashes.SHA1 = '201078c72adbab4954ef6cbf3ab70bfec09e4c1d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:17:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69771-957c-4f1a-9bd7-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:17:53.000Z",
            "modified": "2016-02-19T04:17:53.000Z",
            "description": "Automatically added (via e4af8b4be5baea3382abc6db5b0cd850)",
            "pattern": "[file:hashes.SHA1 = '46defaace70dc63557c25b2d0228ac395f62bc49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:17:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6977f-da88-4411-9df0-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:18:07.000Z",
            "modified": "2016-02-19T04:18:07.000Z",
            "description": "Automatically added (via e4c4e2910377f4884516bc206838fdf0)",
            "pattern": "[file:hashes.SHA1 = '298778195ccf92d0b4d3d5cd7468ea9803857e11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:18:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6978c-6b28-47d7-8227-4b8e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:18:20.000Z",
            "modified": "2016-02-19T04:18:20.000Z",
            "description": "Automatically added (via e4ca075134806086151f116cd5a67d65)",
            "pattern": "[file:hashes.SHA1 = 'baa77de9f6752c81f1245dcc2f1a6bdc1a07b695']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:18:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6979b-54b4-4d87-ae03-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:18:35.000Z",
            "modified": "2016-02-19T04:18:35.000Z",
            "description": "Automatically added (via e55c281f09de4e474c1ae42d756459aa)",
            "pattern": "[file:hashes.SHA1 = '9276367884176f3f082dc0005942772f672f8d07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:18:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697aa-c7fc-4782-97d9-4d04950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:18:50.000Z",
            "modified": "2016-02-19T04:18:50.000Z",
            "description": "Automatically added (via e5b7e7bcfcac86238c3d8b89312e0f6d)",
            "pattern": "[file:hashes.SHA1 = 'b47b44a460afe43160f64afe97907cb580cad02a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:18:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697b9-9c84-47e4-8e2a-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:19:05.000Z",
            "modified": "2016-02-19T04:19:05.000Z",
            "description": "Automatically added (via e5ee74c31154f1c30139e4d66d324b4d)",
            "pattern": "[file:hashes.SHA1 = '0d7044a4417ae67f1ec7259470c774baecc338f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:19:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697c8-bf68-4178-a2e1-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:19:20.000Z",
            "modified": "2016-02-19T04:19:20.000Z",
            "description": "Automatically added (via e61187ccc9ab8f83c6d7637259bccf84)",
            "pattern": "[file:hashes.SHA1 = 'e60913fb2d14eb7aa32889ec7d1071a5d6ddb24c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:19:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697d6-2f7c-4b23-ae84-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:19:34.000Z",
            "modified": "2016-02-19T04:19:34.000Z",
            "description": "Automatically added (via e614292df0382924364205df89a91651)",
            "pattern": "[file:hashes.SHA1 = 'feb2a0a7dae8716444f3687b56ed73acdb2e7012']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:19:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697e5-2310-4d34-b4f8-40f0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:19:49.000Z",
            "modified": "2016-02-19T04:19:49.000Z",
            "description": "Automatically added (via e61f12bd104e96ac4da388a1c90d3b1a)",
            "pattern": "[file:hashes.SHA1 = 'dfa0985dfd9147e6b88363a34da3432bfb94228d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:19:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697f4-9a6c-4bf0-9298-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:20:04.000Z",
            "modified": "2016-02-19T04:20:04.000Z",
            "description": "Automatically added (via e679b38c4627a72095cdb4b76d250206)",
            "pattern": "[file:hashes.SHA1 = '67f05c74a65c9f7e9473e36f9d3b1caddce3398b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:20:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69802-c8d0-45c2-a76c-4948950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:20:18.000Z",
            "modified": "2016-02-19T04:20:18.000Z",
            "description": "Automatically added (via e67d8fa4d16484ba989a064332ca9a12)",
            "pattern": "[file:hashes.SHA1 = 'ffdb2e779db3ffd1a9df7577232c6a8756b3755a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:20:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69811-d6f0-4d24-b34a-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:20:33.000Z",
            "modified": "2016-02-19T04:20:33.000Z",
            "description": "Automatically added (via e758d75bb0dbf9d3fc09d6bc67c4a815)",
            "pattern": "[file:hashes.SHA1 = '09acad40a3f434bba9469688f85f0fb320b58bf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:20:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6981f-71a8-4f61-96e4-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:20:47.000Z",
            "modified": "2016-02-19T04:20:47.000Z",
            "description": "Automatically added (via e79fad334ac4e58c4e949065c346475b)",
            "pattern": "[file:hashes.SHA1 = 'd9b0f93b4d40d27341f81bb1a7bb99b12df6ae17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:20:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6982e-43e8-4c6c-be58-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:21:02.000Z",
            "modified": "2016-02-19T04:21:02.000Z",
            "description": "Automatically added (via e7b0d1a76057dcb394ae07f1b6b9f74f)",
            "pattern": "[file:hashes.SHA1 = 'f4fa47e0566a28e90fc660c15801cb3f3b2ae49d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:21:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6983c-676c-4ab8-9a7a-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:21:16.000Z",
            "modified": "2016-02-19T04:21:16.000Z",
            "description": "Automatically added (via e83f06622503e369215d300a28ea2dd4)",
            "pattern": "[file:hashes.SHA1 = '011eb4356142dbe6667da35b3bbce0135e1882bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:21:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6984b-25ac-4398-bdd0-4ec8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:21:31.000Z",
            "modified": "2016-02-19T04:21:31.000Z",
            "description": "Automatically added (via e86182d02cb3f1f8e8c201832d89de08)",
            "pattern": "[file:hashes.SHA1 = '764534604c8026ae7a285be9e0dcd5cb4d07e96d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:21:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6985a-9968-42da-872f-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:21:46.000Z",
            "modified": "2016-02-19T04:21:46.000Z",
            "description": "Automatically added (via e879035433aebccae93effd473a7aea9)",
            "pattern": "[file:hashes.SHA1 = '58f7a1be289d8ec8e67ae05232a21837c425568e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:21:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6986a-0e08-4203-a445-4d64950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:22:02.000Z",
            "modified": "2016-02-19T04:22:02.000Z",
            "description": "Automatically added (via e8959fc0356c61f08802506cd68afe98)",
            "pattern": "[file:hashes.SHA1 = '407532f8485cef58dbecf139489c81be870dc8e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:22:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69878-3d5c-46b3-8415-4ee1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:22:16.000Z",
            "modified": "2016-02-19T04:22:16.000Z",
            "description": "Automatically added (via e916a7604750e333fade42f12c96d650)",
            "pattern": "[file:hashes.SHA1 = '867dbe54c374999619611f9908a97cad65bf5723']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:22:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69887-b250-4f3f-b502-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:22:31.000Z",
            "modified": "2016-02-19T04:22:31.000Z",
            "description": "Automatically added (via e95cf5ca05dd60390ea69f925f352a51)",
            "pattern": "[file:hashes.SHA1 = '72b259121c3c4cc2c9cdc87eb862e6f7867314d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:22:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69896-947c-424b-a122-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:22:46.000Z",
            "modified": "2016-02-19T04:22:46.000Z",
            "description": "Automatically added (via e985a36fa13e319b551ebed3b1100684)",
            "pattern": "[file:hashes.SHA1 = '8ed25a4353e112c1182ebf2914856f87e9360b89']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:22:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698a4-b4cc-4f7b-8da8-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:23:00.000Z",
            "modified": "2016-02-19T04:23:00.000Z",
            "description": "Automatically added (via e98697a92a182252abea4af185439525)",
            "pattern": "[file:hashes.SHA1 = 'b8463d41e12badecb1638195fb6900c4c2c9389c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:23:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698b3-8568-4ec8-932e-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:23:15.000Z",
            "modified": "2016-02-19T04:23:15.000Z",
            "description": "Automatically added (via e9b34c6714e2923f4916c66c8efdea6c)",
            "pattern": "[file:hashes.SHA1 = '801814b1ca33cf8ffcfb77e47a50aafb86769096']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:23:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698c1-4080-41fa-b099-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:23:29.000Z",
            "modified": "2016-02-19T04:23:29.000Z",
            "description": "Automatically added (via e9e18902478825d17bc35aa95fe034d6)",
            "pattern": "[file:hashes.SHA1 = 'aa0be59f280da1d75caee78f1417522c58b790d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:23:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698d0-2790-4278-b2a4-4088950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:23:44.000Z",
            "modified": "2016-02-19T04:23:44.000Z",
            "description": "Automatically added (via e9e8f4b286dff4bd0b3d2eaf8dea864f)",
            "pattern": "[file:hashes.SHA1 = '97873c3d0ea99e68ce96bcf52fb5930dd2092231']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:23:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698df-513c-4cac-b811-4dae950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:23:59.000Z",
            "modified": "2016-02-19T04:23:59.000Z",
            "description": "Automatically added (via ea2a8aa6783f2721ca58a7dbf7312239)",
            "pattern": "[file:hashes.SHA1 = '4ad206d8d6225d61190fc2734bc4144e29ba1c61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:23:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698ed-6610-409c-a95c-4ea7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:24:13.000Z",
            "modified": "2016-02-19T04:24:13.000Z",
            "description": "Automatically added (via ea2ed2d9256144ae916fb07b2881cc52)",
            "pattern": "[file:hashes.SHA1 = '14e1f4a92401c75e413446981d099138db3b2dbc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:24:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698fb-dd6c-475d-b5e9-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:24:27.000Z",
            "modified": "2016-02-19T04:24:27.000Z",
            "description": "Automatically added (via ea31c5f66ff8bc980621f2dabd00a8ed)",
            "pattern": "[file:hashes.SHA1 = '8d60455a806c279e1caaca7f9ef93cd77b85caf6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:24:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6990a-bc44-4179-bd81-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:24:42.000Z",
            "modified": "2016-02-19T04:24:42.000Z",
            "description": "Automatically added (via ea43e41c80bbaa473910bbc260b55fd2)",
            "pattern": "[file:hashes.SHA1 = '558cec83c5e1c2dee2056b0e309e9d7f80e58f57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:24:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69918-643c-4d19-9a61-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:24:56.000Z",
            "modified": "2016-02-19T04:24:56.000Z",
            "description": "Automatically added (via ea6e1895884681c40a7ec23ad1f27fac)",
            "pattern": "[file:hashes.SHA1 = 'a968f7087745f35dcc3fe07a8f7355394d5cd81e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:24:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69926-bf20-4947-ac8f-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:25:10.000Z",
            "modified": "2016-02-19T04:25:10.000Z",
            "description": "Automatically added (via ea758ddfbc0e43f1d73c74f199f4054b)",
            "pattern": "[file:hashes.SHA1 = '6eb0c6327da19667586401edff5b964e9bfa9b81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:25:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69932-836c-4258-8423-4bf6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:25:22.000Z",
            "modified": "2016-02-19T04:25:22.000Z",
            "description": "Automatically added (via eb165b7ec796c39e817267cdd47819e8)",
            "pattern": "[file:hashes.SHA1 = '2d49a23d1a8587363cd9ce271b0025dd94663005']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:25:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69940-80f8-49c2-9f8a-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:25:36.000Z",
            "modified": "2016-02-19T04:25:36.000Z",
            "description": "Automatically added (via eb1deda6d695cd91c523a9ab4c21a934)",
            "pattern": "[file:hashes.SHA1 = '02501bc709a0a98b1f1bcae4d5f37bd31ed4f920']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:25:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6994f-deb0-49ea-af5e-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:25:51.000Z",
            "modified": "2016-02-19T04:25:51.000Z",
            "description": "Automatically added (via ec006312334ad8eaa53eed0d18bfd7f7)",
            "pattern": "[file:hashes.SHA1 = '1535795ccc81fc740da431769cf10a2c16a62855']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:25:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6995d-432c-4f59-9757-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:26:05.000Z",
            "modified": "2016-02-19T04:26:05.000Z",
            "description": "Automatically added (via ec3f4f3a01015d44e6198a3356f0ee1d)",
            "pattern": "[file:hashes.SHA1 = 'bc78b91301bd11818af78afd684a614dc2110a25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:26:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6996a-4fe0-4b0c-acce-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:26:18.000Z",
            "modified": "2016-02-19T04:26:18.000Z",
            "description": "Automatically added (via ecc26da5b4f49db6363cc37c06fb56db)",
            "pattern": "[file:hashes.SHA1 = 'aef1b27e6a77e104eaac3334fa5bdac57baaf9aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:26:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69978-9268-4546-95ee-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:26:32.000Z",
            "modified": "2016-02-19T04:26:32.000Z",
            "description": "Automatically added (via ecc965d6cccd5b032d1747bb53b9b03e)",
            "pattern": "[file:hashes.SHA1 = '982c7b8668f7049e17ebc13b7f9afde1773e8da5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:26:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69984-9464-487f-8260-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:26:44.000Z",
            "modified": "2016-02-19T04:26:44.000Z",
            "description": "Automatically added (via eceb1deb6fda88a8d7fdd8a1f1adf45d)",
            "pattern": "[file:hashes.SHA1 = '073f4816ff01f4d47edaf1ca89f63ab7df387f4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:26:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69991-ce90-43a6-a61d-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:26:57.000Z",
            "modified": "2016-02-19T04:26:57.000Z",
            "description": "Automatically added (via ed44b0a9c9ae95baf253dab31d6dd7f3)",
            "pattern": "[file:hashes.SHA1 = '3097e8a4bfc946583390b3bb663ba6d0c207433e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:26:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6999f-8480-4d46-a9c8-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:27:11.000Z",
            "modified": "2016-02-19T04:27:11.000Z",
            "description": "Automatically added (via ed9156660108a53a37cdfec3eb2f22a3)",
            "pattern": "[file:hashes.SHA1 = '2676f51603cbfce8e03c656eda9e08e26925f4eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:27:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699ad-0ab8-413b-9611-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:27:25.000Z",
            "modified": "2016-02-19T04:27:25.000Z",
            "description": "Automatically added (via edc0d00ae80e618bbf2ed37042a453d9)",
            "pattern": "[file:hashes.SHA1 = 'ed40ceafc267acd20702395121cda96d072064d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:27:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699bb-1158-4e24-8099-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:27:39.000Z",
            "modified": "2016-02-19T04:27:39.000Z",
            "description": "Automatically added (via edd3dd372b1c72c7418cb81e28152f9c)",
            "pattern": "[file:hashes.SHA1 = '3fcba17ff8113775311156d81e1d16270c59fa67']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:27:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699c9-ded0-419f-920b-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:27:53.000Z",
            "modified": "2016-02-19T04:27:53.000Z",
            "description": "Automatically added (via eea07ed1b23eb19fddfeba44c76a67d9)",
            "pattern": "[file:hashes.SHA1 = '55e20d2afaa802f6f3bf6b07455d0380f65965a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:27:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699d7-bf9c-4485-bc94-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:28:07.000Z",
            "modified": "2016-02-19T04:28:07.000Z",
            "description": "Automatically added (via eeb2a3f02021f5e4c6c90ab758a6c267)",
            "pattern": "[file:hashes.SHA1 = 'e9de795f3c038b545bda33df14498e458f4fa766']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:28:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699e4-c2e8-433c-b242-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:28:20.000Z",
            "modified": "2016-02-19T04:28:20.000Z",
            "description": "Automatically added (via eeba7927b127773ee27de249d1a48c31)",
            "pattern": "[file:hashes.SHA1 = 'cbe4d023f769b908231a30f94fce9e520b56c1b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:28:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699f1-5d0c-4d96-84e7-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:28:33.000Z",
            "modified": "2016-02-19T04:28:33.000Z",
            "description": "Automatically added (via ef7b734e244514ed72e21d02cc51ee7d)",
            "pattern": "[file:hashes.SHA1 = 'ff48cc607424061161c08a46dfc4ba8b84876f5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:28:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699fe-8628-4799-96d8-4bf4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:28:46.000Z",
            "modified": "2016-02-19T04:28:46.000Z",
            "description": "Automatically added (via efabad6f74ce00c012ad1b5013eacb5d)",
            "pattern": "[file:hashes.SHA1 = 'a3bb81090e67a6d721015102fcc8318c7b2eeceb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:28:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a0b-f684-4657-b9dd-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:28:59.000Z",
            "modified": "2016-02-19T04:28:59.000Z",
            "description": "Automatically added (via efc17ae7983a678188508a823dc1179d)",
            "pattern": "[file:hashes.SHA1 = 'ee07159456e0b2cee297239afbed3926c8ffec2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:28:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a19-1368-4e19-9de5-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:29:13.000Z",
            "modified": "2016-02-19T04:29:13.000Z",
            "description": "Automatically added (via f0a3cab3ac2bdcd79b9a51f6a6139786)",
            "pattern": "[file:hashes.SHA1 = '17f4c9ed7bd7accac77725bb872a3b03ce417252']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:29:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a26-99b8-4fbe-9f67-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:29:26.000Z",
            "modified": "2016-02-19T04:29:26.000Z",
            "description": "Automatically added (via f0a9c32c9220762989e0e0fb1412423b)",
            "pattern": "[file:hashes.SHA1 = '1cd4383242b311d9c134d148327ae196f5703ac8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:29:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a33-7c34-468e-8fd5-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:29:39.000Z",
            "modified": "2016-02-19T04:29:39.000Z",
            "description": "Automatically added (via f0af51e3d818150d666f2e9719252b84)",
            "pattern": "[file:hashes.SHA1 = 'bb1a114189c34049ce85c61edfad13f751829bb4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:29:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a41-4818-4ac0-b43f-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:29:53.000Z",
            "modified": "2016-02-19T04:29:53.000Z",
            "description": "Automatically added (via f0dc1ff35f3b7ba2d461cc0cb66e96e4)",
            "pattern": "[file:hashes.SHA1 = '29fdd927d7783c46cd4117898f518d3d79e1fbdb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:29:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a4e-8a9c-4819-a127-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:06.000Z",
            "modified": "2016-02-19T04:30:06.000Z",
            "description": "Automatically added (via f1ed116f3a03ec7548e412b2f8835247)",
            "pattern": "[file:hashes.SHA1 = '6722f39965977e4c1526694323684d520680832e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a5b-5bd4-419f-889d-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:19.000Z",
            "modified": "2016-02-19T04:30:19.000Z",
            "description": "Automatically added (via f21860cccb5fda26288a43cb4beed172)",
            "pattern": "[file:hashes.SHA1 = '091847b1580c0c40a3aebd125e1acc633a726135']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a68-0538-4074-b17c-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:32.000Z",
            "modified": "2016-02-19T04:30:32.000Z",
            "description": "Automatically added (via f25f59d9d570ddcf768b882b8cf32792)",
            "pattern": "[file:hashes.SHA1 = '3f545a963e66dd5f08b5f22b5b65ee1d8d0d6fea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a75-4704-4e2b-8e57-48e2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:45.000Z",
            "modified": "2016-02-19T04:30:45.000Z",
            "description": "Automatically added (via f2b378570418a9863b35f9b16a478db6)",
            "pattern": "[file:hashes.SHA1 = '20c9c5190c07c4951e8804d372dc2151c633a092']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a82-2088-4631-8c67-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:58.000Z",
            "modified": "2016-02-19T04:30:58.000Z",
            "description": "Automatically added (via f2dcee208db5b9cfc59530245b2b4eb5)",
            "pattern": "[file:hashes.SHA1 = '6b1f30163611eaebd81c39bf0d580a6ecec4475e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a8e-3f88-4faa-84d0-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:31:10.000Z",
            "modified": "2016-02-19T04:31:10.000Z",
            "description": "Automatically added (via f30c0294613014154fd6f371c5f65243)",
            "pattern": "[file:hashes.SHA1 = '44f054ec3df6efad3be599100073d62ad4743783']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:31:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a9b-e17c-46fb-bb95-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:31:23.000Z",
            "modified": "2016-02-19T04:31:23.000Z",
            "description": "Automatically added (via f3ae4d57eec53f68b62aa903150cbd99)",
            "pattern": "[file:hashes.SHA1 = '025094a21e74d9ea9591988f732993efb93095e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:31:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69aa8-549c-42bc-92e1-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:31:36.000Z",
            "modified": "2016-02-19T04:31:36.000Z",
            "description": "Automatically added (via f3b3647d385023d525fae9e45a559cbe)",
            "pattern": "[file:hashes.SHA1 = '400d41d3e63ca989173dd8310e32ec1c6635eed5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:31:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ab4-5510-4788-bbb3-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:31:48.000Z",
            "modified": "2016-02-19T04:31:48.000Z",
            "description": "Automatically added (via f3bc61dadab31f7ec7d757e1cadd9619)",
            "pattern": "[file:hashes.SHA1 = '41f5e67427fa85641158fba4132c954184fdc8c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:31:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ac2-1b60-42e3-80b4-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:32:02.000Z",
            "modified": "2016-02-19T04:32:02.000Z",
            "description": "Automatically added (via f3c8049c1df9c9bda9de25f4fa3e94c1)",
            "pattern": "[file:hashes.SHA1 = '3e93257472ab072d79d1ef81532c917e83e340fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:32:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69acf-01a4-4599-9165-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:32:15.000Z",
            "modified": "2016-02-19T04:32:15.000Z",
            "description": "Automatically added (via f3d6fe3cfd03fd7b72cbdf21bcc76ce8)",
            "pattern": "[file:hashes.SHA1 = '9a521781cb495e3ca2e88bbc54c88a4b97ffef91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:32:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69adc-e1f8-46e0-b6ad-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:32:28.000Z",
            "modified": "2016-02-19T04:32:28.000Z",
            "description": "Automatically added (via f3e8d0f52975ca41a3afc77f2e2d5c66)",
            "pattern": "[file:hashes.SHA1 = 'd67e0cfe02ecce29e9aa64b40caec0f479f33a6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:32:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ae9-a804-4ed8-aa0f-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:32:41.000Z",
            "modified": "2016-02-19T04:32:41.000Z",
            "description": "Automatically added (via f48bed8290c99001e9551b7979cc51a7)",
            "pattern": "[file:hashes.SHA1 = '1bb0696df4ad549659269e2f6cac2f2f87674e4b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:32:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69af7-d640-415f-8b7d-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:32:55.000Z",
            "modified": "2016-02-19T04:32:55.000Z",
            "description": "Automatically added (via f4ae2ca866ae2ebf38726d9bac3d3196)",
            "pattern": "[file:hashes.SHA1 = 'db41ab3bcb6d31974fe4bb801eabcce403490e0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:32:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b06-b370-4187-b713-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:33:10.000Z",
            "modified": "2016-02-19T04:33:10.000Z",
            "description": "Automatically added (via f4dbccae1da9c103fc0eaf5433266ddc)",
            "pattern": "[file:hashes.SHA1 = '8e6b9bc40bcf8560dbef58ecc02a0362b1ce1b82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:33:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b13-e98c-4c8b-a3b9-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:33:23.000Z",
            "modified": "2016-02-19T04:33:23.000Z",
            "description": "Automatically added (via f5151ebddf3915066657fa2de95ebcef)",
            "pattern": "[file:hashes.SHA1 = '8ec6e8b07b765764c16c8831e51ae9cad02d0666']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:33:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b21-4ab4-4bb0-b4d6-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:33:37.000Z",
            "modified": "2016-02-19T04:33:37.000Z",
            "description": "Automatically added (via f5155d9b4bd2f377d92c846630d1c65f)",
            "pattern": "[file:hashes.SHA1 = '39a007fe2c7d81cf79c9645670ffa126737e2264']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:33:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b30-a5b0-4a9e-8bc0-4743950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:33:52.000Z",
            "modified": "2016-02-19T04:33:52.000Z",
            "description": "Automatically added (via f52b39f427aa404b543782960568e965)",
            "pattern": "[file:hashes.SHA1 = 'f6e0bf3c826ea90f4bf315e2dd107974062ffbe4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:33:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b3d-d1b4-4349-876b-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:34:05.000Z",
            "modified": "2016-02-19T04:34:05.000Z",
            "description": "Automatically added (via f5594beed2d68a9a385653c76fe94980)",
            "pattern": "[file:hashes.SHA1 = 'c4a6c0377e7653dabb86068aeb914b0b087e2639']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:34:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b4a-6c14-4f39-9ce9-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:34:18.000Z",
            "modified": "2016-02-19T04:34:18.000Z",
            "description": "Automatically added (via f59c5a30c2c8360850b24fae19462611)",
            "pattern": "[file:hashes.SHA1 = 'b67aa7e50548dbbbb48e0cb34a2f8d9baf437b8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:34:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b57-14e0-4d9d-b397-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:34:31.000Z",
            "modified": "2016-02-19T04:34:31.000Z",
            "description": "Automatically added (via f617a5e3eb0a50007ed44f795f12ac8f)",
            "pattern": "[file:hashes.SHA1 = 'f6a3af11d672456918abaec9436d95c0b707429a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:34:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b64-bb28-4c4e-8065-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:34:44.000Z",
            "modified": "2016-02-19T04:34:44.000Z",
            "description": "Automatically added (via f64314fe6a7ddfa0afa9dbe3ebed4642)",
            "pattern": "[file:hashes.SHA1 = 'bc224c19546749aea2169b2cd849879e9638baf6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:34:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b71-7afc-4afb-8cd9-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:34:57.000Z",
            "modified": "2016-02-19T04:34:57.000Z",
            "description": "Automatically added (via f652ed3430af60371071d54732daa0b1)",
            "pattern": "[file:hashes.SHA1 = '21b2a5fe2af56d1484424d8a3d3d4e55a9fe537f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:34:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b7f-645c-435a-b018-48a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:35:11.000Z",
            "modified": "2016-02-19T04:35:11.000Z",
            "description": "Automatically added (via f69a79a569c1efb319a4697a04421337)",
            "pattern": "[file:hashes.SHA1 = '5a1207482030344b671140c2eb4f6ad5e00bc21f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:35:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b8c-eca0-4674-9dc8-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:35:24.000Z",
            "modified": "2016-02-19T04:35:24.000Z",
            "description": "Automatically added (via f6bf8fa011dfd21da519479dfa104a0a)",
            "pattern": "[file:hashes.SHA1 = 'b2cf1e82325b0ef9b85a2739cff485f3e6fb29ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:35:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b98-0bbc-424e-8ef2-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:35:36.000Z",
            "modified": "2016-02-19T04:35:36.000Z",
            "description": "Automatically added (via f6c832757de5da318cbe76e3da6212b9)",
            "pattern": "[file:hashes.SHA1 = 'f8c9d3a2d51c8d7c5446f528458087eef59a06da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:35:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ba5-0378-4bf2-be94-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:35:49.000Z",
            "modified": "2016-02-19T04:35:49.000Z",
            "description": "Automatically added (via f76887680190af12fd87baf112cc50d4)",
            "pattern": "[file:hashes.SHA1 = '3844cc724eb5db1de94ceb66dbc7676f147fb435']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:35:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bb3-1ef8-42c6-a220-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:36:03.000Z",
            "modified": "2016-02-19T04:36:03.000Z",
            "description": "Automatically added (via f778bb21032a00f4dbd2aa64c812df54)",
            "pattern": "[file:hashes.SHA1 = 'c20043c6c7a698dc74f34c763551fd349f34331d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:36:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bc2-e504-4ac6-a834-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:36:18.000Z",
            "modified": "2016-02-19T04:36:18.000Z",
            "description": "Automatically added (via f78a540fb23b5ce293786b57fe466993)",
            "pattern": "[file:hashes.SHA1 = 'cb7d20e6bcadd99f4f5635508bf81457c731abf4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:36:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bd0-e280-4ff9-a7fb-470b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:36:32.000Z",
            "modified": "2016-02-19T04:36:32.000Z",
            "description": "Automatically added (via f790272b2bfb005f3e4dd17146403383)",
            "pattern": "[file:hashes.SHA1 = '7113aa9b48f6fdf636af69bcedb412a9d26fc6fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:36:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bdf-92c4-4773-9212-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:36:47.000Z",
            "modified": "2016-02-19T04:36:47.000Z",
            "description": "Automatically added (via f7c7572e0897689f89a8f8f8a2a0e3e7)",
            "pattern": "[file:hashes.SHA1 = '0dfcfd87d7da229f084cddcc022e391126669640']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:36:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bed-c4f8-44f3-9113-4b11950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:37:01.000Z",
            "modified": "2016-02-19T04:37:01.000Z",
            "description": "Automatically added (via f7e8dcbaa7869c5469b1031a250e923d)",
            "pattern": "[file:hashes.SHA1 = 'a44cc2b3b0d6817f55b5f54fa758e666421a57a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:37:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bfb-d034-4704-aed3-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:37:15.000Z",
            "modified": "2016-02-19T04:37:15.000Z",
            "description": "Automatically added (via f7f71750d3b1fe4fd9148d62ae346606)",
            "pattern": "[file:hashes.SHA1 = '7f389699858151f9fbe50e3db97faee5a064228f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:37:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c08-8330-44ea-8f08-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:37:28.000Z",
            "modified": "2016-02-19T04:37:28.000Z",
            "description": "Automatically added (via f8034d496a39e4399a4545f0b2da541a)",
            "pattern": "[file:hashes.SHA1 = '8e345b8d4cac315158b127b8d3eaba1fadc7294e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:37:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c16-0480-4194-a77e-4d33950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:37:42.000Z",
            "modified": "2016-02-19T04:37:42.000Z",
            "description": "Automatically added (via f885138e7c9ec2f0352cafe7e9421aa5)",
            "pattern": "[file:hashes.SHA1 = '59de4eedacde7fb3bc3ad58a158b818afe34e7b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:37:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c23-94b8-4dee-a553-4eb2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:37:55.000Z",
            "modified": "2016-02-19T04:37:55.000Z",
            "description": "Automatically added (via f8921fb6f239b86a624510198e83feda)",
            "pattern": "[file:hashes.SHA1 = '87088791199195e5c20860371e88e4487f2c6a0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:37:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c30-e740-430d-ae2c-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:38:08.000Z",
            "modified": "2016-02-19T04:38:08.000Z",
            "description": "Automatically added (via f895b24dc38905b12bebe9d4b753e246)",
            "pattern": "[file:hashes.SHA1 = '6833697795aa8805e642066e1c1585dbcda7b2e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:38:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c3e-26f8-4f1d-be48-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:38:22.000Z",
            "modified": "2016-02-19T04:38:22.000Z",
            "description": "Automatically added (via f8cc9850f3d040e4e1aebe65bb1b2155)",
            "pattern": "[file:hashes.SHA1 = '7af764cb7ceb852a2b781c18eae554c4b5fadc92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:38:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c4c-7ac8-44df-ad27-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:38:36.000Z",
            "modified": "2016-02-19T04:38:36.000Z",
            "description": "Automatically added (via f950c2e9bce8f344a78e4750cfc52f31)",
            "pattern": "[file:hashes.SHA1 = 'fe07384a3f4d6526a6b348995e75d70ab5dae573']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:38:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c59-4694-42b8-8749-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:38:49.000Z",
            "modified": "2016-02-19T04:38:49.000Z",
            "description": "Automatically added (via f992f9caa16ceff8209dba10b5cd9cd8)",
            "pattern": "[file:hashes.SHA1 = '9e65be7d8b3ca8fdefa260cb254abb4adef21e70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:38:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c66-3e1c-49e4-bae2-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:39:02.000Z",
            "modified": "2016-02-19T04:39:02.000Z",
            "description": "Automatically added (via f9f5c5d73f04f4ef889448951fe4f988)",
            "pattern": "[file:hashes.SHA1 = 'e6389a68203d06b033df661f561538bc729b5c63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:39:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c75-92b4-419d-85de-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:39:17.000Z",
            "modified": "2016-02-19T04:39:17.000Z",
            "description": "Automatically added (via fa40b397a2bcdcf533422805fb2089a6)",
            "pattern": "[file:hashes.SHA1 = '80b0a31b25dde8309af730726a59ea5ab952b73c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:39:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c83-bf50-4cd7-8deb-4228950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:39:31.000Z",
            "modified": "2016-02-19T04:39:31.000Z",
            "description": "Automatically added (via fa8db5157be4f80185d579431a130f6e)",
            "pattern": "[file:hashes.SHA1 = '8c8f0742b1aa1ff485a425056c6b939e718010d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:39:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c90-6cc4-41c2-97d3-4e47950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:39:44.000Z",
            "modified": "2016-02-19T04:39:44.000Z",
            "description": "Automatically added (via fa97b3a37c01cf2563d646a143f730a0)",
            "pattern": "[file:hashes.SHA1 = '252966571e3c32b92465d4a41fb47ddbcbb50f14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:39:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c9d-532c-4226-a29b-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:39:57.000Z",
            "modified": "2016-02-19T04:39:57.000Z",
            "description": "Automatically added (via faceb830c417c762688ed88b9ab4a56f)",
            "pattern": "[file:hashes.SHA1 = 'e7d8a7ee43576581e62355fc5efc197d9caf765f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:39:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69caa-011c-447e-a652-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:40:10.000Z",
            "modified": "2016-02-19T04:40:10.000Z",
            "description": "Automatically added (via fadbaf22a193f6d5f2d6e2d0af0cdc2a)",
            "pattern": "[file:hashes.SHA1 = '46e2cf30e6555e21120a6a264c560a3d0c190b17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:40:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69cb9-d628-47b6-97e9-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:40:25.000Z",
            "modified": "2016-02-19T04:40:25.000Z",
            "description": "Automatically added (via fbcbec6073198c540b8be66b74c2008b)",
            "pattern": "[file:hashes.SHA1 = 'e823b3e562b4bb1f6d266de5205f82a38df3ca1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:40:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69cc6-f524-4d1f-bf92-44a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:40:38.000Z",
            "modified": "2016-02-19T04:40:38.000Z",
            "description": "Automatically added (via fbd56051c742b08ffcf37438c2e8f134)",
            "pattern": "[file:hashes.SHA1 = '81a320c778ae24bacca11a471ed93f8ddd0cbb80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:40:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69cd3-be70-4f95-bfc6-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:40:51.000Z",
            "modified": "2016-02-19T04:40:51.000Z",
            "description": "Automatically added (via fbd673d823d3c66449d436e1f4b95945)",
            "pattern": "[file:hashes.SHA1 = '3eb9757672ad800c0410e899737d5c76fa6b21fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:40:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ce0-ce84-4173-b7e1-482e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:41:04.000Z",
            "modified": "2016-02-19T04:41:04.000Z",
            "description": "Automatically added (via fc0b237c9e777c5a116160b56a60cfa1)",
            "pattern": "[file:hashes.SHA1 = '56a35d99be139eaffe42889a73be07be35b665fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:41:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ced-ef74-4a7b-b720-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:41:17.000Z",
            "modified": "2016-02-19T04:41:17.000Z",
            "description": "Automatically added (via fc0eebf0a7f709739614fda4e900f82d)",
            "pattern": "[file:hashes.SHA1 = 'c6c9fed10840c123d1eb306d9727a0a3515a25a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:41:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69cfc-3fbc-4875-8a09-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:41:32.000Z",
            "modified": "2016-02-19T04:41:32.000Z",
            "description": "Automatically added (via fc81db0cc4896cec19d869228a921172)",
            "pattern": "[file:hashes.SHA1 = '50552e86f735047a972484bd6997adbb2f51e84e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:41:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d0b-d584-4915-b605-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:41:47.000Z",
            "modified": "2016-02-19T04:41:47.000Z",
            "description": "Automatically added (via fc85faae0c8315cc7c1579f35e45baca)",
            "pattern": "[file:hashes.SHA1 = '8dac6cbbac26038812e29b46f10a46193b428a97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:41:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d1a-b9fc-487d-aa99-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:42:02.000Z",
            "modified": "2016-02-19T04:42:02.000Z",
            "description": "Automatically added (via fcc01b6d615c2888aa70c98e3c5792bb)",
            "pattern": "[file:hashes.SHA1 = '922aedcbd50ee74946c16a64afc5550617c1029d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:42:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d2a-9f94-421d-b0f3-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:42:18.000Z",
            "modified": "2016-02-19T04:42:18.000Z",
            "description": "Automatically added (via fce4b320e9a33ebd08edba53a7c53933)",
            "pattern": "[file:hashes.SHA1 = 'f91b5cf5796745e0efd338aa4add28e52fd779b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:42:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d3a-91d0-4f57-8afa-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:42:34.000Z",
            "modified": "2016-02-19T04:42:34.000Z",
            "description": "Automatically added (via fced21bb330926f582e5057ae6ccbd6f)",
            "pattern": "[file:hashes.SHA1 = 'be3cf615eb92e8f8d5813dfc97cfac412ae8ff6d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:42:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d49-780c-4d2a-b6a9-4f03950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:42:49.000Z",
            "modified": "2016-02-19T04:42:49.000Z",
            "description": "Automatically added (via fd50a292881921c662c8beed60e1ddd2)",
            "pattern": "[file:hashes.SHA1 = '0b952154fb87a9b6962e21066e70237c9a79c3a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:42:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d56-4568-45df-93b0-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:43:02.000Z",
            "modified": "2016-02-19T04:43:02.000Z",
            "description": "Automatically added (via fd6f12a84d35331b6156a9911d7d85bc)",
            "pattern": "[file:hashes.SHA1 = 'e860f57b8ce037816fc6fe9611d159af6976f5a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:43:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d63-554c-4327-8707-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:43:15.000Z",
            "modified": "2016-02-19T04:43:15.000Z",
            "description": "Automatically added (via fd70922ef7e69f73e28e17dbe981a5b4)",
            "pattern": "[file:hashes.SHA1 = '08fa956e1dc64892484fb89a6ac1a4d568fc1dc1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:43:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d72-e704-4906-b0c9-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:43:30.000Z",
            "modified": "2016-02-19T04:43:30.000Z",
            "description": "Automatically added (via fd75952659afbb74661f081cfe0d82c0)",
            "pattern": "[file:hashes.SHA1 = '252929bfd852fa91a7f0a0d462100038712411ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:43:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d81-e060-4140-8bba-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:43:45.000Z",
            "modified": "2016-02-19T04:43:45.000Z",
            "description": "Automatically added (via fe04f99509a913658f0b1f14ea286ea6)",
            "pattern": "[file:hashes.SHA1 = '457f3b982aaaa0154747385aa7c25f61dd92f20e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:43:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d90-6d28-4392-aa05-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:44:00.000Z",
            "modified": "2016-02-19T04:44:00.000Z",
            "description": "Automatically added (via fe9fdba44ea3a6bc29d8cee17410a124)",
            "pattern": "[file:hashes.SHA1 = 'd61338b95e278d109f7561723dcf7f905e7eb1ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:44:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69da0-3b8c-4f7d-a48a-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:44:16.000Z",
            "modified": "2016-02-19T04:44:16.000Z",
            "description": "Automatically added (via fea691a4e244515675d6eafcf3789600)",
            "pattern": "[file:hashes.SHA1 = '27102578bd75b7c7665d222b59ab9bf593687d65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:44:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69daf-1ff8-465b-a20d-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:44:31.000Z",
            "modified": "2016-02-19T04:44:31.000Z",
            "description": "Automatically added (via fec6c7c5c27b52813e5226d05d8ee4c2)",
            "pattern": "[file:hashes.SHA1 = '750e89836bb94821ec66972a6079722725d694b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:44:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69dbe-e850-4537-9018-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:44:46.000Z",
            "modified": "2016-02-19T04:44:46.000Z",
            "description": "Automatically added (via fed62009b28ee275458b415a8408fd9e)",
            "pattern": "[file:hashes.SHA1 = '342cb5d7bc204524feb2ce115287d29c458b23a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:44:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69dcc-815c-47ed-b861-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:45:00.000Z",
            "modified": "2016-02-19T04:45:00.000Z",
            "description": "Automatically added (via ff075c22241a60924fbc82bbff614efc)",
            "pattern": "[file:hashes.SHA1 = '4d1f45a32d4904c182e2746c63a9fce2717249e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:45:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ddb-e3c8-46b5-892d-4d79950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:45:15.000Z",
            "modified": "2016-02-19T04:45:15.000Z",
            "description": "Automatically added (via ff71143c5fcf41f9526a41986c60c85d)",
            "pattern": "[file:hashes.SHA1 = '0b43b5bccfbf6a55bec1017ce34fbcf4d7fb400d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:45:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69dea-759c-421c-b980-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:45:30.000Z",
            "modified": "2016-02-19T04:45:30.000Z",
            "description": "Automatically added (via ffc5ce7627333c505488250c12228583)",
            "pattern": "[file:hashes.SHA1 = '384058242e35707f3c18337196f08e40e71c28ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:45:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67620-0c10-4302-aeac-46ec950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:44.000Z",
            "modified": "2016-02-19T01:55:44.000Z",
            "description": "Automatically added (via 10e5cb4c43f90baa7bd2133eb7d57eaf)",
            "pattern": "[file:hashes.SHA256 = 'bfc1c3e77d1f28e099693737f94d3e99cc123505b5d9f4a9d335059bedb0c9bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67625-0e50-459c-8b6b-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:49.000Z",
            "modified": "2016-02-19T01:55:49.000Z",
            "description": "Automatically added (via 1100a5a8888310601d723d605ac43f41)",
            "pattern": "[file:hashes.SHA256 = '7150de21cccd769c1ec13b04b47e0c6fd8b03c642219dd7e5b05d7993b9583c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6762a-ffc8-4870-b3d6-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:54.000Z",
            "modified": "2016-02-19T01:55:54.000Z",
            "description": "Automatically added (via 111449f0611950b2f965c53730d43fa0)",
            "pattern": "[file:hashes.SHA256 = 'd776f693ce01a4e7de067f206d66f5915f801e3d72e855fa29f4db177de49d3b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6762e-3c8c-400f-908f-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:55:58.000Z",
            "modified": "2016-02-19T01:55:58.000Z",
            "description": "Automatically added (via 1173aa4a118ed82d277ff67a6323b93f)",
            "pattern": "[file:hashes.SHA256 = 'd994116a86f3696a421c64ad2e4851df0b83127bfc8ca46d3460518dff6a181e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:55:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67633-481c-43e4-b85d-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:03.000Z",
            "modified": "2016-02-19T01:56:03.000Z",
            "description": "Automatically added (via 11e2302467fb03270b2d30037cf4fabb)",
            "pattern": "[file:hashes.SHA256 = 'e028ecc097a1682751fe6e4a532126267ef3c3950ec440f2edc801361ce35046']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67637-eea4-4f1c-9c93-46e2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:07.000Z",
            "modified": "2016-02-19T01:56:07.000Z",
            "description": "Automatically added (via 11f4287e5da06a9da233a22f9d08d414)",
            "pattern": "[file:hashes.SHA256 = 'd662509497c2c3c787bb6548320f94e8362d17871225043ab8db6d6d84c69171']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6763c-5070-459e-a69c-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:12.000Z",
            "modified": "2016-02-19T01:56:12.000Z",
            "description": "Automatically added (via 1293dd44f5a47ee627cd8d6b0a55465e)",
            "pattern": "[file:hashes.SHA256 = '958144336bea8fbffbd07fd6a17a5e0dfa014bf9da57401edf5ea59719659171']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67641-dc54-4c6b-8306-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:17.000Z",
            "modified": "2016-02-19T01:56:17.000Z",
            "description": "Automatically added (via 12a92e1a3bd200d7bc7ec2bdab9e3a5c)",
            "pattern": "[file:hashes.SHA256 = '063d0407d0e5215078b00e131d8eb9f2088b1b58b288f9a597e3be64585c2982']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67645-55ac-44af-b147-4aac950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:21.000Z",
            "modified": "2016-02-19T01:56:21.000Z",
            "description": "Automatically added (via 12b9d7da9264f610b05173fbfa947a68)",
            "pattern": "[file:hashes.SHA256 = '55f106cee1a1b1b33c4683feb993fb89aced5a26cc72424aa538b7e73f90a2b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6764a-9a04-4af8-a70c-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:26.000Z",
            "modified": "2016-02-19T01:56:26.000Z",
            "description": "Automatically added (via 12baceea670cb7d612418d5f0966ba4f)",
            "pattern": "[file:hashes.SHA256 = '2612c84e3313ab628e50281fe834d793de731b40005c0906d772eacd488cba2b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6764e-38a8-47fb-9e6b-478d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:30.000Z",
            "modified": "2016-02-19T01:56:30.000Z",
            "description": "Automatically added (via 12c627eed4bcf515a42d32611f9df85f)",
            "pattern": "[file:hashes.SHA256 = '163ddb1ab242f5d32b5af2ab826a026542f95f9deb6baebd23224da90efed1ad']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67653-28a8-4667-8996-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:35.000Z",
            "modified": "2016-02-19T01:56:35.000Z",
            "description": "Automatically added (via 133580c3cd9febd92394c94de4a3458b)",
            "pattern": "[file:hashes.SHA256 = 'f3fc34c7c8c93e324637f334611a2222788aec45a407128d0fe20c57c5b179df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67658-00d4-4ba3-8967-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:40.000Z",
            "modified": "2016-02-19T01:56:40.000Z",
            "description": "Automatically added (via 1383d5fba86acff32d394b05dc228dc2)",
            "pattern": "[file:hashes.SHA256 = '919abcbf9e93bdf17e973daff463556bfc5593fc4bc65e8b0bd56cb08ec0279e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6765c-fc04-40bd-baa3-4d57950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:44.000Z",
            "modified": "2016-02-19T01:56:44.000Z",
            "description": "Automatically added (via 138814329190e4bedac7d75bc0faec94)",
            "pattern": "[file:hashes.SHA256 = 'f397b5c65a25f12b5ce373af168f90e5b648f4d89adaae2051c9d3f06d1893ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67662-bc4c-4c61-8930-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:50.000Z",
            "modified": "2016-02-19T01:56:50.000Z",
            "description": "Automatically added (via 13f86b6d597801e02a0bf33ed6dc245e)",
            "pattern": "[file:hashes.SHA256 = 'a453902251da072510083ff9d02b7cf91076f41c72ba801106e4d1787aad3787']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67667-d798-4195-8ee3-494e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:56:55.000Z",
            "modified": "2016-02-19T01:56:55.000Z",
            "description": "Automatically added (via 13fb14bb145c81ce5d4c18c1a4201066)",
            "pattern": "[file:hashes.SHA256 = '7d4163fe4e218cc4c396e78f369cd0f1d7aeff598c436f98460dd16163e6d240']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:56:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6766c-2158-4dec-a434-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:00.000Z",
            "modified": "2016-02-19T01:57:00.000Z",
            "description": "Automatically added (via 1402d93254d563575f4f37e04d1612ea)",
            "pattern": "[file:hashes.SHA256 = '6125b1b30430a521d15888f3e25fc15fcc61a5bdd98b2b104386ae0906d13ac0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67671-97d8-40eb-9d05-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:05.000Z",
            "modified": "2016-02-19T01:57:05.000Z",
            "description": "Automatically added (via 1487ca8db10e87ac833f9fa8f4b70813)",
            "pattern": "[file:hashes.SHA256 = 'f590fb062d621bbdf5c2fd5c1898d908b49db7bd5f9f9fb81c792cc80ab5f8be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67676-3230-456c-9359-4b80950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:10.000Z",
            "modified": "2016-02-19T01:57:10.000Z",
            "description": "Automatically added (via 15384b9643d668d00d308abb0f9ca8e8)",
            "pattern": "[file:hashes.SHA256 = 'e1ec1f43f4950d7cd6afc213ec0c4dca63b1e49461036c6f0a8a457cd768fd3a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6767a-e1d4-4edb-b2ff-49de950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:14.000Z",
            "modified": "2016-02-19T01:57:14.000Z",
            "description": "Automatically added (via 153889e18a50ce33ceeab4e936fe8131)",
            "pattern": "[file:hashes.SHA256 = '64aa07f2b7d09eee09e21697e6cba40cc2055c8bb096577f4805dbd287d8c460']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6767f-6178-4990-adea-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:19.000Z",
            "modified": "2016-02-19T01:57:19.000Z",
            "description": "Automatically added (via 154cd9645588dc8b9eac436e4fb53df5)",
            "pattern": "[file:hashes.SHA256 = '926257fdcc5feab5e28108a203c6dc8348ddfedb37a03465a62748650c653069']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67684-5714-4c4e-a90d-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:24.000Z",
            "modified": "2016-02-19T01:57:24.000Z",
            "description": "Automatically added (via 161eef26b267ce2d8bb4b94ed00d4345)",
            "pattern": "[file:hashes.SHA256 = 'cceadd3007fbd04e743abc6a2831e00e070dec12acd09cfe78b34e72010f6f56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67688-76c4-4b68-8be4-48c1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:28.000Z",
            "modified": "2016-02-19T01:57:28.000Z",
            "description": "Automatically added (via 1623c0e3e298ff4a4e7b60db04dac56d)",
            "pattern": "[file:hashes.SHA256 = 'cdd658436f8105cb92d2e202baee18d2fc55a97f817e10f699e2673f9192bd01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6768d-4534-4de2-acc4-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:33.000Z",
            "modified": "2016-02-19T01:57:33.000Z",
            "description": "Automatically added (via 16712777f9a94fd0d83bb194daaf468d)",
            "pattern": "[file:hashes.SHA256 = 'ddfa334b37693f802cf0dd9046dd6d89b802d86b50656c533804a493a6f23bfd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67692-2368-4b92-817c-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:38.000Z",
            "modified": "2016-02-19T01:57:38.000Z",
            "description": "Automatically added (via 16722d0cc17608c5e0045718ca7b71e6)",
            "pattern": "[file:hashes.SHA256 = '7b267a44555adf65ac532db5ca52023db79647fec8b5f88050fdbed7d49a8cb1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67697-1b60-4527-9cd0-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:43.000Z",
            "modified": "2016-02-19T01:57:43.000Z",
            "description": "Automatically added (via 16776d5ec7f697bf88be4d7c840a09a2)",
            "pattern": "[file:hashes.SHA256 = '30d02b393572944bd9cd2e41e5f59ee633dde075170d4c17da581948bad9e45b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6769c-3a84-48c9-a7bb-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:48.000Z",
            "modified": "2016-02-19T01:57:48.000Z",
            "description": "Automatically added (via 1682c25ad101e865c71a844bde9e71e5)",
            "pattern": "[file:hashes.SHA256 = '4b81395ab0143b1caca2997ee89416be599c137edc3f6a3277636cc952568eeb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676a1-c30c-4354-82f5-4bec950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:53.000Z",
            "modified": "2016-02-19T01:57:53.000Z",
            "description": "Automatically added (via 1733fb5cd9c9c7cf307ae60a6f7d6602)",
            "pattern": "[file:hashes.SHA256 = '3b1b47a7f47a447e89588209c4a31103d2dbc816bbe2ed8dddaa0935bc2f89ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676a5-babc-43ca-a9d4-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:57:57.000Z",
            "modified": "2016-02-19T01:57:57.000Z",
            "description": "Automatically added (via 1787fe1710ae182d1d7b302274ec0a8f)",
            "pattern": "[file:hashes.SHA256 = 'f3d03f616814a3f07c1a73467fa645cb161b5cff9a3e80a1dfe489143077548d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:57:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676aa-f634-4160-ba2f-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:02.000Z",
            "modified": "2016-02-19T01:58:02.000Z",
            "description": "Automatically added (via 17b2111f3067c51faf692558e0cf9bf5)",
            "pattern": "[file:hashes.SHA256 = 'a6d3e22e9e12bcaba24d2ec19af8feda4ff2d69cc4c31f35b7ddfa29cdc81096']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676af-91b4-48dd-8976-4564950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:07.000Z",
            "modified": "2016-02-19T01:58:07.000Z",
            "description": "Automatically added (via 17bfde877355bcd4e6935e90320b783b)",
            "pattern": "[file:hashes.SHA256 = 'e940513ff531d846369a252b7a42ebd85208a32aa99d2aaa8b24e127a9585d12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676b4-859c-4b19-ba1d-483c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:12.000Z",
            "modified": "2016-02-19T01:58:12.000Z",
            "description": "Automatically added (via 17e763f5ad9bd1d459f8f9ddc99807bd)",
            "pattern": "[file:hashes.SHA256 = 'c49c550ed74aaa1e58bd666757238f8c8e396c85a13dead1f994efe602298826']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676b9-636c-4d36-8e0e-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:17.000Z",
            "modified": "2016-02-19T01:58:17.000Z",
            "description": "Automatically added (via 180e2973f2cb564aa8eea6176659abf5)",
            "pattern": "[file:hashes.SHA256 = '5b0478800b11b514fd189269c8b96d1957fc6f64a42ba7016ac8585b7d2f6d3c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676bd-2cf8-4801-ab68-4d56950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:21.000Z",
            "modified": "2016-02-19T01:58:21.000Z",
            "description": "Automatically added (via 18367138f7514a8f2d7505ee5616b4d4)",
            "pattern": "[file:hashes.SHA256 = '5cce4fa891a8ecb1c3495db4347213b0baad2ef36d337e7f3b5c3bede15fa870']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676c2-33a0-4692-90d7-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:26.000Z",
            "modified": "2016-02-19T01:58:26.000Z",
            "description": "Automatically added (via 186b09188619576405bd5bc329033172)",
            "pattern": "[file:hashes.SHA256 = 'd583a0d83f9560433727b61ee36c7ef14a4c9dc56fa2825bdd47d0eaa1e4f0e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676c7-f9ec-49a9-bd3d-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:31.000Z",
            "modified": "2016-02-19T01:58:31.000Z",
            "description": "Automatically added (via 1896c7398b63f695f04e63492f897138)",
            "pattern": "[file:hashes.SHA256 = '60120238632412bc8af6017fb59af0df8f65b880143ba5eb3dedbe558716a8d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676cc-d19c-45bd-929b-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:36.000Z",
            "modified": "2016-02-19T01:58:36.000Z",
            "description": "Automatically added (via 18b648f0fbfde69fdebba0df5afb9c18)",
            "pattern": "[file:hashes.SHA256 = '82bbdd728c8c66d93834c7f37df6ee6c42a57d0fd80222c95d6041a61fe48789']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676d1-95d0-47a9-b48c-45c3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:41.000Z",
            "modified": "2016-02-19T01:58:41.000Z",
            "description": "Automatically added (via 18fec20777e178b7fe53a2d2c69dc941)",
            "pattern": "[file:hashes.SHA256 = '2fb249e2de958171c87d3dc78f982d3ba6c74d0fa9f29569b98b706251283146']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676d6-2038-407f-bffb-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:46.000Z",
            "modified": "2016-02-19T01:58:46.000Z",
            "description": "Automatically added (via 192051becede2abf23ce135c41b80140)",
            "pattern": "[file:hashes.SHA256 = '9752d8369081531607b72eed7696b468efae7b1e344e939192c397146f309476']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676db-6e44-4f4a-918e-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:51.000Z",
            "modified": "2016-02-19T01:58:51.000Z",
            "description": "Automatically added (via 195f11aee70766d6de3db38ff81ee02c)",
            "pattern": "[file:hashes.SHA256 = '60b61e1c60f0227fe844172c883b819e3fae21c4e3e72b5299650688153e5038']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676e0-aa4c-4dac-9abd-4771950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:58:56.000Z",
            "modified": "2016-02-19T01:58:56.000Z",
            "description": "Automatically added (via 19c5d0ae05b1d57aa06dbad9ef7e0bb7)",
            "pattern": "[file:hashes.SHA256 = 'afc5ed3d8d3d12006374af49f0f106e35e607153b0a2fabe882b1b1a1c446df6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:58:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676e5-99a8-431c-8e99-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:01.000Z",
            "modified": "2016-02-19T01:59:01.000Z",
            "description": "Automatically added (via 19da41b166a16f06953454191510055f)",
            "pattern": "[file:hashes.SHA256 = '6681d385a63135255880e2915a8e7fecf27353ce0de49a01ad274c5566f58b85']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676e9-1bc4-4b47-9c5f-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:05.000Z",
            "modified": "2016-02-19T01:59:05.000Z",
            "description": "Automatically added (via 19e11653d41b8329803a74a8b452fec0)",
            "pattern": "[file:hashes.SHA256 = '57cebb54ef5f61584653425bc59fdebeadd54f6861bd567fa562bd70f25f8501']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676ee-4a04-43b4-9bd6-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:10.000Z",
            "modified": "2016-02-19T01:59:10.000Z",
            "description": "Automatically added (via 19e1dfa260f2950a6f4e8c056b6a243d)",
            "pattern": "[file:hashes.SHA256 = '44f180ba75c683b18a2c727bb4a80be95979bc8069ff90f8764795f311ef1316']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676f3-ece0-41f3-b38d-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:15.000Z",
            "modified": "2016-02-19T01:59:15.000Z",
            "description": "Automatically added (via 19f765e2375caaff4d82decee1bdcc99)",
            "pattern": "[file:hashes.SHA256 = '91dcf485660ed503c04f44a9ec1c05bd20beeb8982438e06256524ffc9194540']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676f8-da48-4526-81e0-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:20.000Z",
            "modified": "2016-02-19T01:59:20.000Z",
            "description": "Automatically added (via 1a1a30e8bbf6a18c8c501f55c69a5c17)",
            "pattern": "[file:hashes.SHA256 = '75e375ba439d88b3c9ba650c814535fed71243eea7f1bdd09165a093634c34d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c676fd-60ac-48e0-aee1-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:25.000Z",
            "modified": "2016-02-19T01:59:25.000Z",
            "description": "Automatically added (via 1a2ba8907e9f2fe1a888a9897f25c43b)",
            "pattern": "[file:hashes.SHA256 = '10bef8b37b9f769e67d60b6125537ea043574e7f4342d528e3bedbd847f9131b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67702-0184-42cc-b508-49c1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:30.000Z",
            "modified": "2016-02-19T01:59:30.000Z",
            "description": "Automatically added (via 1a75fd31d03b39d53dabe676eeb6f39b)",
            "pattern": "[file:hashes.SHA256 = 'b764f789b7d5ee974b6c23e3a82a9681d211c6706ba22dcfbce13e1bc42cbf0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67707-972c-440e-bc23-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:35.000Z",
            "modified": "2016-02-19T01:59:35.000Z",
            "description": "Automatically added (via 1ab51d918452a06408479f848eeb9fdf)",
            "pattern": "[file:hashes.SHA256 = '2b95fa2a0d573802d4b0720bcc9c830d8ef850522f37582b2ba86bf5f7657c3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6770c-8fa4-4335-b123-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:40.000Z",
            "modified": "2016-02-19T01:59:40.000Z",
            "description": "Automatically added (via 1ab544d95bc02ac37220121823bb3457)",
            "pattern": "[file:hashes.SHA256 = '279ee75582e97df7487ad72b79854e986a232fdd02dd0b719457384c38d4650a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67712-2154-4961-a576-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:46.000Z",
            "modified": "2016-02-19T01:59:46.000Z",
            "description": "Automatically added (via 1ac1314a1924ec8d17fc01509d13e27d)",
            "pattern": "[file:hashes.SHA256 = '6d8dd96d0c5c4ab22e3913871ff0ca1d1dc3256662f783d4137861df78f7406d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67717-c528-498a-8a64-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:51.000Z",
            "modified": "2016-02-19T01:59:51.000Z",
            "description": "Automatically added (via 1b1508c0c26bf7ac427366f399604aed)",
            "pattern": "[file:hashes.SHA256 = 'f2054e8f33df46f29f5bb264291b006eaf48c59876f11a78dba5b5fe2b38bb6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6771c-ad7c-4b4f-a91d-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T01:59:56.000Z",
            "modified": "2016-02-19T01:59:56.000Z",
            "description": "Automatically added (via 1b602256187f19f2fd0ba95c790f72f7)",
            "pattern": "[file:hashes.SHA256 = '76b3b1b706b3002b11f53228b86586155b9a6447b878af00a7de726b21b72658']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T01:59:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67721-3dc4-4cfc-b527-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:01.000Z",
            "modified": "2016-02-19T02:00:01.000Z",
            "description": "Automatically added (via 1be391f21ca31aaabca5c782bed63cdf)",
            "pattern": "[file:hashes.SHA256 = 'ffd193829989eab0b95f3f0f8e784ee87405bda7eb5b5f6645b119d001101ba2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67726-445c-4e89-a6ac-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:06.000Z",
            "modified": "2016-02-19T02:00:06.000Z",
            "description": "Automatically added (via 1d36b1071c0576d02ca6ee2ea020c7ae)",
            "pattern": "[file:hashes.SHA256 = '90b840eee5b482adcaae2f9c1a64f5bfadc4071ffede99ff96105e4c9274230e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6772b-d7e0-4c93-9213-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:11.000Z",
            "modified": "2016-02-19T02:00:11.000Z",
            "description": "Automatically added (via 1e154b3ebaf45646bed4ab4a23067648)",
            "pattern": "[file:hashes.SHA256 = 'ac27feb590f7b8fd57f22e37bdb9aa038980ba2cfac73cfd46aadd4d09fe9610']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67730-d608-47ce-bc09-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:16.000Z",
            "modified": "2016-02-19T02:00:16.000Z",
            "description": "Automatically added (via 1e23af7c0907b96f72c69beb7aeb4da2)",
            "pattern": "[file:hashes.SHA256 = '015b9f1dd091ed2f0b053d72a236c0a001ef071fe9a7591cd794817e4f7b16ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67735-2408-459b-920e-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:21.000Z",
            "modified": "2016-02-19T02:00:21.000Z",
            "description": "Automatically added (via 1e9e8874e9d47155860d0fa1efb55141)",
            "pattern": "[file:hashes.SHA256 = '80c1f15043ea43f5e9592ff4b9a34f3291d44cb5c5d595632b1da0ac2a492836']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6773a-ce88-4fca-90db-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:26.000Z",
            "modified": "2016-02-19T02:00:26.000Z",
            "description": "Automatically added (via 1eb430ccf58e89c22791d684bd3e2c44)",
            "pattern": "[file:hashes.SHA256 = 'ab406cec77d6c709099b43f71cee9f07aff072e85eb543f4240d649a50d4172c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6773f-76c0-43a2-b730-432e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:31.000Z",
            "modified": "2016-02-19T02:00:31.000Z",
            "description": "Automatically added (via 1ecbef41fe5e1daa164de91c558bc409)",
            "pattern": "[file:hashes.SHA256 = 'f87c34bd899f84c1a51d985465dba4424ce5ad7be29c6da867977d49bed8cd60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67744-7b74-4061-bcca-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:36.000Z",
            "modified": "2016-02-19T02:00:36.000Z",
            "description": "Automatically added (via 1f0fefcc9959c950a77e5d66d143d861)",
            "pattern": "[file:hashes.SHA256 = '3fdee4a10c41f7507367151d7dd408c3281497a643617934b0f831308527e843']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67749-2fc8-4fb1-8b0d-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:41.000Z",
            "modified": "2016-02-19T02:00:41.000Z",
            "description": "Automatically added (via 1fa2e969ffef74abd2e61b417b613f8c)",
            "pattern": "[file:hashes.SHA256 = 'a81ed8c9498626176adf2fb90fc4c8ee1f6f25c0f88da0d40360ff46830f33f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6774e-343c-43be-8e33-4512950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:46.000Z",
            "modified": "2016-02-19T02:00:46.000Z",
            "description": "Automatically added (via 1fe7bc821db5a9dffb5867dc6f1b9146)",
            "pattern": "[file:hashes.SHA256 = 'bbf1b01d9d17d80f4ea4dc357acbb193d917edda9f4c275505b730760f91d2ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67752-07e8-4f2c-b21a-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:50.000Z",
            "modified": "2016-02-19T02:00:50.000Z",
            "description": "Automatically added (via 1fef1297e6723d9e4888bfb4fba1c682)",
            "pattern": "[file:hashes.SHA256 = '9747cd6c12d166ecf1808bf65bc2c65fb6fb952837bcac597a79e98193aa3a4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67757-334c-4326-b5ae-4752950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:00:55.000Z",
            "modified": "2016-02-19T02:00:55.000Z",
            "description": "Automatically added (via 20052913b6c05c38daa32eb8898b3a56)",
            "pattern": "[file:hashes.SHA256 = '50fca32414b44ad852bfc63cf784dc7eef6efa5e1949eb42d78a754648aea614']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:00:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6775c-2e54-4836-a226-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:00.000Z",
            "modified": "2016-02-19T02:01:00.000Z",
            "description": "Automatically added (via 20159698df74719832e5ccddadd9fdec)",
            "pattern": "[file:hashes.SHA256 = 'cb91fe9ce4b4e88bec79c7c4f0ce5dbcf9db0833ac3c8ff0542c56073ed2f9d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67761-fbdc-4883-88d6-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:05.000Z",
            "modified": "2016-02-19T02:01:05.000Z",
            "description": "Automatically added (via 202ac3c2241d3f0f2487765f5131b3e2)",
            "pattern": "[file:hashes.SHA256 = '3fc55dab71865b4b8400c316d6986c5fbacc5f4a1edaffedfe259554361882d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67767-1b70-465e-a7e7-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:11.000Z",
            "modified": "2016-02-19T02:01:11.000Z",
            "description": "Automatically added (via 208fcea4fc1a134bce8e6e891cc73c5c)",
            "pattern": "[file:hashes.SHA256 = 'a82ab98ce951414458760611a1f8b1e07f87d120cf54ff4e00269bdbf8a5cc07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6776c-ef30-40a4-865d-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:16.000Z",
            "modified": "2016-02-19T02:01:16.000Z",
            "description": "Automatically added (via 20b01b61db68c089219dccab4e206e2e)",
            "pattern": "[file:hashes.SHA256 = '17261fedb3aaa2bf9f2c30c47597b38b14399d9c611b7b485743dd39ac5c7c11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67771-0260-4785-a920-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:21.000Z",
            "modified": "2016-02-19T02:01:21.000Z",
            "description": "Automatically added (via 20c1f416747b13d5e14e5424dd4df512)",
            "pattern": "[file:hashes.SHA256 = '5f17114d1b35d982f6d5770d32e202e6e680c6355185be4eb5aab292b0e9851d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67776-e440-4d6c-9d8c-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:26.000Z",
            "modified": "2016-02-19T02:01:26.000Z",
            "description": "Automatically added (via 21328e6820cf2af844213678e0719b44)",
            "pattern": "[file:hashes.SHA256 = 'fe592700e16a39935a127da35390f28b0c4f24db6246d6f72e5ec8fea6db654b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6777b-73dc-45fa-8058-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:31.000Z",
            "modified": "2016-02-19T02:01:31.000Z",
            "description": "Automatically added (via 21542b2eebdc2a3f7c8b466ce64d4360)",
            "pattern": "[file:hashes.SHA256 = '2c7e3cae0a697d083d3b930c78127ccc11348903f039444bbf3b6185946779ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67781-8ac4-4350-b09c-4682950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:37.000Z",
            "modified": "2016-02-19T02:01:37.000Z",
            "description": "Automatically added (via 219c10c004785193f188edd40ca6dfd8)",
            "pattern": "[file:hashes.SHA256 = '5a166037cbb24fb4fc071b1c0e5d6e789af1ec0955c694d0a835e3404e20a615']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67787-83bc-4056-8891-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:43.000Z",
            "modified": "2016-02-19T02:01:43.000Z",
            "description": "Automatically added (via 21e5a62e27995fcf3faf59c486a52a45)",
            "pattern": "[file:hashes.SHA256 = '47cbe0eec8f0b68d14d55ccdc31399871fd9791e454624f12ac978f114aca529']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6778c-7a04-4e74-95bf-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:48.000Z",
            "modified": "2016-02-19T02:01:48.000Z",
            "description": "Automatically added (via 22089473bd8cabc50acfff550e3c8b77)",
            "pattern": "[file:hashes.SHA256 = 'b29cc3d5638455bf13d75a446c099b0c2f9c3bea93954f970460966f3623a0af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67792-db40-41ea-8675-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:54.000Z",
            "modified": "2016-02-19T02:01:54.000Z",
            "description": "Automatically added (via 222c5a30450488bff62f521720586e14)",
            "pattern": "[file:hashes.SHA256 = '803aa0faafacfc4d25cf4dd79b9f6124f48fc13fff284e997b7ca51cc768ff83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67797-f32c-4822-8145-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:01:59.000Z",
            "modified": "2016-02-19T02:01:59.000Z",
            "description": "Automatically added (via 222f67cfa1e3609813817e0853606170)",
            "pattern": "[file:hashes.SHA256 = '7f9fbe7e4b6e111a1d009408496af344573f6308c01e137b8c4a60005b1e4b60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:01:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6779d-63d4-400d-8b80-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:05.000Z",
            "modified": "2016-02-19T02:02:05.000Z",
            "description": "Automatically added (via 223d96adbdcbf479a64ae3036ab5c9ae)",
            "pattern": "[file:hashes.SHA256 = 'bc6d46a7309ccfafe058591acb3eb2009f8c13e79f2ce6c4c7494e8f36ceda1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677a2-3b84-4ddb-8d65-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:10.000Z",
            "modified": "2016-02-19T02:02:10.000Z",
            "description": "Automatically added (via 22566d2240944b350aa06178135f3343)",
            "pattern": "[file:hashes.SHA256 = 'edfa215af2228adafa268916bf701e815fb23be8f1c5535073def1e6f1a3806d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677a8-9d68-4035-8257-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:16.000Z",
            "modified": "2016-02-19T02:02:16.000Z",
            "description": "Automatically added (via 226114ef4dd05e252dbcf50c3878961a)",
            "pattern": "[file:hashes.SHA256 = 'a8da9649cb2416774b68c809772ea2515a802587d4e9667e62dc7acaf5d1b909']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677ae-f988-429e-9779-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:22.000Z",
            "modified": "2016-02-19T02:02:22.000Z",
            "description": "Automatically added (via 231c92a006a2d1945d9e0fb2229ac2cc)",
            "pattern": "[file:hashes.SHA256 = 'eedd2e948983ef94c764bc2b791dbb5b89dda156581ff1543d5f0f79c92b61c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677b3-b4f8-446a-a42a-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:27.000Z",
            "modified": "2016-02-19T02:02:27.000Z",
            "description": "Automatically added (via 232a67239f29eb06d38e59b46e376bba)",
            "pattern": "[file:hashes.SHA256 = 'f835f1ae08f84c13cb0f0a2f0b24f1abcba7feeaef1d493a2a9c6075fe365de6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677b9-5b3c-4c7d-b369-4983950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:33.000Z",
            "modified": "2016-02-19T02:02:33.000Z",
            "description": "Automatically added (via 234a2d23b44ee6a83fb1ae1b66477c38)",
            "pattern": "[file:hashes.SHA256 = '8d06e9289dd9b13c2e240160cf29451e6e3b743f3e73badd0c8d203898f03e1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677bf-79a0-4c12-8218-4200950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:39.000Z",
            "modified": "2016-02-19T02:02:39.000Z",
            "description": "Automatically added (via 236d83be1cc5cbc963a7b9c7162c59de)",
            "pattern": "[file:hashes.SHA256 = '138a69b584c75f45acddf1058344406fe6090defce30b917028a19e5b13a6170']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677c5-0504-45aa-a073-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:45.000Z",
            "modified": "2016-02-19T02:02:45.000Z",
            "description": "Automatically added (via 24ad4414c4f55419cfbd36f8c0640b31)",
            "pattern": "[file:hashes.SHA256 = '716c6795140022831268426716d8010b5826de12784f56a5c247b4e39394dbd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677cb-f0d8-4934-8bf7-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:51.000Z",
            "modified": "2016-02-19T02:02:51.000Z",
            "description": "Automatically added (via 24b34333a0be2fbd3b88962cccecc5b3)",
            "pattern": "[file:hashes.SHA256 = '588eb1cbe48fc05bccf2d7449298a256e033413f465ef1ff3a934a2e48ca7dcf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677d1-b7c8-4416-ba94-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:02:57.000Z",
            "modified": "2016-02-19T02:02:57.000Z",
            "description": "Automatically added (via 254f1a910eb36aa692d578495bcef51c)",
            "pattern": "[file:hashes.SHA256 = '656829f368c09398bd8bb5d0765b8e95023dfc40045ec66489161a8852ff4b95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:02:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677d6-5ba0-4958-9690-4f25950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:02.000Z",
            "modified": "2016-02-19T02:03:02.000Z",
            "description": "Automatically added (via 256d4c261f012c544eeb6c2e3a98cc33)",
            "pattern": "[file:hashes.SHA256 = '41f9b4f237eb8a484510704cec76cf68067d03983af3618752c0c40e2ca52d27']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677dc-6dec-410b-a67a-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:08.000Z",
            "modified": "2016-02-19T02:03:08.000Z",
            "description": "Automatically added (via 25a05619c950501950cba81ad33c3fdc)",
            "pattern": "[file:hashes.SHA256 = 'd6c7025e4d9cc85dabd3d60547425f5b16d126f882a399a65cbe78324fbce783']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677e2-9170-4893-85c0-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:14.000Z",
            "modified": "2016-02-19T02:03:14.000Z",
            "description": "Automatically added (via 25f3443e34fd43da9a16066e42b67592)",
            "pattern": "[file:hashes.SHA256 = '6dde5c1fb1c4a358e981103b9a47743cd3504ce100514f383ce1db78e8a00401']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677e8-3228-4741-8912-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:20.000Z",
            "modified": "2016-02-19T02:03:20.000Z",
            "description": "Automatically added (via 2645ac15ce6ebcb1cac53cb73e922cc8)",
            "pattern": "[file:hashes.SHA256 = 'e2305822a3f60eba61bfd64b6f6c2446d1b23ef590e5bb4620d8c027655e30d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677ee-5e90-4f70-9f41-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:26.000Z",
            "modified": "2016-02-19T02:03:26.000Z",
            "description": "Automatically added (via 2654bd9949c12f3508c49c398cf6cdf2)",
            "pattern": "[file:hashes.SHA256 = '8ec9869c36f2fab809e67742d34530b7240c72387d277f7a2fe56aac3f0e17a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677f4-7a94-46cf-ab33-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:32.000Z",
            "modified": "2016-02-19T02:03:32.000Z",
            "description": "Automatically added (via 27374d824ef166726a6cedb32f09feab)",
            "pattern": "[file:hashes.SHA256 = '024e8162084bf47b43a4164dd19d2b8caed11c8092f2269d3c86eacac267a688']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c677fa-bb28-4be9-856c-4623950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:38.000Z",
            "modified": "2016-02-19T02:03:38.000Z",
            "description": "Automatically added (via 27de67b22c3784ff4b6389bd2fd11aa5)",
            "pattern": "[file:hashes.SHA256 = '5e2958bb8a91123faecd83fa4c654981aad7b90e0a7756462a2b8593841e635c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67800-d17c-495e-a9eb-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:44.000Z",
            "modified": "2016-02-19T02:03:44.000Z",
            "description": "Automatically added (via 28117c940c8dd6f76439ed89730600ce)",
            "pattern": "[file:hashes.SHA256 = '97b46bbcbc65f1cef529b6a3275ca0a5b5c1679a1b98b86286b7311d57d7b2c4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67806-4290-4bb7-8921-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:50.000Z",
            "modified": "2016-02-19T02:03:50.000Z",
            "description": "Automatically added (via 2831a406aa926d2bb02036ef2379d6c4)",
            "pattern": "[file:hashes.SHA256 = '460fbebad2c8cc452ff2133efe032c21749564af3b5e4e36272a60dc94e68e8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6780c-0d44-4976-a8cc-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:03:56.000Z",
            "modified": "2016-02-19T02:03:56.000Z",
            "description": "Automatically added (via 28413445a8889d2410c2de4eab6fe545)",
            "pattern": "[file:hashes.SHA256 = 'c81afd28a82cf2f779a6ba252e742bf51c6f64bc595271d7952bde80a3ce55b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:03:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67812-4d40-4997-b016-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:02.000Z",
            "modified": "2016-02-19T02:04:02.000Z",
            "description": "Automatically added (via 28dfdc648b16906b4280565cb8d9e7bb)",
            "pattern": "[file:hashes.SHA256 = '7155851472d1dace4ce29ab9f9ecd5cf5337cb5f4211a7b5b15f7c0e1a512028']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67818-0e0c-4656-8a99-47bd950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:08.000Z",
            "modified": "2016-02-19T02:04:08.000Z",
            "description": "Automatically added (via 295592ad2ef01d7fd6812cdb9ab2a3fd)",
            "pattern": "[file:hashes.SHA256 = '03619e88046b0abc0b07df81a214b8f18267b9f48d1176e13b0a0d14f5e707a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6781e-a0fc-4539-93ca-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:14.000Z",
            "modified": "2016-02-19T02:04:14.000Z",
            "description": "Automatically added (via 296a15d0a2ac0fb26b6c90d8fec92be7)",
            "pattern": "[file:hashes.SHA256 = 'addd44f6b58d727cf9d0bb7c90eba15476141d2e2a00bd2b91504aa16bf19eab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67824-f1f4-4770-9453-4753950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:20.000Z",
            "modified": "2016-02-19T02:04:20.000Z",
            "description": "Automatically added (via 2a94cf2d932688fd871d485c5eb5ada3)",
            "pattern": "[file:hashes.SHA256 = '8a3f48b882f1f09bdeedbbe3fec5f5bec1dceb278cf0ea580d0134eb4beebbfd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6782a-5a34-4bde-9834-447c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:26.000Z",
            "modified": "2016-02-19T02:04:26.000Z",
            "description": "Automatically added (via 2a9863202e5967e3c07c7a5c3c27eefe)",
            "pattern": "[file:hashes.SHA256 = '0dac3cc9d5a8f4cb3fd842c7cadd6e5da7d91185b52f41ffcab7dd4752526b50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67830-5730-426a-ac68-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:32.000Z",
            "modified": "2016-02-19T02:04:32.000Z",
            "description": "Automatically added (via 2ad978dec0b17afe7d56db9b48101f93)",
            "pattern": "[file:hashes.SHA256 = '726ce069747b8b5d55cde0d673cb7ad4b0eb3f5e6849f99206166e7ab585e564']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67836-0024-4c89-ae2f-4e39950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:38.000Z",
            "modified": "2016-02-19T02:04:38.000Z",
            "description": "Automatically added (via 2ae9b442a96090c4b76d6b629b4fca19)",
            "pattern": "[file:hashes.SHA256 = 'c78ad2029ba3f624b69215e24ed7a40419fd265547e7004072154b64953a5c1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6783c-586c-43c1-adb1-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:44.000Z",
            "modified": "2016-02-19T02:04:44.000Z",
            "description": "Automatically added (via 2b05d17fe6de2c852a9dc28dd619779e)",
            "pattern": "[file:hashes.SHA256 = 'c12bc067e5f8b3540fa673b1aa3f77584643ccbb11304be19436e654038047c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67842-0318-4d9b-817e-4487950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:50.000Z",
            "modified": "2016-02-19T02:04:50.000Z",
            "description": "Automatically added (via 2b069c1b50e28ab21d6b204b9d16dc74)",
            "pattern": "[file:hashes.SHA256 = '28d8e8a3ba9212e87d7b051e51c63cb550006890ab56f3528d871d95520e9794']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67848-4154-4ec5-8fb7-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:04:56.000Z",
            "modified": "2016-02-19T02:04:56.000Z",
            "description": "Automatically added (via 2b0959649b85df2c89815e4e854021ac)",
            "pattern": "[file:hashes.SHA256 = 'df7328981a8be604d66b975e0126964fc88db95f7830fe642356d4eddc7eedb6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:04:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6784e-1ee4-444a-8f80-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:02.000Z",
            "modified": "2016-02-19T02:05:02.000Z",
            "description": "Automatically added (via 2b47c774cc68033dd1b78fdf9df51bfe)",
            "pattern": "[file:hashes.SHA256 = 'b0253b16ac8dbe50f4fe54b2e27e743b844d12880f476a7c39505935648b9923']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67854-9384-4575-9f88-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:08.000Z",
            "modified": "2016-02-19T02:05:08.000Z",
            "description": "Automatically added (via 2b612d46c7f0a041595f4477edb07299)",
            "pattern": "[file:hashes.SHA256 = '543604b6df34293662de6deb53d3957bde86c2dd6317cd644c9b27ba57e75266']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6785a-4af8-47e6-8175-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:14.000Z",
            "modified": "2016-02-19T02:05:14.000Z",
            "description": "Automatically added (via 2b94f1b2efc0758d7b68489e17c19f49)",
            "pattern": "[file:hashes.SHA256 = '10a26c59bba6047c6ffa9dfb99aff57693a20a884f97a7e09470a822e33ab9a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67860-c050-4a67-9a37-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:20.000Z",
            "modified": "2016-02-19T02:05:20.000Z",
            "description": "Automatically added (via 2bc04687c3972a6820cc851dd06442e9)",
            "pattern": "[file:hashes.SHA256 = 'e28b45b07a2417f3938142cc42101be92ab60ba4196d1b35eae0d4bc4e17c61f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67866-8450-42cf-887c-49be950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:26.000Z",
            "modified": "2016-02-19T02:05:26.000Z",
            "description": "Automatically added (via 2c9fec93b8a4b74a2288d379a292ea98)",
            "pattern": "[file:hashes.SHA256 = '7b331041a69d472482459cd5e205db0c4577837c9d5d6bbb21e0f3c73a56970a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6786c-c69c-4c25-b94d-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:32.000Z",
            "modified": "2016-02-19T02:05:32.000Z",
            "description": "Automatically added (via 2ca5f0afed7d2062c177b155637b6a55)",
            "pattern": "[file:hashes.SHA256 = 'ed1ed1c45e26b7b49bcd5c053d4f5cc2204a74427b9b0469d881a5819f0f13d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67872-183c-42fd-9a81-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:38.000Z",
            "modified": "2016-02-19T02:05:38.000Z",
            "description": "Automatically added (via 2cd9e6a0e9e5254ab2aec657d23da276)",
            "pattern": "[file:hashes.SHA256 = '6bbd4fa96d05a48f5439d0b3ef61441fa5a83f949ed200bac9f3628c31d59dab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67878-700c-4af3-9973-4c21950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:44.000Z",
            "modified": "2016-02-19T02:05:44.000Z",
            "description": "Automatically added (via 2d388d76a81f0b313681684ce01853f7)",
            "pattern": "[file:hashes.SHA256 = '6ca9389b6161a3e78beda69afa9f4643b6fa8a5476d7c2be7423f8aa18f531a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6787e-900c-420d-9a29-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:50.000Z",
            "modified": "2016-02-19T02:05:50.000Z",
            "description": "Automatically added (via 2d47771b022d104bd6a4389de2533511)",
            "pattern": "[file:hashes.SHA256 = 'eb624158dd5d9575f02edc2e92624b15724b6578d6d86122fd9d1cb0e5330dbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67884-5878-446d-88dd-4c7e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:05:56.000Z",
            "modified": "2016-02-19T02:05:56.000Z",
            "description": "Automatically added (via 2d4bd3cb38b50f345b632874ff823610)",
            "pattern": "[file:hashes.SHA256 = '8da260a183b41bdd959015fc4ae45da4951e8f818ebe2c721f3e97162247d352']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:05:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6788a-da60-4757-a187-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:02.000Z",
            "modified": "2016-02-19T02:06:02.000Z",
            "description": "Automatically added (via 2d667da6f04ad8ebb0f34c662f513ae2)",
            "pattern": "[file:hashes.SHA256 = 'b69c842e598a93269d596c8322aa8271c20215de538a7208ad807a7d0ee64eef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67890-e7e8-40e2-9798-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:08.000Z",
            "modified": "2016-02-19T02:06:08.000Z",
            "description": "Automatically added (via 2d8e4dbdd423a31dc6cdb21ae15c5f18)",
            "pattern": "[file:hashes.SHA256 = '05038d35f7c4b38f1746676c303c037a3ed9583a81f91c13b7d3b1e3f72031dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67897-1838-4b18-b6b6-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:15.000Z",
            "modified": "2016-02-19T02:06:15.000Z",
            "description": "Automatically added (via 2dc5b92a2ed56478f331b59be1d496e9)",
            "pattern": "[file:hashes.SHA256 = '034ba2c46138fbee803526eef2ad1d8f7a21cfd042f61e9e5ef0b2e4bb59799d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6789d-a1e0-4cb4-a073-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:21.000Z",
            "modified": "2016-02-19T02:06:21.000Z",
            "description": "Automatically added (via 2dd41d93743ba6f2014c41b8f6f54c72)",
            "pattern": "[file:hashes.SHA256 = 'b64b8baa74adbaf442d9e39704e9fddc40d32e7b2b97e5fbe9f498f143db5e59']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678a3-27a8-40c2-bdc5-490c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:27.000Z",
            "modified": "2016-02-19T02:06:27.000Z",
            "description": "Automatically added (via 2df5025256fa9086e6686e776e9b5af8)",
            "pattern": "[file:hashes.SHA256 = '31af6232af49d9be48e353ec59b11675b00481bd5b57e803ebc39edd5ecc51c3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678a9-96bc-482d-8815-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:33.000Z",
            "modified": "2016-02-19T02:06:33.000Z",
            "description": "Automatically added (via 2e1bcedabf1d3df7342b7070541607bf)",
            "pattern": "[file:hashes.SHA256 = '634db74ff2cdf41850c1e5cac1d88d7e6f2e923337182946a63027d49489727e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678af-3d00-48aa-9cb0-403e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:39.000Z",
            "modified": "2016-02-19T02:06:39.000Z",
            "description": "Automatically added (via 2e463b76aca46b41dbcb328a0116616a)",
            "pattern": "[file:hashes.SHA256 = 'a9d663304a9c56e6a15d0cbcedc0bf5555e36f6258781bcdad94dc074fe955ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678b6-e380-4947-b2f2-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:46.000Z",
            "modified": "2016-02-19T02:06:46.000Z",
            "description": "Automatically added (via 2eb8652be1025e8e130519d379852292)",
            "pattern": "[file:hashes.SHA256 = '439dfdd5d8277819715da4d35466049142dd81058cb2e3452ba3b795d54f4532']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678bc-6fe4-424c-917d-4c7c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:52.000Z",
            "modified": "2016-02-19T02:06:52.000Z",
            "description": "Automatically added (via 2ec5ab9bf3a990c29b2c1df4dfaf8c0d)",
            "pattern": "[file:hashes.SHA256 = '9a49efd374a270cd1065bb0c27bf14d25ebaee7eafa6cf50e5aeb55858224399']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678c3-de08-4087-8bfe-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:06:59.000Z",
            "modified": "2016-02-19T02:06:59.000Z",
            "description": "Automatically added (via 2f2d829127e98e9a92eb012473aa4322)",
            "pattern": "[file:hashes.SHA256 = '21457fb079fd0fc3c67ca0a16d59d0f2111a5dfb613cba5120463bda2a6b8c52']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:06:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678ca-1940-48c7-b559-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:06.000Z",
            "modified": "2016-02-19T02:07:06.000Z",
            "description": "Automatically added (via 2f3ebd6738431016a9aea0586a01603d)",
            "pattern": "[file:hashes.SHA256 = '5a73d7b6720b0e11598ea20f5070686c05a47fe26d1c680e98a53b541ab95e4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678d1-0f00-4ec7-8c39-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:13.000Z",
            "modified": "2016-02-19T02:07:13.000Z",
            "description": "Automatically added (via 2f73aa23923f2229c3492fa48e0df625)",
            "pattern": "[file:hashes.SHA256 = '1e290d46302bcad249fd48270ad22843e845317b5a5ab8de416751568dc5a3a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678d8-6cf4-4480-8bda-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:20.000Z",
            "modified": "2016-02-19T02:07:20.000Z",
            "description": "Automatically added (via 2fa4b346f9d431e8bbfa63e6f1dcf6a1)",
            "pattern": "[file:hashes.SHA256 = '2243df2e91e114754b72250f4bb753edfc6d6dc6518656cad0890f743dca22f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678df-b3cc-4e21-b7f5-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:27.000Z",
            "modified": "2016-02-19T02:07:27.000Z",
            "description": "Automatically added (via 3010b4c11b089c73d70089a6675b830a)",
            "pattern": "[file:hashes.SHA256 = '29bfd2a27027ef689f43b576960221d333d692e40b5362f43b30149bb16be8f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678e5-cbfc-4509-8e79-43e3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:33.000Z",
            "modified": "2016-02-19T02:07:33.000Z",
            "description": "Automatically added (via 306478a90a524ae0b08a870e466733ec)",
            "pattern": "[file:hashes.SHA256 = 'd38f756c45e66122a2d22eedbcb2775730051b32b9af3e5084660aceeadc68fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678ec-0aa0-40b7-a0da-4808950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:40.000Z",
            "modified": "2016-02-19T02:07:40.000Z",
            "description": "Automatically added (via 30b9fda5453b5dceb1c3ce8e43ff043a)",
            "pattern": "[file:hashes.SHA256 = '1fa9f08399b93bcb322f27db1cffd6f67acd90bed69f2c190b9202a8843ed08d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678f2-bba0-49af-810e-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:46.000Z",
            "modified": "2016-02-19T02:07:46.000Z",
            "description": "Automatically added (via 30f22bc61773c9733e6c8685531c5534)",
            "pattern": "[file:hashes.SHA256 = '5fce14d84df247511af5ef1a38e7d5dc83ed23bf3958250ace75c4ad63bb7e69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678f9-4e5c-4d32-859f-4ae9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:53.000Z",
            "modified": "2016-02-19T02:07:53.000Z",
            "description": "Automatically added (via 310b705bd1073e629d57d5e80a31bfec)",
            "pattern": "[file:hashes.SHA256 = '586fb6a66c07b39795d3d8141fa119d80feed8388d5eed62c43233915d31d2e8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c678ff-2d70-482f-9aab-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:07:59.000Z",
            "modified": "2016-02-19T02:07:59.000Z",
            "description": "Automatically added (via 31289053b668188afd1837d15ed121dc)",
            "pattern": "[file:hashes.SHA256 = 'cbd5b5fe4aa49c4df183ef347650c58f9c74087737cff81d9c8fe64a1a9c025e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:07:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67906-5a64-4563-805f-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:06.000Z",
            "modified": "2016-02-19T02:08:06.000Z",
            "description": "Automatically added (via 313fa0e143ae458e67664493ad83cbca)",
            "pattern": "[file:hashes.SHA256 = '78555e0c210204383b926f1fac68d147a3fbec399a36301aa3f9ade61bc38a93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6790c-39a0-40e1-9789-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:12.000Z",
            "modified": "2016-02-19T02:08:12.000Z",
            "description": "Automatically added (via 31b4f00a9b9f097caa4652c2d929751a)",
            "pattern": "[file:hashes.SHA256 = '952849ee1dcff84f031ea2912ca65e70eb96cbb2f3c857598ca8eeaad3f1eb97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67913-67d4-4af2-bed0-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:19.000Z",
            "modified": "2016-02-19T02:08:19.000Z",
            "description": "Automatically added (via 31ea54cbb755ef402ecfb3f083ab0117)",
            "pattern": "[file:hashes.SHA256 = '567046ff0a04c19a8e563481bfd0f06d176616c062bfdf0c5ab297ded5ebbe57']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6791a-f5bc-419f-9646-46ae950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:26.000Z",
            "modified": "2016-02-19T02:08:26.000Z",
            "description": "Automatically added (via 32425fd03bd49a8d5094da1bb2bf6754)",
            "pattern": "[file:hashes.SHA256 = 'c297c73455e91bc93f80f1434f09037c3edd80cb83c54db4caafdc8c94425da9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67920-7cb0-4382-ba70-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:32.000Z",
            "modified": "2016-02-19T02:08:32.000Z",
            "description": "Automatically added (via 32edb5bd2a52ffbcaec77796069aabca)",
            "pattern": "[file:hashes.SHA256 = 'fba5c2717d699cd0c7465e7e8caea9132aea080932d20878d8ecda7a98783586']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67927-7f1c-4ed7-8cbb-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:39.000Z",
            "modified": "2016-02-19T02:08:39.000Z",
            "description": "Automatically added (via 32f0580e7e345623e9b440268fa367ef)",
            "pattern": "[file:hashes.SHA256 = 'd9a8ab6c7e6b47537479fc9f9b9d2b16d78f10a0a3d44d4eb7bf0d336468734e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6792d-a41c-419f-afd4-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:45.000Z",
            "modified": "2016-02-19T02:08:45.000Z",
            "description": "Automatically added (via 33306b3a847f45e642b5f2ef8312217a)",
            "pattern": "[file:hashes.SHA256 = '318f51e3c93134259ffc9e52792eeaa62d73843251837acc57c26f2273cde3f4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67934-7c50-4ed1-a967-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:52.000Z",
            "modified": "2016-02-19T02:08:52.000Z",
            "description": "Automatically added (via 33761cfa58cdaad0bb0f8c4abddc8397)",
            "pattern": "[file:hashes.SHA256 = 'b90f6cd9bda9f3d562debf4f24ebac0d3bb0977405cf5b26eb69c35680ba7ebd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6793a-e644-4fba-9460-49d7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:08:58.000Z",
            "modified": "2016-02-19T02:08:58.000Z",
            "description": "Automatically added (via 33816327296234eb4bd34cdad11fb501)",
            "pattern": "[file:hashes.SHA256 = 'e4d5308e8f1536856e82f1b6edcb528477ecd5666fff91668478fb60a0e9f1f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:08:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67941-1508-4438-a066-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:05.000Z",
            "modified": "2016-02-19T02:09:05.000Z",
            "description": "Automatically added (via 3390042b3fad4169f10b6ae66326c72f)",
            "pattern": "[file:hashes.SHA256 = '3f99f2c28c3e553a0f0212bda9e08841f6cf6638d8ab790ac12b617880179410']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67948-f570-4bf8-ba84-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:12.000Z",
            "modified": "2016-02-19T02:09:12.000Z",
            "description": "Automatically added (via 33b46d15605a29f56506d1389ad413d3)",
            "pattern": "[file:hashes.SHA256 = '4e172c4c22fabcf26c814c1762b417aa024d743aabfe56faabab8a7add70ba35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6794e-2160-4502-9223-4af8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:18.000Z",
            "modified": "2016-02-19T02:09:18.000Z",
            "description": "Automatically added (via 33c68e5e078ff94a8399829618ad6c1e)",
            "pattern": "[file:hashes.SHA256 = '8d6cb73713109fa60d21589a0c2c2a466f16b8a7d8d3bbb984cffbe09f6b014b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67955-7128-4b98-9083-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:25.000Z",
            "modified": "2016-02-19T02:09:25.000Z",
            "description": "Automatically added (via 33ea3086c803dbaf8f668f9198aa20ca)",
            "pattern": "[file:hashes.SHA256 = '0736c7a450b0366e53f72f489447d242ccc06641c9fa4eff0dcba689f282cb0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6795c-146c-41d7-a4cc-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:32.000Z",
            "modified": "2016-02-19T02:09:32.000Z",
            "description": "Automatically added (via 34940778cd3a7d766874e571f62729b4)",
            "pattern": "[file:hashes.SHA256 = '1a9eb6fa1c05b074a8b27694fd527ab6fcbcbf9ec6da9b346a11c4e9ffd83054']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67963-b008-435e-b19b-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:38.000Z",
            "modified": "2016-02-19T02:09:38.000Z",
            "description": "Automatically added (via 34a01014bc61ee99120d4fcdda9525c8)",
            "pattern": "[file:hashes.SHA256 = '64fc3e8220d9344277994457aced441e5ce541f4086a28e9f5aa567b3452c224']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67969-1790-4b94-84fd-4ef9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:45.000Z",
            "modified": "2016-02-19T02:09:45.000Z",
            "description": "Automatically added (via 34a5c260069e1df15efc00a382bd6740)",
            "pattern": "[file:hashes.SHA256 = '0dbad0a69341c341b97b24fc6593ddcbe8b6122a1cdbab675dc9d14051898b79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67970-d4e4-47eb-8621-45de950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:52.000Z",
            "modified": "2016-02-19T02:09:52.000Z",
            "description": "Automatically added (via 34a8af47c96bc6090aaaa12cda1fd3a8)",
            "pattern": "[file:hashes.SHA256 = '14eb272c51fc587b514d6c2dd0f01babe640dd92978a12dadc9fea267795233f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67977-a908-45e0-87b2-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:09:59.000Z",
            "modified": "2016-02-19T02:09:59.000Z",
            "description": "Automatically added (via 34de76a33b71700f9e006f5a2a20cc48)",
            "pattern": "[file:hashes.SHA256 = '1024df310e0f6abcbdb6abfbdf37442e24bac6d22a352712a636e850864d9a24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:09:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6797d-7080-48d7-b9ff-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:05.000Z",
            "modified": "2016-02-19T02:10:05.000Z",
            "description": "Automatically added (via 34e27fe3bc8d4cb5f5c46720b1043b11)",
            "pattern": "[file:hashes.SHA256 = '0142dae077111c98dbe1ce22211708c7dabddb3421ea9af4a6e12ec8400b1046']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67984-f6ac-4506-98be-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:12.000Z",
            "modified": "2016-02-19T02:10:12.000Z",
            "description": "Automatically added (via 35260e1c488da520cec1b6115367c016)",
            "pattern": "[file:hashes.SHA256 = '36bde9a0ceda0c5362ece9713180eb1d560565efd43ad28b81b48ce94bab3903']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6798b-b9c4-4384-be79-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:19.000Z",
            "modified": "2016-02-19T02:10:19.000Z",
            "description": "Automatically added (via 357b7caa52dadab6f22dc0c46811956e)",
            "pattern": "[file:hashes.SHA256 = '7c20fde0794017b3b5b4e7b375f6638e92d605dcb0aa9716126bc7252af04cd2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67992-4040-4c9c-83d7-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:26.000Z",
            "modified": "2016-02-19T02:10:26.000Z",
            "description": "Automatically added (via 35b896f6a11e8b22db9c6f3fece1b0dc)",
            "pattern": "[file:hashes.SHA256 = 'c97456cb76c8bc9f072b1ce31f6239b8659b692cd6aef3b480a227a19c1c4a04']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67998-ec6c-42cd-9132-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:32.000Z",
            "modified": "2016-02-19T02:10:32.000Z",
            "description": "Automatically added (via 35f5be9282e424d5ad45b0b757872ec1)",
            "pattern": "[file:hashes.SHA256 = '1a6730dff9bf74c781f3dd248f039f477dac8c13443fec752a5344384b32ed99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679a0-ab70-442a-be09-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:40.000Z",
            "modified": "2016-02-19T02:10:40.000Z",
            "description": "Automatically added (via 3622d1f8299daf9dabe997df1b3cd86e)",
            "pattern": "[file:hashes.SHA256 = '7389125651c76fe792bc302ab0d00248eefc29f53d5b1edb104917d6699442a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679a7-f978-4f64-9f6b-4ccf950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:47.000Z",
            "modified": "2016-02-19T02:10:47.000Z",
            "description": "Automatically added (via 3632dbc3e51c18546e4b4f34c19a573c)",
            "pattern": "[file:hashes.SHA256 = 'e7f005a930f2db926e16c13460fdfbed426cf5ba61537efb7aef95e3beb798ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679ae-ffdc-4061-8978-4990950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:10:54.000Z",
            "modified": "2016-02-19T02:10:54.000Z",
            "description": "Automatically added (via 36c3069f6dd68ce4282fe473f602f33b)",
            "pattern": "[file:hashes.SHA256 = '7c501ae1daa0fcbc738dc619e47749286f9a1b4d87be18a9ec71bd34029fe122']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:10:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679b6-2cac-4cdb-9359-4088950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:02.000Z",
            "modified": "2016-02-19T02:11:02.000Z",
            "description": "Automatically added (via 36e86735980b63cd796b76bd45c03d31)",
            "pattern": "[file:hashes.SHA256 = '36d40bca658443511d9421066ef64eaaca323b1eb5031c2c60584f611b95df8b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679bd-8138-46a5-9b8e-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:09.000Z",
            "modified": "2016-02-19T02:11:09.000Z",
            "description": "Automatically added (via 36fe5942ca73ba7541bc638f7aa14686)",
            "pattern": "[file:hashes.SHA256 = '54deaeb7710c03135df57c75ee70dedae83f11e7280e6e986b07a9259510c452']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679c4-86d0-49fc-8c5b-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:16.000Z",
            "modified": "2016-02-19T02:11:16.000Z",
            "description": "Automatically added (via 371189b677b4b8b32d3f43c219d40c0d)",
            "pattern": "[file:hashes.SHA256 = 'ad6a714750f8ac1d6dd44d09819fcace51c4ac968066d96cd0482552aef90e16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679cb-d900-41de-b10b-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:23.000Z",
            "modified": "2016-02-19T02:11:23.000Z",
            "description": "Automatically added (via 37127c90db47ac085448df8e01c057c6)",
            "pattern": "[file:hashes.SHA256 = '8550a716ac877ad56d0b89680a798a8fc643a59445843c6a572cfc2e3a154981']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679d2-6a64-4986-a127-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:30.000Z",
            "modified": "2016-02-19T02:11:30.000Z",
            "description": "Automatically added (via 3738a7bad42df329f568dbf960497ba3)",
            "pattern": "[file:hashes.SHA256 = '21c1b94478f9cdba17353502f9775e5a1775f2a051bd5cc387685c62dd715c11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679d9-0d94-4d29-8747-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:37.000Z",
            "modified": "2016-02-19T02:11:37.000Z",
            "description": "Automatically added (via 375308d79df161b737f70b2da8973293)",
            "pattern": "[file:hashes.SHA256 = '7a504cb7259dda7ac6f7d253d7d09c51ec0431b27505aa9a7243e604869d1de8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679df-349c-4f90-b39f-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:43.000Z",
            "modified": "2016-02-19T02:11:43.000Z",
            "description": "Automatically added (via 375f6b5ecfbb14edfec9b421d70ce972)",
            "pattern": "[file:hashes.SHA256 = '6d6c077059390241152664ff5b9c7e59eb83a1e1697358a48f46e36e416380af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679e6-4144-440d-8d3b-40ef950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:50.000Z",
            "modified": "2016-02-19T02:11:50.000Z",
            "description": "Automatically added (via 3772d766dc5b07a2f97d96b2327d49da)",
            "pattern": "[file:hashes.SHA256 = '40d767d2e413c8ee79af3eecc43a978266c09a218e32686d13a090ba043c231d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679ed-7688-42bb-9897-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:11:57.000Z",
            "modified": "2016-02-19T02:11:57.000Z",
            "description": "Automatically added (via 37740297c036c61b59717cb3b926cfe0)",
            "pattern": "[file:hashes.SHA256 = 'cd409fe30bb87dccd68fdb168f7ee2fcda36ae5b25dc2e59a1dcf9aab593333b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:11:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679f4-5e98-402f-8926-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:04.000Z",
            "modified": "2016-02-19T02:12:04.000Z",
            "description": "Automatically added (via 38527f7f7024bc15a6edc953225ccf88)",
            "pattern": "[file:hashes.SHA256 = '08bfcf75b2d221456da829c4819bb5fd8334f9699bc8633778e90c4b0592842c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c679fb-af94-4366-ae6e-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:11.000Z",
            "modified": "2016-02-19T02:12:11.000Z",
            "description": "Automatically added (via 3872ebf4a51cd9a53837a1f39ff39c96)",
            "pattern": "[file:hashes.SHA256 = 'd3457afb0517d832afeda9e2160b3123704b6224d432074076916e9d50249150']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a03-d0cc-4a4b-b674-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:19.000Z",
            "modified": "2016-02-19T02:12:19.000Z",
            "description": "Automatically added (via 38e7a6b63b382a71d04c0ff670b8ded5)",
            "pattern": "[file:hashes.SHA256 = '46fb51cfb48898797daffdc4cfdd9c76f8a9427f3460510982209aba59da4aca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a0a-5708-40b2-a8f1-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:26.000Z",
            "modified": "2016-02-19T02:12:26.000Z",
            "description": "Automatically added (via 3902b8681e54f6c2b789824b3d79a6fe)",
            "pattern": "[file:hashes.SHA256 = '4b8e732ac8b8297ea26a0d31357e0b66b0920fd5f2de91b77d43fcc6e1e77efd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a11-dc9c-49ec-afa1-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:33.000Z",
            "modified": "2016-02-19T02:12:33.000Z",
            "description": "Automatically added (via 394024c648004352ed1a8f2d6fd5ff71)",
            "pattern": "[file:hashes.SHA256 = 'b0e9737447ac76cbf91717bc51b2938771207eb5b8fc0ca7516ecaf5a586e953']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a18-bdc8-4c52-a822-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:40.000Z",
            "modified": "2016-02-19T02:12:40.000Z",
            "description": "Automatically added (via 394519e00ffb584c122e31058cffcd91)",
            "pattern": "[file:hashes.SHA256 = '7a1bb40a9a65d50564955a468fa2c00db2ab9ce5a223bc28379d98c6350e2ee9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a1f-49d0-430e-804e-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:47.000Z",
            "modified": "2016-02-19T02:12:47.000Z",
            "description": "Automatically added (via 394a08a5f52e63d43650e53ecc31daf9)",
            "pattern": "[file:hashes.SHA256 = 'd676cab228a7167b6d52a4d4062d5968211fad8ccef01409aff9743f56a0e5d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a26-31a8-4829-8232-4371950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:12:54.000Z",
            "modified": "2016-02-19T02:12:54.000Z",
            "description": "Automatically added (via 395c15bcd7ea066fa1446d02fb769f33)",
            "pattern": "[file:hashes.SHA256 = 'a0d528f94718fa5777af4edb8d1532fd101d41ab6a75db8f94cff5a9217cf784']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:12:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a2e-5cc4-4656-9862-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:02.000Z",
            "modified": "2016-02-19T02:13:02.000Z",
            "description": "Automatically added (via 3980b99cade8cf6a1f7b2a745a31a7f6)",
            "pattern": "[file:hashes.SHA256 = '42920b717e8bb21d81b80824e8285f862292e20a941343cb648b0360ca0cd3d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a35-c1e0-4d43-b8e5-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:09.000Z",
            "modified": "2016-02-19T02:13:09.000Z",
            "description": "Automatically added (via 39becae963d67f0e2b33d3b1ae7e477a)",
            "pattern": "[file:hashes.SHA256 = 'd4ace1a73b21890f9eb47839bf9d1e366df45ff5b9cb22ae53217c13eff59624']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a3c-66fc-43fa-9992-47bb950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:15.000Z",
            "modified": "2016-02-19T02:13:15.000Z",
            "description": "Automatically added (via 39ec5d9cd9377a3c346c7f41ba943c9f)",
            "pattern": "[file:hashes.SHA256 = 'fa50a70b2d573309cbf06333d34af1093722f72c37cb9a1e332f6525add32a6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a43-b260-49dd-99f7-4ae9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:23.000Z",
            "modified": "2016-02-19T02:13:23.000Z",
            "description": "Automatically added (via 39f4a94d6036ace24cd7a49067a57f71)",
            "pattern": "[file:hashes.SHA256 = '32b3bd8bc4affef7931723bff81abde87d403ba591ae94b729d762fd3147812b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a4a-19d0-4e15-ace7-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:30.000Z",
            "modified": "2016-02-19T02:13:30.000Z",
            "description": "Automatically added (via 39fc6d33317529e6228d6f7fdfecebf2)",
            "pattern": "[file:hashes.SHA256 = '8adbd323e26406808c18f513a07a6a81c97c93cde225ed485594f4dc1a39ff11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a51-dddc-4550-9a1a-4a79950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:37.000Z",
            "modified": "2016-02-19T02:13:37.000Z",
            "description": "Automatically added (via 3a1884d55a66ee7fb3e328fb186b3360)",
            "pattern": "[file:hashes.SHA256 = '23bb981e81430352d9a3cefd9253106300b50edbfdde5ce7f4bdc6a7609889b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a57-370c-465a-8510-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:43.000Z",
            "modified": "2016-02-19T02:13:43.000Z",
            "description": "Automatically added (via 3a5368a25f03013733136d3154d9775f)",
            "pattern": "[file:hashes.SHA256 = 'eb0336407acf5a98ac56812e07d9044bece9e406a9ac799228b6cec5a352a945']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a5e-ce58-4159-b828-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:50.000Z",
            "modified": "2016-02-19T02:13:50.000Z",
            "description": "Automatically added (via 3a64efbaf65a997c6ce513feb7f27c98)",
            "pattern": "[file:hashes.SHA256 = '8c4d01af1e2c6f1f653c784b338b263f247129547e8ff9945d54ef88f6e62ef1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a65-bcfc-46c7-9f0f-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:13:57.000Z",
            "modified": "2016-02-19T02:13:57.000Z",
            "description": "Automatically added (via 3b0564243894f4c2a36b21c949fd422e)",
            "pattern": "[file:hashes.SHA256 = '94dc82cd7b5361282aa521c0801099f3571b9e26dc42bf48a5b22dcf5a299e14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:13:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a6b-d358-4739-98a7-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:03.000Z",
            "modified": "2016-02-19T02:14:03.000Z",
            "description": "Automatically added (via 3b0b5b88bf297f1b17763f6bfbc027c1)",
            "pattern": "[file:hashes.SHA256 = 'f7320f3619ed370c0371dbaf53bd2bcd4630df83a0a8816f96126f2cac72b715']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a72-6500-4523-a3a0-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:10.000Z",
            "modified": "2016-02-19T02:14:10.000Z",
            "description": "Automatically added (via 3b6e5a078a1ef33ae542e229f7f16b29)",
            "pattern": "[file:hashes.SHA256 = '958af66af906eef2aab80ba6258109095c0244f187d3b2ea956d103f04a8d923']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a79-08ac-482b-8c4a-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:17.000Z",
            "modified": "2016-02-19T02:14:17.000Z",
            "description": "Automatically added (via 3bca2549a463597d21fd7c76cb609543)",
            "pattern": "[file:hashes.SHA256 = '4f55a8dc65296e36b2500273ce34e64a746543796f48e49cc0b75a1ceb1df2b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a80-afd4-47ad-b6b9-4a71950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:24.000Z",
            "modified": "2016-02-19T02:14:24.000Z",
            "description": "Automatically added (via 3c20fd354f220985e53161b7d626ed33)",
            "pattern": "[file:hashes.SHA256 = '914c7624a68a9a1df6bf0306f51144247d6bc7441648689775867af0e912fb8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a87-f13c-45ea-9466-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:31.000Z",
            "modified": "2016-02-19T02:14:31.000Z",
            "description": "Automatically added (via 3c4c4d788572a2c3764890d9212b108b)",
            "pattern": "[file:hashes.SHA256 = 'a990622dcf104c8721ddcbf04b1d5bad7457d0337937ee986378af677e002921']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a8e-b788-40b6-a5cf-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:38.000Z",
            "modified": "2016-02-19T02:14:38.000Z",
            "description": "Automatically added (via 3c58279f2f4e40ebf97745bab8dcf52b)",
            "pattern": "[file:hashes.SHA256 = '148f61f0e95dde2f5432fbe6fdc20ff64d5e382e0c530859b0c28733908dc74f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a95-9e60-421c-ad17-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:45.000Z",
            "modified": "2016-02-19T02:14:45.000Z",
            "description": "Automatically added (via 3d0ad5ca44d4497aeb542c0eec77b7bf)",
            "pattern": "[file:hashes.SHA256 = '56033bd4a6dc11e22b18da7b46290eaed766bc725b87b0107472cae2b97b702e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67a9c-0734-4723-a9d1-4ca4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:14:52.000Z",
            "modified": "2016-02-19T02:14:52.000Z",
            "description": "Automatically added (via 3d3f740f7b9e3cfad729b208e3d43fa5)",
            "pattern": "[file:hashes.SHA256 = '9f839caae0b2209d9cd3a8447e5723f5c03612e181a70a51794d0ef7a503387c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:14:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67aa4-8aa4-4162-8619-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:00.000Z",
            "modified": "2016-02-19T02:15:00.000Z",
            "description": "Automatically added (via 3db731ee0837b67382b9b0e7ed147e80)",
            "pattern": "[file:hashes.SHA256 = '7a69dd2cd9cc8a54ccd9c26f1c9a5f27f3a7b6ad6fabda0df395a1d63a49234f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67aab-3774-4767-832a-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:07.000Z",
            "modified": "2016-02-19T02:15:07.000Z",
            "description": "Automatically added (via 3dc6f36a407edb43f6489ae6ae2c0bc7)",
            "pattern": "[file:hashes.SHA256 = 'a12d9ccf57976a8e52c3edf8f4f1088b1a31b46898122b14da4d02dfa60b92d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ab2-2bc8-4902-b4ca-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:14.000Z",
            "modified": "2016-02-19T02:15:14.000Z",
            "description": "Automatically added (via 3debf0c9b2d98b02333823993b218018)",
            "pattern": "[file:hashes.SHA256 = '4aa46e84b1e4568fddad7034c970eecd0f5e77cd87ea507daa8a2d110503be5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ab9-4774-4620-8611-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:21.000Z",
            "modified": "2016-02-19T02:15:21.000Z",
            "description": "Automatically added (via 3e1eb2eff331cf7493ba04dd44aa3e37)",
            "pattern": "[file:hashes.SHA256 = 'e5d6508ec33dbc9df6ebbe984aaa9f384c7cb3c21e4000275fbdbfc365a8c8ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ac1-ce80-4b4b-be92-45b9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:28.000Z",
            "modified": "2016-02-19T02:15:28.000Z",
            "description": "Automatically added (via 3ef04635af870d5af8f700f40ff37803)",
            "pattern": "[file:hashes.SHA256 = '4653a883bad7e1224f77801126f3d83815fc5ea7e57456926a563888809f6138']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ac8-9dc8-4699-a10c-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:36.000Z",
            "modified": "2016-02-19T02:15:36.000Z",
            "description": "Automatically added (via 4005268f70b792e3e9d97d36f6ebfaea)",
            "pattern": "[file:hashes.SHA256 = '53d9a68e19922bf609cdfc50c1f65919a2803576d8f48614a107ec559a10f18f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ace-5500-4f8c-9cb9-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:42.000Z",
            "modified": "2016-02-19T02:15:42.000Z",
            "description": "Automatically added (via 40260ee6bccbcab5323b7b1da0a8fee6)",
            "pattern": "[file:hashes.SHA256 = '8b4caf3214e9c5f206f90813188cef577d5430449606bc21939f46973c7f9c68']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ad5-2e88-4b5f-95ca-4057950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:49.000Z",
            "modified": "2016-02-19T02:15:49.000Z",
            "description": "Automatically added (via 403df5e5cb949e2d9e95e8001a5c810a)",
            "pattern": "[file:hashes.SHA256 = '81345ebe83fcfacd7579b561e2a1808924b7ea0831dcf8cbf636639bf3099dcb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67adc-7a58-48f4-be31-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:15:56.000Z",
            "modified": "2016-02-19T02:15:56.000Z",
            "description": "Automatically added (via 40563315219a686ed41a0a11526143c1)",
            "pattern": "[file:hashes.SHA256 = 'b51ed13b5b4998c387d62e69d93d615a8d818a346d2517dba4969379ee7b5a29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:15:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ae3-6578-46cb-8a90-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:03.000Z",
            "modified": "2016-02-19T02:16:03.000Z",
            "description": "Automatically added (via 40c23be3b053d14bb0106652dc7790ed)",
            "pattern": "[file:hashes.SHA256 = '86cdecbcb54ec33d8426531c81a0abf061b721a32c984e9a31d740e80934e72c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67aea-1b54-4b57-86c5-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:10.000Z",
            "modified": "2016-02-19T02:16:10.000Z",
            "description": "Automatically added (via 40f4ca699ca50c20f3143a58cbf68fed)",
            "pattern": "[file:hashes.SHA256 = '61a85223fb6e2c998ed7f63fc50bd63be155b427f3cef4e55cc221491b95bee5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67af1-1670-458b-9266-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:17.000Z",
            "modified": "2016-02-19T02:16:17.000Z",
            "description": "Automatically added (via 4117e79af52472a42d31954473280c05)",
            "pattern": "[file:hashes.SHA256 = '8e8067c1516d1b7f601b44f1d9d12a402e947c4795a6920488be94f621ba8d37']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67af8-e0a4-453c-abd2-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:24.000Z",
            "modified": "2016-02-19T02:16:24.000Z",
            "description": "Automatically added (via 411c5275d117382da445032c7c67cd33)",
            "pattern": "[file:hashes.SHA256 = 'dd5cfd67f2d82d3d95f02a7e78832e55bd038aa5d35f51321f49088235bf7b58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67aff-1290-485b-b44c-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:31.000Z",
            "modified": "2016-02-19T02:16:31.000Z",
            "description": "Automatically added (via 412439e1b3195e0eb310a78515afcb36)",
            "pattern": "[file:hashes.SHA256 = '1d1fd879bb15738cbc1df60f8ff79dc4a0c19606cb5f38c12db3fa0e17bc841b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b06-eaa4-4381-a5c1-4691950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:38.000Z",
            "modified": "2016-02-19T02:16:38.000Z",
            "description": "Automatically added (via 4181cad84e7aa595781c6cdd13da9c08)",
            "pattern": "[file:hashes.SHA256 = '9671e855998bdf4b780c7e1a575e9a2f14acbed5d0b42b9eae45d0d17b0b275d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b0d-e0dc-4af7-8d44-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:45.000Z",
            "modified": "2016-02-19T02:16:45.000Z",
            "description": "Automatically added (via 41a628703f48532b88ba29d28a2f1af8)",
            "pattern": "[file:hashes.SHA256 = 'c8d79af34e4494427d9a2587e5fb118daa30b44ac5db8fd1528936f18858b9a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b14-8bb8-4b9b-ba31-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:52.000Z",
            "modified": "2016-02-19T02:16:52.000Z",
            "description": "Automatically added (via 41be2f40cb605b0a5c354642a642ca0f)",
            "pattern": "[file:hashes.SHA256 = 'c87ea522257fae83db24a2fccbf046b57b4e13d0cee677fd728b6fda413de302']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b1b-3c34-4ad3-b7d4-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:16:59.000Z",
            "modified": "2016-02-19T02:16:59.000Z",
            "description": "Automatically added (via 41f4d8d7c9edce3616f6bbcf92dafe40)",
            "pattern": "[file:hashes.SHA256 = '03b2dc896eb5cf50a855661e74e8bdcea8d5f7ab8dae4242700eb01d3f2c27b1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:16:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b22-aa74-4a15-bd49-4f25950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:06.000Z",
            "modified": "2016-02-19T02:17:06.000Z",
            "description": "Automatically added (via 421d225207844761c94464bd623bebdd)",
            "pattern": "[file:hashes.SHA256 = 'e4a75eb4da339516022a16a21107046a8a8686fff9cf1f96076ea64894a70639']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b29-4cb0-4836-9237-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:13.000Z",
            "modified": "2016-02-19T02:17:13.000Z",
            "description": "Automatically added (via 422d42a5f920ced6920e28537c5fe21f)",
            "pattern": "[file:hashes.SHA256 = 'e4d749eef07db0fdf3dcd82ab01bd84def50ab30205dd4e3402aff3a81411bf3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b30-3f9c-4074-ae62-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:20.000Z",
            "modified": "2016-02-19T02:17:20.000Z",
            "description": "Automatically added (via 426bc4e5e81976a9524fcc38577b1c37)",
            "pattern": "[file:hashes.SHA256 = '5954eae78bd47feb1a05f84b93b979d4980995154135324f02ff42e66e680aee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b37-27f0-4a4c-bcd3-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:27.000Z",
            "modified": "2016-02-19T02:17:27.000Z",
            "description": "Automatically added (via 427e08b0dfcff9d738bed44f044a90d9)",
            "pattern": "[file:hashes.SHA256 = '85b77c3ce955f76b3bc288c81de8bee1cc2547116029442a005445d9babc0041']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b3f-2d8c-46ff-8414-41b0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:35.000Z",
            "modified": "2016-02-19T02:17:35.000Z",
            "description": "Automatically added (via 42dd4f69a3513995d0656e28f1356d4c)",
            "pattern": "[file:hashes.SHA256 = '2fa8561382ba8e35b3f5ccd1efc3b133b56c2668042d8398307a6f9ae0f01127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b47-44c4-42b3-98ed-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:43.000Z",
            "modified": "2016-02-19T02:17:43.000Z",
            "description": "Automatically added (via 434330d8fc4ad7320642d458bb03275e)",
            "pattern": "[file:hashes.SHA256 = '9d4691b24138f243cdf866db3e034fef6e3cd1ddf35aaa0af23e693517618d03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b4f-6b74-456e-9a75-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:51.000Z",
            "modified": "2016-02-19T02:17:51.000Z",
            "description": "Automatically added (via 434e3c0f88dc2be141a636f13a52355f)",
            "pattern": "[file:hashes.SHA256 = '93e74a49ba4781d62407e880d76d2282672f3417759fe5e8bee87a8b93783790']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b56-33bc-4a80-9cc2-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:17:58.000Z",
            "modified": "2016-02-19T02:17:58.000Z",
            "description": "Automatically added (via 436d5e791b1b0ba846358830fad51fd8)",
            "pattern": "[file:hashes.SHA256 = '2762a2e8badcef7fbe0fdc223a1f4284b8933090489f3b28297488c3b2dccc31']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:17:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b5e-5eb8-4496-aa0f-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:06.000Z",
            "modified": "2016-02-19T02:18:06.000Z",
            "description": "Automatically added (via 43b7abd1ad30f9c8fdf79da3e089aed4)",
            "pattern": "[file:hashes.SHA256 = '393065a3879f701fcb933e9cdd7bfe813340d1afb83fd770f07d11295a0f77b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b65-67b4-41ed-888b-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:13.000Z",
            "modified": "2016-02-19T02:18:13.000Z",
            "description": "Automatically added (via 43c2f9a9472879c7757ff1b176bda126)",
            "pattern": "[file:hashes.SHA256 = '37d0a45ecf4194f2a2944395195fdf7798be9e385878ed19b6d431cabd43f18e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b6d-b698-4e5c-9737-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:21.000Z",
            "modified": "2016-02-19T02:18:21.000Z",
            "description": "Automatically added (via 43cf0209369f01e305dd0735a77d6d47)",
            "pattern": "[file:hashes.SHA256 = 'dbdb38d95992a296459d4559e06773850944b5684e9ccff925d1248264812cd7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b74-95cc-44b7-a58f-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:28.000Z",
            "modified": "2016-02-19T02:18:28.000Z",
            "description": "Automatically added (via 43d15954b82bb13928b71e538c036eb4)",
            "pattern": "[file:hashes.SHA256 = 'fdb32dd000e09c90780b62ba781645e03a28105a6123475cbfc829849f9f5485']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b7b-b92c-4e9d-9c96-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:35.000Z",
            "modified": "2016-02-19T02:18:35.000Z",
            "description": "Automatically added (via 440a9ce18b74a50ce8205229fe25ac4b)",
            "pattern": "[file:hashes.SHA256 = '58b2db545a9d4436f5613f7067e55ffa1c6cef0dfe34c4df2d5eeb99ab0eb8ae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b82-96bc-4122-980a-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:42.000Z",
            "modified": "2016-02-19T02:18:42.000Z",
            "description": "Automatically added (via 44517a5d6a7d9190e2b5239b5023f4c0)",
            "pattern": "[file:hashes.SHA256 = '0d2195ea34e09a262c2d8d4e739cf5b1944b045c6b94ee95505c49eb0d29be91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b8a-82b8-4656-8ceb-44bb950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:50.000Z",
            "modified": "2016-02-19T02:18:50.000Z",
            "description": "Automatically added (via 446a967645eeeef101a1056db607674a)",
            "pattern": "[file:hashes.SHA256 = 'ca3284d34848e57d6ad1ca388ebc28d2d820ef684d73af4ec72382d18f21b1a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b91-efc4-4a14-ae37-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:18:57.000Z",
            "modified": "2016-02-19T02:18:57.000Z",
            "description": "Automatically added (via 45060a92a013b78a1598adc39fedbfab)",
            "pattern": "[file:hashes.SHA256 = '5eb727b9cfc5028d1636faf1e6df5bbfe60877dc91e37b88bd1425d0855fe0c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:18:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b98-0800-4e68-b8a9-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:04.000Z",
            "modified": "2016-02-19T02:19:04.000Z",
            "description": "Automatically added (via 458116c14e5708beede32a2b2c1a89fb)",
            "pattern": "[file:hashes.SHA256 = '28ab7498b74624250e8b39828ecd6215e51390d1b590d01f1fa97d1edeaa3b4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67b9f-5f94-4c3e-8101-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:11.000Z",
            "modified": "2016-02-19T02:19:11.000Z",
            "description": "Automatically added (via 45cd03bb7e3b7adccdedb34edcba9acc)",
            "pattern": "[file:hashes.SHA256 = '828f1ea6bbf3260adbff4604119e1e2e875757ac2c3f667287d5c3b9cd200ff9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ba7-365c-4afb-ac21-4ec7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:19.000Z",
            "modified": "2016-02-19T02:19:19.000Z",
            "description": "Automatically added (via 4618dcc70400955218d3c58d96d566e0)",
            "pattern": "[file:hashes.SHA256 = 'a74538f4408d97ef28fd1761fdb4995bd5de4a7e58e4bdd8b9b0678f0052f7dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bae-21fc-4e51-a9aa-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:26.000Z",
            "modified": "2016-02-19T02:19:26.000Z",
            "description": "Automatically added (via 461e5e3b10c6ba2a02fe6e83ffc868d2)",
            "pattern": "[file:hashes.SHA256 = '4ff4cef0f26f2bd5416010783837a02708bf5871602cfa08b2996f736835710f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bb6-64d8-4215-9d8e-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:34.000Z",
            "modified": "2016-02-19T02:19:34.000Z",
            "description": "Automatically added (via 46644b9cc51e259321c6a13613c9541e)",
            "pattern": "[file:hashes.SHA256 = 'a637c3277026e4dd1840e1cbce66556ff0da1279eb68fc6f1dbc2b2392634e39']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bbd-9a24-476b-b9eb-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:41.000Z",
            "modified": "2016-02-19T02:19:41.000Z",
            "description": "Automatically added (via 466f256bf690e0a8d9e0590d933a70be)",
            "pattern": "[file:hashes.SHA256 = '6cf35a27a986e142753c54114f61acdd61f4a360792ac0044ef6f5228ac59b97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bc5-79e0-4434-9c89-4b60950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:49.000Z",
            "modified": "2016-02-19T02:19:49.000Z",
            "description": "Automatically added (via 46a201a237d3b2f8aa1106d1406911c5)",
            "pattern": "[file:hashes.SHA256 = '93a0984c051b1e1bd8c22d5466d1436341aa380aa79e3858073664dcbfc8740e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bcd-3130-4a96-b4ee-4eda950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:19:57.000Z",
            "modified": "2016-02-19T02:19:57.000Z",
            "description": "Automatically added (via 46c70ebc759bcc2feb43c2dfdf6f520b)",
            "pattern": "[file:hashes.SHA256 = '5531ee78b821b1b405352b841837ad650c369be1ceb430238a75537f44fd2243']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:19:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bd4-78f8-4a1e-b036-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:04.000Z",
            "modified": "2016-02-19T02:20:04.000Z",
            "description": "Automatically added (via 4788ac1775e30e1abb17b6672af2250e)",
            "pattern": "[file:hashes.SHA256 = '244a52831247d045786f90bda0302c6415a7f573985703b0ac17452e01a9ec7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bdb-0320-4986-8a94-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:11.000Z",
            "modified": "2016-02-19T02:20:11.000Z",
            "description": "Automatically added (via 47f15f2f75fc8eabd2c407fbf3016df7)",
            "pattern": "[file:hashes.SHA256 = 'cd5828517099f4029e9c4ea0d7547198b9115f137e7cb441723c3708f2b8c2f8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67be3-91c0-45cd-8715-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:19.000Z",
            "modified": "2016-02-19T02:20:19.000Z",
            "description": "Automatically added (via 47f6ce80997f529eec4abd4bb5b0d2c3)",
            "pattern": "[file:hashes.SHA256 = 'a13005bbedb66eb399a3032dc5ddbdaa191d13e36a1f8d5c6dacb0c17786245b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67be9-8378-4395-892e-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:25.000Z",
            "modified": "2016-02-19T02:20:25.000Z",
            "description": "Automatically added (via 4806944254ac14fef12c99e0dd421b1f)",
            "pattern": "[file:hashes.SHA256 = 'c5b5ce53d2a595ea3bcea8146c1426d1b3cb15b0d3646ba370e6a56110fd9a71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bf0-4340-4c49-8332-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:32.000Z",
            "modified": "2016-02-19T02:20:32.000Z",
            "description": "Automatically added (via 4841dc4c9a6c5da49d6cf59cdd18cdf7)",
            "pattern": "[file:hashes.SHA256 = '2654c1d77756a699cbaa32c9807be688cc59895409d1d34ed5e61c70fff3ef0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bf8-8ed0-4c03-82e6-4a2c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:40.000Z",
            "modified": "2016-02-19T02:20:40.000Z",
            "description": "Automatically added (via 489ae7a4ac8b3eb495bb3f88bc789da7)",
            "pattern": "[file:hashes.SHA256 = '19b896fb373ac1b7b39fe5e50e3487b0936297ac536cef9ae4c89abe6d2b4556']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67bff-1b3c-49fe-8d9d-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:47.000Z",
            "modified": "2016-02-19T02:20:47.000Z",
            "description": "Automatically added (via 48c2d1a86b99c47749e3cbdff0ef2059)",
            "pattern": "[file:hashes.SHA256 = '8a477b9a69c8546a9bdb449f9ffd3e19663a4fca7cd957a02f86c9e5efd4909a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c06-9d2c-41f1-ba41-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:20:54.000Z",
            "modified": "2016-02-19T02:20:54.000Z",
            "description": "Automatically added (via 48d38b0c3cd6e6c37c98164652d679d7)",
            "pattern": "[file:hashes.SHA256 = '6ad4c62ebc12feaeee2db28814a912173f1c2cb2de78c2a35c54f23e755ac993']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:20:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c0d-f14c-4be1-a221-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:01.000Z",
            "modified": "2016-02-19T02:21:01.000Z",
            "description": "Automatically added (via 48eea3cdb1f2523f59db45f2caeed2e9)",
            "pattern": "[file:hashes.SHA256 = '93ab830158c1d3699799fab7710e95d04c23a3440abb6b45a2bbd94dbb5325ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c15-7410-4782-99ed-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:09.000Z",
            "modified": "2016-02-19T02:21:09.000Z",
            "description": "Automatically added (via 490021f0f12540d96cfb885faf25ef45)",
            "pattern": "[file:hashes.SHA256 = 'b55eb4868b4927c8f6903c9f62751249223c79abd2c432145c6ec4e6884e1fd8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c1e-9350-4317-84b4-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:18.000Z",
            "modified": "2016-02-19T02:21:18.000Z",
            "description": "Automatically added (via 491c81c012b8cf245c25bdf742276443)",
            "pattern": "[file:hashes.SHA256 = '2f0135d391065d2856a5032bf63eb373cfc28775cd507e30ffb5fc209e13279c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c27-1b64-48a3-ba20-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:27.000Z",
            "modified": "2016-02-19T02:21:27.000Z",
            "description": "Automatically added (via 4933612c53100182e26d17f9d93afe55)",
            "pattern": "[file:hashes.SHA256 = '79103fca4ae63e1aa5794a5bb3ec91b32abd19bf4d0babc35039b8e7ca77e253']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c2f-afdc-4b81-a85b-4bd9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:35.000Z",
            "modified": "2016-02-19T02:21:35.000Z",
            "description": "Automatically added (via 49772e265fe6564d3ce77825d7a5f6d5)",
            "pattern": "[file:hashes.SHA256 = 'eb89c132b30bdec00a6a37c74adbdff6fa0019870863995261919e3ec6dbad45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c37-a7c8-4795-9cd0-43c3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:43.000Z",
            "modified": "2016-02-19T02:21:43.000Z",
            "description": "Automatically added (via 498def7a131a7d081095c04249258314)",
            "pattern": "[file:hashes.SHA256 = '91cc6f81a7c8a080d3479b9a78ed124cf8f2180137a9aea1ba52ff6e3922786e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c3e-a25c-463c-b5ed-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:50.000Z",
            "modified": "2016-02-19T02:21:50.000Z",
            "description": "Automatically added (via 49a06a2329a6642d2f9ae27074f33e0b)",
            "pattern": "[file:hashes.SHA256 = '3ae78aba706e8f6cce40004eed3138132a8eafa6a2f8d63cce43a74d4b8e25f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c46-5740-4fb4-bc8a-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:21:58.000Z",
            "modified": "2016-02-19T02:21:58.000Z",
            "description": "Automatically added (via 49ba823efd4dfe4b37529e35ffc9af2b)",
            "pattern": "[file:hashes.SHA256 = '118c09cbfac9c4252f1cb3bc07fcbd4b017b09f4b734d26b7fad573646e9bd63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:21:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c4e-2aa8-4c03-856d-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:06.000Z",
            "modified": "2016-02-19T02:22:06.000Z",
            "description": "Automatically added (via 49d4311f72098e0c8ecf8f7c4346c008)",
            "pattern": "[file:hashes.SHA256 = '20a28052ccfff21d2c8e6bf63c33ae41e020a4a4ace380941a58a78f069d4e2c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c56-3954-4b7c-9aec-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:14.000Z",
            "modified": "2016-02-19T02:22:14.000Z",
            "description": "Automatically added (via 49d5de3215be492fc9aa71427aa0b1a7)",
            "pattern": "[file:hashes.SHA256 = '4e2cad0ee27b30b9b3f22c312be5e6d3371bf20e6d9137ce47f2f8cec458573a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c5e-9810-4fa7-b58a-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:22.000Z",
            "modified": "2016-02-19T02:22:22.000Z",
            "description": "Automatically added (via 49f1edcd6ca7c0def16454bf9fd63d75)",
            "pattern": "[file:hashes.SHA256 = 'bf13d3cf20e68e9a7147e8da0d7157a32978fc3ab63177d26ea6a2469fabbc99']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c65-2dac-480a-bef9-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:29.000Z",
            "modified": "2016-02-19T02:22:29.000Z",
            "description": "Automatically added (via 4a489b47c3ea402853ea79695456c1b5)",
            "pattern": "[file:hashes.SHA256 = '5657935cfb1138a75a1ca44a5ddea1b3efa146c20cc22ca5a292f1d9175147d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c6e-ca38-4169-9e8b-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:38.000Z",
            "modified": "2016-02-19T02:22:38.000Z",
            "description": "Automatically added (via 4a6ce8c04850753e4fd333e15aeb1599)",
            "pattern": "[file:hashes.SHA256 = '7afd3aab3d7b24573b87732f88f84f80bca88bdf15b73559c7755ef9bd1d0821']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c77-3b4c-44b6-9e13-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:47.000Z",
            "modified": "2016-02-19T02:22:47.000Z",
            "description": "Automatically added (via 4add6fe52631ed7d2204cb9a7d829689)",
            "pattern": "[file:hashes.SHA256 = 'bbf91280f95dcfec0419212942983341df2835a1c2b03c5b4df31978d01b043a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c80-a310-4a6e-9612-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:22:56.000Z",
            "modified": "2016-02-19T02:22:56.000Z",
            "description": "Automatically added (via 4b1c64dffb5d5fe13572869b0d6fcb15)",
            "pattern": "[file:hashes.SHA256 = '64af4c0e75e961b60f104e7ca69a1b349d88db33dc125833e013c5aafcde9405']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:22:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c87-ef7c-406f-aaf8-40c9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:03.000Z",
            "modified": "2016-02-19T02:23:03.000Z",
            "description": "Automatically added (via 4b2f5c66c225efe468f5b45acbc85818)",
            "pattern": "[file:hashes.SHA256 = '255f1abeec263a7da4c18bab6b28f3d65166e55529e82dc6e8006e94c1e28019']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c8f-8024-4d33-b7d4-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:11.000Z",
            "modified": "2016-02-19T02:23:11.000Z",
            "description": "Automatically added (via 4b4298cea473f6c78b652e48f1138595)",
            "pattern": "[file:hashes.SHA256 = '81ef4f2eebc6429df3414996d1f9d7a469520954f1606c1ba6801887863b7146']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c97-377c-4cc2-9747-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:19.000Z",
            "modified": "2016-02-19T02:23:19.000Z",
            "description": "Automatically added (via 4b53f282e7eca382febb1019b6c74aac)",
            "pattern": "[file:hashes.SHA256 = 'e7b1c988a9ffd1eed4caa7a1cde7d8f322ccd98c899e68fea6e64f13639c5a53']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67c9f-73a8-4254-8c34-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:27.000Z",
            "modified": "2016-02-19T02:23:27.000Z",
            "description": "Automatically added (via 4b6ea55672044a35df760ebd03bd9e53)",
            "pattern": "[file:hashes.SHA256 = 'a05afd19c8bedae72086b1211509631b4672bbebfdbf5f242156322afa90a006']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ca7-ab84-4fe9-82b9-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:35.000Z",
            "modified": "2016-02-19T02:23:35.000Z",
            "description": "Automatically added (via 4baeefcd85effcad2da595b74711a482)",
            "pattern": "[file:hashes.SHA256 = '78723fd7dda724efd3a0c42f3dd189f3832ce746a83bc4e53c8af5156b80d95b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67caf-de48-4996-8fab-421e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:43.000Z",
            "modified": "2016-02-19T02:23:43.000Z",
            "description": "Automatically added (via 4bf235082e06bf699313bc2b9d1b23d1)",
            "pattern": "[file:hashes.SHA256 = 'a3613f13e8a14bc3d6221f8b90a93e9354e15eb2d083dcbb2b413f5ddac94d90']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cb7-6614-46aa-94de-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:51.000Z",
            "modified": "2016-02-19T02:23:51.000Z",
            "description": "Automatically added (via 4c037fc7f159f2aa31086d763cc10a6d)",
            "pattern": "[file:hashes.SHA256 = '015950ed27c7cf125d021a3919af748b15f081bc6caa4456500f9e1f09c40e34']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cbf-2a08-40c8-9bfd-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:23:59.000Z",
            "modified": "2016-02-19T02:23:59.000Z",
            "description": "Automatically added (via 4c0eb88ecb1620f9a80bf1589ddb549a)",
            "pattern": "[file:hashes.SHA256 = 'd9e3c344cf481ae07f59a290ba166e8b39b33c582a013280a23a1c49cbb08383']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:23:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cc7-98e4-4544-9ff0-45f6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:07.000Z",
            "modified": "2016-02-19T02:24:07.000Z",
            "description": "Automatically added (via 4cb118582d2d4df56a56c99efcebe1c5)",
            "pattern": "[file:hashes.SHA256 = '5a4b68ec355aa2616875f5ef00ebebf9892d920687e72b1a990ebafa690b4b6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ccf-ae88-45d7-8eb4-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:15.000Z",
            "modified": "2016-02-19T02:24:15.000Z",
            "description": "Automatically added (via 4cfc451e3ac1f04fd13f3db2d7f917b7)",
            "pattern": "[file:hashes.SHA256 = '53953f11573250324bea28ee1605268dbd8cac3b69d5f3efd87120d742e4fd02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cd7-db60-45cd-9793-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:23.000Z",
            "modified": "2016-02-19T02:24:23.000Z",
            "description": "Automatically added (via 4d00904acfd5bf1c7b4d0ad1cdf0b515)",
            "pattern": "[file:hashes.SHA256 = 'cfce854f92321402e66874af4f336ebd7d9a3bf3bf99a23c7af34b546fa6bb9f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cde-ebb4-4de0-bcdc-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:30.000Z",
            "modified": "2016-02-19T02:24:30.000Z",
            "description": "Automatically added (via 4d01310b74e708cdf046532b2d8785de)",
            "pattern": "[file:hashes.SHA256 = '54fa1598cfdf2e0e8b4befbaa8650301e8d9bcf563ca45064cec81a8026c6bc0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ce6-0760-4454-ba6c-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:38.000Z",
            "modified": "2016-02-19T02:24:38.000Z",
            "description": "Automatically added (via 4d1d08022994e0c4a5a4cbc604f7c50e)",
            "pattern": "[file:hashes.SHA256 = 'c0b738891eab6db9b8bfb8118e1df188844596b54f7d7a3f47a5c5bdb1f575d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cee-e70c-42c5-929a-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:46.000Z",
            "modified": "2016-02-19T02:24:46.000Z",
            "description": "Automatically added (via 4d41db1d80d9649fc55322cfdd4c8400)",
            "pattern": "[file:hashes.SHA256 = '0bc084fa55af0dad75a470f72004d5315b2e02c4f64c402d0a02e8ed3150c36a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cf6-a86c-404c-a7fc-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:24:54.000Z",
            "modified": "2016-02-19T02:24:54.000Z",
            "description": "Automatically added (via 4d5a952b22c0812155db01f7ba0dae98)",
            "pattern": "[file:hashes.SHA256 = '0af05d0f0337987dad467a1b4829b99b8f4067a123385c322133c3954de14711']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:24:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67cfe-43e0-4bfd-b4c9-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:02.000Z",
            "modified": "2016-02-19T02:25:02.000Z",
            "description": "Automatically added (via 4d7657f853316546b8161fe11e22abe2)",
            "pattern": "[file:hashes.SHA256 = 'f3f2cee4b3fa015435aa7c09b7c0dc56da6380aa3dfd122acfb01b82aefc91ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d06-05b0-4850-beb8-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:10.000Z",
            "modified": "2016-02-19T02:25:10.000Z",
            "description": "Automatically added (via 4db968d4d8202ee9372ad291914edfb3)",
            "pattern": "[file:hashes.SHA256 = '57cbec5317cb03e69bb5c9ffc01852c4bd65e7905ce75b42086715cd72c057fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d0d-d514-4543-b5ce-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:17.000Z",
            "modified": "2016-02-19T02:25:17.000Z",
            "description": "Automatically added (via 4df879718487039aabf9178814fd860e)",
            "pattern": "[file:hashes.SHA256 = '95d8fe4caf9fbb6a6ecc05fbdf5cb7e6759d8b1ea0853de5ce3232363b97702f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d15-8abc-43c5-871f-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:25.000Z",
            "modified": "2016-02-19T02:25:25.000Z",
            "description": "Automatically added (via 4e67ecd2f2eb24f4a8c2ecaf947131a6)",
            "pattern": "[file:hashes.SHA256 = '486211f0e98d4645e6f3aeae52ee53f837a10b8f8cdb0e1e18dd72e63164c35d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d1d-ac90-428b-a640-48b7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:33.000Z",
            "modified": "2016-02-19T02:25:33.000Z",
            "description": "Automatically added (via 4e849a1473cec009ea170087c081b11f)",
            "pattern": "[file:hashes.SHA256 = '365603c17623d28b2a7c9c2b45cd8d6702ef5653810254996a7ce6e5f896ddca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d25-8dd0-46d0-b049-4cf1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:41.000Z",
            "modified": "2016-02-19T02:25:41.000Z",
            "description": "Automatically added (via 4ed27792c3048846c160308e1b39f2c2)",
            "pattern": "[file:hashes.SHA256 = '29f9c1cd8b9c09218a2313720dc770d2dce1c1d70d6c02914b3741ad22035693']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d2d-6078-4669-a10d-4a39950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:49.000Z",
            "modified": "2016-02-19T02:25:49.000Z",
            "description": "Automatically added (via 4ee9bcfedbff94364ac4c5a45bdec7cd)",
            "pattern": "[file:hashes.SHA256 = '14904690bdb3b464ae9fe5fd48eb08b184a6969a22fa157fccbd140522f93d9e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d35-f6c8-4006-adce-4f07950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:25:57.000Z",
            "modified": "2016-02-19T02:25:57.000Z",
            "description": "Automatically added (via 4f1d8c8e846d8875558ec5ee85e0c2e4)",
            "pattern": "[file:hashes.SHA256 = 'f731652a84af0275fbddd1d5751a9fa98919e265ec9fba7a535d802c0b2475f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:25:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d3d-3a10-4b78-ab2b-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:05.000Z",
            "modified": "2016-02-19T02:26:05.000Z",
            "description": "Automatically added (via 4f43ff21bd5bd97975a7396e3feae01d)",
            "pattern": "[file:hashes.SHA256 = '7c01f26d46f963798923179b5f5aa54993f06b24117fcac6a8aedd6c5ac98eda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d44-c6a0-487f-96ad-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:12.000Z",
            "modified": "2016-02-19T02:26:12.000Z",
            "description": "Automatically added (via 4f4688795a930890d2e50eba90b9d1f3)",
            "pattern": "[file:hashes.SHA256 = 'b0debcb06a238568237220fe8bc536e0a1111680fde20ea489fbd77d3760d544']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d4c-52e0-47a8-bb58-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:20.000Z",
            "modified": "2016-02-19T02:26:20.000Z",
            "description": "Automatically added (via 4f46dd16826c02b906f24300d153bc2a)",
            "pattern": "[file:hashes.SHA256 = '2fa588198dec9e9db5200251647d8257e7ad4dbebbde9e6cc97f664c4514ad87']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d54-33f8-4319-b588-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:28.000Z",
            "modified": "2016-02-19T02:26:28.000Z",
            "description": "Automatically added (via 4f97466c9fe0c1991468cdbd6b1c93e2)",
            "pattern": "[file:hashes.SHA256 = '0917ca1eb6657d81a2637225db74fe90e7d39983d72dea4b70c6b59d45c7a5c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d5b-1f7c-40d6-b321-47dd950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:35.000Z",
            "modified": "2016-02-19T02:26:35.000Z",
            "description": "Automatically added (via 4fefde4cc142c7264e463ec1a1d885b2)",
            "pattern": "[file:hashes.SHA256 = '5db5c126fc3fe38592315fa6ded2f2c36e879acf5b0cf8f2fca6e64b4c9317e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d63-d034-4937-82ca-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:43.000Z",
            "modified": "2016-02-19T02:26:43.000Z",
            "description": "Automatically added (via 50250fcfd1f43a3f6cd2dc767a7a8b3d)",
            "pattern": "[file:hashes.SHA256 = 'db553f563c8705a60a2988e603f5b1a025c41f0cc7ea641e9df157b38b13e704']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d6a-0144-43b5-9e49-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:50.000Z",
            "modified": "2016-02-19T02:26:50.000Z",
            "description": "Automatically added (via 5028bca89c19900f0fd218b0a1570e21)",
            "pattern": "[file:hashes.SHA256 = '7ef1ed3b98d00d5a07fe00edb4515c2b8a64b0c960a49ed165ae436de880b48e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d71-685c-449a-9938-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:26:57.000Z",
            "modified": "2016-02-19T02:26:57.000Z",
            "description": "Automatically added (via 5096740c2596ea42aa9338ca5917d885)",
            "pattern": "[file:hashes.SHA256 = '134a979d6d97aac3c84c9fe2981b4135fa629bc8d4e258a5a21a35ef17b68c10']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:26:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d7a-d584-46f4-bc79-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:06.000Z",
            "modified": "2016-02-19T02:27:06.000Z",
            "description": "Automatically added (via 50e501b17ea3820ba64d13fe4e82825a)",
            "pattern": "[file:hashes.SHA256 = '673ab5148d689959a0844b04f078e297d7701f4606e51cb885a6ea96b0712c94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d82-2784-414c-a9dd-45e6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:14.000Z",
            "modified": "2016-02-19T02:27:14.000Z",
            "description": "Automatically added (via 50e9da4ce446dc74b9d82da9a47093c7)",
            "pattern": "[file:hashes.SHA256 = 'e91482a3194842cdc91be18873a12486217a031f1c28baa2832cac1876290021']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d8a-aeb0-4d74-981b-444b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:22.000Z",
            "modified": "2016-02-19T02:27:22.000Z",
            "description": "Automatically added (via 513cff34a785f3fac68a9e95ea29df0e)",
            "pattern": "[file:hashes.SHA256 = '03616ef8a52b3cf9f4e4c5822132d57686df679f8fbf5978b2c106f5e26351eb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d91-e910-4778-b8d9-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:29.000Z",
            "modified": "2016-02-19T02:27:29.000Z",
            "description": "Automatically added (via 5180d0d580de5a9bd7ca07b3a6e47472)",
            "pattern": "[file:hashes.SHA256 = '4584640986ab9beed68c75bb599c298777a5bfc0d72e0efbce26fb89b5c0fede']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67d99-8f68-478a-afed-4ebc950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:37.000Z",
            "modified": "2016-02-19T02:27:37.000Z",
            "description": "Automatically added (via 519baba9a218e80431ade47f5f4f231e)",
            "pattern": "[file:hashes.SHA256 = 'c93da2e6b8887d359c324691ceb2e200f6b7489331a086e1bf8f4f0c080cdfd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67da2-810c-4059-bbdf-410f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:46.000Z",
            "modified": "2016-02-19T02:27:46.000Z",
            "description": "Automatically added (via 5256990919ea719d101f7474cfa0476c)",
            "pattern": "[file:hashes.SHA256 = 'd6c30d2b9e26e1cb88a50cdf7249d31fd1084a7b0ee002f8cc9a6efc643d259b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dab-8f88-4959-a110-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:27:55.000Z",
            "modified": "2016-02-19T02:27:55.000Z",
            "description": "Automatically added (via 5293f5cb3697ce0cb8c7f28d028d8892)",
            "pattern": "[file:hashes.SHA256 = '4513921913f296d8d61d789c8f29fc62bf0f00837d6b52f0606e22f8ff4ee896']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:27:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67db4-3c78-4eb6-84d1-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:04.000Z",
            "modified": "2016-02-19T02:28:04.000Z",
            "description": "Automatically added (via 52d8c2aa337c9c3c315fb4f5018d354e)",
            "pattern": "[file:hashes.SHA256 = 'e9e2ef33ca264b4262958aa96683a65a8896bbec8a0dc138c3f3943bcb5a7edd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dbd-9d48-48a8-bd78-4afe950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:13.000Z",
            "modified": "2016-02-19T02:28:13.000Z",
            "description": "Automatically added (via 530278991f3fe488611fcaab944f4cf9)",
            "pattern": "[file:hashes.SHA256 = 'def2dcc3b1c7bd6fb58c3012b52305c58b4119eac7224bd195f1038a8dd9f03d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dc5-c120-43bd-bec8-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:20.000Z",
            "modified": "2016-02-19T02:28:20.000Z",
            "description": "Automatically added (via 530fa4501ebb2cab81870303e2548059)",
            "pattern": "[file:hashes.SHA256 = '6c0a15bc144a279cd8a9669e157f18602e89b49557de5d6cc77f59a9272cc574']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dcd-cc14-46fd-946b-4d0a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:29.000Z",
            "modified": "2016-02-19T02:28:29.000Z",
            "description": "Automatically added (via 537569675cdfd3dbf95b5ed141457bb8)",
            "pattern": "[file:hashes.SHA256 = '1e6ea1ea3a1588efabf7c5243aca5bfefff1b1e8e008063e4d6eb5105bd2e76d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dd5-0afc-42a9-bc09-48d3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:37.000Z",
            "modified": "2016-02-19T02:28:37.000Z",
            "description": "Automatically added (via 53b600ade2b20a397dae5185f5d8d694)",
            "pattern": "[file:hashes.SHA256 = '103fe2fc4bdcd78fb119febf7e702df032fbc3568919d108dcdc9c98a89729a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ddc-ffe0-43b8-82b8-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:44.000Z",
            "modified": "2016-02-19T02:28:44.000Z",
            "description": "Automatically added (via 53b666e4e2d9cec823d4a98761bdd89e)",
            "pattern": "[file:hashes.SHA256 = '3b46c8dfe96f66b6c0cd051138583a2522a70c44020f769e07bf18e05225147a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67de4-5fd8-47e0-a3ce-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:28:52.000Z",
            "modified": "2016-02-19T02:28:52.000Z",
            "description": "Automatically added (via 53fbb1e7e759233dfcf4e46a10c2bff4)",
            "pattern": "[file:hashes.SHA256 = '6c17064ed426c012bb92ed04eaa10b4ee2a56338ae01acb963bb71ab1c37b458']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:28:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dec-4df8-41bb-8936-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:00.000Z",
            "modified": "2016-02-19T02:29:00.000Z",
            "description": "Automatically added (via 5453f46d406a4af23b9918aba112650f)",
            "pattern": "[file:hashes.SHA256 = 'b5513ff306caf73ede124bd59e84241a63e7d88f85012f5ad4f62a54b352f34d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67df3-1d2c-4564-8de5-4128950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:07.000Z",
            "modified": "2016-02-19T02:29:07.000Z",
            "description": "Automatically added (via 546c54f2664176329715d172f600f45b)",
            "pattern": "[file:hashes.SHA256 = '12297612335d99b4758fafe964025a2133aea9b1839828ddc8a93af4fd36e7e9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67dfc-bfc4-4c5b-b360-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:16.000Z",
            "modified": "2016-02-19T02:29:16.000Z",
            "description": "Automatically added (via 548e0dd1e7c8591a2af7e8648a6f9dc3)",
            "pattern": "[file:hashes.SHA256 = '20f914d1090d91f037f26f8782b6a30407fb701eff1ffde91ea0b2abbd459e6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e04-eb94-42a6-b0e1-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:24.000Z",
            "modified": "2016-02-19T02:29:24.000Z",
            "description": "Automatically added (via 5498de731732a83a1b172485b0cfd2b7)",
            "pattern": "[file:hashes.SHA256 = '9375b7a8039d6dbdedbff9e3c2302ff92bdc35bbd7e1c05d299d0753f2b1022a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e0d-8e60-4869-938a-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:33.000Z",
            "modified": "2016-02-19T02:29:33.000Z",
            "description": "Automatically added (via 54bf5e4574b7b712224fee9417e90317)",
            "pattern": "[file:hashes.SHA256 = '9617c0bfdb8557cda2e4ecd1de94f452a5c666fde795c10c2acebba2e13d2541']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e16-9170-41e4-aeba-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:42.000Z",
            "modified": "2016-02-19T02:29:42.000Z",
            "description": "Automatically added (via 54bff23bdc7d1df24255923cc036882a)",
            "pattern": "[file:hashes.SHA256 = 'ef8979a8d27d817ffe37e2dee19d49dceff36193e8b7141e4dbd16ee9d1398d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e1d-b1e4-4ee4-8ff2-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:49.000Z",
            "modified": "2016-02-19T02:29:49.000Z",
            "description": "Automatically added (via 54e1059398d9529e3a8ddac86de2a7c8)",
            "pattern": "[file:hashes.SHA256 = '496b1113348f1ef9fea943e4d852b94876c84b616e68be05ca1589a16e5336de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e26-7700-4404-81de-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:29:58.000Z",
            "modified": "2016-02-19T02:29:58.000Z",
            "description": "Automatically added (via 55b6691b4453bec719deeb42fd3d1a1a)",
            "pattern": "[file:hashes.SHA256 = '2d34d34f5da892676c7973a4bd073c7320fb2932945edd6e7c2e5edef2a1cf7d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:29:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e2e-9584-4f11-bf24-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:06.000Z",
            "modified": "2016-02-19T02:30:06.000Z",
            "description": "Automatically added (via 55efd387dc99cab2add470dcf8687e44)",
            "pattern": "[file:hashes.SHA256 = '6ae809cbe123b5a4f9ad7e413d050a287dd41f52ce73f9e9813a067704c11083']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e36-af90-46b0-81ad-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:14.000Z",
            "modified": "2016-02-19T02:30:14.000Z",
            "description": "Automatically added (via 562ee31e4b4a08e93b16583e9f91a6f0)",
            "pattern": "[file:hashes.SHA256 = 'fa9dccf793c307158a5ff920150e4a9e11bd82b4851a51e6bc210c24757c6504']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e3e-14ac-44e1-89e1-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:22.000Z",
            "modified": "2016-02-19T02:30:22.000Z",
            "description": "Automatically added (via 566411553172f7f138a122b0468985bd)",
            "pattern": "[file:hashes.SHA256 = 'b72701d44534323ffaa028ec0d5d726ca64cadf943f653cf3baca03b7053bb58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e46-7a94-4e4f-a210-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:30.000Z",
            "modified": "2016-02-19T02:30:30.000Z",
            "description": "Automatically added (via 56cba55628ab54dcf9c315d3d68a2f82)",
            "pattern": "[file:hashes.SHA256 = '04ea987a929d1606f5681e994405fd0a5852ea7dc3f1599820fdec3e36d7e30e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e4e-51a8-4458-8059-4750950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:38.000Z",
            "modified": "2016-02-19T02:30:38.000Z",
            "description": "Automatically added (via 56d7b4f7a4680e2d23868455add42cdf)",
            "pattern": "[file:hashes.SHA256 = 'bb8c1d2d4f641b70a5fc13ca4d5b5a48aee89862bae332d25465ee9edfc83c9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e57-3970-4d13-bdcf-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:47.000Z",
            "modified": "2016-02-19T02:30:47.000Z",
            "description": "Automatically added (via 56f6c72efa6ca1de0b026916e7701627)",
            "pattern": "[file:hashes.SHA256 = 'c49196d897062e796e1a62b1ac7ee59de54d053c4ca1a5c8511a50f07ecbe9c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e5e-aa0c-4ff6-8b11-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:30:54.000Z",
            "modified": "2016-02-19T02:30:54.000Z",
            "description": "Automatically added (via 56ffbee40485ab0f5d6770434e51c4b0)",
            "pattern": "[file:hashes.SHA256 = '2ea2884c4299dea317d175d430c2111951c6d8369285c48643be73ecf7c5b02a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:30:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e66-aafc-4e9a-9fe7-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:02.000Z",
            "modified": "2016-02-19T02:31:02.000Z",
            "description": "Automatically added (via 571bb85dbfb7c00340646173bd2571b8)",
            "pattern": "[file:hashes.SHA256 = 'dda0708db2e45f7516860a28f72f6c270c2facdd227ed9d9f9de5559ea164b2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e6e-d80c-404f-baff-42e6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:10.000Z",
            "modified": "2016-02-19T02:31:10.000Z",
            "description": "Automatically added (via 573641e4236631d20b5c6caba6420260)",
            "pattern": "[file:hashes.SHA256 = 'f29134450465bea9a9e8fe5153586c8e521b7e182d1b9f290a60a775feba2ce0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e75-31bc-4f4a-9765-441b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:17.000Z",
            "modified": "2016-02-19T02:31:17.000Z",
            "description": "Automatically added (via 5740c1075ec70fa2579734bf06b62d17)",
            "pattern": "[file:hashes.SHA256 = '8a1fde4d359a4edf44e68ee3fcbe7f0400c4aca1ea5e69988a882f698a6473c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e7d-51e0-4aea-9b64-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:25.000Z",
            "modified": "2016-02-19T02:31:25.000Z",
            "description": "Automatically added (via 583f02be634f83d05d1094ebc336bcef)",
            "pattern": "[file:hashes.SHA256 = 'dc0ba0570492203ba9472edb5ee5c40d2a336320a976b5cc51a3d6807e3e24d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e85-5f54-481a-9381-427f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:33.000Z",
            "modified": "2016-02-19T02:31:33.000Z",
            "description": "Automatically added (via 58656a012354b630071e3a6ad7c034fb)",
            "pattern": "[file:hashes.SHA256 = 'faccf5ec157c3d33311719d7309672d398ee76742289d52b69538a26bf05c065']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e8d-6830-4bbc-b1e9-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:41.000Z",
            "modified": "2016-02-19T02:31:41.000Z",
            "description": "Automatically added (via 587b82dcda2ddaf9082f2812b5732246)",
            "pattern": "[file:hashes.SHA256 = '5d8614518201d295629d85250dd5f1a0488eb81e8115b34d73e9443d31548f96']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e95-ae4c-4750-b678-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:49.000Z",
            "modified": "2016-02-19T02:31:49.000Z",
            "description": "Automatically added (via 588fcee07679a08cf7873650c385d904)",
            "pattern": "[file:hashes.SHA256 = 'b3b3b8d684772d0cf92b0e68dbcbbfcccb03208dede9cae067586f3c8548803d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67e9d-e768-42bc-8e19-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:31:57.000Z",
            "modified": "2016-02-19T02:31:57.000Z",
            "description": "Automatically added (via 58ac2f2e4cc19bd406776678993fc9a3)",
            "pattern": "[file:hashes.SHA256 = 'af6b140f5f6c3504392aefa2d174659c506c88b6dfc27b035bc89c648e7db5c7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:31:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ea5-8f9c-4e95-a215-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:05.000Z",
            "modified": "2016-02-19T02:32:05.000Z",
            "description": "Automatically added (via 58d70a631212545bf605a31d9e9df631)",
            "pattern": "[file:hashes.SHA256 = 'ea3a95ed32e0efc15699178b2541b4e691673b4d1152e13e44292083dea94799']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ead-efdc-4b98-81d5-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:13.000Z",
            "modified": "2016-02-19T02:32:13.000Z",
            "description": "Automatically added (via 58d9319ad2f5f63f32d7d90dbf0ba4c6)",
            "pattern": "[file:hashes.SHA256 = 'f0e0df86c9a307a11e46311fc65da4ab9203b74f384ed520d4ccec36bb8868fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67eb5-4638-4be9-a070-4684950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:21.000Z",
            "modified": "2016-02-19T02:32:21.000Z",
            "description": "Automatically added (via 592f3cf5895898472c845d8d82a60c10)",
            "pattern": "[file:hashes.SHA256 = 'f5e14721be47bb5d8689b2791dfd7f6cab0a7a2597e64692e9c95e997d5a6cae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ebc-ad98-49cf-9dff-4ec8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:28.000Z",
            "modified": "2016-02-19T02:32:28.000Z",
            "description": "Automatically added (via 5976b64ec844c5ef4196d74fa9806c52)",
            "pattern": "[file:hashes.SHA256 = '6f091180c2cde12c9367161289df8f31bf4f15a639309648c43a88a7f4e69fe6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ec4-ecf8-4f2a-b3b3-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:36.000Z",
            "modified": "2016-02-19T02:32:36.000Z",
            "description": "Automatically added (via 59976a782fb3135671134e73220f603e)",
            "pattern": "[file:hashes.SHA256 = 'bffed9dc587a7d2c9921429646b257256c7b7c364ef6a010f56ab341bed6f558']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ecc-60f4-43f9-899c-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:44.000Z",
            "modified": "2016-02-19T02:32:44.000Z",
            "description": "Automatically added (via 59e9719ca98e123ec5df78c13b77fced)",
            "pattern": "[file:hashes.SHA256 = '962be4d8b8db3b66cafb051c2d4b4bc0a36102aca9f6c905724f86b31d9520a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ed4-5560-4594-bb64-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:32:52.000Z",
            "modified": "2016-02-19T02:32:52.000Z",
            "description": "Automatically added (via 59fa56ad62c1535b3bdbf3300c13faf9)",
            "pattern": "[file:hashes.SHA256 = 'd6be957dffa797ea6a5e0cf32a4881bdd27e5406de6b8e676790ed347cacb403']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:32:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67edc-d294-47f8-a8ce-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:00.000Z",
            "modified": "2016-02-19T02:33:00.000Z",
            "description": "Automatically added (via 5a1d93b361d1cb794afd3071a5eacb03)",
            "pattern": "[file:hashes.SHA256 = '425e43c27ae36b8687841ae13a34779b36ded73fc1770f68b0c88ea6abb0328e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ee5-ce00-4964-b98e-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:09.000Z",
            "modified": "2016-02-19T02:33:09.000Z",
            "description": "Automatically added (via 5a646f616870f509199bd96cca6c1bb3)",
            "pattern": "[file:hashes.SHA256 = '44b1435e24c89218a92f91fea8c308f7007632eb48cc0b04b45b4047fd3c44bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67eed-abb4-46f2-8027-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:17.000Z",
            "modified": "2016-02-19T02:33:17.000Z",
            "description": "Automatically added (via 5a79bcb711f41a2081ffa73ed56a7e79)",
            "pattern": "[file:hashes.SHA256 = '02b5585db6a642605f209c8b00c7ed5a9970f890395af38f4b4198a3190ede32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ef6-8028-46be-a403-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:26.000Z",
            "modified": "2016-02-19T02:33:26.000Z",
            "description": "Automatically added (via 5a9c26a17aa63da18e2f3301271fe8c1)",
            "pattern": "[file:hashes.SHA256 = '49a90427dda8fdbd9832748f1ae1f60c4446301ed98bb3f220b47d6b94770655']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67efe-8bec-425d-b5fa-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:34.000Z",
            "modified": "2016-02-19T02:33:34.000Z",
            "description": "Automatically added (via 5a9cd0d4f30ce8c43afaf9041acbe49a)",
            "pattern": "[file:hashes.SHA256 = 'ecb187c3e5d1b9fb56b4b9041924379851e77adfbc97a41e051496526ed0c2c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f06-d174-42a0-b5f9-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:42.000Z",
            "modified": "2016-02-19T02:33:42.000Z",
            "description": "Automatically added (via 5ac08cd5947f68bf917ccf0522fa628e)",
            "pattern": "[file:hashes.SHA256 = '4ba9ff7c1325b0985453536518484218a40ab911047bbdccb65470a489830659']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f0e-c98c-48aa-852c-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:50.000Z",
            "modified": "2016-02-19T02:33:50.000Z",
            "description": "Automatically added (via 5b15fb90ccec6b1273a0dae20233267d)",
            "pattern": "[file:hashes.SHA256 = '65cf4115822fae1930e1bfe112c1ecd79ff81d7ea197c038963eefecd7f83962']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f16-986c-4345-b5b7-49ff950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:33:58.000Z",
            "modified": "2016-02-19T02:33:58.000Z",
            "description": "Automatically added (via 5bf4da8e21dd9c291dc45e2c1bd144d8)",
            "pattern": "[file:hashes.SHA256 = '46568a4af38f5ca2366cefb72b71f898ea9b010df2a64a457bdd7b3466f4ca4f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:33:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f1e-8f74-4566-b11d-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:06.000Z",
            "modified": "2016-02-19T02:34:06.000Z",
            "description": "Automatically added (via 5c0c47a31ee1097f64365a37ccb466d3)",
            "pattern": "[file:hashes.SHA256 = '259121da653a591587987f7b6f950ce3272dc7d8b0324b6d84f98604efa53635']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f26-d850-4858-9c6d-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:14.000Z",
            "modified": "2016-02-19T02:34:14.000Z",
            "description": "Automatically added (via 5c0f062f831b5cf3cdcd1955a9d3884d)",
            "pattern": "[file:hashes.SHA256 = '496a6ca715426752b5643f1d592ba122e963fe75066e6b16b1b845792e6a1c69']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f2e-5d9c-4aad-a409-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:22.000Z",
            "modified": "2016-02-19T02:34:22.000Z",
            "description": "Automatically added (via 5c6369ff5ca2ea5a1647cac592fe73c3)",
            "pattern": "[file:hashes.SHA256 = 'ef0e3727f3db84d262e9a1fa65960ad7df5f07fbf0930f8983985e89785921f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f36-be44-4a9e-a06b-459d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:30.000Z",
            "modified": "2016-02-19T02:34:30.000Z",
            "description": "Automatically added (via 5c66f516465205406511ecc828f5012e)",
            "pattern": "[file:hashes.SHA256 = '1739bfcc352d364ccd1f5b9251323797006531c53126539c99dba761bf1d4e1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f3e-c5fc-488f-9dba-4078950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:38.000Z",
            "modified": "2016-02-19T02:34:38.000Z",
            "description": "Automatically added (via 5cbd6680bd9efa694cf4660c31d58b49)",
            "pattern": "[file:hashes.SHA256 = '7ca6f1972440ad36b2c485d50171e0c90fe4cf5eafa3a774ed107ec28cd01aa0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f46-fcb0-4e46-8468-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:46.000Z",
            "modified": "2016-02-19T02:34:46.000Z",
            "description": "Automatically added (via 5d061b5243b3589309b7b7d7ad76def6)",
            "pattern": "[file:hashes.SHA256 = '53d262e718bcc21d074233316a8f3a2b422a2d3d180784b916de5f9f3158afaa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f4e-9be8-4cdd-bbe2-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:34:54.000Z",
            "modified": "2016-02-19T02:34:54.000Z",
            "description": "Automatically added (via 5d5554fb0dbd32d6edba3cd62fa179e1)",
            "pattern": "[file:hashes.SHA256 = 'c1abeca1dc8e09afae256e1ea48fa4ff1c4ed9b24de8029395a070d0200b0bea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:34:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f56-4328-4c3f-89b1-4c3e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:02.000Z",
            "modified": "2016-02-19T02:35:02.000Z",
            "description": "Automatically added (via 5dc07ff6ec990ef03b6ce8848ab46b5b)",
            "pattern": "[file:hashes.SHA256 = '4832d9f77a5ab2c833f6c7108147c0511531309b64158ea1619028e0598f733b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f5e-244c-4a70-a9e9-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:10.000Z",
            "modified": "2016-02-19T02:35:10.000Z",
            "description": "Automatically added (via 5dfb5432542a63045eb91a3798b7f88a)",
            "pattern": "[file:hashes.SHA256 = 'd22ddf389d8cc7978d40ea35bdb503a0a71d01b24887d22430ab50395a176397']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f66-2228-46d2-bef9-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:18.000Z",
            "modified": "2016-02-19T02:35:18.000Z",
            "description": "Automatically added (via 5dfddf866227708fa6ed4e8e9833acd4)",
            "pattern": "[file:hashes.SHA256 = '6852679d12843eb6522a435c3fd81823af7f5a3343640d3dd49b6778f822bb43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f6f-7c40-4eda-8bee-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:27.000Z",
            "modified": "2016-02-19T02:35:27.000Z",
            "description": "Automatically added (via 5e1d7f56ccad472b46e4265866a8a4d3)",
            "pattern": "[file:hashes.SHA256 = 'e7a4702d30d38e154949edd63d69f62c74fd83d56de7ed6d7190bf9b39139813']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f77-64c8-417a-8b50-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:35.000Z",
            "modified": "2016-02-19T02:35:35.000Z",
            "description": "Automatically added (via 5e2db0759cc52c3381e7a1384694e7fe)",
            "pattern": "[file:hashes.SHA256 = '3820e0d732963b3f83b41266c77d388641d3d1ac7e16f24f66b273a926ce2665']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f7f-96f4-4ba2-a88c-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:43.000Z",
            "modified": "2016-02-19T02:35:43.000Z",
            "description": "Automatically added (via 5e32d6a631cbf18488a34727680d9d77)",
            "pattern": "[file:hashes.SHA256 = '6e545f98bb0cc2aee9cb5dab3100fe8b3236ae75f2d9b0636802747453387ed7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f88-4adc-442a-868d-430d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:35:52.000Z",
            "modified": "2016-02-19T02:35:52.000Z",
            "description": "Automatically added (via 5e34d67887904eff19decfa446b7ed05)",
            "pattern": "[file:hashes.SHA256 = 'b4fd3e816a037eb71284bec1bf2dbc63d05c1128c97a044980503e2ae0270728']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:35:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f91-0668-40f8-9a3a-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:01.000Z",
            "modified": "2016-02-19T02:36:01.000Z",
            "description": "Automatically added (via 5e8d36b27849c5f43f919dd6775c2331)",
            "pattern": "[file:hashes.SHA256 = 'dd5805910dd857d09f1a2c644fa9df93b55a5dac045a12e484bad06c61bac38e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67f99-1974-4639-a0ac-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:09.000Z",
            "modified": "2016-02-19T02:36:09.000Z",
            "description": "Automatically added (via 5ed3035a99ea8cd1ceb86b01d26cbeed)",
            "pattern": "[file:hashes.SHA256 = 'a3583fbb90da790af15e739ca7348c033ff13a68cdcc6ce77e56e8473fad5b47']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fa1-8ff4-477f-be33-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:17.000Z",
            "modified": "2016-02-19T02:36:17.000Z",
            "description": "Automatically added (via 5ef44db2bb8744e024c57e050b976533)",
            "pattern": "[file:hashes.SHA256 = 'f32b127af1102d2b8acbf1a68e744e99cd51d54f50365a0fc2f7682fb045f703']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fa9-7c50-4e38-965e-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:25.000Z",
            "modified": "2016-02-19T02:36:25.000Z",
            "description": "Automatically added (via 5f299ca4a5ae1aee5b7bd09808066846)",
            "pattern": "[file:hashes.SHA256 = '4199268a7de6134aef9d40346aea44d6655de26b3a858c9a741ba44cbfee9426']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fb1-49b4-4099-b330-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:33.000Z",
            "modified": "2016-02-19T02:36:33.000Z",
            "description": "Automatically added (via 5f3ad6793b517e78632b607fd15d29bc)",
            "pattern": "[file:hashes.SHA256 = '9b89c98ee436ebaa38983c1f12dcda0fcce30fe0c9be499246de3f8eb2a269be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fb9-b248-4a62-8a8e-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:41.000Z",
            "modified": "2016-02-19T02:36:41.000Z",
            "description": "Automatically added (via 5f5714f3f945513cd29fbaf01dc2907c)",
            "pattern": "[file:hashes.SHA256 = 'b8c9d64c7ed2ae2eadb84dffc8d96080993eca6e6fa8c86e103cf24c3c9a6dbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fc1-52fc-42e8-bd12-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:49.000Z",
            "modified": "2016-02-19T02:36:49.000Z",
            "description": "Automatically added (via 5fdd8ec1538d6c99ed08959643bf49f7)",
            "pattern": "[file:hashes.SHA256 = 'f45f7c6d2ec5112b2a33d3bdb921fa8d93ed7c715ec4fdd2896244b4882c905c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fc9-a570-4b47-a5af-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:36:57.000Z",
            "modified": "2016-02-19T02:36:57.000Z",
            "description": "Automatically added (via 6064cc39273f5d5342b43a8a51ba6864)",
            "pattern": "[file:hashes.SHA256 = 'aa75ce80a81c54a1da7e4f8f77c3cf1be959d0a2ab2c40cf12298e172954cb46']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:36:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fd1-1cc4-470e-bda6-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:05.000Z",
            "modified": "2016-02-19T02:37:05.000Z",
            "description": "Automatically added (via 60b24e748a64264f4fae9f16b2ca23c2)",
            "pattern": "[file:hashes.SHA256 = 'fe4ed5345356d09eeda4820ac62837d1281f84905859e4cacbc9164317a4dfd6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fd9-b9dc-4db3-873d-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:13.000Z",
            "modified": "2016-02-19T02:37:13.000Z",
            "description": "Automatically added (via 60d0e01b425cd91f836f0b8a7ad0774e)",
            "pattern": "[file:hashes.SHA256 = '800b3c2af68347c68e9b546dc3eb4f62ef6b03afdc982c75466d9a0ddc56aaf4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fe2-2ce4-4665-9eda-487a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:22.000Z",
            "modified": "2016-02-19T02:37:22.000Z",
            "description": "Automatically added (via 61585d25112c90331cc1d90e4e0f7693)",
            "pattern": "[file:hashes.SHA256 = '8a8945b8c64918ef79c12296433f210db718d1edc997a3c4eaf5993ffbe9925a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67fea-0240-472d-ab52-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:30.000Z",
            "modified": "2016-02-19T02:37:30.000Z",
            "description": "Automatically added (via 6171344636619d697a634d9f17f2ec78)",
            "pattern": "[file:hashes.SHA256 = '0242a6aa7ea740f3d84a84f37286e3939d6990c8c4434a58ddc69b387252f7ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ff2-a894-4777-add3-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:38.000Z",
            "modified": "2016-02-19T02:37:38.000Z",
            "description": "Automatically added (via 61715df14430272c3919c798303c8404)",
            "pattern": "[file:hashes.SHA256 = 'ebc4d7174ddcf06e659fb6fc0ea4ef1041da6c7390f3ffdf2b271a6b8856718b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c67ffa-a898-484b-868e-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:46.000Z",
            "modified": "2016-02-19T02:37:46.000Z",
            "description": "Automatically added (via 61855d7984394af22608d72746ef3a29)",
            "pattern": "[file:hashes.SHA256 = '967b2088691f8cf0a05530833a474389581a8cb25c39eb28c90abe106e214f3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68002-52d8-4321-9a13-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:37:54.000Z",
            "modified": "2016-02-19T02:37:54.000Z",
            "description": "Automatically added (via 61899ae0740bd011b764c0edce2f5ee2)",
            "pattern": "[file:hashes.SHA256 = 'c92df5b635d4f6d3ca7b9a5405664565d82ef9a7f0427d5d419e8620ccf02fa0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:37:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6800a-5c34-47f0-93fe-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:02.000Z",
            "modified": "2016-02-19T02:38:02.000Z",
            "description": "Automatically added (via 62465a99bc0167e4062847b8f92e87db)",
            "pattern": "[file:hashes.SHA256 = '3f9afb9baf317173e43f935dfab9472575afe2e1e11ace460829d07f6a978632']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68013-2b20-4f02-97ef-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:11.000Z",
            "modified": "2016-02-19T02:38:11.000Z",
            "description": "Automatically added (via 62711722512617a63145df4d7bd3ed78)",
            "pattern": "[file:hashes.SHA256 = 'bbea365462cb202ff9ac0543dfb80e8c6f7a297371a1fa003d9923df96c5e481']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6801c-01fc-4845-a7a6-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:20.000Z",
            "modified": "2016-02-19T02:38:20.000Z",
            "description": "Automatically added (via 6276a32e4bbfaad7bbf5f53c576c42a2)",
            "pattern": "[file:hashes.SHA256 = '2ab8937f9d73918f36d1e76c89b453e39e7907c4b7be5538b360051a5530fd71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68025-51bc-47af-b4b2-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:29.000Z",
            "modified": "2016-02-19T02:38:29.000Z",
            "description": "Automatically added (via 62a844486cd21c8dd3c82d9d802e365f)",
            "pattern": "[file:hashes.SHA256 = 'a12f4855f4788a288598b28d94129e8437fb86ad5300f96b91c2a521fec5d511']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6802e-a774-4342-9f9c-4f77950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:38.000Z",
            "modified": "2016-02-19T02:38:38.000Z",
            "description": "Automatically added (via 62d2f6a93da9d0fa731b54e341f2ee5b)",
            "pattern": "[file:hashes.SHA256 = 'f9f165d6efbf673b99ca0b64a9ce1976020022f26a881d392a100539414425cb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68036-0b9c-4fa3-989d-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:46.000Z",
            "modified": "2016-02-19T02:38:46.000Z",
            "description": "Automatically added (via 62fa5fe07bdbb0ca8b57837b2df1e573)",
            "pattern": "[file:hashes.SHA256 = 'e62b76a0fee8cb54cb02270b4d83baaa0e8b14389bf0e1c646c96a4ba6c5d92f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6803e-eea4-4326-82bb-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:38:54.000Z",
            "modified": "2016-02-19T02:38:54.000Z",
            "description": "Automatically added (via 6309611e0bf6d343d1a98fd7875d10b3)",
            "pattern": "[file:hashes.SHA256 = 'cf64e9698c6c6380da47613c4ec67084498d04541f1ad82b5a6eb68b28d7c849']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:38:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68046-78b0-4964-9c8c-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:02.000Z",
            "modified": "2016-02-19T02:39:02.000Z",
            "description": "Automatically added (via 63387c03369a0b18008b51ad79557063)",
            "pattern": "[file:hashes.SHA256 = 'cd3bd6228df330e341eb0816878ced88ced3d2af17ebbdb567fcc439f4e0d67c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6804f-134c-481e-9d61-4dc6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:11.000Z",
            "modified": "2016-02-19T02:39:11.000Z",
            "description": "Automatically added (via 6350fafe9dbfcd0e926ad177a7929c77)",
            "pattern": "[file:hashes.SHA256 = 'b4d809db7acee768796d2e99e6fb21f0fcd15c0b68ce29e7dbd869e38eec2804']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68057-7684-40df-82e9-41e5950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:19.000Z",
            "modified": "2016-02-19T02:39:19.000Z",
            "description": "Automatically added (via 6351d22825d6539944ded313ea5f2b08)",
            "pattern": "[file:hashes.SHA256 = 'ed95b9f4165aa02a4b88f04e1eb112e367e8c45e24b9ab18b497ecd3db103bf5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6805f-08dc-4192-8d1f-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:27.000Z",
            "modified": "2016-02-19T02:39:27.000Z",
            "description": "Automatically added (via 63753079dc6a5d2fc6d65ef9136bf904)",
            "pattern": "[file:hashes.SHA256 = '162bf4bcbfad431adb9366e16a48d28af88fe7acc9ffaeb0516f7c0f9db9a930']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68068-0de8-4000-8a7d-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:36.000Z",
            "modified": "2016-02-19T02:39:36.000Z",
            "description": "Automatically added (via 63a78423be4006a70dacd1d9a23f8c43)",
            "pattern": "[file:hashes.SHA256 = '0aab2e865845f50e4e40f11ed9d2b9a0e2ee5c804f53f7c1eb374129f65f043f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68070-6834-45bd-920f-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:44.000Z",
            "modified": "2016-02-19T02:39:44.000Z",
            "description": "Automatically added (via 63afcc988580d0931b5c74c0095700e2)",
            "pattern": "[file:hashes.SHA256 = '21c04337dab0f07b4eeac70b66681d84e1ba62668c5412035516101f6772679e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68078-0c14-4dbb-985c-45ce950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:39:52.000Z",
            "modified": "2016-02-19T02:39:52.000Z",
            "description": "Automatically added (via 63ef6a174f444de00765566a6dcf23ed)",
            "pattern": "[file:hashes.SHA256 = '97d3c0155bcc6f75d72eb51bca57441fbff245146634d55bf9eda01754b2bb40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:39:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68081-7b0c-42fc-a31b-4dcd950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:01.000Z",
            "modified": "2016-02-19T02:40:01.000Z",
            "description": "Automatically added (via 63f2453b68acf7e99064b7e7e70da832)",
            "pattern": "[file:hashes.SHA256 = '44456da629003c34cae818f6289e4cdf4034959ec27d262759907c2c7f3df4c5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6808a-b96c-438f-b892-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:10.000Z",
            "modified": "2016-02-19T02:40:10.000Z",
            "description": "Automatically added (via 6428908970adf820bb09b25bf47f8f8a)",
            "pattern": "[file:hashes.SHA256 = 'd1f019e5618ce37d25bfcb815ebc09561c967d98e4f18735d59d7ab87579427a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68092-b114-452b-bb5d-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:18.000Z",
            "modified": "2016-02-19T02:40:18.000Z",
            "description": "Automatically added (via 6442a0e60abf3c3bdfce7435e9161e45)",
            "pattern": "[file:hashes.SHA256 = '844ba9e3fc8d298ff18ad28e27d661cb10b44e5db7db4d644102f713f0279d29']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6809b-ad98-4668-913f-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:27.000Z",
            "modified": "2016-02-19T02:40:27.000Z",
            "description": "Automatically added (via 645d2c84535267e4982e06920d95b4d7)",
            "pattern": "[file:hashes.SHA256 = '1c9f082dfca84937de18eb36a88f2ad34fb9ba8dc9b8b3d0f28addefc6b69f28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680a3-7c30-47e9-bbfb-4069950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:35.000Z",
            "modified": "2016-02-19T02:40:35.000Z",
            "description": "Automatically added (via 649cdfd5ac763df955bb37c196c5310d)",
            "pattern": "[file:hashes.SHA256 = 'dd06ff5d962090b53ff7de2b765316fdbe7948fba86e36357eba2b4eeb14706f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680ab-070c-4844-829f-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:43.000Z",
            "modified": "2016-02-19T02:40:43.000Z",
            "description": "Automatically added (via 649e3ab10fd1872a3fc5045786fe976e)",
            "pattern": "[file:hashes.SHA256 = '4ed998a1ac7c4f3bba2eea058723b8c5329e4da5165d02940922c5d5bff665b3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680b4-6030-4698-8b43-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:40:52.000Z",
            "modified": "2016-02-19T02:40:52.000Z",
            "description": "Automatically added (via 64f5cfa09f7b1d0500cf723849bb54bc)",
            "pattern": "[file:hashes.SHA256 = 'e61d4930a369b55c3345596a83133290fdb8f68e045f858ecca956927784990e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:40:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680bd-d348-4beb-8074-4ce6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:01.000Z",
            "modified": "2016-02-19T02:41:01.000Z",
            "description": "Automatically added (via 65553580bc75d69a6b4499e932a90f75)",
            "pattern": "[file:hashes.SHA256 = 'ff4570a5779b7e3b15707c851ee8e6e1a5eea15a953f3e4fc3fed37f294d0bc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680c6-eb94-4686-b521-4a6f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:10.000Z",
            "modified": "2016-02-19T02:41:10.000Z",
            "description": "Automatically added (via 6591f3d21b9b7c84a4949a40416f10ab)",
            "pattern": "[file:hashes.SHA256 = '77db40544b8489f16557ae22a889ba453e078691ccaf4109edee55ab135fc74f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680cf-8570-4c2e-8e50-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:19.000Z",
            "modified": "2016-02-19T02:41:19.000Z",
            "description": "Automatically added (via 659351d021e216d4329a76fb558da7d3)",
            "pattern": "[file:hashes.SHA256 = '81e962356797c4f613fe3badec21c4c442d624070e8049f75b83cda08d1c1163']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680d8-03d8-498c-9499-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:28.000Z",
            "modified": "2016-02-19T02:41:28.000Z",
            "description": "Automatically added (via 65e82c099ac7526e1ae8d17c50234a6c)",
            "pattern": "[file:hashes.SHA256 = '11d5bcd5a18c7ce849b1e131c8871115285c34cc1d8161e3cf6ceba1c85e9b0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680e2-7334-4d45-9618-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:38.000Z",
            "modified": "2016-02-19T02:41:38.000Z",
            "description": "Automatically added (via 661af3ede4240c9320d8aa8132158a89)",
            "pattern": "[file:hashes.SHA256 = '231bf93703d71ee3adddc1e1ef74104a3892f222102504a60574981e4b5df5a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680eb-7150-437a-b906-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:47.000Z",
            "modified": "2016-02-19T02:41:47.000Z",
            "description": "Automatically added (via 66305e65d0feafa5933c2ade06bb4041)",
            "pattern": "[file:hashes.SHA256 = '02b1c186609fb367f3641ee4cfba1e7d915555773ca2bb43b6970f93728adb48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680f5-e044-4d41-b07c-4e56950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:41:57.000Z",
            "modified": "2016-02-19T02:41:57.000Z",
            "description": "Automatically added (via 664cec0ae7bcf4b3c079b0bfa67d56ad)",
            "pattern": "[file:hashes.SHA256 = '77d826d6def6878be12217ea939a127f58fdeaa9848ce6b0b985f3c5e9477e74']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:41:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c680fe-7da0-43c6-ba12-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:06.000Z",
            "modified": "2016-02-19T02:42:06.000Z",
            "description": "Automatically added (via 6660e25213dfca8e51bd9150f548ae0b)",
            "pattern": "[file:hashes.SHA256 = 'e875a00257a01768408b34c99cf86839e1e634187659d42bc7f2524c09acd525']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68108-80f8-40cf-a765-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:16.000Z",
            "modified": "2016-02-19T02:42:16.000Z",
            "description": "Automatically added (via 669491dda16b3ac078d878575b5ec585)",
            "pattern": "[file:hashes.SHA256 = '9bbd8ca442ec27ba5af60d3a90f0205e8643d3151f266e9860e47b02e982b903']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68112-257c-47f7-9bf5-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:26.000Z",
            "modified": "2016-02-19T02:42:26.000Z",
            "description": "Automatically added (via 66aae26b41db39c7fe70705456e9cbee)",
            "pattern": "[file:hashes.SHA256 = 'f95469fb9f2a52346298476503570e35c5d95a33a6dbaecb253db884626c85b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6811b-2b50-4844-bd5f-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:35.000Z",
            "modified": "2016-02-19T02:42:35.000Z",
            "description": "Automatically added (via 66b271ec0849849ff7b2548af6dd824a)",
            "pattern": "[file:hashes.SHA256 = '1a5670c9f3776736cb8c9760a6f82f45fc8eeb1ee572498c7a4749a161db6805']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68124-1d7c-4309-9d97-4b5a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:44.000Z",
            "modified": "2016-02-19T02:42:44.000Z",
            "description": "Automatically added (via 6739304f1db705ec40bb560c84a22b3f)",
            "pattern": "[file:hashes.SHA256 = 'edb4c7e249541a06c59a9deed67c3a198ac666f637ec1f64388501599a1d98ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6812c-e4f4-42c3-90b6-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:42:52.000Z",
            "modified": "2016-02-19T02:42:52.000Z",
            "description": "Automatically added (via 6744bbf302c735fd7c73e19d805cb018)",
            "pattern": "[file:hashes.SHA256 = '19d45e5d95f17d3961890ed5241b39bb52a18f51bae458ba845693dc4adb3837']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:42:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68135-2de4-4798-a169-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:01.000Z",
            "modified": "2016-02-19T02:43:01.000Z",
            "description": "Automatically added (via 67478481b5b749f1c6ad1e0517cba15b)",
            "pattern": "[file:hashes.SHA256 = 'bce82557b429766047cade1ba4055bdb9f01de96a32ad006b0e724c981964277']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6813e-add0-4ba1-b393-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:10.000Z",
            "modified": "2016-02-19T02:43:10.000Z",
            "description": "Automatically added (via 676395b6bb8253d113feb602f3b9d7ea)",
            "pattern": "[file:hashes.SHA256 = '5a0080d0fce13fbea5318663761637669665b6a4de02578e08c8b928f248993a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68148-dd4c-44ec-8ce6-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:20.000Z",
            "modified": "2016-02-19T02:43:20.000Z",
            "description": "Automatically added (via 68b6687c28bf2ba97e473e97bd948f19)",
            "pattern": "[file:hashes.SHA256 = 'd07bddcf27f7f954215fa924fe7d3f04d8b348da6137bec30acb43d88035402d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68153-1080-41a2-8922-4af7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:31.000Z",
            "modified": "2016-02-19T02:43:31.000Z",
            "description": "Automatically added (via 694fcf4c494375cea82e727d2fca3616)",
            "pattern": "[file:hashes.SHA256 = '06bff897eb4b6aeec3fbfedc4af97258afa7682f4519dd0a0f6009f8b17e73d6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6815d-6814-4dce-a43e-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:41.000Z",
            "modified": "2016-02-19T02:43:41.000Z",
            "description": "Automatically added (via 6953f552d08985ef2e8d4deee8c59baf)",
            "pattern": "[file:hashes.SHA256 = '01a2696e15cca323f438bfcec42eb38b3ac05afaa283fc482b135b9ef54cdb44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68168-662c-44cd-93a8-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:43:52.000Z",
            "modified": "2016-02-19T02:43:52.000Z",
            "description": "Automatically added (via 699f1ebc6fd7881c0b7943930286144d)",
            "pattern": "[file:hashes.SHA256 = 'b8e04ddbfd35c0ef73bb9068603b902484a4b57ade54f5487981d0cef5d7341e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:43:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68171-e660-4d6b-93dd-40eb950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:01.000Z",
            "modified": "2016-02-19T02:44:01.000Z",
            "description": "Automatically added (via 69bc2188c29b1852bc1b376a0116e2a0)",
            "pattern": "[file:hashes.SHA256 = '23ace358c0646b5862395632068f6ceea917799b83543c80c30999aaafa1fb03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6817b-b170-477b-a1ed-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:11.000Z",
            "modified": "2016-02-19T02:44:11.000Z",
            "description": "Automatically added (via 6a23195821c68de443ba6b76448784da)",
            "pattern": "[file:hashes.SHA256 = '32dddb51ab113e1437dd58380aed6bf96efba89e755a64febf8ce97c158ad4d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68184-d528-41e6-97be-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:20.000Z",
            "modified": "2016-02-19T02:44:20.000Z",
            "description": "Automatically added (via 6a6244118378d4f205ceb425743ee6af)",
            "pattern": "[file:hashes.SHA256 = '6972f672ee097449b7e6d387e34a00c6e85c9d844df7f046ff722fe67936a63a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6818e-68e0-485b-b2ef-4ced950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:30.000Z",
            "modified": "2016-02-19T02:44:30.000Z",
            "description": "Automatically added (via 6aab72f6454f46e632c0aa9cc3cba184)",
            "pattern": "[file:hashes.SHA256 = 'b99bff5a7ccb1bf878c958ccd724139e3dc2be8e1351a18deb40a1fdb63fcc7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68197-18a4-441b-812b-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:39.000Z",
            "modified": "2016-02-19T02:44:39.000Z",
            "description": "Automatically added (via 6ad6618466429bd61ab7217c94f38c73)",
            "pattern": "[file:hashes.SHA256 = 'b7f4662b5072be82ce7524603e42758a14e71b8714d931257e2815c389dfc260']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681a1-d66c-48ca-9120-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:49.000Z",
            "modified": "2016-02-19T02:44:49.000Z",
            "description": "Automatically added (via 6b5cdaf09a00b83ceac915d1ea75c692)",
            "pattern": "[file:hashes.SHA256 = '8e048b97f7b384d3c0bf43bb1fbc16606467f30c366ccf733982b715a76e40a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681ab-292c-4ece-a428-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:44:59.000Z",
            "modified": "2016-02-19T02:44:59.000Z",
            "description": "Automatically added (via 6c1e8df569e8b2799ecdd0bc1b390f2c)",
            "pattern": "[file:hashes.SHA256 = '84a24ee34da417d012a46dfb327b990bfc0582aab07b0abec144d2a7d97e89a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:44:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681b4-ef40-4a02-98e5-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:08.000Z",
            "modified": "2016-02-19T02:45:08.000Z",
            "description": "Automatically added (via 6d029b7ecd09296440caf7f75d41a6b0)",
            "pattern": "[file:hashes.SHA256 = 'd8f91d0e749c8920bf682eb559206d37709d206f851d575384b1deb251020f64']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681be-ea84-43a6-8595-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:18.000Z",
            "modified": "2016-02-19T02:45:18.000Z",
            "description": "Automatically added (via 6d0f75e9d35dd718e2379be464814595)",
            "pattern": "[file:hashes.SHA256 = '82546403ca90db67f017de42ce47d0d6462821b594a3a0dd24074c51bc573c63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681c7-e9f8-4364-80ea-4395950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:27.000Z",
            "modified": "2016-02-19T02:45:27.000Z",
            "description": "Automatically added (via 6d2d41fe8e4590a4b5c2ab7b6cc066fd)",
            "pattern": "[file:hashes.SHA256 = '6703edd98648ba624eb1f5b357cc6bcf7ab3f0372de12196ca13344b5939c384']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681d1-c75c-4926-9e76-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:37.000Z",
            "modified": "2016-02-19T02:45:37.000Z",
            "description": "Automatically added (via 6d31bd9369ecd340b728c47458661a71)",
            "pattern": "[file:hashes.SHA256 = '7146b0b66dc69cf7eb29a0215ce1a771da2eefe105064557e22ebaf81426636e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681da-6740-4d4e-8eb8-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:46.000Z",
            "modified": "2016-02-19T02:45:46.000Z",
            "description": "Automatically added (via 6d341f94814948b487f998dd2b5e5919)",
            "pattern": "[file:hashes.SHA256 = '6bfc7314da3be67f7d14891014ed9668af4513baa95be8220cad32a03c343d88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681e4-e298-4e27-868a-4428950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:45:56.000Z",
            "modified": "2016-02-19T02:45:56.000Z",
            "description": "Automatically added (via 6d8282a88c693ceabe0c61ac1dd8af64)",
            "pattern": "[file:hashes.SHA256 = '98e8bcfbb91b961480c9d53ae898a1deee7e4215b5d10bd5944822f7922cde20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:45:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681ee-b26c-4c0f-9579-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:06.000Z",
            "modified": "2016-02-19T02:46:06.000Z",
            "description": "Automatically added (via 6de8c91e4affc1852e1b277035496053)",
            "pattern": "[file:hashes.SHA256 = '61820a3f27a7e5fb2b75cb99903b89c80a0b7d58dd3f1288cf1903b29a7cd178']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c681f8-2c9c-4d98-8065-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:16.000Z",
            "modified": "2016-02-19T02:46:16.000Z",
            "description": "Automatically added (via 6ded244e76931be71177001fa4c1fc6f)",
            "pattern": "[file:hashes.SHA256 = '48cd6d1dc86d7566a160ac04c6525e2a912e40847a7d90eef1c5210a1df3aef8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68201-8a78-4a5a-88ab-47d6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:25.000Z",
            "modified": "2016-02-19T02:46:25.000Z",
            "description": "Automatically added (via 6e408cd3b6e32c0ee073aa43bcfd4ea6)",
            "pattern": "[file:hashes.SHA256 = '051619a00935a0bb6956c1c2700646fba9a4b4c3cad50ba02cecbf3bc348a87a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6820b-7c08-47cb-9222-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:35.000Z",
            "modified": "2016-02-19T02:46:35.000Z",
            "description": "Automatically added (via 6e4ccd9bfecfa328c559018c600a1cba)",
            "pattern": "[file:hashes.SHA256 = 'ad3a8608e0dbb97c7e45a96f2939b6d3532290b121f633dcfb39fdc2c02eaedd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68215-2d5c-4eaa-8830-4187950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:45.000Z",
            "modified": "2016-02-19T02:46:45.000Z",
            "description": "Automatically added (via 6e8747bfa3f07a0763a4ce12cfbcaee5)",
            "pattern": "[file:hashes.SHA256 = '490603db3f93d539b3b69e16daeac39801f5d9a9348ee18e20408d9d9b45cac3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6821f-ffe8-437f-8f90-46e2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:46:55.000Z",
            "modified": "2016-02-19T02:46:55.000Z",
            "description": "Automatically added (via 6ee00ae41ec5d34d801937b42edf7255)",
            "pattern": "[file:hashes.SHA256 = '8e69828f1a0a3368f820563f55b214bbfac6baf51edebe9ef134d93a3f594a50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:46:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68228-020c-4031-90c5-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:04.000Z",
            "modified": "2016-02-19T02:47:04.000Z",
            "description": "Automatically added (via 6ee80b1f795689193fab16554fecfc73)",
            "pattern": "[file:hashes.SHA256 = '8292048d2fe450684a4c8c25d2ef9cf77de0f0cfe7233274489ae6ac3a300a94']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68231-3c20-4b28-b5df-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:13.000Z",
            "modified": "2016-02-19T02:47:13.000Z",
            "description": "Automatically added (via 6ef75c52444b75c6d36acc23bab04a1a)",
            "pattern": "[file:hashes.SHA256 = 'b453b437463e1e67199ab891504503f2afd7d047fc426f6268c9d7f6a2767a79']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6823b-b3b0-45b9-afe0-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:23.000Z",
            "modified": "2016-02-19T02:47:23.000Z",
            "description": "Automatically added (via 6f0059c09d2647d36d4040dbe18d9b59)",
            "pattern": "[file:hashes.SHA256 = '2363eb411ac4a313f1cf4b767f2d41f1a34e7d4db16a3c32df2628e20ce48e0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68245-4f54-40a5-ba51-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:33.000Z",
            "modified": "2016-02-19T02:47:33.000Z",
            "description": "Automatically added (via 6f4ba5101e475428da2039a439de5098)",
            "pattern": "[file:hashes.SHA256 = '53a7013168f1a35d59457b43ea0b01a2e1c98276a54f1f4d7b6b1d1dd1845ff7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6824f-bf38-4210-9228-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:43.000Z",
            "modified": "2016-02-19T02:47:43.000Z",
            "description": "Automatically added (via 6f66ffacc1011bfdd4a4d0b3abc356c8)",
            "pattern": "[file:hashes.SHA256 = 'b496cf271aa523004388f9242b7d9630ed234fc3748836fc8beeb21aafd5a15a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68258-45ac-4d05-bab5-4e17950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:47:52.000Z",
            "modified": "2016-02-19T02:47:52.000Z",
            "description": "Automatically added (via 6f7fc54b43b725e0038d83d005e5984e)",
            "pattern": "[file:hashes.SHA256 = 'c2c83664ef33eb72f6d790267584e4a1a743253b9aff6f7b86846329f801c929']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68263-a134-4c13-8873-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:03.000Z",
            "modified": "2016-02-19T02:48:03.000Z",
            "description": "Automatically added (via 706815c4636c0cc86d1d00cfe27fd018)",
            "pattern": "[file:hashes.SHA256 = '281c78d0d627e298fbfc02d7ffa63be21ce892808dc1439577947221a7ddc540']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6826c-0db0-455d-b71c-480c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:12.000Z",
            "modified": "2016-02-19T02:48:12.000Z",
            "description": "Automatically added (via 70e4943f44bf3bd3f1743303e3a4d0f7)",
            "pattern": "[file:hashes.SHA256 = '0bde96fd68df89ea902662bd55709b4912f06ceadfdab0e19796df87b01ed28c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68276-4690-476f-b1bb-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:22.000Z",
            "modified": "2016-02-19T02:48:22.000Z",
            "description": "Automatically added (via 713d9d30d1c7f3db3b332e37de83f020)",
            "pattern": "[file:hashes.SHA256 = '2c34c787652a7d75c01ecfbb158b6aa9c49b69cb5d5fc5bc58b038ac0fe3f741']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68281-e3b4-4ecd-ac7d-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:33.000Z",
            "modified": "2016-02-19T02:48:33.000Z",
            "description": "Automatically added (via 71c9337aa440174dec4c18adfd7b8d5a)",
            "pattern": "[file:hashes.SHA256 = 'a10b11f115d10b9d0c78de3ce0a8fd357bca41b173a3c544c5b0a0dacf909c21']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6828c-2de4-435a-9d6a-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:44.000Z",
            "modified": "2016-02-19T02:48:44.000Z",
            "description": "Automatically added (via 71e537385b2a0ee22c671bbcd2b208cb)",
            "pattern": "[file:hashes.SHA256 = '0abb431512fe88be34f4fc207a9ff67ca5be325827eaf30cc3d05dfd37122739']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68297-621c-4d31-b646-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:48:55.000Z",
            "modified": "2016-02-19T02:48:55.000Z",
            "description": "Automatically added (via 721dcd256be01a8c59f4229a83bb053c)",
            "pattern": "[file:hashes.SHA256 = '450aba7555c66c5d24114967534237c80925d9822849d41ae1102ce7463ba416']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:48:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682a1-1028-45d9-8e98-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:05.000Z",
            "modified": "2016-02-19T02:49:05.000Z",
            "description": "Automatically added (via 72a5a130fdd7c4032781a1d58fed9af7)",
            "pattern": "[file:hashes.SHA256 = 'd6fa476c2f61c0f9c64993b7d1fb239a3332a46eadf21688e7edf9d95b30f733']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682ab-e038-41d9-aa8e-4cbf950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:15.000Z",
            "modified": "2016-02-19T02:49:15.000Z",
            "description": "Automatically added (via 72aa176d310d8b6334eba59db4568ee1)",
            "pattern": "[file:hashes.SHA256 = '67b007dbca4f2e0257ddf10da3ad1c9f28af037448f076aa5439daa7e5a19c89']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682b5-6b48-40df-98c6-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:25.000Z",
            "modified": "2016-02-19T02:49:25.000Z",
            "description": "Automatically added (via 72f1b61aa8a12d2ce7f9ef94925d9a76)",
            "pattern": "[file:hashes.SHA256 = 'cbadaf94878bbae9ce69d8c159c0173f63d0b094c747156edd4d14ed07d0db16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682bf-2038-4ca4-be4d-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:35.000Z",
            "modified": "2016-02-19T02:49:35.000Z",
            "description": "Automatically added (via 730a9a2eaa4a33bf9f0bcccc72e65b5a)",
            "pattern": "[file:hashes.SHA256 = '07f3b4dba8311786a8b6023e2006de7d9b6672e97d30a059ad9953e565aa8f5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682c9-29ac-4b4c-b7e9-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:45.000Z",
            "modified": "2016-02-19T02:49:45.000Z",
            "description": "Automatically added (via 733679a83a0dfe2da4aebb26f237f096)",
            "pattern": "[file:hashes.SHA256 = '461ac38816a929e8423179e4803a2096917ca8a12c95de63d4cd0ee1d66912ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682d3-86d8-465d-8bde-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:49:55.000Z",
            "modified": "2016-02-19T02:49:55.000Z",
            "description": "Automatically added (via 73556660c0f2ad42974fb309f01a45a1)",
            "pattern": "[file:hashes.SHA256 = 'cbd5db7d993b66f743c4a0037266f549dcc85c803023c52c77409fe08d88c85c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:49:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682dc-a5a8-48c4-ad6d-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:04.000Z",
            "modified": "2016-02-19T02:50:04.000Z",
            "description": "Automatically added (via 737ad50c27a64287b911a9ecad99a362)",
            "pattern": "[file:hashes.SHA256 = 'fb60393ea834e8a9b426641ce3ee245a8b59c0bf9bd8580e4bdc4df19e8ea95d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682e6-8f24-472f-8a2d-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:14.000Z",
            "modified": "2016-02-19T02:50:14.000Z",
            "description": "Automatically added (via 73860601876c0db8e8226be6d8e886a9)",
            "pattern": "[file:hashes.SHA256 = '08a28bc7572158c1bd18a6734ce5d8204ccdd848d5271606a6646a1cb09901f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682ef-76f0-4029-8f14-425f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:23.000Z",
            "modified": "2016-02-19T02:50:23.000Z",
            "description": "Automatically added (via 738d6a9ed10051868d025dd638ca0302)",
            "pattern": "[file:hashes.SHA256 = '61734f86a477ce4a9ff848ac303fb487b959f5a8a8ee21fae3d732c45350b4a4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c682f9-6f5c-4bb1-a819-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:33.000Z",
            "modified": "2016-02-19T02:50:33.000Z",
            "description": "Automatically added (via 73a88fbb19ee7d08d7c13a5cf8bbd0a1)",
            "pattern": "[file:hashes.SHA256 = 'fb9990b7d935078d982682dc152171b1940af1925ef3f789a1fabe1d9c8b007b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68302-7f4c-41b6-8ec5-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:42.000Z",
            "modified": "2016-02-19T02:50:42.000Z",
            "description": "Automatically added (via 7452948372e58f80d9404640f6ea87c0)",
            "pattern": "[file:hashes.SHA256 = 'e94745332601452bdd93321f15ac5d525074177ce987cba71d66c9adcfc1748e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6830b-45f4-4cb5-9328-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:50:51.000Z",
            "modified": "2016-02-19T02:50:51.000Z",
            "description": "Automatically added (via 745450aefc4b6b9d8e039ddd2ea784db)",
            "pattern": "[file:hashes.SHA256 = 'fbe42773c1de87c88c567f77f2c9e2f25de2bca600eff57f28cba4a8674441f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:50:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68314-3fb8-4675-8633-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:00.000Z",
            "modified": "2016-02-19T02:51:00.000Z",
            "description": "Automatically added (via 7489435adccf5344738a3bfb3e0d184c)",
            "pattern": "[file:hashes.SHA256 = 'bc49fc872b0842661d48ecb3a6d35156d09c2fb825f95850c43fa3f073684e38']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6831c-4bbc-4a64-a5b9-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:08.000Z",
            "modified": "2016-02-19T02:51:08.000Z",
            "description": "Automatically added (via 74cdcee5b0ecb15e12464ced94d5e5e3)",
            "pattern": "[file:hashes.SHA256 = '0fea71185df98f4e6030f089d7a51b54b36b61ace8242a459e9715735313d66a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68325-2068-4c98-97fa-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:17.000Z",
            "modified": "2016-02-19T02:51:17.000Z",
            "description": "Automatically added (via 74dc44ec5607dab2315b817756283755)",
            "pattern": "[file:hashes.SHA256 = '691135f17bdff0aeb534910ff73a863cffcbd9b08904ffe591e34c0406675b1f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6832e-7608-4ba8-98e7-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:26.000Z",
            "modified": "2016-02-19T02:51:26.000Z",
            "description": "Automatically added (via 7534d5c418f5b0d5b7937f6a8733e28c)",
            "pattern": "[file:hashes.SHA256 = 'c95df58176bf28f00ac56a0867fff07612d16141ada7f1b58bd835bd261bb0f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68337-02c8-47e0-8184-42ab950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:35.000Z",
            "modified": "2016-02-19T02:51:35.000Z",
            "description": "Automatically added (via 75be6fd319183e9eeff7247ce44de97f)",
            "pattern": "[file:hashes.SHA256 = '4909116683e9947fc3bf4f0c3204a0266a8d437ce4bd91f7f659852a992a4a6f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68340-d330-4b7b-b83b-4341950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:44.000Z",
            "modified": "2016-02-19T02:51:44.000Z",
            "description": "Automatically added (via 76402e5f7b65508628b1493be4f5e16f)",
            "pattern": "[file:hashes.SHA256 = 'b2ed279dbfda01e921d993f8fcbbccef948d7cb312b67d8bd5e45400481c8817']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68349-8ba0-4f32-9b22-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:51:53.000Z",
            "modified": "2016-02-19T02:51:53.000Z",
            "description": "Automatically added (via 7667ca9ed6154684ec3f12cef816bb1f)",
            "pattern": "[file:hashes.SHA256 = '580fbd325f3167920adf7fa02578bbda65e916fb6215ca5303fcda0b4bc7dbbd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:51:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68354-966c-4da5-9ab0-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:04.000Z",
            "modified": "2016-02-19T02:52:04.000Z",
            "description": "Automatically added (via 77014601da5648514ee3174d35a5fb77)",
            "pattern": "[file:hashes.SHA256 = '4940f846c8e0420798e68518c432e42d3fa48220567184e2b0c19b555001e428']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6835e-5ab0-4457-a789-4268950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:14.000Z",
            "modified": "2016-02-19T02:52:14.000Z",
            "description": "Automatically added (via 77538c93a4b609482a44d8ddf5077768)",
            "pattern": "[file:hashes.SHA256 = 'f83bd32c10bc49d70395213110448023d144893b199508dc4322cc09fec33705']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68369-5c58-4df5-8b91-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:25.000Z",
            "modified": "2016-02-19T02:52:25.000Z",
            "description": "Automatically added (via 775bf30117b411863bf85ce2c2c09a7b)",
            "pattern": "[file:hashes.SHA256 = '4a6c6c295a9a22b5b71cfb3b1cfec2f5da2a6a36a654c3b9429a7b02825939e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68374-5a0c-4d90-b2e3-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:36.000Z",
            "modified": "2016-02-19T02:52:36.000Z",
            "description": "Automatically added (via 7810fdbd1e4ecc5fe85d3f2fef5268fb)",
            "pattern": "[file:hashes.SHA256 = '4e9f01b6cd365d4ca84cf9574ab81506330007dcd956010abaf1eff40ebf0fea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6837e-93d4-4e37-a33f-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:46.000Z",
            "modified": "2016-02-19T02:52:46.000Z",
            "description": "Automatically added (via 78a0e765dab05219834e5b4841f2ba62)",
            "pattern": "[file:hashes.SHA256 = '695f20cd0f068dc20832979913fcb82fd47d9344e8b3231387ffb105c93be2d9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68387-14f8-41e1-b9f6-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:52:55.000Z",
            "modified": "2016-02-19T02:52:55.000Z",
            "description": "Automatically added (via 78be81777132ccb3c5588970b11fed72)",
            "pattern": "[file:hashes.SHA256 = 'c26431e8d0285fd2feaf1ba2523372292751edf5566388216afb9fa7297862a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:52:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68390-7bb0-412e-8427-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:04.000Z",
            "modified": "2016-02-19T02:53:04.000Z",
            "description": "Automatically added (via 78cb2b48acc04000177a4cedd1ca799f)",
            "pattern": "[file:hashes.SHA256 = '3860146b723a4cbc3ef1b609a348b090f4ba55a251d078e9b9063cb78bad3359']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68399-1028-4dfb-a26d-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:13.000Z",
            "modified": "2016-02-19T02:53:13.000Z",
            "description": "Automatically added (via 7934ad47736324f3532a63218407f0c7)",
            "pattern": "[file:hashes.SHA256 = 'e8e326d5c8f5d630b2074caab572933d053e5ec7f0a4ca54edb33385d86666bf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683a4-aea0-4d08-8993-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:24.000Z",
            "modified": "2016-02-19T02:53:24.000Z",
            "description": "Automatically added (via 7979a338fdbdde2255361a20b50dcd61)",
            "pattern": "[file:hashes.SHA256 = '0703143cf126d6278f618a68fcb8a5df4ee632e4209b90da9dcd9477fdaa67c6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683ae-9698-4075-8c44-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:34.000Z",
            "modified": "2016-02-19T02:53:34.000Z",
            "description": "Automatically added (via 799159b25b2b844f21c316597d38e874)",
            "pattern": "[file:hashes.SHA256 = 'd41bbee415b4dc9758d4375ffea3d3682249c85939a384fb7e000e8a671133ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683b8-1f50-42b0-8d07-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:44.000Z",
            "modified": "2016-02-19T02:53:44.000Z",
            "description": "Automatically added (via 7a0a0d432159a6e700e2f0b661a82a17)",
            "pattern": "[file:hashes.SHA256 = 'fa31c008b7029289349844390c745d6416fa8c0b68f3a1b1614988baf7d008da']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683c4-b210-4c52-9e36-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:53:56.000Z",
            "modified": "2016-02-19T02:53:56.000Z",
            "description": "Automatically added (via 7a6409ad73854547fb6f506c96549e68)",
            "pattern": "[file:hashes.SHA256 = 'bde1bc56b965c50b18017d8a3cb81ec09a55332e37976d40c617f16156566dfd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:53:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683ce-02c4-4703-9bce-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:06.000Z",
            "modified": "2016-02-19T02:54:06.000Z",
            "description": "Automatically added (via 7ad16ca71797f7282d3902195097295c)",
            "pattern": "[file:hashes.SHA256 = '7027eebd094a52f02e0eaa6392d525e1dad34ba5a537e7fb414d90ed1ad9b53e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683d7-d204-449f-a3d6-4850950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:15.000Z",
            "modified": "2016-02-19T02:54:15.000Z",
            "description": "Automatically added (via 7b05362a5ab6b761f07e1917b439c692)",
            "pattern": "[file:hashes.SHA256 = '5044a568beb9dd03c13c3d0216d9d6119d753d69a95448d37f3a59d52b06e3ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683e1-410c-47e4-abd7-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:25.000Z",
            "modified": "2016-02-19T02:54:25.000Z",
            "description": "Automatically added (via 7b34e2a48203ca737883e219d7dfd986)",
            "pattern": "[file:hashes.SHA256 = '9e7f172be980a0ee19c452fbcc3fd0b5debb4ffd78e7bcc6d3f9b1bebb2d7305']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683e9-ff3c-433e-b2b9-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:33.000Z",
            "modified": "2016-02-19T02:54:33.000Z",
            "description": "Automatically added (via 7b383732c367f69a94091abd839e194a)",
            "pattern": "[file:hashes.SHA256 = '9d42beb9aff4372e1e7d1ded0c0702ebced817e73ba9f6dced9a9d72cfb05295']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683f3-ba64-478e-bf1c-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:43.000Z",
            "modified": "2016-02-19T02:54:43.000Z",
            "description": "Automatically added (via 7b5f570bde189d8e797ab97bea9878ed)",
            "pattern": "[file:hashes.SHA256 = '60e224af615003ff3d43444ae751b67c0a238f08a7039d14b0a1caf69b3b6638']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c683fb-449c-4e29-8035-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:54:51.000Z",
            "modified": "2016-02-19T02:54:51.000Z",
            "description": "Automatically added (via 7b910d8497ff46dc80c6c1765dcbc008)",
            "pattern": "[file:hashes.SHA256 = '1b7be36d435f2b53a06210c35215934375c17e1b6c696c174b6799df93e181aa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:54:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68404-9950-4b38-95fb-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:00.000Z",
            "modified": "2016-02-19T02:55:00.000Z",
            "description": "Automatically added (via 7bb64267b4073795c114dbf1eec3f0d0)",
            "pattern": "[file:hashes.SHA256 = 'd5aad9d9f3f56feb248a8acb8f1a2ebd2a297ca3711945ec02ba90ed1ae815df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6840d-5cbc-4251-b867-47f8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:09.000Z",
            "modified": "2016-02-19T02:55:09.000Z",
            "description": "Automatically added (via 7bcb5e9ad6bc56c263db052483306aa6)",
            "pattern": "[file:hashes.SHA256 = 'e0770d2a2acd24fa6062b0b9c480d92106e5cf608a0fe6a8b5241ef7cb29203d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68417-bf70-4253-9e05-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:19.000Z",
            "modified": "2016-02-19T02:55:19.000Z",
            "description": "Automatically added (via 7c723ebdd25a78fabf7fc564a1a35780)",
            "pattern": "[file:hashes.SHA256 = 'aeb78023340d8f08259cc73a8c6b7e16a8c2d87f3fe32c309be047d099004f97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68420-dfec-4696-892b-4073950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:28.000Z",
            "modified": "2016-02-19T02:55:28.000Z",
            "description": "Automatically added (via 7cb3cc8b74d23ab2635453432a9fdb7d)",
            "pattern": "[file:hashes.SHA256 = '4ee10be8739bea8e551cce6ff0278d687b5ae007a6f7c7b9841eab642a00f99f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68429-dab4-48bf-a287-4bc5950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:37.000Z",
            "modified": "2016-02-19T02:55:37.000Z",
            "description": "Automatically added (via 7d206f173155a715737a9ca4c43dad27)",
            "pattern": "[file:hashes.SHA256 = '6c5b056c6e66e24a9dc130f3a40ce74dea98a9f38f6a133387a8445508ed6d05']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68433-0648-476f-8452-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:47.000Z",
            "modified": "2016-02-19T02:55:47.000Z",
            "description": "Automatically added (via 7d32f40d19f9948daba516a1b7347baf)",
            "pattern": "[file:hashes.SHA256 = '05dd4a8711a073fdb49bd7a9a9e39146050f65862bfd261c5df45c526879f168']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6843c-e7cc-42d4-972e-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:55:56.000Z",
            "modified": "2016-02-19T02:55:56.000Z",
            "description": "Automatically added (via 7e4176000a38daa5579ac2cd2f6ccc2f)",
            "pattern": "[file:hashes.SHA256 = '3672edf8fd13fc57bf2c3f4f49bee9e4eb4d2fbc71e450a92ae07f944a26fede']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:55:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68445-3e2c-459a-88a3-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:05.000Z",
            "modified": "2016-02-19T02:56:05.000Z",
            "description": "Automatically added (via 7e64ada99de09763b9707c296ffc4921)",
            "pattern": "[file:hashes.SHA256 = '4432486d39d3a44a6143465f2ec74ef42dd4ccff8d143d61ec4c84e996a1ec98']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6844e-c708-418a-b2cd-4b88950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:14.000Z",
            "modified": "2016-02-19T02:56:14.000Z",
            "description": "Automatically added (via 7e6f16acc882367e3cb991ad4c57e18f)",
            "pattern": "[file:hashes.SHA256 = '5e6956ef137c3eeab5d051a5ec113a1bd548fd2671df4fed8972847d32528aff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68457-2198-4c37-a99b-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:23.000Z",
            "modified": "2016-02-19T02:56:23.000Z",
            "description": "Automatically added (via 7e8b46859dc8acd1f11de7cdffbb4c95)",
            "pattern": "[file:hashes.SHA256 = '4f3b46c220260656d31d0cceb7deb6f2aeaa89d560df2e9605034e8968594d2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68460-77c4-493f-a526-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:32.000Z",
            "modified": "2016-02-19T02:56:32.000Z",
            "description": "Automatically added (via 7eaa9fa68ac3e513062683a918da77ee)",
            "pattern": "[file:hashes.SHA256 = '2b80b079f3bf6605402fcc63226e46849308757f15f50e9d05f79b50ed622e43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68469-9434-4e30-9b71-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:41.000Z",
            "modified": "2016-02-19T02:56:41.000Z",
            "description": "Automatically added (via 7eb4b6850bfae2604f8cde1e6f254a22)",
            "pattern": "[file:hashes.SHA256 = '778c45cd8c002206f6cce17072d0e41e3108bd1122498c32a01d55a85bb86401']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68473-9014-4be6-b325-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:56:51.000Z",
            "modified": "2016-02-19T02:56:51.000Z",
            "description": "Automatically added (via 7f6268574d0183966a6f1a4f23c2e88a)",
            "pattern": "[file:hashes.SHA256 = '31b3ab22dc3cf718090235b673215b68d07809a1a5535b00319dafe756bd8548']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:56:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6847d-ddd4-41a0-a50e-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:01.000Z",
            "modified": "2016-02-19T02:57:01.000Z",
            "description": "Automatically added (via 7fc34f971d98c9adda7862512c72dd7c)",
            "pattern": "[file:hashes.SHA256 = 'ed298e41a8557af40c88817052966f1371f5df6056cfb4f28c4abe440ade0112']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68487-d540-48c4-95c7-4dcd950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:11.000Z",
            "modified": "2016-02-19T02:57:11.000Z",
            "description": "Automatically added (via 7fd364031618c690a9ac8bfad1f0a165)",
            "pattern": "[file:hashes.SHA256 = '5cfc0e41d0f7b166bb032818869c923f20072533a124e2d4605614a5d9f978ce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68491-c700-4119-9d5f-46ce950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:21.000Z",
            "modified": "2016-02-19T02:57:21.000Z",
            "description": "Automatically added (via 80201986189b1e57f98d7c917af6ba54)",
            "pattern": "[file:hashes.SHA256 = '51a74bae554e5c31f23eac4dfba714ee7bc0421bddcd375ddbde9c902bbc731d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6849a-9da8-4853-8b71-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:30.000Z",
            "modified": "2016-02-19T02:57:30.000Z",
            "description": "Automatically added (via 807d8f33606aba3034a7250718eb89c5)",
            "pattern": "[file:hashes.SHA256 = 'f4b9bd1a3b604d87ef2332bb2a1dd0e11abf5cc7a7a55dc8c2ea6670f4ca7bfa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684a3-3904-4b7a-b7e1-42b3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:39.000Z",
            "modified": "2016-02-19T02:57:39.000Z",
            "description": "Automatically added (via 80e41cab83a474fd7402b1bc019a18b1)",
            "pattern": "[file:hashes.SHA256 = '042b9d920d07709f3e09cd3b1cb984253777f06f2307be3b8cde8201eb1f0fbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684ac-210c-462b-a197-4939950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:48.000Z",
            "modified": "2016-02-19T02:57:48.000Z",
            "description": "Automatically added (via 810203cb1b823be2983199047cee2fc9)",
            "pattern": "[file:hashes.SHA256 = 'a48d22e42e6486b4a23efbcc2b68350c94e2d30b74f60546c5b1cbb6bc4480d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684b6-ed74-4cd9-afd7-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:57:58.000Z",
            "modified": "2016-02-19T02:57:58.000Z",
            "description": "Automatically added (via 8130903ccfe3fca24e9dfdc91c95b19b)",
            "pattern": "[file:hashes.SHA256 = '964bee389d980d907dae9a27f07bed8759e54f2ae53a07d4f5e62fc19ba08454']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:57:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684bf-64e8-4a90-82ac-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:07.000Z",
            "modified": "2016-02-19T02:58:07.000Z",
            "description": "Automatically added (via 813458da8f310c7b8a3245886d581fde)",
            "pattern": "[file:hashes.SHA256 = '7835b038d27f63cd7d3707889c4735dfc13b1749afe9f73d8f0e860dddad0f0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684ca-5adc-4514-908e-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:18.000Z",
            "modified": "2016-02-19T02:58:18.000Z",
            "description": "Automatically added (via 8260c5ed352ca95eec2be5513f191817)",
            "pattern": "[file:hashes.SHA256 = '585c73668e82b560133fbaea6fd9c8d197cb8db4b5ac1a4acc8dd8077042bbbe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684d3-eab8-47bd-97ca-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:27.000Z",
            "modified": "2016-02-19T02:58:27.000Z",
            "description": "Automatically added (via 82e5e742aa85a35339af929f2f55e18a)",
            "pattern": "[file:hashes.SHA256 = 'dac69cbac9afef566563abaeb5a44691128d4c61718f7c71541aab86c427b986']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684dd-94a4-4567-a5b4-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:37.000Z",
            "modified": "2016-02-19T02:58:37.000Z",
            "description": "Automatically added (via 83701556da94ea8f5aca91aa0f13341d)",
            "pattern": "[file:hashes.SHA256 = 'c39d021f24eed8ecdc85d89c3dc17862d68318cdf91d831b572d475f8fb89dc3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684e7-7e90-4e50-b2c1-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:47.000Z",
            "modified": "2016-02-19T02:58:47.000Z",
            "description": "Automatically added (via 83afd1c0b781ad9effcbb84f5e5bc6de)",
            "pattern": "[file:hashes.SHA256 = '7072aa1a328cd4c16d7a12e756e2bc0a15c58a23c5561e1b957dc5eecb021ae7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684f2-84f4-4ae4-a129-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:58:58.000Z",
            "modified": "2016-02-19T02:58:58.000Z",
            "description": "Automatically added (via 83d4bc883069c6bf653cd882e67deb1c)",
            "pattern": "[file:hashes.SHA256 = 'caaceb3b5f4138c661c6cb1ad1ea8d136e0d6d32edc9e821f40a552d3491b9c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:58:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c684fc-78c4-4fca-8085-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:08.000Z",
            "modified": "2016-02-19T02:59:08.000Z",
            "description": "Automatically added (via 83f661be7f1e929a79715557479bb721)",
            "pattern": "[file:hashes.SHA256 = 'c331cd8db208d0db4c28198890c79706d1221498a12b30ece73c71b0425195f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68505-498c-400a-9965-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:17.000Z",
            "modified": "2016-02-19T02:59:17.000Z",
            "description": "Automatically added (via 84498812f8bf0b5e3fa31f2b3e05143c)",
            "pattern": "[file:hashes.SHA256 = 'ca132c2eafd9e587885c4b063bf6a3e8834de9db40dc628e155d93385900549d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6850f-1100-43f0-b634-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:27.000Z",
            "modified": "2016-02-19T02:59:27.000Z",
            "description": "Automatically added (via 844bddcdc15d77d7251f537ddd08a098)",
            "pattern": "[file:hashes.SHA256 = '3bb4fdb6f88382ff02662d836794f61119bd285f79c93483bf4c5a4860619ecc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68518-4aa0-48da-b579-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:36.000Z",
            "modified": "2016-02-19T02:59:36.000Z",
            "description": "Automatically added (via 84e1353dc2077a1509419516f69d9dd8)",
            "pattern": "[file:hashes.SHA256 = 'af41ce7399e98ea1aa81f0e47fd7930d56d3ef65c6dc7122cd834b60a7bb5127']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68522-3054-4899-a00d-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:46.000Z",
            "modified": "2016-02-19T02:59:46.000Z",
            "description": "Automatically added (via 84e8ec54213189271f63aa2b4cfb12c3)",
            "pattern": "[file:hashes.SHA256 = 'bfa5364107e94cfa4cdb3dd13fd28596c01a0adef44c40712fa44700fa0b4bee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6852c-7560-4110-99d8-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T02:59:56.000Z",
            "modified": "2016-02-19T02:59:56.000Z",
            "description": "Automatically added (via 85a3561562a7cab776136458306a8c76)",
            "pattern": "[file:hashes.SHA256 = '07cce668493fca4f1b07cfbcb7a7524f341cfa0e59c6ab517b8b6044c8c94134']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T02:59:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68535-a574-40e7-b32f-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:05.000Z",
            "modified": "2016-02-19T03:00:05.000Z",
            "description": "Automatically added (via 85b8d1e5bac613a70d0cf842197f0256)",
            "pattern": "[file:hashes.SHA256 = 'a3d3fd79e6d2b06385b57dd746208742ccaf4af82bac7375199a6972bbb9c24d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6853f-6794-483d-8acd-41d5950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:15.000Z",
            "modified": "2016-02-19T03:00:15.000Z",
            "description": "Automatically added (via 85fcd14bcb9ddf6d369ec04c9db89f7c)",
            "pattern": "[file:hashes.SHA256 = '27357d6f0f394d2e5a9d4a27093ae7f205f40b6c43aa9ad9bdb10bb9863b6bff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68549-8960-4180-9c75-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:25.000Z",
            "modified": "2016-02-19T03:00:25.000Z",
            "description": "Automatically added (via 867d5be056532baad87977ef0675d300)",
            "pattern": "[file:hashes.SHA256 = 'f0ffee4a6b371d72e31c38d100e03e628cbbf2d2ece46d370f1cfaf65f7572ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68554-77c0-48c1-b99d-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:36.000Z",
            "modified": "2016-02-19T03:00:36.000Z",
            "description": "Automatically added (via 870284b33a9144048cdad061239a8070)",
            "pattern": "[file:hashes.SHA256 = '273dd1b34d9b0ac9f35b10c36a05d47d079fe426f7ccf96570107745e7b04665']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6855e-ebfc-41b4-8745-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:46.000Z",
            "modified": "2016-02-19T03:00:46.000Z",
            "description": "Automatically added (via 8720ebd2f4a9700981993277464eab57)",
            "pattern": "[file:hashes.SHA256 = '1baaf7ea118d99dbe4e67510ddfb8e4f258c5dd4301600a8b25e5b0eea518e41']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68568-d5d8-4724-b813-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:00:56.000Z",
            "modified": "2016-02-19T03:00:56.000Z",
            "description": "Automatically added (via 8732462a2c153c588afda530741727f5)",
            "pattern": "[file:hashes.SHA256 = '52c8329ce99827bb4be6c65f7ba2dc42389b293b40db479e8ccf501b3f74660e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:00:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68573-2d00-4ad4-af85-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:07.000Z",
            "modified": "2016-02-19T03:01:07.000Z",
            "description": "Automatically added (via 878162c4ff4f06c0a3dd4375c1f6e657)",
            "pattern": "[file:hashes.SHA256 = 'd7ba407587b7f1a9deed99ae23ec594f0820239ba0fbe56bd2155462faa24ae6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6857e-286c-4378-8bc2-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:18.000Z",
            "modified": "2016-02-19T03:01:18.000Z",
            "description": "Automatically added (via 87dc61e638c94154bb51fcdedafa805f)",
            "pattern": "[file:hashes.SHA256 = '7ebc252b543fd9a7047971d32ef6e80bca895ac317fa52f29619fd2d2d688f1a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68588-e50c-4c1f-8864-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:28.000Z",
            "modified": "2016-02-19T03:01:28.000Z",
            "description": "Automatically added (via 880cdbf6056eb66db12203dd3aba5762)",
            "pattern": "[file:hashes.SHA256 = '1bbdc9c4271513956c8e6ff038c082d9319b5ac19812314e92b61e0dd494c219']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68592-d96c-4566-9173-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:38.000Z",
            "modified": "2016-02-19T03:01:38.000Z",
            "description": "Automatically added (via 89064bcf121ed7c7fea6f7d6bb3ff884)",
            "pattern": "[file:hashes.SHA256 = 'f6c062cb3814541fd577e981cbad2627801761f164d4a3c191eac7c6dcb91508']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6859c-ad18-4363-9975-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:48.000Z",
            "modified": "2016-02-19T03:01:48.000Z",
            "description": "Automatically added (via 891a7c1b2a79ff5947fbe30d21265088)",
            "pattern": "[file:hashes.SHA256 = '1674d15db58cd24cee9b5d2087028551ec7074adbb297a4474d57aea71feeb16']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685a6-0ba4-4695-803f-4268950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:01:58.000Z",
            "modified": "2016-02-19T03:01:58.000Z",
            "description": "Automatically added (via 8ab123a83d6ea63265c5cd92d6c46484)",
            "pattern": "[file:hashes.SHA256 = '39f8b2f1c94f2bbd75e9609138bb66af9c9f007db0319cb7fffc0f9e03b8544b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:01:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685b0-b3d4-4281-9ddf-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:08.000Z",
            "modified": "2016-02-19T03:02:08.000Z",
            "description": "Automatically added (via 8b24d39ac0e60a2b85e8e463778f5869)",
            "pattern": "[file:hashes.SHA256 = '7e0f5200bd838184cc60658bc47f65e924d24d3cd83dce5e95f7bc61b3ac3551']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685ba-9ba4-4a5a-a9d4-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:18.000Z",
            "modified": "2016-02-19T03:02:18.000Z",
            "description": "Automatically added (via 8b614249c3ef30b43d3dbcb9f101069c)",
            "pattern": "[file:hashes.SHA256 = 'c6b9763353e0837c9019d43ef84f051cab2978343db3e79ce3373806b6ce418f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685c5-1f20-43c0-8ed3-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:29.000Z",
            "modified": "2016-02-19T03:02:29.000Z",
            "description": "Automatically added (via 8bc89b86788c3d3740665c8fadc0e6bd)",
            "pattern": "[file:hashes.SHA256 = '73a4ad976513bb47f619a4b2fecc7bca37f9ac7e80a1f21f2425a05030eecf0f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685ce-6cf0-4219-9146-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:38.000Z",
            "modified": "2016-02-19T03:02:38.000Z",
            "description": "Automatically added (via 8bed0c756c4b8afb7a8728f930f1f0b0)",
            "pattern": "[file:hashes.SHA256 = 'da1705a09fc2ab644f1d2da5253ac4aa9650e5e96a91d14172a02c72e4119c33']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685d9-4bf4-4674-8755-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:49.000Z",
            "modified": "2016-02-19T03:02:49.000Z",
            "description": "Automatically added (via 8bf9cc74038ff5013531ce95612dc1c4)",
            "pattern": "[file:hashes.SHA256 = 'b8e4e491b2c33b5566287699fbccce91164e2d1197f05a65f2dd41db031e0ab0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685e3-a16c-41a5-8813-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:02:59.000Z",
            "modified": "2016-02-19T03:02:59.000Z",
            "description": "Automatically added (via 8c3c2c822145efe575d524be67d10a76)",
            "pattern": "[file:hashes.SHA256 = '8b65bde804f7e8b7d7e53ec760e7619699096ed8c96630ee2d11df8c4a9cfb9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:02:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685ed-15c0-4a6a-aea0-4c0d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:09.000Z",
            "modified": "2016-02-19T03:03:09.000Z",
            "description": "Automatically added (via 8c88a2aac4903e838b3b898176134371)",
            "pattern": "[file:hashes.SHA256 = '6f9bdbc20ff5f48c3d2a90b1f7886241699306db659ef19cb1da85243b5b9445']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c685f7-bc90-460e-b825-4931950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:19.000Z",
            "modified": "2016-02-19T03:03:19.000Z",
            "description": "Automatically added (via 8caee22b1b7a798950ea49dc6740a185)",
            "pattern": "[file:hashes.SHA256 = '6fd51089a755c3c5b267ff9c17c99591f5b727365cd85939bc87ebf81cbf1e43']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68601-f714-4599-b243-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:29.000Z",
            "modified": "2016-02-19T03:03:29.000Z",
            "description": "Automatically added (via 8d58abe634f63d1f0c2416290ecfc6c0)",
            "pattern": "[file:hashes.SHA256 = '2b5f1e0cc3b3f6bb36fe59c47e46ce2e2d65c7b57437f5afbf7e9572d937fcf4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6860c-e3dc-44b7-8ef7-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:40.000Z",
            "modified": "2016-02-19T03:03:40.000Z",
            "description": "Automatically added (via 8d762a19a969abf14dc88b5f954c8af4)",
            "pattern": "[file:hashes.SHA256 = '982978b6d25a257bfb8960e317d79fe39930415c2a504ea9953b38213622f236']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68616-a0e0-49ab-b9cb-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:03:50.000Z",
            "modified": "2016-02-19T03:03:50.000Z",
            "description": "Automatically added (via 8d91909267d89d1fbd2dee9c1a0a46d7)",
            "pattern": "[file:hashes.SHA256 = 'a93901282a5f7c03f6ef0086aef3ab1d0f3bbf8564ff6b1462134c4a5250fdc8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:03:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68620-35a0-47ad-bea6-4796950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:00.000Z",
            "modified": "2016-02-19T03:04:00.000Z",
            "description": "Automatically added (via 8dbea848dfa8049ba1dff567d85fd933)",
            "pattern": "[file:hashes.SHA256 = 'ad23a19ba78995359a618b0b1ce1930ae3e39950fb7daef00e826a56eabb57ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6862b-3ee4-4d90-a98a-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:11.000Z",
            "modified": "2016-02-19T03:04:11.000Z",
            "description": "Automatically added (via 8e077461395033cb918ba343aeb6aa80)",
            "pattern": "[file:hashes.SHA256 = '7d40f2310197b3bd64b485ac432ce337fa412890af3619414c6f3380aff1923a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68636-d9dc-44c0-b477-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:22.000Z",
            "modified": "2016-02-19T03:04:22.000Z",
            "description": "Automatically added (via 8e2e0fd8e0c203811264b9775756309d)",
            "pattern": "[file:hashes.SHA256 = '6c0e64a34a29afceac4ff258d4ee9869972cfd8b74bba58e158f8dda7518f8db']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68640-411c-4567-84f6-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:32.000Z",
            "modified": "2016-02-19T03:04:32.000Z",
            "description": "Automatically added (via 8e390fb708f55ed8aa93c833d329603b)",
            "pattern": "[file:hashes.SHA256 = '58887bae9ca86164f5af63374f14db851e813d49f3a041ca7cd6f6a85f64eabc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6864d-fe2c-4477-8157-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:45.000Z",
            "modified": "2016-02-19T03:04:45.000Z",
            "description": "Automatically added (via 8e4eb9f374e2a566067dcab66b2f2117)",
            "pattern": "[file:hashes.SHA256 = 'f3baee4bbb2cfaf7c160ff914a3c0a0b9496ff436693daf92a9c7a29c6cd620d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68658-2100-47c4-845d-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:04:56.000Z",
            "modified": "2016-02-19T03:04:56.000Z",
            "description": "Automatically added (via 8e541e2bfaecd004f2287fb893b43768)",
            "pattern": "[file:hashes.SHA256 = '49799162d5a59dbfe332d0494f1cfd7815b3d2bc9a7ab4cadc5518cf3774dd8f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:04:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68662-66c4-42f6-a61a-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:06.000Z",
            "modified": "2016-02-19T03:05:06.000Z",
            "description": "Automatically added (via 8e5e9d5b3aafe341260107fe1804ff04)",
            "pattern": "[file:hashes.SHA256 = '97409bdcb4b8a5e147278718eff4abb9d7daa458840eb38772eacd6869e9db4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6866c-e094-43d8-8c3b-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:16.000Z",
            "modified": "2016-02-19T03:05:16.000Z",
            "description": "Automatically added (via 8ede8a566df6a10a30943751718c7290)",
            "pattern": "[file:hashes.SHA256 = '9859ecd495236ac952cf104548c97ba5051e3a9e28a1412dca1f15f328fdbace']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68676-075c-470d-9039-43c1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:26.000Z",
            "modified": "2016-02-19T03:05:26.000Z",
            "description": "Automatically added (via 8f4d7d7f964d8e6a9492cc1e6ae60a57)",
            "pattern": "[file:hashes.SHA256 = '7113daf0af0975e1a3adadc8368d579ffb9c8d2f98699b95770192645a40cb28']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68680-b4f8-43a3-bead-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:36.000Z",
            "modified": "2016-02-19T03:05:36.000Z",
            "description": "Automatically added (via 8f903c4126566e56b09c87f7d3bcdfa2)",
            "pattern": "[file:hashes.SHA256 = '5c54c0174f82217352afceb2162c4a2d531e3241b5a7408ff1481909f2cfdbcd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6868c-225c-41f0-8edd-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:48.000Z",
            "modified": "2016-02-19T03:05:48.000Z",
            "description": "Automatically added (via 8fe4e770f45cc8292b7811d5ea17bdbb)",
            "pattern": "[file:hashes.SHA256 = '8221b5e48169815c579f145f637d7c55589b8f1df7240a17c788f5300db71159']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68697-4e6c-4a1b-94d2-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:05:59.000Z",
            "modified": "2016-02-19T03:05:59.000Z",
            "description": "Automatically added (via 8ff010c24d2f49b595dc3b8e20bb680f)",
            "pattern": "[file:hashes.SHA256 = 'a110710240fccf16aafa9865b09a012f8b3b290062cc4395274d387a1c08838e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:05:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686a1-efa8-4d0b-a7ab-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:09.000Z",
            "modified": "2016-02-19T03:06:09.000Z",
            "description": "Automatically added (via 90731f599d665b2905fcf734a37e2fda)",
            "pattern": "[file:hashes.SHA256 = '460d158ebd6a28ab1c6fd23bc94bb96555e6d78346e4ed64d23484dae5e13c36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686ac-0710-4bea-be94-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:20.000Z",
            "modified": "2016-02-19T03:06:20.000Z",
            "description": "Automatically added (via 909a6cdf0b557f3fe4713e30466ac051)",
            "pattern": "[file:hashes.SHA256 = 'd1598f0cba29126cce42c4577e56578d9aab75455fc0ccf57cd2e6ced093714b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686b7-268c-4c27-be87-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:31.000Z",
            "modified": "2016-02-19T03:06:31.000Z",
            "description": "Automatically added (via 90a7a78407cd8440803263a59d3f6d47)",
            "pattern": "[file:hashes.SHA256 = '01cfa49a0dd6447038b0030f1ac5b7f32288155ebb4cc341cf41e808b1b0ed6a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686c2-f850-4bce-8b58-4364950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:42.000Z",
            "modified": "2016-02-19T03:06:42.000Z",
            "description": "Automatically added (via 90d86b3aabcd7a077a707cbec93a2408)",
            "pattern": "[file:hashes.SHA256 = '3c7b046bff9ff2cd3f1d1825c9061eb1643b79fb715825e02e3144d055d6ea44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686cd-b7e0-44d3-ad72-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:06:53.000Z",
            "modified": "2016-02-19T03:06:53.000Z",
            "description": "Automatically added (via 9145cb28866228b585eb8df080c5e4d2)",
            "pattern": "[file:hashes.SHA256 = '12b527efd148696383e94e8bbc6ec122e6619904475b652eaf5981b78e1e328b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:06:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686d8-7494-4c48-8115-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:04.000Z",
            "modified": "2016-02-19T03:07:04.000Z",
            "description": "Automatically added (via 91929600053c8c3f7ed5c7d1b576a89d)",
            "pattern": "[file:hashes.SHA256 = 'a055dcc61c5329203bc60fbdec2aae56abe7ad1fc65db57b7a7ab554e18f182f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686e4-bdbc-42a2-8c65-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:16.000Z",
            "modified": "2016-02-19T03:07:16.000Z",
            "description": "Automatically added (via 91b89635ef51583199e52731ded3ff9d)",
            "pattern": "[file:hashes.SHA256 = 'fbb210bdf37e37937b383a1eb200a5b698db06fa02fbd8905a285a52c909c7c0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686ef-c86c-4957-aa68-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:27.000Z",
            "modified": "2016-02-19T03:07:27.000Z",
            "description": "Automatically added (via 91f7eafdcfeb064e5bb5e909a7a8525f)",
            "pattern": "[file:hashes.SHA256 = '6eabbab365c86c1a688524267bd5ea23d5dcb3166b7f11c084a5d7b8f08e2581']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c686fa-1794-4465-8a21-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:38.000Z",
            "modified": "2016-02-19T03:07:38.000Z",
            "description": "Automatically added (via 921f27e9a14f1ec3e8d7883b97825f2b)",
            "pattern": "[file:hashes.SHA256 = '3093ca3d125fbdcf352d8ca51b573627e9c9f0b3dfaf2fc7644666a5af37d96e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68705-3770-4227-a5dd-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:07:49.000Z",
            "modified": "2016-02-19T03:07:49.000Z",
            "description": "Automatically added (via 9291ad30707ef88ee857ea10be86d2d9)",
            "pattern": "[file:hashes.SHA256 = 'd825f3317d596dd2caa0c022f30e2eeea3e5e7bfeca428b78c5bdd4786f0b91e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:07:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68710-2828-4cd4-af88-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:00.000Z",
            "modified": "2016-02-19T03:08:00.000Z",
            "description": "Automatically added (via 92b6023799844e58a8e85f6417b31750)",
            "pattern": "[file:hashes.SHA256 = '938138f2170b7e2590e0262fb50dbfb3ab7670ec33b367330d13273d8e5b3390']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6871c-6f30-4188-83ec-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:12.000Z",
            "modified": "2016-02-19T03:08:12.000Z",
            "description": "Automatically added (via 939c2998dcf5ad1b2cff4ef5bf005873)",
            "pattern": "[file:hashes.SHA256 = 'e69920e2ec4c562e181874bff79c28a8ab27763ecd6e88d9388361661934df40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68727-8758-489b-8cd4-4cec950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:23.000Z",
            "modified": "2016-02-19T03:08:23.000Z",
            "description": "Automatically added (via 93a7357a9d27ea6b190b21b3e7ef568e)",
            "pattern": "[file:hashes.SHA256 = 'af9a0c882ddbe31c7e8786caaca6d475e5263e56007f4ba18eb78977a20c839d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68732-2328-45a7-997d-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:34.000Z",
            "modified": "2016-02-19T03:08:34.000Z",
            "description": "Automatically added (via 93ae9e599785652a7711619f9c8405aa)",
            "pattern": "[file:hashes.SHA256 = 'fd2d486c4ff8e34491168efdfecd0c301cda600623e960cdf137cbc1ca7501ed']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6873d-4cf4-48c5-8425-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:45.000Z",
            "modified": "2016-02-19T03:08:45.000Z",
            "description": "Automatically added (via 940177d224de266277fd610f7be3f67b)",
            "pattern": "[file:hashes.SHA256 = '7a51c44d68b20d18e9dbe48e3e9a2166b5671dcfc43421c4726e52093ae03e22']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68748-c86c-4f32-891e-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:08:56.000Z",
            "modified": "2016-02-19T03:08:56.000Z",
            "description": "Automatically added (via 941932368005709a2fece9bbe0856411)",
            "pattern": "[file:hashes.SHA256 = '2ad84df654664efdc7a2db1320ac63cba713a56d9b0a932e5ce5bb354724198e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:08:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68753-06ec-454c-88ba-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:07.000Z",
            "modified": "2016-02-19T03:09:07.000Z",
            "description": "Automatically added (via 9443dc350f8b3503274131851647993e)",
            "pattern": "[file:hashes.SHA256 = '09225eaacee460f08c3e788130e8c845e30f0042d43dee98a654f5803d18e993']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6875d-0978-4746-8c2c-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:17.000Z",
            "modified": "2016-02-19T03:09:17.000Z",
            "description": "Automatically added (via 947b3fda93bb61b3abba842e7a375d27)",
            "pattern": "[file:hashes.SHA256 = '821c5006ec13ef6c38be759507d6be491034a382caebf3c7b64c0af1088353e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68768-c8b8-422e-bf28-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:28.000Z",
            "modified": "2016-02-19T03:09:28.000Z",
            "description": "Automatically added (via 94887a429862c0a987fa7afa58320eee)",
            "pattern": "[file:hashes.SHA256 = '6d4ad41c2dc18f519f90d55afef66846812c190d27c8dd8c27b3b3417fda08d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68772-8a54-4644-b831-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:38.000Z",
            "modified": "2016-02-19T03:09:38.000Z",
            "description": "Automatically added (via 94a28c69cea5e965357dc5f3e68a6154)",
            "pattern": "[file:hashes.SHA256 = '3dc3da9b2b7f2decb5da63f0f769468f6cc3afd138c8434bd85a3850c751698d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6877b-6e90-423d-83c2-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:47.000Z",
            "modified": "2016-02-19T03:09:47.000Z",
            "description": "Automatically added (via 94b569ce46b47f355269e4ee0d6d80f4)",
            "pattern": "[file:hashes.SHA256 = 'e07d8e4fb84e2555dccf65ab53dac7190464161783756a7433b9704170b1998f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68785-df20-4530-ad9e-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:09:57.000Z",
            "modified": "2016-02-19T03:09:57.000Z",
            "description": "Automatically added (via 94e233b77184dd8d7d3f1356f7cc98a6)",
            "pattern": "[file:hashes.SHA256 = 'aba36c0470e1091fe4d50d88ab180501cc665e6dcbe07ccb827f9ab8ea481c20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:09:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6878f-2b40-42dd-afd1-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:07.000Z",
            "modified": "2016-02-19T03:10:07.000Z",
            "description": "Automatically added (via 94ebca4720bb0df7c2c9054b3f8b91f7)",
            "pattern": "[file:hashes.SHA256 = '243a059019f52c26ffd67d125a32b307fd25137cae115bca8a69bcd0d09506ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68799-d7e4-4c90-bfc3-4681950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:17.000Z",
            "modified": "2016-02-19T03:10:17.000Z",
            "description": "Automatically added (via 94feb16ad48435e44dd49a402c363a06)",
            "pattern": "[file:hashes.SHA256 = 'bb7ac3b53f07e24b1a60103a147d322430348d6de13a1428555836f386474860']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687a3-fad8-4e3a-8c7e-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:27.000Z",
            "modified": "2016-02-19T03:10:27.000Z",
            "description": "Automatically added (via 95001062ecfc5d823680520c28f379bd)",
            "pattern": "[file:hashes.SHA256 = '95a21fee793583a2004cc93febc57252528953bff895c8a3d43bc942ebd647d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687ac-fcdc-4529-b6b0-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:36.000Z",
            "modified": "2016-02-19T03:10:36.000Z",
            "description": "Automatically added (via 952ae74a7c773d5ed820fe013548b64a)",
            "pattern": "[file:hashes.SHA256 = '3eda41418feb40dac05e43366435b6d58ac3075ebb914f16d0eb06a996f03d6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687b6-af48-4ec5-9015-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:46.000Z",
            "modified": "2016-02-19T03:10:46.000Z",
            "description": "Automatically added (via 959a97905ef7bfbb71dc904e588c4345)",
            "pattern": "[file:hashes.SHA256 = 'ea6b33bb5035b1f664c968912c7bbddada93d903f0afd67b97d8e683a7ac5dae']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687c0-d098-4e15-a593-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:10:56.000Z",
            "modified": "2016-02-19T03:10:56.000Z",
            "description": "Automatically added (via 95ca11ed57081235b46dc93054b83444)",
            "pattern": "[file:hashes.SHA256 = '5feb6a5f6fe1dd7f49d521318fabfbc04e56021536b55b883d9f65ac89e42f83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:10:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687ca-957c-4cf8-9506-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:06.000Z",
            "modified": "2016-02-19T03:11:06.000Z",
            "description": "Automatically added (via 95eec4ea07e5f52d43cdafae72ebe61b)",
            "pattern": "[file:hashes.SHA256 = '86d58226a968274bd48e58eee389f6af921576e76ae55976297a315a1bf9b43d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687d4-3284-497b-b419-4ffe950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:16.000Z",
            "modified": "2016-02-19T03:11:16.000Z",
            "description": "Automatically added (via 96822e0bfca3a399f9faf2d85bedd6f9)",
            "pattern": "[file:hashes.SHA256 = '18e487c6e32bd7120d12b6f7d5571931dc0642ed6a88c7ae98ef922e0d993fbc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687dd-c8a8-4df1-acc0-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:25.000Z",
            "modified": "2016-02-19T03:11:25.000Z",
            "description": "Automatically added (via 96aeab8e49bcd83219a07d5b9f024458)",
            "pattern": "[file:hashes.SHA256 = 'e5a1fa8b4f2b2a7e6704965d87c3f302faf74aa3922b17b6742c7cf768a7c4a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687e7-d9f8-4e93-b83f-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:35.000Z",
            "modified": "2016-02-19T03:11:35.000Z",
            "description": "Automatically added (via 96b6e7b50b6af8286020a74a579bbb7c)",
            "pattern": "[file:hashes.SHA256 = '878e28e566e06591adfe24286e542a2a679bcd16c1baa0252ea1b7b6d48c5950']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687f1-7f48-40fb-b7ad-4a29950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:45.000Z",
            "modified": "2016-02-19T03:11:45.000Z",
            "description": "Automatically added (via 96c15e9bf5f330e5aa0901f664b2262b)",
            "pattern": "[file:hashes.SHA256 = '3be013b08cace4356fe9a318936620c87c3e76ab620f12e4b288d206593e059b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c687fb-f9cc-4c2e-8e20-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:11:55.000Z",
            "modified": "2016-02-19T03:11:55.000Z",
            "description": "Automatically added (via 9722bc5bf4b380f322c3d0371d4739e7)",
            "pattern": "[file:hashes.SHA256 = '6d7dbf32240b30219d6772ca0b3c57a1775398a6d3725c3a871edf5013d4c709']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:11:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68805-1cb8-4e7d-9187-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:05.000Z",
            "modified": "2016-02-19T03:12:05.000Z",
            "description": "Automatically added (via 97f3accbe8cd8d210ea6f805aa46ca83)",
            "pattern": "[file:hashes.SHA256 = '9b089b53fbd8f7c35281b157ae666fb0c430525776e8c4b81d5ed909fc92056f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68810-2bc4-44f2-93eb-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:16.000Z",
            "modified": "2016-02-19T03:12:16.000Z",
            "description": "Automatically added (via 98c1d0d37a8874cdf45605170c573c21)",
            "pattern": "[file:hashes.SHA256 = '9c4e7009fe58354643b6df1b0663a837c29b45fa00c5bf0ed073ec87c832bb70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6881b-454c-4b56-83a9-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:27.000Z",
            "modified": "2016-02-19T03:12:27.000Z",
            "description": "Automatically added (via 9995eef9f45e38fd16136a11a9a2d18b)",
            "pattern": "[file:hashes.SHA256 = '8796294d762b94c78edce590df4420c59ca95e22023f9946a1566fa4e2f233e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68825-b3a4-4491-8bbc-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:37.000Z",
            "modified": "2016-02-19T03:12:37.000Z",
            "description": "Automatically added (via 999b35e2e3702ee12e3199db8b9538e8)",
            "pattern": "[file:hashes.SHA256 = '3b12ea8a3f7979d9baeab91997cfac34d3f76e814dd274b8beb1b84d13f55c6b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6882e-9834-416e-82ea-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:46.000Z",
            "modified": "2016-02-19T03:12:46.000Z",
            "description": "Automatically added (via 99be31ec1cfea5b1a173859b0a7eb321)",
            "pattern": "[file:hashes.SHA256 = '9421bcfc18c1869f7e4913c9624a094f30461a287cb745aa9288abac6ffd404f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68838-e0f4-4735-a110-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:12:56.000Z",
            "modified": "2016-02-19T03:12:56.000Z",
            "description": "Automatically added (via 99c2fb7f08d9a1280c74775a799136da)",
            "pattern": "[file:hashes.SHA256 = '523c36b6536f22b7d23f0ec57e3b85820ca5a3934368a50dfdd2c28cc1725238']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:12:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68842-9a14-4dfe-b108-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:06.000Z",
            "modified": "2016-02-19T03:13:06.000Z",
            "description": "Automatically added (via 99fc1ea1def014ca6017733a75029677)",
            "pattern": "[file:hashes.SHA256 = 'a52957106b8b1f9f15b17654994e650264729e28e4be1b5cc9bfff8daa209ed3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6884c-4de0-40c9-8479-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:16.000Z",
            "modified": "2016-02-19T03:13:16.000Z",
            "description": "Automatically added (via 99fce7d78d7b4ca41ca40d27801ae74e)",
            "pattern": "[file:hashes.SHA256 = 'b454f14c0e19b4b1461c58383822591b2534518d70f6d94a6b9251c39c358d71']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68857-981c-4c2f-adc3-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:27.000Z",
            "modified": "2016-02-19T03:13:27.000Z",
            "description": "Automatically added (via 9a5070319e4b8ecdf88e43f3cce6ec6f)",
            "pattern": "[file:hashes.SHA256 = '208a29a5c064895e136c2051f21390096e07b61614762171c36858200ad98fa9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68861-07fc-43f6-bed3-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:37.000Z",
            "modified": "2016-02-19T03:13:37.000Z",
            "description": "Automatically added (via 9ac1a59a25eef5ad2a3c18199263e36d)",
            "pattern": "[file:hashes.SHA256 = '60c887f7d3a76ad9eb209eb815b650d6c4116666f1a29319db25410b32bc32ef']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6886b-d464-48e2-a149-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:47.000Z",
            "modified": "2016-02-19T03:13:47.000Z",
            "description": "Automatically added (via 9af054cd13e6452720a34e35454aedb9)",
            "pattern": "[file:hashes.SHA256 = '56d45482ba909ad625af3d3df43f7684685c65fcd59860f3861ec80159ec716e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68875-4790-4903-8512-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:13:57.000Z",
            "modified": "2016-02-19T03:13:57.000Z",
            "description": "Automatically added (via 9b09670a56750d8a9d8c4e6635d4985a)",
            "pattern": "[file:hashes.SHA256 = 'd7d5319d7f5a9a47de6a3b5930c58b24d2ad1c519fbe7325d4bc755bbfd397ba']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:13:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6887f-ba40-4ac7-8480-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:07.000Z",
            "modified": "2016-02-19T03:14:07.000Z",
            "description": "Automatically added (via 9b27dc3f2167adc59bfd4f6f850522d5)",
            "pattern": "[file:hashes.SHA256 = '66b4174f410a0e6cd23b2fe6a2ebfe6f558e09fe4e43ef0953da67a79e453ab1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68889-6920-409a-8ec0-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:17.000Z",
            "modified": "2016-02-19T03:14:17.000Z",
            "description": "Automatically added (via 9ba9323e117c2876e1b5cb4bcbe66687)",
            "pattern": "[file:hashes.SHA256 = 'e6c6dd980cc35c91a6c5fd96ab56326ef4ffe0798c5d3e0745cf2c67a969c06f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68893-8c50-4db9-b97c-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:27.000Z",
            "modified": "2016-02-19T03:14:27.000Z",
            "description": "Automatically added (via 9bbd1783af17ca8bc6c1ef6dd8680dc8)",
            "pattern": "[file:hashes.SHA256 = 'd493a9a15b4952741276f4ba7df8b47b2a0a2f9f5342633265996dfa4e71dc45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6889c-4cf4-4790-a6c4-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:36.000Z",
            "modified": "2016-02-19T03:14:36.000Z",
            "description": "Automatically added (via 9bbfa7d43ba406487036ffe13c21d293)",
            "pattern": "[file:hashes.SHA256 = '6adf4367ecfa46209a4f41a3714f5c578c20c9c3a7c60da96798cae7ea406dbf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688a7-6c94-4f69-a8a0-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:47.000Z",
            "modified": "2016-02-19T03:14:47.000Z",
            "description": "Automatically added (via 9bd2bba31a453f7dd9b98ae56bd0e89a)",
            "pattern": "[file:hashes.SHA256 = 'f2c137933175ea21b1319a4fb416d31e8bee5e080699a3ecf5cc55663f52c3ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688b1-2ce8-48af-b635-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:14:57.000Z",
            "modified": "2016-02-19T03:14:57.000Z",
            "description": "Automatically added (via 9bd665d7784d2228d6c96c2a7a213c4e)",
            "pattern": "[file:hashes.SHA256 = 'b3220184b4d1744793326b0bc11a837fa47ed44c81b6334933623481da6a68e0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:14:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688bb-2d34-44f6-a326-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:07.000Z",
            "modified": "2016-02-19T03:15:07.000Z",
            "description": "Automatically added (via 9be913dfb13e04e45a050cb18f3bb020)",
            "pattern": "[file:hashes.SHA256 = '7202832d4498bc3614de58f4bc9fd86258b14c7d2701e6afdffd5a36dab02a81']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688c5-6790-459b-b4c7-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:17.000Z",
            "modified": "2016-02-19T03:15:17.000Z",
            "description": "Automatically added (via 9c5f07b09e26561a778c6b203fd48504)",
            "pattern": "[file:hashes.SHA256 = '994b8b081c5be851b042a2d1e0667c6e11f5c028786383ec9d6db7d17507c663']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688cf-8e20-4576-b3e1-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:27.000Z",
            "modified": "2016-02-19T03:15:27.000Z",
            "description": "Automatically added (via 9cc952984ae7de0382efb913cffea15a)",
            "pattern": "[file:hashes.SHA256 = '64680a5914a8dd750124c7b276ebab18173706dda9f0bde831e6aec7c7d5a0b2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688d9-d820-4236-aca3-4a11950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:37.000Z",
            "modified": "2016-02-19T03:15:37.000Z",
            "description": "Automatically added (via 9ce00665092ec301648d7636dc295ea0)",
            "pattern": "[file:hashes.SHA256 = 'aa0320788de4835b25208a5d56a37fdeb2346843a63899760b1f2a7c0a2fdd7a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688e3-648c-444a-8299-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:47.000Z",
            "modified": "2016-02-19T03:15:47.000Z",
            "description": "Automatically added (via 9d22ce973dd1ed0dae33aa850bbe803f)",
            "pattern": "[file:hashes.SHA256 = 'a97e237c9ef7bb684ef5f922e80e3109fd090636336c22b4f7e3cad16905402a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688ed-7a4c-4703-a589-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:15:57.000Z",
            "modified": "2016-02-19T03:15:57.000Z",
            "description": "Automatically added (via 9d5bbd3545f41ada6c5eb0dc5fb9da05)",
            "pattern": "[file:hashes.SHA256 = '76ad50f4de6eebb8b58946497f86c525ed4a673398cd3f68122f020b2ea532a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:15:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c688f7-7fb8-4147-80ba-4fe9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:07.000Z",
            "modified": "2016-02-19T03:16:07.000Z",
            "description": "Automatically added (via 9dc8ab42cd80c1dbf0a0c00712744c8f)",
            "pattern": "[file:hashes.SHA256 = 'ff112878668cc0b6ab3c08944226a4fa3b7623aa933f6c47c08fae6601dc106b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68901-d5f0-4db8-9154-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:17.000Z",
            "modified": "2016-02-19T03:16:17.000Z",
            "description": "Automatically added (via 9dd8e777e1e860311f83b1e6b79c3bae)",
            "pattern": "[file:hashes.SHA256 = '87adb687a8a46dfd12475daf0763264ef8c19eb8c6670c9321fa717a77ad96d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6890b-535c-4717-9626-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:27.000Z",
            "modified": "2016-02-19T03:16:27.000Z",
            "description": "Automatically added (via 9e331a34b32ab1e91e1cdf4f2fb4d284)",
            "pattern": "[file:hashes.SHA256 = '3b4fa645c43ab9884fb2953fd8a3f4fbb350600bd7ee13f43c13965028f3ca5a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68915-e6a4-4ea3-9db7-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:37.000Z",
            "modified": "2016-02-19T03:16:37.000Z",
            "description": "Automatically added (via 9ee1278b61a3a2f3844c73bbd1c83219)",
            "pattern": "[file:hashes.SHA256 = '24c4d67d589678de5ab4b8be690f7efa517ac809c59cdf52054ad28adf3f71d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6891f-000c-4680-a0cd-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:47.000Z",
            "modified": "2016-02-19T03:16:47.000Z",
            "description": "Automatically added (via 9efa2aea3c1243e2e353539386d37ae2)",
            "pattern": "[file:hashes.SHA256 = 'ee71cc4bc3c006468ece8087b31ddbe143d727238a7e8bcf49db965886b586d5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68929-9c30-4385-935c-457d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:16:57.000Z",
            "modified": "2016-02-19T03:16:57.000Z",
            "description": "Automatically added (via 9f5a2117cd10ca40933c51d331a66901)",
            "pattern": "[file:hashes.SHA256 = '286c8fb80eb38f57c074d796715fa0d3e0281525897fc98b2f9794912cbcd901']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:16:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68933-2520-43e4-b2a7-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:07.000Z",
            "modified": "2016-02-19T03:17:07.000Z",
            "description": "Automatically added (via 9f6fc09e53b15d037e900d332f9d3686)",
            "pattern": "[file:hashes.SHA256 = '3a92ec032d648714fdeedc5747961079e1d58b3c9bf5e0f53a3bef981706cb13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6893d-085c-4584-8d1b-4b8b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:17.000Z",
            "modified": "2016-02-19T03:17:17.000Z",
            "description": "Automatically added (via 9ffcef9450b4527f578aa2f07eb0b577)",
            "pattern": "[file:hashes.SHA256 = '956c997c51895a617951071d8e3a4a85d527c8f8e342b5108c40313242bfd80c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68948-b470-4bd9-b8de-44da950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:28.000Z",
            "modified": "2016-02-19T03:17:28.000Z",
            "description": "Automatically added (via a0040a40dd9047ee6ad6a2dea96e831f)",
            "pattern": "[file:hashes.SHA256 = '50f040ad0ef4c00e2f6cf58c50c84731e6ff7ea393f85bec9a90efe59146de01']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68952-5790-4368-9440-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:38.000Z",
            "modified": "2016-02-19T03:17:38.000Z",
            "description": "Automatically added (via a02df67f98a22df33e2e9bdc77dea9e7)",
            "pattern": "[file:hashes.SHA256 = 'cb29d29036178caff943277dfe2bc5d7c9db8e4c2b59fe61b04e497daeb0e480']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6895c-96c8-4945-ae91-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:48.000Z",
            "modified": "2016-02-19T03:17:48.000Z",
            "description": "Automatically added (via a0acead0b30a72eabddbcc6809d51b40)",
            "pattern": "[file:hashes.SHA256 = 'a0f42a050098e334971de185dc2525d8fab85a8fdbf697775cc4ca5f4d91d460']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68966-f368-4ddb-aee4-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:17:58.000Z",
            "modified": "2016-02-19T03:17:58.000Z",
            "description": "Automatically added (via a0acf513e2c3e540dfc86387b7a3557e)",
            "pattern": "[file:hashes.SHA256 = '91e2cec8f823eee2b0ac462af382ff00941fbe2ea6a3eb6736e5e608145bc89d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:17:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68970-4c84-4f41-a97e-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:08.000Z",
            "modified": "2016-02-19T03:18:08.000Z",
            "description": "Automatically added (via a0ae72b44a024b46aec41bafc5012685)",
            "pattern": "[file:hashes.SHA256 = 'f1b55afe4bb4c6816177b214567f90a75c446f6d491aafc34f8a62b63762a89b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6897a-2378-4cb5-a3bd-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:18.000Z",
            "modified": "2016-02-19T03:18:18.000Z",
            "description": "Automatically added (via a0bcf5e7335cf43541d6679c326849d6)",
            "pattern": "[file:hashes.SHA256 = '18d98352b785edb3c59970a853588e53ed01e8d07646471fc76ef23fb4e5b112']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68985-d538-4147-b09b-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:29.000Z",
            "modified": "2016-02-19T03:18:29.000Z",
            "description": "Automatically added (via a0ebf82db54eb8ccf38ca7aa6b67b9fd)",
            "pattern": "[file:hashes.SHA256 = '997aeb391baa68da66295f6e806f4c072cfdf99ed9f836dfb7b68f5a57f01423']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6898f-8da4-4435-abda-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:39.000Z",
            "modified": "2016-02-19T03:18:39.000Z",
            "description": "Automatically added (via a107ffcadfa41a7a1157e82a0e5323b9)",
            "pattern": "[file:hashes.SHA256 = 'a587101558e24eaa850fb3b6d0b7adcf7dd785473a36a877abdee75d6d38ca60']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68999-bb50-40a9-a381-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:49.000Z",
            "modified": "2016-02-19T03:18:49.000Z",
            "description": "Automatically added (via a11fb5e3256439e89b9cf0006c89fd98)",
            "pattern": "[file:hashes.SHA256 = '8d8c65c765f89d3bfe1de7668450fdb6de4fffaa382b1888ae5248d8f6ac09bc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689a3-ef0c-48e4-8089-4e5a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:18:59.000Z",
            "modified": "2016-02-19T03:18:59.000Z",
            "description": "Automatically added (via a182f4b5ffa12c67b922a45923665c20)",
            "pattern": "[file:hashes.SHA256 = '3c046d07ae9d10e5143a1c4fa3dda87c43487116ff1ba007add1198a17ee1117']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:18:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689ad-2108-4cf1-a9d7-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:09.000Z",
            "modified": "2016-02-19T03:19:09.000Z",
            "description": "Automatically added (via a1e78bd1da7db859d681e448c1095307)",
            "pattern": "[file:hashes.SHA256 = 'a82ee99026cae82e55a616f7c1c7b46a0326275ec5d5f8e5ac17a0ec456c44f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689b8-9254-450e-8c8b-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:20.000Z",
            "modified": "2016-02-19T03:19:20.000Z",
            "description": "Automatically added (via a22cd5fa4d9ef666ec589a762c430c46)",
            "pattern": "[file:hashes.SHA256 = '77fd2e369a66d9debccf3c0f5721dfe660f7dd4bca927d824e18ebdefc2205ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689c4-55b0-4cb2-b8e0-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:32.000Z",
            "modified": "2016-02-19T03:19:32.000Z",
            "description": "Automatically added (via a2d1caa712ee3e9a7d2550746ad70a3a)",
            "pattern": "[file:hashes.SHA256 = 'b39da0793697df31aa2f50d3841d35eedfa5a519e6cbeeaa8885005c4320a7cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689d0-cb34-49d9-95f2-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:44.000Z",
            "modified": "2016-02-19T03:19:44.000Z",
            "description": "Automatically added (via a34cca407bee8be26de943cc6bd35658)",
            "pattern": "[file:hashes.SHA256 = '6be32459696c23d49ab116a72c2f64f0ab988fbf75c925810a21696b27aec014']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689dd-2b10-4765-af62-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:19:57.000Z",
            "modified": "2016-02-19T03:19:57.000Z",
            "description": "Automatically added (via a39f8bc8eecbc743a843f2ae59363cbe)",
            "pattern": "[file:hashes.SHA256 = '9bca8089013d0d9308460f437cc65e9b2c15bff4ab240ca541d76e1ed08fb4fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:19:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689e7-a0cc-497e-a61f-46ca950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:07.000Z",
            "modified": "2016-02-19T03:20:07.000Z",
            "description": "Automatically added (via a3a9554d723f03db65fc1b5956c89979)",
            "pattern": "[file:hashes.SHA256 = 'd885d62dc8ba407f6ec6079d7eb7b9cfb422a36fd8dc84655f2c7c8f1727c12e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689f1-11a8-4135-b073-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:17.000Z",
            "modified": "2016-02-19T03:20:17.000Z",
            "description": "Automatically added (via a3c472bf330e88795f3e5a791bde781a)",
            "pattern": "[file:hashes.SHA256 = '68bfd4323dac63e3880eb588c8df1163eae0e3cb390b2235d76fd272c85bc2bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c689fb-cd44-4e17-9389-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:27.000Z",
            "modified": "2016-02-19T03:20:27.000Z",
            "description": "Automatically added (via a3cb548ea839f76c2ce7b52d877eccf2)",
            "pattern": "[file:hashes.SHA256 = 'ddaf25975a6c8d3de6d7ddc50d8da5b05d049902f1bba3e64aa3250a603e9abe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a07-d470-48f0-ade2-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:39.000Z",
            "modified": "2016-02-19T03:20:39.000Z",
            "description": "Automatically added (via a43f95c30ee389bee085124bc032e8a2)",
            "pattern": "[file:hashes.SHA256 = 'cbf8c221f94c4a5e4dc6eca8abebfa94ab154741efdf05244106199d115c801b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a12-a8e8-4ecb-bead-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:20:50.000Z",
            "modified": "2016-02-19T03:20:50.000Z",
            "description": "Automatically added (via a45630b050e3e55c7f5fdfafc0f4bfa4)",
            "pattern": "[file:hashes.SHA256 = 'ef950cb22d2b7a8b51e43c73462de018ad55debedc0901e75cd9cf4ca85137f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:20:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a1e-b24c-4352-8171-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:02.000Z",
            "modified": "2016-02-19T03:21:02.000Z",
            "description": "Automatically added (via a46593a35e996044d82e01dfbd11f03b)",
            "pattern": "[file:hashes.SHA256 = 'ca05fd6718bc5a1e64ce34b70b24691f8c2303cf4a4099c7f731cb0c7ce407c9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a29-acc4-4a5f-b7df-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:13.000Z",
            "modified": "2016-02-19T03:21:13.000Z",
            "description": "Automatically added (via a487fb9afb3571270e7c52e0eba667a9)",
            "pattern": "[file:hashes.SHA256 = 'ed47bdf99ed33fd445668fc14d704059bc1b1248549cb401a6ff5ca3ddbbf033']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a35-6524-451c-b4ab-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:25.000Z",
            "modified": "2016-02-19T03:21:25.000Z",
            "description": "Automatically added (via a4b1a888498090530d2377b9b0d40c2c)",
            "pattern": "[file:hashes.SHA256 = '947cacbee395b8024d1eee304257afbff05977d5ab23632d35db96b7d912af50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a41-52e8-46f0-861c-49b3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:37.000Z",
            "modified": "2016-02-19T03:21:37.000Z",
            "description": "Automatically added (via a4bfe3792b7f938d56dfe9efc2529574)",
            "pattern": "[file:hashes.SHA256 = 'ba6e527d8f1df6d9191cc81214f9a7da7aa6f2e66848897e51aaab1096b4e14e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a4c-99d0-4cbb-850a-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:21:48.000Z",
            "modified": "2016-02-19T03:21:48.000Z",
            "description": "Automatically added (via a4e2f5194d1299af1a4b4b3802f6b55b)",
            "pattern": "[file:hashes.SHA256 = 'db5e2b6a6e487d8170670b3fe7e158bb04553bf1cc743a35f0716748c7088821']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:21:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a58-19c8-43ee-9024-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:00.000Z",
            "modified": "2016-02-19T03:22:00.000Z",
            "description": "Automatically added (via a4f950c759af9ccf3d654e799f870ed6)",
            "pattern": "[file:hashes.SHA256 = '7c2ecfdc7d83419e9be77b88981dde929db5aabee4de012fcb4b7ff45f800098']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a64-4b5c-4002-beee-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:12.000Z",
            "modified": "2016-02-19T03:22:12.000Z",
            "description": "Automatically added (via a54115cd454d5ef754a6d13b76ac6565)",
            "pattern": "[file:hashes.SHA256 = 'e0bffef411af8754148b715157063d7b7c5a3889e914a85c06f9b0b7efb54a83']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a6f-0314-470d-a25a-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:23.000Z",
            "modified": "2016-02-19T03:22:23.000Z",
            "description": "Automatically added (via a55093c7e27e8dbe30803519136278bd)",
            "pattern": "[file:hashes.SHA256 = '7db1c4a3b048f7e7dba03ed61b68d282821514bc6b68836d0779b4a5118c23f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a7b-0dd8-4fe9-aaf6-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:35.000Z",
            "modified": "2016-02-19T03:22:35.000Z",
            "description": "Automatically added (via a5a8b69be617604873f5d3cd2ff8dc13)",
            "pattern": "[file:hashes.SHA256 = 'b9183ec267d6d2aa67769ac75af8c51f45d6b52df7e56b8751992217e3ace1a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a87-d28c-4b54-b735-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:47.000Z",
            "modified": "2016-02-19T03:22:47.000Z",
            "description": "Automatically added (via a5f03038b40a4fcde86d52a81098320b)",
            "pattern": "[file:hashes.SHA256 = 'b912a1670106dc08aaeb511c667a3c569d3f163105de87b261768b18263fbb0e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a93-61a4-466b-bbea-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:22:59.000Z",
            "modified": "2016-02-19T03:22:59.000Z",
            "description": "Automatically added (via a60f0e2a355da86a4baa9485b13f40a1)",
            "pattern": "[file:hashes.SHA256 = '0d903be639846220ff080d5b049a4c588530de30eaac7716e5f55837f01afb30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:22:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68a9e-4ab8-4a97-9117-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:10.000Z",
            "modified": "2016-02-19T03:23:10.000Z",
            "description": "Automatically added (via a6118285107c9a1f233edf9cf9435d3a)",
            "pattern": "[file:hashes.SHA256 = 'c1eb7a7273a74c7362d891306af3be3755209457d47fd2707413445e55257393']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68aaa-5c84-486a-a4ff-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:22.000Z",
            "modified": "2016-02-19T03:23:22.000Z",
            "description": "Automatically added (via a62eb223e0985948868a5096684a32cc)",
            "pattern": "[file:hashes.SHA256 = '2c00a4d28b7301e78355882e060877383c0d7257319f726b662e144a7438bdfb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ab6-a720-4c6a-a743-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:34.000Z",
            "modified": "2016-02-19T03:23:34.000Z",
            "description": "Automatically added (via a70b32426d06f28f29a9a389cb8c748b)",
            "pattern": "[file:hashes.SHA256 = 'af04d13f8f6149f4c14d3ae790af0cc48a5f734c7c0ff1de6bf538af7c182aac']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ac3-6c0c-4621-b683-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:47.000Z",
            "modified": "2016-02-19T03:23:47.000Z",
            "description": "Automatically added (via a72e0451cbd38a66363c423a1be5a067)",
            "pattern": "[file:hashes.SHA256 = 'e0c3da1ab35ab7633553e8b2c8538afa68abd029a01b63ec3a6f15b6f68aa3c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68acf-5b38-43f5-8e69-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:23:59.000Z",
            "modified": "2016-02-19T03:23:59.000Z",
            "description": "Automatically added (via a78478a0328735b5b330811c1143fbb1)",
            "pattern": "[file:hashes.SHA256 = '3186c6d31f945f312b4bf56750b5f3e44300e11d1bd5cf96dee63f5cee410c03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:23:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68adc-5908-45b4-9515-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:24:12.000Z",
            "modified": "2016-02-19T03:24:12.000Z",
            "description": "Automatically added (via a789d7ea0866387e62fed3e01acae986)",
            "pattern": "[file:hashes.SHA256 = 'f22003bb864cace315997f1f895210e764873fd8a9c77afb6276ac321610300b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:24:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ae8-81a0-41e9-911b-4b98950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:24:24.000Z",
            "modified": "2016-02-19T03:24:24.000Z",
            "description": "Automatically added (via a7a73e39585bb65c086a0637636e09c7)",
            "pattern": "[file:hashes.SHA256 = 'd89f80d64b7e2309bbe1ee38ed508ca2dcf73d8681c5285732054c2100a063cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:24:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68af4-57e8-4ee0-89f8-41a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:24:36.000Z",
            "modified": "2016-02-19T03:24:36.000Z",
            "description": "Automatically added (via a7bec8c4fdf4a6b6a01ae2e1378d3089)",
            "pattern": "[file:hashes.SHA256 = '35a6a2f807c274e479f20427aea26634ceea61c0e52b126be596829723334355']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:24:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b00-efd4-48e7-9f87-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:24:48.000Z",
            "modified": "2016-02-19T03:24:48.000Z",
            "description": "Automatically added (via a7c7aaead75e768d8836b923cdd85194)",
            "pattern": "[file:hashes.SHA256 = '4d5dbe3d38f2be8ef5455d3162614f458398cc8d807568078738f9c32225daf7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:24:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b0c-e748-4c53-8c13-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:00.000Z",
            "modified": "2016-02-19T03:25:00.000Z",
            "description": "Automatically added (via a841b80deb4021fe0992346efa376df9)",
            "pattern": "[file:hashes.SHA256 = '8b5d41f15cd1dfa11760ebfb1c3506bc443807d6b33b578192f14a6b07ed6f2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b16-c6fc-49ab-8124-4df7950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:10.000Z",
            "modified": "2016-02-19T03:25:10.000Z",
            "description": "Automatically added (via a84743aff65238fb470080f47a9dee2d)",
            "pattern": "[file:hashes.SHA256 = 'e006991261f616c63ef633cc011587d8c9d3fa6c80d4202caedae8ed0e01eee4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b22-92b8-496f-9b09-4aaf950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:22.000Z",
            "modified": "2016-02-19T03:25:22.000Z",
            "description": "Automatically added (via a867a60ca64c2e1369bbac8bead24d16)",
            "pattern": "[file:hashes.SHA256 = 'bcc7df6f8bdca5ee28180d9f5b2dd8a60feddd59c202d5df31daac177a46268b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b2f-84a0-4941-9b68-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:35.000Z",
            "modified": "2016-02-19T03:25:35.000Z",
            "description": "Automatically added (via a8a1f0996c3e2555f8f1bb62659b6b34)",
            "pattern": "[file:hashes.SHA256 = '2d30d64cb231f7aa0d558670ed117260d905046dc70bce5daac67385d3d79e58']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b3b-a134-42a1-a26e-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:47.000Z",
            "modified": "2016-02-19T03:25:47.000Z",
            "description": "Automatically added (via a8a75220abd699b4331694fb05fb8c55)",
            "pattern": "[file:hashes.SHA256 = '50c247b06d97a6d140c150cbf7acfef3cbb7a8a51e80490b19f79b15c1fadb19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b46-5e48-4436-9221-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:25:58.000Z",
            "modified": "2016-02-19T03:25:58.000Z",
            "description": "Automatically added (via a8bc8d72b02fce82be1ca480c6f682b5)",
            "pattern": "[file:hashes.SHA256 = '90f0b4ad4ec5331979cc45215e193c20a88120e4724fb350dba944735f81d345']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:25:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b51-6218-43e3-974e-494c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:09.000Z",
            "modified": "2016-02-19T03:26:09.000Z",
            "description": "Automatically added (via a8d805311c505aff21613e9f9858ecc6)",
            "pattern": "[file:hashes.SHA256 = '7bfc4485b9981a63534ab1fd5dd65b7894ac4fdd2bfe1be75896bf5236ddf405']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b5c-c1e8-4dbe-86d8-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:20.000Z",
            "modified": "2016-02-19T03:26:20.000Z",
            "description": "Automatically added (via a8ec12ec7d1f2b829756e3c6b3d8be72)",
            "pattern": "[file:hashes.SHA256 = 'e56bea2f0208e6d454f1b3cc9922fb3de0edf1c8473bb3e3263f0b1503710444']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b67-6e8c-49d6-bdbd-4824950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:31.000Z",
            "modified": "2016-02-19T03:26:31.000Z",
            "description": "Automatically added (via a90796d1daef998e8f1f280209e17cbe)",
            "pattern": "[file:hashes.SHA256 = '5796db03471f78e32181b195eca24b16bb3d9f84aa1bad1d0a30d4f444b25a5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b72-f858-4858-9ac4-4ec6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:42.000Z",
            "modified": "2016-02-19T03:26:42.000Z",
            "description": "Automatically added (via a94384de1133039b03b76fdc645f3f36)",
            "pattern": "[file:hashes.SHA256 = '8ab032c90dadd6a6e1439ff6387a901f772100ab40c7535e98924a413231236b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b7d-3c24-4d24-9a7b-4247950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:26:53.000Z",
            "modified": "2016-02-19T03:26:53.000Z",
            "description": "Automatically added (via a94d29697079a38d943edba7f61cf453)",
            "pattern": "[file:hashes.SHA256 = '7d963de2400d7342183fadeb6e22b35d7a6ff803c0fd219459a644cabdfbda44']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:26:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b87-ddb4-4103-9dd8-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:03.000Z",
            "modified": "2016-02-19T03:27:03.000Z",
            "description": "Automatically added (via a94ea4ae0756dfa6d789399a659ed0ff)",
            "pattern": "[file:hashes.SHA256 = '9bdd1fc511ca4f211fd7ad77bedafae2668fc70fa772690f273f91b07574e12e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b92-fec4-40a8-8ca9-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:14.000Z",
            "modified": "2016-02-19T03:27:14.000Z",
            "description": "Automatically added (via a9f2ccc6c0f030430b393dd119bf0487)",
            "pattern": "[file:hashes.SHA256 = 'd9991a36b8b1c34ed493d7c2788894438fc4b9b186e8aeee7c26b26a162beea3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68b9c-4d2c-4da0-a02b-481c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:24.000Z",
            "modified": "2016-02-19T03:27:24.000Z",
            "description": "Automatically added (via aa4315a8e239727a7aded003f1fa07a8)",
            "pattern": "[file:hashes.SHA256 = '580b41778cfd4e82ba1a3043e00c291aa9fbfc6b4674239ccb362f854e1a7d7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ba7-9b54-41f8-b270-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:35.000Z",
            "modified": "2016-02-19T03:27:35.000Z",
            "description": "Automatically added (via aa7e601964fef573253b0a56a88a8ad9)",
            "pattern": "[file:hashes.SHA256 = '448274b9fa9a660c0cc9437c29d2e52ae2b8c777c3579551616a0767218cf5b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bb3-8f38-4f87-bde9-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:47.000Z",
            "modified": "2016-02-19T03:27:47.000Z",
            "description": "Automatically added (via abc5029e141500e29e344e4b03c59135)",
            "pattern": "[file:hashes.SHA256 = 'afbe185fabd8ce3ec11d188d06254eb787fd85441e64712f0b99f5a1e0857e4a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bbd-1628-46d1-b611-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:27:57.000Z",
            "modified": "2016-02-19T03:27:57.000Z",
            "description": "Automatically added (via abe7b88bfedbdeb58fe4eccde1763cf5)",
            "pattern": "[file:hashes.SHA256 = '36dd6a10418ab6d5e5483823d59c19ba201749771d6c72167571c6e00bcb1cc7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:27:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bc7-a8a8-4e1e-8ea2-4a38950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:07.000Z",
            "modified": "2016-02-19T03:28:07.000Z",
            "description": "Automatically added (via ac58decd0d0eaeba5940173f5f0aa537)",
            "pattern": "[file:hashes.SHA256 = 'ce04aa3ec486dbbb6bde116b96966c2b8f16653ca3f1ea6c4f05c4d2e4ea83f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bd2-51d4-4357-af0e-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:18.000Z",
            "modified": "2016-02-19T03:28:18.000Z",
            "description": "Automatically added (via ac7fc1838b226a9932578aee6e62ca06)",
            "pattern": "[file:hashes.SHA256 = '95b7fc554d33b508624567cdbdb0d63ed4ec8b71d266a88358d5bbbde3121536']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bdd-4670-4f17-8828-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:29.000Z",
            "modified": "2016-02-19T03:28:29.000Z",
            "description": "Automatically added (via ad7bf23e21ccc5d311142ebf7f09caea)",
            "pattern": "[file:hashes.SHA256 = 'c28d7ba29f38e1cdce4d1b9e4d38cfa26de22e6d5c220bcfc798aa14649d9dd7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68be8-2048-4d8e-acac-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:40.000Z",
            "modified": "2016-02-19T03:28:40.000Z",
            "description": "Automatically added (via ada9da93eb15a0d98c90e5d46d14fef3)",
            "pattern": "[file:hashes.SHA256 = '03161ba941de9592a256e07ab259037de2a97879a7b906b9962574846e004af5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bf2-1e88-4c4b-97ab-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:28:50.000Z",
            "modified": "2016-02-19T03:28:50.000Z",
            "description": "Automatically added (via adae629fcd2d7bc5e71c28661cad5174)",
            "pattern": "[file:hashes.SHA256 = 'c30fbc66668e22cffb490914fe45426331e3c6af848f0917bcee9231df62fe61']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:28:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68bfd-9948-41cf-802d-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:01.000Z",
            "modified": "2016-02-19T03:29:01.000Z",
            "description": "Automatically added (via ae5963a91661223d264267e4c9ce2226)",
            "pattern": "[file:hashes.SHA256 = '783f0c793c053c68d9d987c0f3c490b3b007b384577dedf60170b518a8c82ed2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c07-decc-4c86-8524-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:11.000Z",
            "modified": "2016-02-19T03:29:11.000Z",
            "description": "Automatically added (via ae91eb7768ab8ad3c2216acf0cefbd38)",
            "pattern": "[file:hashes.SHA256 = 'da05e300e453bd20155de5e631e5dbab3df40b5cec414d30bf72094861583658']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c11-fc28-4a60-bf7e-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:21.000Z",
            "modified": "2016-02-19T03:29:21.000Z",
            "description": "Automatically added (via aec99d53916bf62e2e155b6e51a279bf)",
            "pattern": "[file:hashes.SHA256 = '0527a7abb87754f94ada59638afdc248763e7dc121e536169dc8773e568718f0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c1c-0300-413a-bcd1-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:32.000Z",
            "modified": "2016-02-19T03:29:32.000Z",
            "description": "Automatically added (via af6b650f2b8058a7468c242f6defb04a)",
            "pattern": "[file:hashes.SHA256 = 'bac03f8e03ea855d13c63a946acb0b91386fd82fccecba70ab8f179d8852c11e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c26-0e6c-4781-98e1-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:42.000Z",
            "modified": "2016-02-19T03:29:42.000Z",
            "description": "Automatically added (via af76bd50a8501950ab93506ed9b45881)",
            "pattern": "[file:hashes.SHA256 = '1905f92c74fd1d3a7b50fb8a868ab33400a26e7789fd4e1ac95c8d03c081f1a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c32-9258-483b-9c35-4ada950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:29:54.000Z",
            "modified": "2016-02-19T03:29:54.000Z",
            "description": "Automatically added (via af981c29d0c898194c755c5dc491ab92)",
            "pattern": "[file:hashes.SHA256 = 'd0d9136b9f2fed47633208653d4a3cd6ee165a9db2ba636dc9691a820836d8f9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:29:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c3e-5ab0-407e-8d96-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:06.000Z",
            "modified": "2016-02-19T03:30:06.000Z",
            "description": "Automatically added (via afe32e0121ac62e6e3afa4c394f29dbd)",
            "pattern": "[file:hashes.SHA256 = 'b1141a26d91dae50a14385ea2da04a87278e2814808c3f8196fda8c7df33c241']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c4b-49f8-41a9-8eff-4db9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:19.000Z",
            "modified": "2016-02-19T03:30:19.000Z",
            "description": "Automatically added (via b0a979bc8ef3cec3c74ef2eeabb63b28)",
            "pattern": "[file:hashes.SHA256 = '8c591708a6aa17edd62af4142ed5664648c33f334d651acb073416969b6301a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c56-cb9c-4718-89c7-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:30.000Z",
            "modified": "2016-02-19T03:30:30.000Z",
            "description": "Automatically added (via b0adb7911b583c2b37c61068972acc01)",
            "pattern": "[file:hashes.SHA256 = '77898c3b7fc2e611253030c53a6cf8377943f28fc2652cb8721f390a4810a325']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c63-baa4-4ad7-9104-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:43.000Z",
            "modified": "2016-02-19T03:30:43.000Z",
            "description": "Automatically added (via b123492916b04043f5da860f00f3cf0a)",
            "pattern": "[file:hashes.SHA256 = 'd83618bd61443c6d43bfbb9ba973fcdc6baffd60210793ab50b7a4c4808d2371']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c6e-8510-4114-8bf8-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:30:54.000Z",
            "modified": "2016-02-19T03:30:54.000Z",
            "description": "Automatically added (via b12facfbb19c9704970e30828bcd37b1)",
            "pattern": "[file:hashes.SHA256 = '9514afe49f8728cd797f5dc8f2888164e11ffdacb9045455dbe991a034f9cf72']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:30:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c7a-8784-4303-8dcd-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:06.000Z",
            "modified": "2016-02-19T03:31:06.000Z",
            "description": "Automatically added (via b14e3ea855e37229883cfc11e0e6fee4)",
            "pattern": "[file:hashes.SHA256 = 'e209547fadde98ffbfb551d2d412cadcc0b7e6b5ce2303133fcbdb0fe5b4d69d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c86-e5d0-41c1-a0c6-4911950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:18.000Z",
            "modified": "2016-02-19T03:31:18.000Z",
            "description": "Automatically added (via b1c31bb75a4317056c71c25074d4ada8)",
            "pattern": "[file:hashes.SHA256 = '86a786fb7f33b0c1aa3c7922a98c1e1c5ef167ca2feb8031bed5c06731471db6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c93-4254-485a-8d6b-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:31.000Z",
            "modified": "2016-02-19T03:31:31.000Z",
            "description": "Automatically added (via b27609e183489c44faf7d4421218c571)",
            "pattern": "[file:hashes.SHA256 = '87b3003ca35ff7ff3e5732485a80d71715feda70a560ac232ef494764c4f2750']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68c9f-2c34-4fad-a57d-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:43.000Z",
            "modified": "2016-02-19T03:31:43.000Z",
            "description": "Automatically added (via b3214695c413a762aefe8edb32e98cce)",
            "pattern": "[file:hashes.SHA256 = '2e515f1308982dcb7b167c51ceab103f9e8872ddc39ef9c875164d7e66dcd00f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68caf-1f04-4021-951f-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:31:59.000Z",
            "modified": "2016-02-19T03:31:59.000Z",
            "description": "Automatically added (via b330410fcdc13ca1370e6e957244b172)",
            "pattern": "[file:hashes.SHA256 = '4772586d100c7409ba4d63db312c51d253a0bc993bdaa4cd442d06ded655eec7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:31:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cba-ffd0-4355-b241-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:10.000Z",
            "modified": "2016-02-19T03:32:10.000Z",
            "description": "Automatically added (via b3487cf4d7038fcbf016d463b3f1baad)",
            "pattern": "[file:hashes.SHA256 = '676514d90ff85d2bf877c01471cb42f1749f5cc7270cc5fcaabd3b5fbc850e48']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cc5-9158-46bb-a431-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:21.000Z",
            "modified": "2016-02-19T03:32:21.000Z",
            "description": "Automatically added (via b35597962e58078c59a6dbc084196d39)",
            "pattern": "[file:hashes.SHA256 = '5449885bcae9438e18aecff638ba5068c37580aa8145a2b33eba7a70f02bd044']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cd0-d4b0-4868-9a51-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:32.000Z",
            "modified": "2016-02-19T03:32:32.000Z",
            "description": "Automatically added (via b3a7a31569c5458d26ac32ee9c3eaaaa)",
            "pattern": "[file:hashes.SHA256 = '17a485e1ac1a64653e715564939ccff428840dd08d72120e12b228b2fc756831']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cdc-f7e0-479d-b1ee-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:44.000Z",
            "modified": "2016-02-19T03:32:44.000Z",
            "description": "Automatically added (via b3ad9022f7299367de95102f5b187c01)",
            "pattern": "[file:hashes.SHA256 = 'a1f142bc68bb3e4a94d59deeb0426c77920b8fe4842279292d3443d1080cd136']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ce7-a6a0-4330-94b0-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:32:55.000Z",
            "modified": "2016-02-19T03:32:55.000Z",
            "description": "Automatically added (via b3afe6b9762f13eb179c1f28b211034c)",
            "pattern": "[file:hashes.SHA256 = 'cf2a804d1a14894f22c0bf96df04eb0c2dada495ebfa24c14e5999357609d0fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:32:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cf3-8568-49cd-a43f-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:07.000Z",
            "modified": "2016-02-19T03:33:07.000Z",
            "description": "Automatically added (via b3dafd00e7dfe9c4450b7da6872ecb40)",
            "pattern": "[file:hashes.SHA256 = 'd1a5793e52bf5fb700af7e3781f971b520337e1e648ba1351d75be5766c8e6dc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68cff-10a0-46d0-baef-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:19.000Z",
            "modified": "2016-02-19T03:33:19.000Z",
            "description": "Automatically added (via b40d1b2eb402ccc31eee33c994d6883e)",
            "pattern": "[file:hashes.SHA256 = '200520a4b26f8c365e592b829b296a625a8e1519e848aba90cfe47f25080901c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d0a-96bc-4300-91d8-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:30.000Z",
            "modified": "2016-02-19T03:33:30.000Z",
            "description": "Automatically added (via b4354b6abc04b278630ca8961f980e64)",
            "pattern": "[file:hashes.SHA256 = '05834a5b79b0853f35cfb4096dbbd5af45534c2bcaa9088b718aeedc5aabf8fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d15-20d4-4dd0-adbd-4aac950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:41.000Z",
            "modified": "2016-02-19T03:33:41.000Z",
            "description": "Automatically added (via b49bc80746500a39609a8ac01a21bd25)",
            "pattern": "[file:hashes.SHA256 = 'f0b6af71bb1d74a47d5c3f97304ff3a4628d57195fcc82c7bb1277e6aa195a76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d22-236c-4cfb-8d03-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:33:54.000Z",
            "modified": "2016-02-19T03:33:54.000Z",
            "description": "Automatically added (via b5292e44ae6d084dce62e3d11de5b736)",
            "pattern": "[file:hashes.SHA256 = 'e14ac4837785f871e806eb6ac3eb451aee2968bb6d83f44615fff4c65324356d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:33:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d2e-e718-4f5a-a07a-4974950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:06.000Z",
            "modified": "2016-02-19T03:34:06.000Z",
            "description": "Automatically added (via b5685244da19c863c29c063f7138c099)",
            "pattern": "[file:hashes.SHA256 = '29778cb56dbcce4150e92aa6749c6abb2e8f37e06a98836abcbaf47cb43a074a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d3a-70e0-4478-884f-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:18.000Z",
            "modified": "2016-02-19T03:34:18.000Z",
            "description": "Automatically added (via b5af883f5a0dfd40d6941eb4332c3262)",
            "pattern": "[file:hashes.SHA256 = '0e8b1a46af3c1d0f6acbf2193e882a036544a710307ae55de127173058c16ae2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d45-122c-41cd-ab2d-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:29.000Z",
            "modified": "2016-02-19T03:34:29.000Z",
            "description": "Automatically added (via b5c9785563fdf8e1481983560a21f550)",
            "pattern": "[file:hashes.SHA256 = 'b10d51326567280888f89358cd9f7ed523b25aedcb264b922cba79c13d440044']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d50-30f4-4e51-8c91-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:40.000Z",
            "modified": "2016-02-19T03:34:40.000Z",
            "description": "Automatically added (via b5fdc78b1b225321c681c6d4a807c8c3)",
            "pattern": "[file:hashes.SHA256 = 'dfa6462f4d65d39a6624479a0c039cb9a45137e4229dbd116c675cf6c65f2de2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d5c-c268-4d43-9af7-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:34:52.000Z",
            "modified": "2016-02-19T03:34:52.000Z",
            "description": "Automatically added (via b60c26edfcb2e880e8d0421304f0def5)",
            "pattern": "[file:hashes.SHA256 = 'b1c693f5c9c8ae053bd82dfa747265444317782dbe9f9cd39ab21d0e701315e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:34:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d67-078c-4958-9102-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:03.000Z",
            "modified": "2016-02-19T03:35:03.000Z",
            "description": "Automatically added (via b6495b2240417a466302d24c0111288c)",
            "pattern": "[file:hashes.SHA256 = '14a0d510c07b100bf78da53519b640db44c441e4c725daff3d62a4bec86e135d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d72-8948-4d3e-beba-4f68950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:14.000Z",
            "modified": "2016-02-19T03:35:14.000Z",
            "description": "Automatically added (via b65da314ce294433092ea0aca6a9f022)",
            "pattern": "[file:hashes.SHA256 = '8a3bfc6183c269f9a1b4b9359001c58caa666e61b27283f3a9b53fb68446efdb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d7f-0518-4145-baf4-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:27.000Z",
            "modified": "2016-02-19T03:35:27.000Z",
            "description": "Automatically added (via b68a4c23f4adcd250ab62e3fa727cad6)",
            "pattern": "[file:hashes.SHA256 = 'a401702fe26c8aeedaed0990a9b71fa1a1ebd085199e4806caf128b43ad0c8b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d8b-0dc8-4756-8e84-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:39.000Z",
            "modified": "2016-02-19T03:35:39.000Z",
            "description": "Automatically added (via b6b053caa3e5e6ad01a825c3cb39e59e)",
            "pattern": "[file:hashes.SHA256 = 'da04ef1ba88b85f50b95284beb981afd21cb0b6e6b42811011b38f627e085b32']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68d98-5d0c-4a94-8772-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:35:52.000Z",
            "modified": "2016-02-19T03:35:52.000Z",
            "description": "Automatically added (via b6c303bb4909fe83c1f45ba2b69846f3)",
            "pattern": "[file:hashes.SHA256 = '7b83eccebd11cd587089bfa29729ce099f08e2f268ff0da7de8f08fac5488a62']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:35:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68da3-8528-4b30-b24f-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:03.000Z",
            "modified": "2016-02-19T03:36:03.000Z",
            "description": "Automatically added (via b6c8b83b0aee3965caa90d94620d5e55)",
            "pattern": "[file:hashes.SHA256 = 'c5b62e4fa86d80e4e4333b6f3978818488947a0f204381bd6eda2c5523b536c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68db0-03dc-445e-9830-4d57950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:16.000Z",
            "modified": "2016-02-19T03:36:16.000Z",
            "description": "Automatically added (via cb26cd4c08800901dfb66b657a099910)",
            "pattern": "[file:hashes.SHA256 = '7e95e5be43b3b81af67fe66c17adff877c62bcd1d9d0ceee1f35cd455ea13925']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68dbb-d810-459c-aedf-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:27.000Z",
            "modified": "2016-02-19T03:36:27.000Z",
            "description": "Automatically added (via b71e8a9bb2dab9e7b1378b2d03b71984)",
            "pattern": "[file:hashes.SHA256 = '87177e396dcd9dc2bc0fa0cbb39dcfa5b1c7b4dd66bb4dd5acf6153e2081ce66']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68dc7-a678-4f73-aaab-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:39.000Z",
            "modified": "2016-02-19T03:36:39.000Z",
            "description": "Automatically added (via c590dd3c437a6aef5bc03b63e2cf8722)",
            "pattern": "[file:hashes.SHA256 = '466586a6c3d678c19307e9fe7e2392d7231e7cba3e1f1610852b247adb8164fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68dd2-2094-42ac-b7e3-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:36:50.000Z",
            "modified": "2016-02-19T03:36:50.000Z",
            "description": "Automatically added (via b730f68d3b7b7442b5414b45976ea894)",
            "pattern": "[file:hashes.SHA256 = '6c569e4e730a18800c7c981d88ca875fe54341ccce898994ede15d8c55bcfd8c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:36:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68dde-33c4-4f6f-846a-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:02.000Z",
            "modified": "2016-02-19T03:37:02.000Z",
            "description": "Automatically added (via caeb865a208a632e676bfca9d246729b)",
            "pattern": "[file:hashes.SHA256 = '4d6401f7675ba6dd82fbd04e5301fbbaddf767a1f1c04a8ee789ba589aa7c0ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68de9-6afc-4a7f-ae49-4980950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:13.000Z",
            "modified": "2016-02-19T03:37:13.000Z",
            "description": "Automatically added (via cae1ad8b41d49d6ce56b16385cc49b33)",
            "pattern": "[file:hashes.SHA256 = 'b419b66f00fc958bc7f704ef8575f536aa80a52bdc8db89331ead26591358633']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68df4-eddc-4d35-b451-4806950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:24.000Z",
            "modified": "2016-02-19T03:37:24.000Z",
            "description": "Automatically added (via c599c8d2d8dc76e55d4c9f18648e9b8c)",
            "pattern": "[file:hashes.SHA256 = 'b50bbcf2f6ed0cf9639b4cd52603e569de69dc2d60ae1f22ae75eca69632de36']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e00-a800-43b7-a383-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:36.000Z",
            "modified": "2016-02-19T03:37:36.000Z",
            "description": "Automatically added (via b7879a6cf6cc1087177027bd44d22288)",
            "pattern": "[file:hashes.SHA256 = 'eb1ad675fac68b6cc4883e9ab770e736189e37ec863eb0b6e3ee5c506aa9e1ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e0b-2c6c-476a-9c65-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:47.000Z",
            "modified": "2016-02-19T03:37:47.000Z",
            "description": "Automatically added (via b78a8a51f103764327765ca96d789504)",
            "pattern": "[file:hashes.SHA256 = '2ba8eee91f534bfc3732316e0ff457c34f268c46c03f0c72031a2a2d2b93f276']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e17-4034-4720-ba9b-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:37:59.000Z",
            "modified": "2016-02-19T03:37:59.000Z",
            "description": "Automatically added (via cad7f6d622036865ff2c66131e009d9b)",
            "pattern": "[file:hashes.SHA256 = '363250b7ed1b63c6ba4c7ca41dd6272ac8cb898a76e2c5cf4e32fceccaa8b648']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:37:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e23-015c-4132-9d0c-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:11.000Z",
            "modified": "2016-02-19T03:38:11.000Z",
            "description": "Automatically added (via b7f0cdf0b9e0c06ebe3fe0c7e08abd98)",
            "pattern": "[file:hashes.SHA256 = 'b8ce4ed2b23de511d4df34d7699c61149a2fb8b23050bc43ca2d6a520f9b9663']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e2f-5074-4274-9969-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:23.000Z",
            "modified": "2016-02-19T03:38:23.000Z",
            "description": "Automatically added (via c5b0c159343d30b28cc3d4b12da2f85d)",
            "pattern": "[file:hashes.SHA256 = '7f152c8bfcc580a6708f0bdcf957733033418e6207e1dd690329a98b41f13c35']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e3b-c9d4-4b7c-98d7-4966950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:35.000Z",
            "modified": "2016-02-19T03:38:35.000Z",
            "description": "Automatically added (via c5b3b7f58faf0b7a831c31a2ea103163)",
            "pattern": "[file:hashes.SHA256 = '5e78797f0de41d52644bc1f2368ea350f3521d72b901ffcac5aa5f4aeebaf4af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e47-becc-415e-a331-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:47.000Z",
            "modified": "2016-02-19T03:38:47.000Z",
            "description": "Automatically added (via b8c7da5f37c0a83822c1087124884ea5)",
            "pattern": "[file:hashes.SHA256 = 'a7e9bd8394b4f4c66eff243ada2ee864709ceac4cfe135f4693be5e676a5f267']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:47Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e52-6ed8-4df9-8776-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:38:58.000Z",
            "modified": "2016-02-19T03:38:58.000Z",
            "description": "Automatically added (via b8d0f87408c4f8d2ea01b0bb3f82e1e3)",
            "pattern": "[file:hashes.SHA256 = 'efacdf9ff80d84c6da96665a1442b2a7d006cb800daca56476b1c25d0b9e72d3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:38:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e5e-54d0-43a6-b3e0-43fd950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:10.000Z",
            "modified": "2016-02-19T03:39:10.000Z",
            "description": "Automatically added (via b8d3ab5f1bb39ad1b1bbd00b054a4c84)",
            "pattern": "[file:hashes.SHA256 = '7688795987d7a6c4b50064a0ca4dbf4677750d3afd1802906f370fa2402865d1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e6a-cf7c-4c9c-b412-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:22.000Z",
            "modified": "2016-02-19T03:39:22.000Z",
            "description": "Automatically added (via b8dc290d9df001ef32a0c4b25ef2a23b)",
            "pattern": "[file:hashes.SHA256 = '1be23cea2395699dd75be4077b7c004b419522c21e79eb0ed77ecdb5012f1cf2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e77-9ef8-40be-868d-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:35.000Z",
            "modified": "2016-02-19T03:39:35.000Z",
            "description": "Automatically added (via b8eade0367a50ead8e6843ee7381109c)",
            "pattern": "[file:hashes.SHA256 = '67e7b32b9a27b39d7b374f37deaf543d57c83d3804bccb6991a00652e43279ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e82-4664-4a2b-b291-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:46.000Z",
            "modified": "2016-02-19T03:39:46.000Z",
            "description": "Automatically added (via b8ef17ff1dec429b39fc5a0132ae0f84)",
            "pattern": "[file:hashes.SHA256 = 'f4648dc9685bc0efd868b8ee1bb03b4b5cc4dbcfbda14bc0c2e50de37818a837']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e8d-5d48-4841-ae8e-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:39:57.000Z",
            "modified": "2016-02-19T03:39:57.000Z",
            "description": "Automatically added (via ca0ff5b7b63d7bf64da20d900aef5a42)",
            "pattern": "[file:hashes.SHA256 = '496058b8ef20954d1a2da6a55d5572eef2d6212debb454d6e28ae24afcf069e6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:39:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68e9a-f9f8-48ab-809d-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:40:10.000Z",
            "modified": "2016-02-19T03:40:10.000Z",
            "description": "Automatically added (via c9f247c5cc8a51ef051b68a6e69c92e7)",
            "pattern": "[file:hashes.SHA256 = '6f3a63308faef1151410783cb611b519349f65ff56702148a6da9e6f896fae56']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:40:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ea7-d6d0-4ff3-8cd6-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:40:23.000Z",
            "modified": "2016-02-19T03:40:23.000Z",
            "description": "Automatically added (via c5e654e0dc6512b519c22efb583ef895)",
            "pattern": "[file:hashes.SHA256 = '9bcfffa2016512062a54923f5c1b65182166f9c1a3e1c9c6cc57f0f1f914a3f6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:40:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68eb3-fd18-4876-9c88-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:40:35.000Z",
            "modified": "2016-02-19T03:40:35.000Z",
            "description": "Automatically added (via c9e6db39f75364fe592cf031fcc16b16)",
            "pattern": "[file:hashes.SHA256 = 'a775678c109cd461ac95557d122dbd16d7ec4dc66cbd75379366b9ebed2becfc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:40:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ec0-aba8-41bd-bf4d-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:40:48.000Z",
            "modified": "2016-02-19T03:40:48.000Z",
            "description": "Automatically added (via c9d422564eaf9b87eba9a58ff574662d)",
            "pattern": "[file:hashes.SHA256 = '6e3227bdfeac4178112160c9342551717079bcc131ff9e0d65fae3d86235f37c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:40:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ecd-e570-4721-a2f5-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:01.000Z",
            "modified": "2016-02-19T03:41:01.000Z",
            "description": "Automatically added (via c9a1ceeddc34b9e12df2ea2932e4ddff)",
            "pattern": "[file:hashes.SHA256 = '787523b08245516fe2930c9ad912bc3a24721e8a44b34b5947f9525a16562a7e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68eda-be64-4ff6-9c6c-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:14.000Z",
            "modified": "2016-02-19T03:41:14.000Z",
            "description": "Automatically added (via b945282a540027f5183aebfa69175bd8)",
            "pattern": "[file:hashes.SHA256 = '0ad01fd62c275cd9ea7eeea621be8db1f830ea1d22df86044a4dd2e56e493568']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ee6-bf58-41c6-a1e7-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:26.000Z",
            "modified": "2016-02-19T03:41:26.000Z",
            "description": "Automatically added (via b959eb6239bcd90633b66313508f6225)",
            "pattern": "[file:hashes.SHA256 = '0aed38fe7660475d9a0da5832ca72db4703c24a7d5dc7e6860a15179f114693f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ef1-ed18-4cbd-a840-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:37.000Z",
            "modified": "2016-02-19T03:41:37.000Z",
            "description": "Automatically added (via c98ce2e779803436ea5b151261a3d260)",
            "pattern": "[file:hashes.SHA256 = 'ae41995277fa3b45cb974c759579392b97efd39202cd35ca94fe0b65564f1eec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68efd-e350-4b8c-ba9d-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:41:49.000Z",
            "modified": "2016-02-19T03:41:49.000Z",
            "description": "Automatically added (via b968f5e8b50dde6f5b0e8a0e8fd87cd4)",
            "pattern": "[file:hashes.SHA256 = '55118b3a5122bd5506e47901e79c0de1d7fd805c2c6a8ffb9b3312bed6e0718e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:41:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f09-2c24-44c0-8ab0-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:01.000Z",
            "modified": "2016-02-19T03:42:01.000Z",
            "description": "Automatically added (via c9727dc838d0a520f34d6554824f2806)",
            "pattern": "[file:hashes.SHA256 = 'ed38b5d6bd48835d3e039f63587dbf05e1ba7ae9b083162928f0aae3eeca79b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f17-5f78-4dd3-ab47-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:15.000Z",
            "modified": "2016-02-19T03:42:15.000Z",
            "description": "Automatically added (via b995c362c4897ce1f9c59661baca637f)",
            "pattern": "[file:hashes.SHA256 = 'e83e59d1ca1f31e7ca5bec9454217a8d75d88a6cfc15724723a012b0d70f2866']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f23-b7ec-43f8-aef2-414c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:27.000Z",
            "modified": "2016-02-19T03:42:27.000Z",
            "description": "Automatically added (via b99938742a898abcd803e42e6d432c93)",
            "pattern": "[file:hashes.SHA256 = 'cecd0141618b1c9a24f189476efc9c45f70f8183b710e3f63ddce6e70108c380']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f31-8390-44c5-b6ba-4e2e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:41.000Z",
            "modified": "2016-02-19T03:42:41.000Z",
            "description": "Automatically added (via c91c1d568dbdb615b749bbb6f4f88624)",
            "pattern": "[file:hashes.SHA256 = '6dfae54a76d017a611fafa98d6e19f5fa82f3c26915f28569ec3a3b24a2ec30f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f3d-a048-4791-a440-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:42:53.000Z",
            "modified": "2016-02-19T03:42:53.000Z",
            "description": "Automatically added (via b9cd3e70e42f18a46bd1e641ed1f2bca)",
            "pattern": "[file:hashes.SHA256 = '66216bb91307373cd02ddb44a1095e0b0a627aee3f3efe70c038484f72d8c5c2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:42:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f48-6b80-4acf-9dbf-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:43:04.000Z",
            "modified": "2016-02-19T03:43:04.000Z",
            "description": "Automatically added (via b9f2d31d8ebf2b168d5de11b57c21254)",
            "pattern": "[file:hashes.SHA256 = '7648365b60c73a47f7ff9509eccdae5e6db3f03ed9817ebafb2c9722db912ee7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:43:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f54-33b0-41c4-a2a1-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:43:16.000Z",
            "modified": "2016-02-19T03:43:16.000Z",
            "description": "Automatically added (via b9fc95160a640ef2c1675a28dbe331f0)",
            "pattern": "[file:hashes.SHA256 = '4f1523b065b012a9d4eb5ef4d92b492ce2d47f1f80b4cb19732be685fb6f3642']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:43:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f61-96a0-4c01-9d52-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:43:29.000Z",
            "modified": "2016-02-19T03:43:29.000Z",
            "description": "Automatically added (via ba2f2a169f27fd5749884c9478e09974)",
            "pattern": "[file:hashes.SHA256 = '6c8f6c8116c44f04427ff9ec669e7454ecbc2d2ac9c4a08abd7a585617ad23cc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:43:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f6e-7344-47cf-8569-4b1c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:43:42.000Z",
            "modified": "2016-02-19T03:43:42.000Z",
            "description": "Automatically added (via ba60aa30376dbae0b29ed6133c3b3781)",
            "pattern": "[file:hashes.SHA256 = 'ed34a0c482562e17fc58fe81c4ecda97fa61c2bb64cd96f73ef3459c166a6299']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:43:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f7c-0290-4609-8de0-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:43:56.000Z",
            "modified": "2016-02-19T03:43:56.000Z",
            "description": "Automatically added (via ba854bd7ed34a7de658b07a8c0fc70f7)",
            "pattern": "[file:hashes.SHA256 = '4900f41ed1703c3e7f83e8f599b5a5a782607a3d7fbec827bce36ef3b6359cd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:43:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f89-d3dc-4b5a-8617-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:44:09.000Z",
            "modified": "2016-02-19T03:44:09.000Z",
            "description": "Automatically added (via ba9fc031a9abc2f4ec30d17bbdbf49d6)",
            "pattern": "[file:hashes.SHA256 = '09d9395b510bd10bb492381f983baa7f34414f5edd93e2b54ac4b9f7891aa3ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:44:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68f96-ba4c-4ab2-aa66-4b53950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:44:22.000Z",
            "modified": "2016-02-19T03:44:22.000Z",
            "description": "Automatically added (via c87174ddd67450c1e5b714e11a2948a1)",
            "pattern": "[file:hashes.SHA256 = 'b9a11496c07cc2387cbe3d68cd264f938bb7bcf5d748c9f9aabea4aa83c6c670']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:44:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fa4-64b8-4855-bb39-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:44:36.000Z",
            "modified": "2016-02-19T03:44:36.000Z",
            "description": "Automatically added (via bab65428ff0e49234013d7804249a63a)",
            "pattern": "[file:hashes.SHA256 = '705a28cd55b55cf889ae84dabe5a7d26079b46fd33928bcfce9834f8fd6bcb5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:44:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fb1-b8f0-4914-adc7-479b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:44:49.000Z",
            "modified": "2016-02-19T03:44:49.000Z",
            "description": "Automatically added (via c86939fbf886e23d2c274b0a29865953)",
            "pattern": "[file:hashes.SHA256 = 'a7985c48d481cc2d4b12f386baf302851fede6e4fea6b07f56f14ea5800fff65']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:44:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fbf-2568-44d1-bd09-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:45:03.000Z",
            "modified": "2016-02-19T03:45:03.000Z",
            "description": "Automatically added (via c86318c6f9567e888c03b7662cd38a3f)",
            "pattern": "[file:hashes.SHA256 = 'dfde163eee6b30de4d5009b8633a92572b84757a1ceb74ba75b438cef0dd96b7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:45:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fce-a494-4a7b-ba7a-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:45:18.000Z",
            "modified": "2016-02-19T03:45:18.000Z",
            "description": "Automatically added (via c6dff48a0cc08450862a5395c641f7b6)",
            "pattern": "[file:hashes.SHA256 = 'e7c2078f44edba1879e16e5c47f8d8d8aaa98e1e873ab78fa100b3b4b38f1c1b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:45:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fdb-89d0-45cc-904c-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:45:31.000Z",
            "modified": "2016-02-19T03:45:31.000Z",
            "description": "Automatically added (via c6e12786e4c798b3f1b2695ff16a7ba6)",
            "pattern": "[file:hashes.SHA256 = '1fd203d2b523c8c85738b22760d476c0acdb7bd357290b64a91e891fb6d42e7c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:45:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68fe8-db74-4ac4-a2e5-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:45:44.000Z",
            "modified": "2016-02-19T03:45:44.000Z",
            "description": "Automatically added (via bc0685378c6e6bb5247b70da3a2eb7f8)",
            "pattern": "[file:hashes.SHA256 = '08ad79ad731ea13a53801b5e6e0d67e83b8f23bccb82e87711cd548c49018359']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:45:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c68ffa-3c48-4b2d-bc06-4a80950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:46:02.000Z",
            "modified": "2016-02-19T03:46:02.000Z",
            "description": "Automatically added (via c7030abd1e1c2122531f355f89955eed)",
            "pattern": "[file:hashes.SHA256 = '212cec50d264d08bf9a83d862984d2c94dfdbde7507ebe049ab4cc9fda6f78c8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:46:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69008-0540-4e87-be85-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:46:16.000Z",
            "modified": "2016-02-19T03:46:16.000Z",
            "description": "Automatically added (via bc0d18d205596db556355a53b65faace)",
            "pattern": "[file:hashes.SHA256 = '3085a08321536d3c586aa87d6ed97155aadde6ca461b489877c8b5cd49f3a519']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:46:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69016-1f68-490f-abf6-4fcc950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:46:30.000Z",
            "modified": "2016-02-19T03:46:30.000Z",
            "description": "Automatically added (via c78b3ce6a4287e71ead07b9d31121124)",
            "pattern": "[file:hashes.SHA256 = 'ab9498168c02bcc439f7e931d073cbeeb6d3551e534add94d9822b297b9ee574']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:46:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69023-6cf4-47ab-bdd1-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:46:43.000Z",
            "modified": "2016-02-19T03:46:43.000Z",
            "description": "Automatically added (via c7832811c95ea041cbc423074bd12df4)",
            "pattern": "[file:hashes.SHA256 = '7e50262f74444194205082b0aa50bbab42d45de8a44a501f16a54bbfe299d9d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:46:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69031-48f4-43ef-b984-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:46:57.000Z",
            "modified": "2016-02-19T03:46:57.000Z",
            "description": "Automatically added (via c75da9507ec26eb93bd267ddfc127ed0)",
            "pattern": "[file:hashes.SHA256 = '7cf90e3f11f2a39e0afe99de9d84563a0faab6285639e4b5f886fb12bcea7198']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:46:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6903f-9640-48ae-82bd-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:47:11.000Z",
            "modified": "2016-02-19T03:47:11.000Z",
            "description": "Automatically added (via c726e1e0ad128bfb626ff3719e200252)",
            "pattern": "[file:hashes.SHA256 = 'd8b6b2849eb3336df070e76c0d48c8e3862b6d5dc74a5cd502ef554c2119b8a8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:47:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6904d-53c8-4cd1-9a7b-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:47:25.000Z",
            "modified": "2016-02-19T03:47:25.000Z",
            "description": "Automatically added (via bccd8807a247ce25d21425af40ab81f3)",
            "pattern": "[file:hashes.SHA256 = '1434472208711e581e27a083808f2daf61512d4d983b36f0b56bf2517cd6bb8e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:47:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6905a-5ac0-4ade-aac6-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:47:38.000Z",
            "modified": "2016-02-19T03:47:38.000Z",
            "description": "Automatically added (via bcdf9656b56a089016fef7143de72559)",
            "pattern": "[file:hashes.SHA256 = 'd73b13c4945a6031a2fd6b3899320daf634d3f1e5229016342ee255d552101f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:47:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69068-fffc-4116-86d8-48f3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:47:52.000Z",
            "modified": "2016-02-19T03:47:52.000Z",
            "description": "Automatically added (via bd03d24c25693717b0f74d800e4d38ec)",
            "pattern": "[file:hashes.SHA256 = 'a6b9939529d511bece1bfb2d55aa199516333713419ff5d61316a4c461d4198e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:47:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69075-6e80-4554-83e1-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:48:05.000Z",
            "modified": "2016-02-19T03:48:05.000Z",
            "description": "Automatically added (via bd628ba5d0beabd4f86d3146e3be83b7)",
            "pattern": "[file:hashes.SHA256 = 'a253c85a7c5d04e58d562f2446c354b25d1a89d1125bdb821bb55d0d06b30505']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:48:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69083-6118-4b36-a5eb-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:48:19.000Z",
            "modified": "2016-02-19T03:48:19.000Z",
            "description": "Automatically added (via bd691ee2bcb3c227d218c4a28a808b4a)",
            "pattern": "[file:hashes.SHA256 = '4f8f662325c1587da22b6e9493032f165ed77323421025e9140ad40f5582c967']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:48:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69090-3c24-46b7-a414-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:48:32.000Z",
            "modified": "2016-02-19T03:48:32.000Z",
            "description": "Automatically added (via be58fda953d6e41c8b9ec6447b15a65f)",
            "pattern": "[file:hashes.SHA256 = 'fcb26ca66c6f1fb776eb0039c840be770a3cb3628b6a417eb30710dd4854119e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:48:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6909e-4238-4a76-b9e8-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:48:46.000Z",
            "modified": "2016-02-19T03:48:46.000Z",
            "description": "Automatically added (via bf20dc2ef2d574523a4cd550e89ce283)",
            "pattern": "[file:hashes.SHA256 = '6d9b9234a6b52abd8d4331744b5dd608c2d01e6ecc8b34d0f8f243daee00b522']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:48:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690ab-8460-4406-8f95-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:48:59.000Z",
            "modified": "2016-02-19T03:48:59.000Z",
            "description": "Automatically added (via bf396b8a9aaf40b94da4afc7ebeb061f)",
            "pattern": "[file:hashes.SHA256 = '26998d42e631f9a5c3b5a415d0b792629050bae6ea80f5db8aae7b86c6cb8d80']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:48:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690b9-f724-4ce8-ac98-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:49:13.000Z",
            "modified": "2016-02-19T03:49:13.000Z",
            "description": "Automatically added (via bf912c8597403263eed7b2a2afd67bab)",
            "pattern": "[file:hashes.SHA256 = 'b7ee852584846000726ac159755b638a18f7203954a2c3be94b168c8c6a30041']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:49:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690c7-daa0-4636-ab99-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:49:27.000Z",
            "modified": "2016-02-19T03:49:27.000Z",
            "description": "Automatically added (via bffa06e3cd976efceeb646c56804753d)",
            "pattern": "[file:hashes.SHA256 = 'cd50b06099231010cc9bacb4a8efbc921a56a58428d61e3a5b2ab9cfc824ea07']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:49:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690d4-ffac-4f10-82a2-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:49:40.000Z",
            "modified": "2016-02-19T03:49:40.000Z",
            "description": "Automatically added (via c01e9c39570127749b4ac484188373a3)",
            "pattern": "[file:hashes.SHA256 = '5313a64f28673dbe0126c46d5e3924c941fb3f699c5f6ca2631a08b1ab16471c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:49:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690e1-2f18-4b5f-97d6-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:49:53.000Z",
            "modified": "2016-02-19T03:49:53.000Z",
            "description": "Automatically added (via c022ef2fb26e93db3c3750dc6cdb9d3b)",
            "pattern": "[file:hashes.SHA256 = '1b3449b93c771cbe41b37c8889acb136cf5cf025fbe49a2f804416b716947ac2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:49:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690ee-9588-4eb5-9080-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:50:06.000Z",
            "modified": "2016-02-19T03:50:06.000Z",
            "description": "Automatically added (via c038f08b68a2514457ad8071b09c4fe3)",
            "pattern": "[file:hashes.SHA256 = 'aa062f1b96160603311d7f8f3e6a24bc29e17c8701ca19bda9f93e00afe25790']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:50:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c690fb-a5d4-4184-ad38-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:50:19.000Z",
            "modified": "2016-02-19T03:50:19.000Z",
            "description": "Automatically added (via c03dd589b4ffee2319fccc8dab473a7c)",
            "pattern": "[file:hashes.SHA256 = 'e4e40a8b613f4cba023d6aa4f4db1233afbbfc85c7be313285acdae268ee91df']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:50:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69108-3e40-4e38-970a-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:50:32.000Z",
            "modified": "2016-02-19T03:50:32.000Z",
            "description": "Automatically added (via c03e7a2dab23f6002e45f94a20002af5)",
            "pattern": "[file:hashes.SHA256 = '59080b5c823ec7335a859a525ffbfda217400f518ce9757d5820346b3e512435']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:50:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69116-cf90-427b-8432-41e3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:50:46.000Z",
            "modified": "2016-02-19T03:50:46.000Z",
            "description": "Automatically added (via c0928bfd527344aeea2ef2b81b3feeec)",
            "pattern": "[file:hashes.SHA256 = '54342a6433b866f68611a7b4b9920d664fc0a733ee0ed7d56507b69b3275c90c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:50:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69124-8158-427b-9e08-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:51:00.000Z",
            "modified": "2016-02-19T03:51:00.000Z",
            "description": "Automatically added (via c0ace7ddea0048bb4326de39878bbcc3)",
            "pattern": "[file:hashes.SHA256 = '53dd64a7870f26a61855ef6d4041317e9dca994562892ed502ce23e30ae39a24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:51:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69131-b8c4-4816-84bc-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:51:13.000Z",
            "modified": "2016-02-19T03:51:13.000Z",
            "description": "Automatically added (via c0af5bba330bdbe6bf558a245489e672)",
            "pattern": "[file:hashes.SHA256 = '2b4edc8a2918d41dcb94177867babefc73d08903c103523f46d2d73b05220ea5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:51:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6913f-04ec-4203-93f7-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:51:27.000Z",
            "modified": "2016-02-19T03:51:27.000Z",
            "description": "Automatically added (via c0d149a03370d57f5c4b9799af8e4ff1)",
            "pattern": "[file:hashes.SHA256 = '7d2d9b6ac251eff977f050ff771b2a8f99b5a9f031f4ffc7c74a800f60484f91']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:51:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6914d-99c8-48a2-b759-4a1c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:51:41.000Z",
            "modified": "2016-02-19T03:51:41.000Z",
            "description": "Automatically added (via c0ea2f142f279332a62a8922ab555504)",
            "pattern": "[file:hashes.SHA256 = 'c36848302b4efb875d9dadff40b2953453ff3bfb15132c37a86feb5d4a2851b6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:51:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6915a-d6e4-4b4d-be35-4ff8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:51:54.000Z",
            "modified": "2016-02-19T03:51:54.000Z",
            "description": "Automatically added (via c12bbb73cc9e68553079f4d5606e68f4)",
            "pattern": "[file:hashes.SHA256 = '3d2a72152d12eed6bd1a34a41ccb8d55ec20f56d63521aeb42a29a031db6bc9b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:51:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69167-c930-4208-86b2-4fc0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:52:07.000Z",
            "modified": "2016-02-19T03:52:07.000Z",
            "description": "Automatically added (via c1765ff61bd63281179fda2beeb72cc9)",
            "pattern": "[file:hashes.SHA256 = '3b38086061d59487be4579542aeed9738b5187673789f3f787ef1f7b52171d45']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:52:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69175-f1c4-4b73-a141-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:52:21.000Z",
            "modified": "2016-02-19T03:52:21.000Z",
            "description": "Automatically added (via c1ae88909876f9f31365e7a461dff17b)",
            "pattern": "[file:hashes.SHA256 = 'e9cce1688061609ccd36433ff40e36298e1f29104ed884c12b8def1cb7920205']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:52:21Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69183-cbf0-4b2a-964b-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:52:35.000Z",
            "modified": "2016-02-19T03:52:35.000Z",
            "description": "Automatically added (via c2fd936150093731096fc46a30e45e19)",
            "pattern": "[file:hashes.SHA256 = 'c46a99b29ad4db38762d798aa8456ed181c36076de79b0793a7be81ce4f8a796']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:52:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69191-80d0-435d-8bdb-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:52:49.000Z",
            "modified": "2016-02-19T03:52:49.000Z",
            "description": "Automatically added (via c302d17cac1e4365e0f85e688e9aebcc)",
            "pattern": "[file:hashes.SHA256 = '2aba3a4f8eefb2682c96884885204da42d20c2bc271669752166dc34f923135f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:52:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6919f-10dc-4a2f-b9d2-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:53:03.000Z",
            "modified": "2016-02-19T03:53:03.000Z",
            "description": "Automatically added (via c32425a9fcd6839e6dd151fe766c6eba)",
            "pattern": "[file:hashes.SHA256 = '7e770c5cd8788a86ac97ee640c15b4f20604dbb07d8ae85abaf2c3504456bcbb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:53:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691ad-aa00-4222-a289-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:53:17.000Z",
            "modified": "2016-02-19T03:53:17.000Z",
            "description": "Automatically added (via c3f33d7812f6fd54df55f31f36ba37d6)",
            "pattern": "[file:hashes.SHA256 = 'd805ef74fd1d2d1fd14b64f9b3df72c721594d2a7eb43b2252f34311ace0a7f7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:53:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691ba-9f84-4d55-b171-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:53:30.000Z",
            "modified": "2016-02-19T03:53:30.000Z",
            "description": "Automatically added (via c450ed478ffa988091e8a894db1e0251)",
            "pattern": "[file:hashes.SHA256 = 'bbbffd8d586d1a26ade9d092ac2cb96296e27b8d4310d8fcd6e8631296ff3a6e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:53:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691c8-b840-4f5f-85c3-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:53:44.000Z",
            "modified": "2016-02-19T03:53:44.000Z",
            "description": "Automatically added (via c4892faf578befa3f946905336f3c5a0)",
            "pattern": "[file:hashes.SHA256 = 'febccf68774cfde7771c2e8086269d89a9097b598089f77ef9f0a877dc5e68a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:53:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691d5-8050-44ba-b9d3-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:53:57.000Z",
            "modified": "2016-02-19T03:53:57.000Z",
            "description": "Automatically added (via c49ddf3e79a9c96f2430112105e16ffb)",
            "pattern": "[file:hashes.SHA256 = 'db3a6fb4b5155e37b4e07c110d4c3e9f4b875e4ea133a9fa7203b3e2a9df575a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:53:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691e3-7e50-4a8a-8dd5-4c2d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:54:11.000Z",
            "modified": "2016-02-19T03:54:11.000Z",
            "description": "Automatically added (via c4b2f3a73648fa790f11426bccc5faf2)",
            "pattern": "[file:hashes.SHA256 = '82c75dd9063e09fab3c95f57bc4f612f5dbe7c9466d8bb8e5a74180701954552']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:54:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691f0-e038-4118-84d1-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:54:24.000Z",
            "modified": "2016-02-19T03:54:24.000Z",
            "description": "Automatically added (via c4d6962fc5059b9f6b3889468bbfff7f)",
            "pattern": "[file:hashes.SHA256 = '99005dd73e2f73f220752ba6acd550d12fffb03b6bd48b12cee6fe151bb28745']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:54:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c691fe-266c-4275-aaba-42e5950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:54:38.000Z",
            "modified": "2016-02-19T03:54:38.000Z",
            "description": "Automatically added (via c4dacd706a1a81c350d050e623c57bd6)",
            "pattern": "[file:hashes.SHA256 = '04161d6da3f760274abb2f01ecd6aa9730544c0e20c50f782fb62d2d1dfd899a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:54:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6920c-33d4-4d85-af71-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:54:52.000Z",
            "modified": "2016-02-19T03:54:52.000Z",
            "description": "Automatically added (via c4e19d2ab26c78cf64c2d9b33a12163f)",
            "pattern": "[file:hashes.SHA256 = '6de1be584ba859821de8e7337a9d868288f7fd83e32e9ecafd32ee7c9c9208b5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:54:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6921a-0af0-4f08-9c64-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:55:06.000Z",
            "modified": "2016-02-19T03:55:06.000Z",
            "description": "Automatically added (via c50918a5008e51f619d6cf393c3b13a5)",
            "pattern": "[file:hashes.SHA256 = 'ca580e6984402a459e8835c9afe1b32b3f14787f32db9e421e9aa88c62a29fd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:55:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69227-5a40-44dd-8afc-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:55:19.000Z",
            "modified": "2016-02-19T03:55:19.000Z",
            "description": "Automatically added (via c50e17a4e781ffd9cf71d18dc97e2b2b)",
            "pattern": "[file:hashes.SHA256 = '20c892fa717e54d523544970b006a115432698f5dc897c35f7454ef5b276e3b0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:55:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69235-b9ec-45a9-b027-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:55:33.000Z",
            "modified": "2016-02-19T03:55:33.000Z",
            "description": "Automatically added (via c54044197ca177d5da855edde84c326c)",
            "pattern": "[file:hashes.SHA256 = 'b6d55c28bf02d8d35b9bff442c044bf7979dd92523c9b565ab58ffc764f1eefe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:55:33Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69242-54b0-4492-96f6-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:55:46.000Z",
            "modified": "2016-02-19T03:55:46.000Z",
            "description": "Automatically added (via c54e7b97c073c22a2fe371864ebc97ff)",
            "pattern": "[file:hashes.SHA256 = '4a035ca9ff5c7f988b9663c4d0fa68498bd99b1f8037f7b67745505a795fc0a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:55:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69250-ab9c-4732-98d6-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:56:00.000Z",
            "modified": "2016-02-19T03:56:00.000Z",
            "description": "Automatically added (via c569bd7aca121c816f2d38695ebedb8b)",
            "pattern": "[file:hashes.SHA256 = '9758770a7560376ba2f111c14040069fae8964cc9786ce8ec51747b2c5862131']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:56:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6925e-a1f4-4b19-bf41-4964950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:56:14.000Z",
            "modified": "2016-02-19T03:56:14.000Z",
            "description": "Automatically added (via cb70c20c985814907d3a3c873c3062a8)",
            "pattern": "[file:hashes.SHA256 = 'f26f62919d0bdeebb9fa75419946c728c427e22bfc16e5ffba49e17fc95ec72a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:56:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6926b-31dc-4b5e-8d55-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:56:27.000Z",
            "modified": "2016-02-19T03:56:27.000Z",
            "description": "Automatically added (via cb7372b32120af2878c41bdfa7a8bad3)",
            "pattern": "[file:hashes.SHA256 = 'd6b88226b48d55da13165d96fb908512afcad97db6f56fdba8c457d94a643da2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:56:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6927a-8240-44b5-ac0c-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:56:42.000Z",
            "modified": "2016-02-19T03:56:42.000Z",
            "description": "Automatically added (via cc2f1b26d89dcc5eba5fed16d07da83f)",
            "pattern": "[file:hashes.SHA256 = '1f188c50227ba216d1700e3d299c83666ccab5ef456a96656e4d2871ff939b5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:56:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69287-de04-491d-8fd8-41ec950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:56:55.000Z",
            "modified": "2016-02-19T03:56:55.000Z",
            "description": "Automatically added (via cc345b2474915309375af26287b04ea8)",
            "pattern": "[file:hashes.SHA256 = 'b406c185452d333d29ca948472a7ac5a2bbe8336d83d7f0434e24fd7e1eb6523']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:56:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69295-7200-44cf-acc3-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:57:09.000Z",
            "modified": "2016-02-19T03:57:09.000Z",
            "description": "Automatically added (via cc383679781033096118dbc3d02bf55e)",
            "pattern": "[file:hashes.SHA256 = '7305cf9f191f93bc00ef2bc82c30002f591d8dd71cdaa2e7cd76bec8c2cc4b1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:57:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692a2-dbd4-460b-a19d-4795950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:57:22.000Z",
            "modified": "2016-02-19T03:57:22.000Z",
            "description": "Automatically added (via cc6bf0a0f963783edf6847fe70f816b8)",
            "pattern": "[file:hashes.SHA256 = 'e1e9d23ffdad74ea4a1fbbc9feba7eb1a2c090098254bde02c4b8002aa33fdd9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:57:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692af-e8bc-425b-965d-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:57:35.000Z",
            "modified": "2016-02-19T03:57:35.000Z",
            "description": "Automatically added (via ccb9273a7cbbfbc74abf92831a9cf9ad)",
            "pattern": "[file:hashes.SHA256 = '92ca1871ec5c7b135b42e0230ad05870d92979fc06eb5b135f860bbb0246891a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:57:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692bd-8ae4-42b0-a4a6-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:57:49.000Z",
            "modified": "2016-02-19T03:57:49.000Z",
            "description": "Automatically added (via cd30e8f1110e719df01b224bb29828f5)",
            "pattern": "[file:hashes.SHA256 = '76356864c5473aec3d7a426b24ed35d86b4b2ec889cc4d7eace4f4f2f53472fc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:57:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692cb-034c-4663-9f7a-411d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:58:03.000Z",
            "modified": "2016-02-19T03:58:03.000Z",
            "description": "Automatically added (via ce20549f36862e9493f4777e1d617ca6)",
            "pattern": "[file:hashes.SHA256 = 'f84d245de2ec0262a51058d3f7eadc9449828ab3d8eab820d380e647e4c58294']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:58:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692d8-4ad8-4750-9803-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:58:16.000Z",
            "modified": "2016-02-19T03:58:16.000Z",
            "description": "Automatically added (via ce3ad8bbc0435d09e727a203d5ab3630)",
            "pattern": "[file:hashes.SHA256 = '7760e1b8ae7f8a85c41a4c149c40831188ee251ab67f0eb978f494c44ffa3b92']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:58:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692e6-8a64-4608-b7b6-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:58:30.000Z",
            "modified": "2016-02-19T03:58:30.000Z",
            "description": "Automatically added (via ce3cd9b9b5d64bbcbc6546d9ce3cb38a)",
            "pattern": "[file:hashes.SHA256 = 'e92fde1365bff357bbdf0644429f4d17969c659b4511d21ddb6db84f53259197']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:58:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c692f3-84c4-40b1-9f66-4fe9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:58:43.000Z",
            "modified": "2016-02-19T03:58:43.000Z",
            "description": "Automatically added (via ce6bf84a926ac18abca9795a8847e1c4)",
            "pattern": "[file:hashes.SHA256 = '88a77e26ad04987e9227ab89bcbeb061b659835a9ae1a82f7a8e77593070ee11']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:58:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69301-0244-4ed9-84ad-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:58:57.000Z",
            "modified": "2016-02-19T03:58:57.000Z",
            "description": "Automatically added (via cea943514acc6ea106bb77ffb0abd985)",
            "pattern": "[file:hashes.SHA256 = '0afaa674c9751d1db645a519800099c073acd529f52b506b474b8d1c1f30d1af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:58:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6930f-99d8-4b64-8e22-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:59:11.000Z",
            "modified": "2016-02-19T03:59:11.000Z",
            "description": "Automatically added (via ced5b5c4d8458b8214a94cdde78e090b)",
            "pattern": "[file:hashes.SHA256 = 'b502c00ccb4e9ab81e6cc51b1d674a20502acc960322bd05e29ee3d0c45c034f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:59:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6931c-cd84-413b-a291-49a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:59:24.000Z",
            "modified": "2016-02-19T03:59:24.000Z",
            "description": "Automatically added (via cf082b39a364c6ce2c283d702dbacf4f)",
            "pattern": "[file:hashes.SHA256 = 'a47746582ee20ae2b130b1bbfe8f7714a50e0282d2db0f71660ba666bb81807c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:59:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6932a-5718-4b0a-9958-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:59:38.000Z",
            "modified": "2016-02-19T03:59:38.000Z",
            "description": "Automatically added (via cf2c66915a0e32ebb65973fc72e52d42)",
            "pattern": "[file:hashes.SHA256 = '901b33c9f9e3fdf2f297fb5d70e17f95689f616ca2153e37c33674de8de0433c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:59:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69338-d834-472e-bfb1-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T03:59:52.000Z",
            "modified": "2016-02-19T03:59:52.000Z",
            "description": "Automatically added (via cf43025073d977b40c5ca803b70db117)",
            "pattern": "[file:hashes.SHA256 = '7da92f20f9220f155f49b1eb9995f20037dbff54b1a12eb10b5e5d073b183ea4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T03:59:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69345-9904-4c2e-87b1-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:00:05.000Z",
            "modified": "2016-02-19T04:00:05.000Z",
            "description": "Automatically added (via cf528dae41c11e5e512eb11c26e238ee)",
            "pattern": "[file:hashes.SHA256 = '84369a15d4fb986bde559f14d6e3f52da33a8a0367cd2d1bed7900da0639081e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:00:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69351-ee70-4eff-97a5-47ed950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:00:17.000Z",
            "modified": "2016-02-19T04:00:17.000Z",
            "description": "Automatically added (via cf8ef0e539ac759b2860c6e4088dce73)",
            "pattern": "[file:hashes.SHA256 = '2e2ddb9763d47597920fb3713f78efcc15e0b546281ecd1e85bea6aedccc5e40']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:00:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6935e-2554-4782-9d4d-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:00:30.000Z",
            "modified": "2016-02-19T04:00:30.000Z",
            "description": "Automatically added (via cfa352a314ae821cd3ed7c91682063f0)",
            "pattern": "[file:hashes.SHA256 = '586edf45fc4e6cb5c5ae34762be2c26c0b73b41133c107dd58a9e2d5bb745e13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:00:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6936b-6a8c-4f9b-bece-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:00:43.000Z",
            "modified": "2016-02-19T04:00:43.000Z",
            "description": "Automatically added (via cfcb624798e538a8c8ebe7564114a25b)",
            "pattern": "[file:hashes.SHA256 = '94a8650633037a6c4dbc9c64a1c49184c3049e1998c2feb088712129372af13a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:00:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69379-cfcc-4aca-b8c5-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:00:57.000Z",
            "modified": "2016-02-19T04:00:57.000Z",
            "description": "Automatically added (via d0268f18891e3a893bcbd471cdacf028)",
            "pattern": "[file:hashes.SHA256 = '8ea73c7213a7d35470d47aa20e43bb3ca79479f791584ddcb862c82f4c780776']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:00:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69388-25b4-4f07-8374-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:01:12.000Z",
            "modified": "2016-02-19T04:01:12.000Z",
            "description": "Automatically added (via d04bb6b365feb395db841ee152f09a74)",
            "pattern": "[file:hashes.SHA256 = '3ab22bf4a290ffd073ebfe7caeac89c53e9341637229a7ca278759e34ed76433']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:01:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69396-0738-40a9-b7fe-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:01:26.000Z",
            "modified": "2016-02-19T04:01:26.000Z",
            "description": "Automatically added (via d16ccf1912591766c12097717e8fb6d3)",
            "pattern": "[file:hashes.SHA256 = '0e0827f7f9a560150bb9f970e35e77203e3828ea27b2ce0e372018b68d71c767']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:01:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693a4-2e5c-41d4-979d-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:01:40.000Z",
            "modified": "2016-02-19T04:01:40.000Z",
            "description": "Automatically added (via d19d4c103d32b4827b495909eba9cde1)",
            "pattern": "[file:hashes.SHA256 = '084c3323ef164e36ba6c84e4807f04d2f6e75ad8f26a3982b2bdef6dde8570a6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:01:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693b2-f5b8-4aab-b933-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:01:54.000Z",
            "modified": "2016-02-19T04:01:54.000Z",
            "description": "Automatically added (via d1fe7c4511f05c60689267855126cd5c)",
            "pattern": "[file:hashes.SHA256 = '2368be01bcbc75e1c192c3f07fa915de4418c8d013596cc5d2b9710880980639']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:01:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693c0-0df0-4561-be42-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:02:08.000Z",
            "modified": "2016-02-19T04:02:08.000Z",
            "description": "Automatically added (via d216b7f570c42de5df5bf4dfca77a467)",
            "pattern": "[file:hashes.SHA256 = 'a1ee59bbb9ed9d48e165afb8e4468dfa6d0d20d384597b0ea15dfb6dad41e8bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:02:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693ce-e4ac-49fc-8369-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:02:22.000Z",
            "modified": "2016-02-19T04:02:22.000Z",
            "description": "Automatically added (via d2284596d092dfdd4cb8874f3dba638a)",
            "pattern": "[file:hashes.SHA256 = '4a45969d0decd4fc67585210a89033b11af3713aa9da553cfa7d40fe60cf11dd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:02:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693db-98fc-4856-b141-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:02:35.000Z",
            "modified": "2016-02-19T04:02:35.000Z",
            "description": "Automatically added (via d29540749f462a47ce7e1771a6c56e98)",
            "pattern": "[file:hashes.SHA256 = '6e6fad6aedc50c5bce2b824d48b19d86c83e18111726ac79d0d8cd4277f9f581']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:02:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693e9-8790-4662-b942-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:02:49.000Z",
            "modified": "2016-02-19T04:02:49.000Z",
            "description": "Automatically added (via d3090c27c2ed5ba7f1b18818260a6bce)",
            "pattern": "[file:hashes.SHA256 = '556aed8dfb0068add78f95bcedb344d82f6d40a24ead7975209f3bb628bc6651']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:02:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c693f7-e448-41fe-9755-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:03:03.000Z",
            "modified": "2016-02-19T04:03:03.000Z",
            "description": "Automatically added (via d34535b46374a6708d3d9a843f3bb9ca)",
            "pattern": "[file:hashes.SHA256 = '4163bbc4fb9c840f9727ce85f2da3f3f31411e8d487ce2be8514aabda10b9d20']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:03:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69405-f948-46c2-83ae-4d62950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:03:17.000Z",
            "modified": "2016-02-19T04:03:17.000Z",
            "description": "Automatically added (via d3c8cfb166f584f1d7b95ae9d1914e09)",
            "pattern": "[file:hashes.SHA256 = '0827918054a6ede6e99f7b5b70f73e11e0c599f1ced5af7a05d93e2fc8cc1457']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:03:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69413-258c-485b-aaab-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:03:31.000Z",
            "modified": "2016-02-19T04:03:31.000Z",
            "description": "Automatically added (via d3cb3767e72d279ccc83d7912b39b2e2)",
            "pattern": "[file:hashes.SHA256 = '7a94b0e3e42f0d2471d2cfe165034a3b6f315d5f5c589561b79bd07fcf58a94c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:03:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69421-5444-4422-a54a-4b21950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:03:45.000Z",
            "modified": "2016-02-19T04:03:45.000Z",
            "description": "Automatically added (via d42864f29199091a1a0dc58a5993aa2e)",
            "pattern": "[file:hashes.SHA256 = 'a2dc509c9398be73b3d94c5961c30a37747c626d50d791159a9eee18e5fb7a24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:03:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6942e-7c48-45fb-a9e5-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:03:58.000Z",
            "modified": "2016-02-19T04:03:58.000Z",
            "description": "Automatically added (via d42927547f9dd44d620a6ff4eb40b6b6)",
            "pattern": "[file:hashes.SHA256 = '464059d20f5c9a58b8f3d8cfc7da66f2d791e063cb34d2065cd79ef9d5c57abd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:03:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6943c-b03c-4524-8c7f-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:04:12.000Z",
            "modified": "2016-02-19T04:04:12.000Z",
            "description": "Automatically added (via d44976433a411f4d227a89153cdc2045)",
            "pattern": "[file:hashes.SHA256 = '6d9ba3e761896ad4293f9f70b32ffc0b26c304f3df2880c6e570afd033ab8adf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:04:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6944a-a3c0-4117-b313-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:04:26.000Z",
            "modified": "2016-02-19T04:04:26.000Z",
            "description": "Automatically added (via d45aaa14cccdd11549b4d15a9f2dd7db)",
            "pattern": "[file:hashes.SHA256 = 'e597d61880eb2a64bb6c5260b7f91073266fac0b75cc477e84769ca3f0feb57f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:04:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69458-0720-4b71-ae88-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:04:40.000Z",
            "modified": "2016-02-19T04:04:40.000Z",
            "description": "Automatically added (via d45b7cd3c8cdf9fe617db1f0cd7ac6b7)",
            "pattern": "[file:hashes.SHA256 = 'a0e8cd5ac3588231b2f87595f0d3ad8a0c6d869df0f3b52e4762844fb4c60a17']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:04:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69466-fce4-4fb3-b6db-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:04:54.000Z",
            "modified": "2016-02-19T04:04:54.000Z",
            "description": "Automatically added (via d4a2d215e144ee6908aaf7949829d4b4)",
            "pattern": "[file:hashes.SHA256 = '3c1f2e5f36d756945770e359741153b35344fb4a9f3f842266f1102fff4ed001']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:04:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69474-9540-4061-8b05-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:05:08.000Z",
            "modified": "2016-02-19T04:05:08.000Z",
            "description": "Automatically added (via d521b152a91efcd30e1a6208012a1240)",
            "pattern": "[file:hashes.SHA256 = '4951d01f807394680a3aae57e00fbe13743ffd37d61474f8f028ad80884797a2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:05:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69482-871c-42e9-a703-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:05:22.000Z",
            "modified": "2016-02-19T04:05:22.000Z",
            "description": "Automatically added (via d5a09cc5064747a24460ffcfd8784e7f)",
            "pattern": "[file:hashes.SHA256 = 'e277f9d0978761bb82407d95637a26a73e83d58d7ef1087c2b45f5745c3d8614']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:05:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69490-72f0-4746-b8e8-43e4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:05:36.000Z",
            "modified": "2016-02-19T04:05:36.000Z",
            "description": "Automatically added (via d5af48bce881e1c76bc55361517a4234)",
            "pattern": "[file:hashes.SHA256 = 'ad05565a4a5cf9d66442ec0747eea15fbf05d314bd2b9856e1c7fb357e726855']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:05:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6949e-d918-4b70-a0e6-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:05:50.000Z",
            "modified": "2016-02-19T04:05:50.000Z",
            "description": "Automatically added (via d5e8d86072e9967c49509ecd3ffa1f1f)",
            "pattern": "[file:hashes.SHA256 = 'ac3051d5bb577dd24b64d954b8281cb21a6d338c079c43f6d5f49ea72e3da0b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:05:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694ac-b914-415b-82c5-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:06:04.000Z",
            "modified": "2016-02-19T04:06:04.000Z",
            "description": "Automatically added (via d686e644b3f1b63d28af6a8ac20add08)",
            "pattern": "[file:hashes.SHA256 = '4e65f79dfe422d10132e99237ce3ec3e0b93c7e72001c9941e5a26f9d3d96c1e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:06:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694ba-5d8c-4389-9846-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:06:18.000Z",
            "modified": "2016-02-19T04:06:18.000Z",
            "description": "Automatically added (via d6c3bd3b31aed811ba5414bed8dd561d)",
            "pattern": "[file:hashes.SHA256 = '6a4912553184dcee3aadaeb6d35388cfd9f925a8fb6ff271aa836807d6877395']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:06:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694c7-fba4-48a2-9066-4727950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:06:31.000Z",
            "modified": "2016-02-19T04:06:31.000Z",
            "description": "Automatically added (via d725a8ebaacddfc3325d993ea3bb105b)",
            "pattern": "[file:hashes.SHA256 = 'a4d6f5722feffafb2caa7d4dbb3e7f7b3fc02fe73ca3f6116ea3b4fa011174fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:06:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694d6-fd10-410c-9665-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:06:46.000Z",
            "modified": "2016-02-19T04:06:46.000Z",
            "description": "Automatically added (via d7554e7f0c7b2f1f82a8c542d0db1fac)",
            "pattern": "[file:hashes.SHA256 = 'cc7a5f9253409b0f53f4a95e0d702649555e5e0d8a6ef162f9949d3c84e57043']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:06:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694e4-2b10-4b83-a2c1-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:07:00.000Z",
            "modified": "2016-02-19T04:07:00.000Z",
            "description": "Automatically added (via d862eac8f3a088288142324170e5a053)",
            "pattern": "[file:hashes.SHA256 = 'e8ed13ee71ef68ddf8fd5536d5dad1349fe985e7431f51d888cd15d93b2db135']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:07:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c694f3-c2f0-452f-a7ca-48e9950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:07:15.000Z",
            "modified": "2016-02-19T04:07:15.000Z",
            "description": "Automatically added (via d9368251f8fcdd2c0b1d3cd8a2747549)",
            "pattern": "[file:hashes.SHA256 = 'e9fd3c11f1099f7fdc664afa4fe06d7560384a5408bfba192f7e15213b55f9cf']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:07:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69501-ad8c-4f4e-9cf1-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:07:29.000Z",
            "modified": "2016-02-19T04:07:29.000Z",
            "description": "Automatically added (via d982daa64419b5401e18904ce3e676df)",
            "pattern": "[file:hashes.SHA256 = '7182e3c796869b7f60ee44bd5d5c1a5a42f8ff3bf446a2a1d4a4324dd47059ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:07:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6950f-4d98-4ef1-a075-43ad950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:07:43.000Z",
            "modified": "2016-02-19T04:07:43.000Z",
            "description": "Automatically added (via d9a75270b09df3da50d39ce0d0c6a5ce)",
            "pattern": "[file:hashes.SHA256 = 'ad2c8d98f834aced1c6110f8b36a6ce828ac400f14a9caec3293a909ffe2822b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:07:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6951d-ec90-45e5-a2e2-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:07:57.000Z",
            "modified": "2016-02-19T04:07:57.000Z",
            "description": "Automatically added (via da2408e7854de7419f4781f69de353fd)",
            "pattern": "[file:hashes.SHA256 = '39c411b29550d67bf285ea35e92875b8c40f8ce7d9ea104018eda2ed8e11b187']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:07:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6952a-923c-4cb2-9de4-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:08:10.000Z",
            "modified": "2016-02-19T04:08:10.000Z",
            "description": "Automatically added (via da29089228811144f6f837649da3dae4)",
            "pattern": "[file:hashes.SHA256 = '01e8054520c45fcff4e7fef5413dbfe941adcab8da5b754dc0ea4aa4aed261bb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:08:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69538-afa4-44c2-953a-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:08:24.000Z",
            "modified": "2016-02-19T04:08:24.000Z",
            "description": "Automatically added (via da4956ff6663e6677d28ef024b887da5)",
            "pattern": "[file:hashes.SHA256 = '0acc282b95a97375573a0510e24c2a42a78aaa89b59b8cb39d27dd7e7b9f14e2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:08:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69546-c18c-48e0-a7ed-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:08:38.000Z",
            "modified": "2016-02-19T04:08:38.000Z",
            "description": "Automatically added (via da5f2aa9dc572c88e432970663dd841b)",
            "pattern": "[file:hashes.SHA256 = 'e9b80b9e4f9af1435671c26aca8e501910a287c555b5bd702edca7553fdc2c4c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:08:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69554-32d4-4273-8c9c-42e4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:08:52.000Z",
            "modified": "2016-02-19T04:08:52.000Z",
            "description": "Automatically added (via dabe4a9f16f08717de64d614f01250ad)",
            "pattern": "[file:hashes.SHA256 = '7428b4b9375bf22be4d0e06a2c3b4dc714f99263b1da39a496a2c04cb13ff357']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:08:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69562-a184-45ff-b9ef-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:09:06.000Z",
            "modified": "2016-02-19T04:09:06.000Z",
            "description": "Automatically added (via db5f317ecc325ce82763d8cc36fa4952)",
            "pattern": "[file:hashes.SHA256 = '6dd0ea6a6bccc0b154c2609b74a9e86a246952028a468be3c461840282d07a2e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:09:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6956e-98fc-4c11-9958-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:09:18.000Z",
            "modified": "2016-02-19T04:09:18.000Z",
            "description": "Automatically added (via dbd28e676df7d721557582e912697493)",
            "pattern": "[file:hashes.SHA256 = '5e6fa1bdba9e97cd01d31951448e430838e2fc49c6d4bbdf47fc885162815a82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:09:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6957c-79b4-4431-b921-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:09:32.000Z",
            "modified": "2016-02-19T04:09:32.000Z",
            "description": "Automatically added (via dbe8df7dddc1bbfb8d68d14650e6a5fe)",
            "pattern": "[file:hashes.SHA256 = 'd287836d3de206724f0f7fb5934f471b699eed5657af682cda36dc8007d7e2ff']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:09:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6958a-6f0c-4049-a875-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:09:46.000Z",
            "modified": "2016-02-19T04:09:46.000Z",
            "description": "Automatically added (via dc375cdf1833e934902439abf1c3a5d7)",
            "pattern": "[file:hashes.SHA256 = 'c3d4670364f06f08f57115bd95795f5d55da352bdc6a37aaff64aa3de0d765bd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:09:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69598-d6d0-45e7-a650-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:10:00.000Z",
            "modified": "2016-02-19T04:10:00.000Z",
            "description": "Automatically added (via dc9dfda06cbd4e180169f572e638db90)",
            "pattern": "[file:hashes.SHA256 = '71f77541e1b22aae79b2c2f321f9fda176db8806a66c8d4544c37dfdf5108c8a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:10:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695a5-b47c-4d3f-b42a-4251950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:10:13.000Z",
            "modified": "2016-02-19T04:10:13.000Z",
            "description": "Automatically added (via dd553612cddd579d58b416a7770f43d5)",
            "pattern": "[file:hashes.SHA256 = '8f961ee8f0f434d2fb0aa968fe32b14039e6a82d6f2171b58415f7691ddee2de']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:10:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695b1-ebc8-4823-b8d5-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:10:25.000Z",
            "modified": "2016-02-19T04:10:25.000Z",
            "description": "Automatically added (via dd62a8c3e2e7ecbc567c6c578355dbff)",
            "pattern": "[file:hashes.SHA256 = '82bede6bbb5e8e5a4fc628538e8f92895484c142a06c81333d08aa11958431fa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:10:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695bf-f124-445d-bd86-47b8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:10:39.000Z",
            "modified": "2016-02-19T04:10:39.000Z",
            "description": "Automatically added (via dda651157ea3d2bd16a218e58fc4fe53)",
            "pattern": "[file:hashes.SHA256 = '1a4db68c528680460fbfcdb3e25b619eef2c10a8ff57025593181d07d40cf1be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:10:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695cc-6e30-497e-b72d-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:10:52.000Z",
            "modified": "2016-02-19T04:10:52.000Z",
            "description": "Automatically added (via ddbe5c78294ced2248f3b5d6df145824)",
            "pattern": "[file:hashes.SHA256 = '6c9d1e2f3a89036c3a93270a36aadf9d72cde5337b6d57289e0500b14ad299a5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:10:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695db-8e40-432f-b6bb-4477950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:11:07.000Z",
            "modified": "2016-02-19T04:11:07.000Z",
            "description": "Automatically added (via dde599022afd1035094e9f5fe4875ecf)",
            "pattern": "[file:hashes.SHA256 = '8996530c58da4b4225bb72803fe3fdab12aa308c7c72aa0bb7c68c8bd0e58e19']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:11:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695ea-1410-4c3b-bea8-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:11:22.000Z",
            "modified": "2016-02-19T04:11:22.000Z",
            "description": "Automatically added (via de36646773cccc74d22655beaa55dae3)",
            "pattern": "[file:hashes.SHA256 = '95f38ef7385e988481b4bae7b5af59a5ee403fa4612947c567eaba5ae2495616']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:11:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c695f9-cff4-44e1-a5e6-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:11:37.000Z",
            "modified": "2016-02-19T04:11:37.000Z",
            "description": "Automatically added (via de426311c33cac5f5857b5c90b2dc59c)",
            "pattern": "[file:hashes.SHA256 = '6951b323afb5a36d87d07b0bfa1051c3663ffd630f858b7444735ea6c50dc7d2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:11:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69606-6fb0-4885-bc7d-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:11:50.000Z",
            "modified": "2016-02-19T04:11:50.000Z",
            "description": "Automatically added (via de508f6ed90a2186ee32ba7612e849ab)",
            "pattern": "[file:hashes.SHA256 = '0e3fffdae22abf73c1451f844f00c358f5ace6405f44b5f9af81dbd15377f383']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:11:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69613-e0e8-420b-8bce-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:12:03.000Z",
            "modified": "2016-02-19T04:12:03.000Z",
            "description": "Automatically added (via de6ab36033b8a632bc37afb1a96172e7)",
            "pattern": "[file:hashes.SHA256 = '5ce07dc102ad05209fedaf0f5c92f9293173441fb668e30e0914b2ac1c795e3e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:12:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69620-0ab8-4d3b-9318-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:12:16.000Z",
            "modified": "2016-02-19T04:12:16.000Z",
            "description": "Automatically added (via de7f2f6908aa93552c130f6bbab99468)",
            "pattern": "[file:hashes.SHA256 = '04d40cd32eb8576447dbd6de29096367ddd9d2aa3074282f5f6bce74d047190e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:12:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6962d-71cc-4699-8b17-49c4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:12:29.000Z",
            "modified": "2016-02-19T04:12:29.000Z",
            "description": "Automatically added (via df0d224b4c40b1e80d866cbd6289daa2)",
            "pattern": "[file:hashes.SHA256 = '8d03fb9789fc065b21c86aa4b0c7a58c2dc90fb86f9fbe83289ffe8a7dcec615']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:12:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69639-8afc-40de-a512-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:12:41.000Z",
            "modified": "2016-02-19T04:12:41.000Z",
            "description": "Automatically added (via df1d2c221d96cb0f2d8597116e5450ba)",
            "pattern": "[file:hashes.SHA256 = '992ffc6cfd4b8ae5fee1556e12e6a5523b8e25279f1441307d9f2008aab86824']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:12:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69646-3ed8-4e51-b051-48bf950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:12:54.000Z",
            "modified": "2016-02-19T04:12:54.000Z",
            "description": "Automatically added (via df21c152c6ec8ec16d149ca86682030e)",
            "pattern": "[file:hashes.SHA256 = 'd63d11cd6af96cb80aac6356ce0533b317896660c494da6e54032211cac19c2d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:12:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69652-8ecc-4b51-bc0d-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:13:06.000Z",
            "modified": "2016-02-19T04:13:06.000Z",
            "description": "Automatically added (via df3dc6a2ebeadb2c73984a52b6cc1d1b)",
            "pattern": "[file:hashes.SHA256 = 'f9b2ec063b6a13122b2ff6d8fe8940bbeb0e597c21080a91c5ba74e3191ca776']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:13:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69660-21b0-45e8-be73-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:13:20.000Z",
            "modified": "2016-02-19T04:13:20.000Z",
            "description": "Automatically added (via dff72577e43712e48522a7b683a18737)",
            "pattern": "[file:hashes.SHA256 = '67c80fde06345f9ed18d72891642ee2471060cde8fb41898b93da54d2b003125']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:13:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6966e-648c-4540-a35a-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:13:34.000Z",
            "modified": "2016-02-19T04:13:34.000Z",
            "description": "Automatically added (via dffe4c124f6e4c0013b740fd0dea4f26)",
            "pattern": "[file:hashes.SHA256 = 'e1e70a10f412c51e938631f9826a1cb10500cbca8b3079a9d2af0198d89afceb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:13:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6967c-8cc4-4782-bac8-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:13:48.000Z",
            "modified": "2016-02-19T04:13:48.000Z",
            "description": "Automatically added (via e042f571b043eac745d1330b80d192f5)",
            "pattern": "[file:hashes.SHA256 = '8db7cb0e6a79765b98a912c487b1c75cc9b8e5e55dee1a6091a80b565d99fd63']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:13:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6968b-251c-47ed-adcf-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:14:03.000Z",
            "modified": "2016-02-19T04:14:03.000Z",
            "description": "Automatically added (via e0714b710104fb53d1dc0141cdfe3677)",
            "pattern": "[file:hashes.SHA256 = 'e563c736fd324e8612cac730e4a920348ef2865c6d7e2ebc5d7bd953af65e732']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:14:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69699-64e4-4f3d-b22a-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:14:17.000Z",
            "modified": "2016-02-19T04:14:17.000Z",
            "description": "Automatically added (via e08ea493e1ccabe0d0a6ec1970a92a90)",
            "pattern": "[file:hashes.SHA256 = '6b76b260fe00d1c65853485a84a544ec21c02b67f5ea40698d5a5cf2cde41ad8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:14:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696a5-5d78-4ec0-8d7b-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:14:29.000Z",
            "modified": "2016-02-19T04:14:29.000Z",
            "description": "Automatically added (via e0aa1c82ef6249467f25f08693704987)",
            "pattern": "[file:hashes.SHA256 = '61045b3e83b8835eced661751ac85a1fd6cafd58ceebb7c99a719b3a55e3c824']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:14:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696b3-7cc0-432b-aa98-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:14:43.000Z",
            "modified": "2016-02-19T04:14:43.000Z",
            "description": "Automatically added (via e268d952f72120d31cd53639758e17e0)",
            "pattern": "[file:hashes.SHA256 = 'a282dd758c47381e69de90ef875ec46114f7a19e33cc13d3a4ff9f5b4f1c1279']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:14:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696c2-00f4-4d83-981e-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:14:58.000Z",
            "modified": "2016-02-19T04:14:58.000Z",
            "description": "Automatically added (via e26b0bfbad9b0e9b0684f1cd8628cda7)",
            "pattern": "[file:hashes.SHA256 = '9067c80db72c90e37a5e5430599ee64d7141d5aefa10d7e7fc0b32cb15f50575']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:14:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696ce-8278-4319-99e2-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:15:10.000Z",
            "modified": "2016-02-19T04:15:10.000Z",
            "description": "Automatically added (via e27cd69b88f801750f9036415f6747cb)",
            "pattern": "[file:hashes.SHA256 = 'cb4961a166b5bee98fa977770c047ba67455ce5413075244bd2932ebd8c15d24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:15:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696dc-5fb4-4394-8a5b-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:15:24.000Z",
            "modified": "2016-02-19T04:15:24.000Z",
            "description": "Automatically added (via e2988ba6a22cc2603e0cb15fa65effba)",
            "pattern": "[file:hashes.SHA256 = '78a3cc3fc5d82e6359c53b016ced2e0dae15d1c7f992454a91fba13fa52c66b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:15:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696ea-4de0-4966-b411-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:15:38.000Z",
            "modified": "2016-02-19T04:15:38.000Z",
            "description": "Automatically added (via e2ac5ad49e85390b712a1e77c29d9ce6)",
            "pattern": "[file:hashes.SHA256 = '2561339c8dd34e7faa3f95c48e22a118fd4bd8acc373c98a86a395c81c5973fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:15:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c696f9-5df0-45a4-a8e4-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:15:53.000Z",
            "modified": "2016-02-19T04:15:53.000Z",
            "description": "Automatically added (via e2e5647127042800eabb4b63e240ba99)",
            "pattern": "[file:hashes.SHA256 = 'e6804b40e7d0b9a162f232bcb2b62d254b4adb6ea0cbf55a0a64effd9ebe076c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:15:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69708-4c78-4c88-99de-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:16:08.000Z",
            "modified": "2016-02-19T04:16:08.000Z",
            "description": "Automatically added (via e3131e70e00ef94a55a23414a05f56dd)",
            "pattern": "[file:hashes.SHA256 = 'e95cd8b701a205a1f775e06c24f0a0853d6dfa5a8fcd479cd75922ca342005ca']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:16:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69714-bc38-4479-b5b9-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:16:20.000Z",
            "modified": "2016-02-19T04:16:20.000Z",
            "description": "Automatically added (via e357247218cbb56eb704eafd05f5f20a)",
            "pattern": "[file:hashes.SHA256 = '4ce7802a658af70062a726bba91f2d73bd457aa301bce98aa4a5c88e50cb459a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:16:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69722-a604-45e3-b78a-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:16:34.000Z",
            "modified": "2016-02-19T04:16:34.000Z",
            "description": "Automatically added (via e3630084a22c347778ce8ae82d065bf5)",
            "pattern": "[file:hashes.SHA256 = '8bafec877d929f0e6b37b8ec59a7eb8237b0a16f0a9c0dc81da1d1de9f4a88d4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:16:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69730-eb50-4968-87fc-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:16:48.000Z",
            "modified": "2016-02-19T04:16:48.000Z",
            "description": "Automatically added (via e3bb7bcbe0b76fd10b709cd88105d4a5)",
            "pattern": "[file:hashes.SHA256 = '50868bacfac4c06a850cfc788d6f9278077b1ab1dc4cfd03d8d5fc875bf5a155']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:16:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6973f-2b5c-44ab-8689-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:17:03.000Z",
            "modified": "2016-02-19T04:17:03.000Z",
            "description": "Automatically added (via e3db93e86c1d6dc382112321514eae14)",
            "pattern": "[file:hashes.SHA256 = '4f97bc342fcc50ae78665bb009a3469a3e71df84d2f5126c3fe373ad3884beda']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:17:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6974d-ef4c-4495-a927-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:17:17.000Z",
            "modified": "2016-02-19T04:17:17.000Z",
            "description": "Automatically added (via e40c2a0a02424c080ae49c95f4e7d5a5)",
            "pattern": "[file:hashes.SHA256 = 'fd21beaa69640bbc62f1891125dcaa261fc519b28c7cdbc4471ea10ad745b038']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:17:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6975c-f91c-4119-901a-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:17:32.000Z",
            "modified": "2016-02-19T04:17:32.000Z",
            "description": "Automatically added (via e48ec2082968cf20b5b23b3362894086)",
            "pattern": "[file:hashes.SHA256 = 'f5ecb18b2ca469aefccfd32edabc2cf42ffc79fbb2d16b016096581dbe7f9749']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:17:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6976a-fc48-432f-8895-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:17:46.000Z",
            "modified": "2016-02-19T04:17:46.000Z",
            "description": "Automatically added (via e4991f07cd275d8ae3701906f1ce08fc)",
            "pattern": "[file:hashes.SHA256 = 'fd325c941e69ccc8fe8dcbd41804d7a674d72eada6c1b243e4f1b47c74e90bc7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:17:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69778-8628-440a-84bb-44ff950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:18:00.000Z",
            "modified": "2016-02-19T04:18:00.000Z",
            "description": "Automatically added (via e4af8b4be5baea3382abc6db5b0cd850)",
            "pattern": "[file:hashes.SHA256 = '6ec5b4e0730df929aa4037a01a2b6842171841a0eb8a84ebcde3051ecc021ca8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:18:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69785-b07c-42fa-a331-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:18:13.000Z",
            "modified": "2016-02-19T04:18:13.000Z",
            "description": "Automatically added (via e4c4e2910377f4884516bc206838fdf0)",
            "pattern": "[file:hashes.SHA256 = '36cc08dcf00215895c9d551d2eb9a016d20cd5dfed71bd1115e2b93efc544c97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:18:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69793-0ab0-4eb6-bc42-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:18:27.000Z",
            "modified": "2016-02-19T04:18:27.000Z",
            "description": "Automatically added (via e4ca075134806086151f116cd5a67d65)",
            "pattern": "[file:hashes.SHA256 = '609d6a95dc995674164ca90abca03e81df445f1da097a23afe2daf9e50ecfa9e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:18:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697a2-4a54-4d75-91ea-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:18:42.000Z",
            "modified": "2016-02-19T04:18:42.000Z",
            "description": "Automatically added (via e55c281f09de4e474c1ae42d756459aa)",
            "pattern": "[file:hashes.SHA256 = '88268ca1af43f30b320265b8887834baf3bd30e88e46866d27348da1850bd64d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:18:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697b1-4e20-45d4-913f-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:18:57.000Z",
            "modified": "2016-02-19T04:18:57.000Z",
            "description": "Automatically added (via e5b7e7bcfcac86238c3d8b89312e0f6d)",
            "pattern": "[file:hashes.SHA256 = '30d6cd548b51ae56ddbfbb994130972b7ffd653711b14c742376a1d86cc05073']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:18:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697c0-0f7c-45f8-bde2-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:19:12.000Z",
            "modified": "2016-02-19T04:19:12.000Z",
            "description": "Automatically added (via e5ee74c31154f1c30139e4d66d324b4d)",
            "pattern": "[file:hashes.SHA256 = '7dedc33ccc157f30b3f04007903430230d0fa671c6ff6190e4b473054b05bac2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:19:12Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697cf-2898-4b26-9939-44f2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:19:27.000Z",
            "modified": "2016-02-19T04:19:27.000Z",
            "description": "Automatically added (via e61187ccc9ab8f83c6d7637259bccf84)",
            "pattern": "[file:hashes.SHA256 = 'afbbad0896e8baa82a00333857823ce9d258c47b7d85a6050aab67b471559f9d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:19:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697dd-1f78-427c-9dca-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:19:41.000Z",
            "modified": "2016-02-19T04:19:41.000Z",
            "description": "Automatically added (via e614292df0382924364205df89a91651)",
            "pattern": "[file:hashes.SHA256 = '218f1d54175d0b8aa2b9d3f7ff0aee7ea9a62f4c7b22de6e5f27993cf107aca6']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:19:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697ec-db1c-49cb-ad2f-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:19:56.000Z",
            "modified": "2016-02-19T04:19:56.000Z",
            "description": "Automatically added (via e61f12bd104e96ac4da388a1c90d3b1a)",
            "pattern": "[file:hashes.SHA256 = '0ac1e24b1beeb84e4a022828608d29bf5dac614c378d464a81f2317081676ce0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:19:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c697fa-9418-4209-8cc1-43c2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:20:10.000Z",
            "modified": "2016-02-19T04:20:10.000Z",
            "description": "Automatically added (via e679b38c4627a72095cdb4b76d250206)",
            "pattern": "[file:hashes.SHA256 = '7eaad496526e752f3b3ee6f586c47fb78cec5f6c94a2087166202160e5e9c59c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:20:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69809-03e0-49a0-ae01-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:20:25.000Z",
            "modified": "2016-02-19T04:20:25.000Z",
            "description": "Automatically added (via e67d8fa4d16484ba989a064332ca9a12)",
            "pattern": "[file:hashes.SHA256 = 'c680a9edc1619194bee2f6fc28fa5e3cd7fab5e10444d2eb391a5f45b9f4ca5d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:20:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69818-c178-4c94-bc07-48fd950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:20:40.000Z",
            "modified": "2016-02-19T04:20:40.000Z",
            "description": "Automatically added (via e758d75bb0dbf9d3fc09d6bc67c4a815)",
            "pattern": "[file:hashes.SHA256 = '0ee14b2a47e14b012c8027aef015e5f34eb7cae01ac087296b76cc1f4a47a5fe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:20:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69826-b0e8-4bff-a368-43e4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:20:54.000Z",
            "modified": "2016-02-19T04:20:54.000Z",
            "description": "Automatically added (via e79fad334ac4e58c4e949065c346475b)",
            "pattern": "[file:hashes.SHA256 = '6eebce60f4be9684b4e039195fe88f481718f38cc007f6f5f7dc67111d2e0f50']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:20:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69835-a2d8-4da0-94a9-45fb950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:21:09.000Z",
            "modified": "2016-02-19T04:21:09.000Z",
            "description": "Automatically added (via e7b0d1a76057dcb394ae07f1b6b9f74f)",
            "pattern": "[file:hashes.SHA256 = 'c360272fd6bd0755af72640d6e4f5d52c3ee9389faa76b538306dcd06351eed5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:21:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69844-474c-44be-8f70-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:21:24.000Z",
            "modified": "2016-02-19T04:21:24.000Z",
            "description": "Automatically added (via e83f06622503e369215d300a28ea2dd4)",
            "pattern": "[file:hashes.SHA256 = '4954edc30b0f975d8c16d2566a43c5dd56536b5b8bef9d3e15e4763d1aea3f1c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:21:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69852-0cf8-42c6-8297-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:21:38.000Z",
            "modified": "2016-02-19T04:21:38.000Z",
            "description": "Automatically added (via e86182d02cb3f1f8e8c201832d89de08)",
            "pattern": "[file:hashes.SHA256 = '891a7765b529a034062c593c8f18471d87132ff57cb9f4b8ed62ef2c822b0cd5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:21:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69862-adc0-4065-ac12-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:21:54.000Z",
            "modified": "2016-02-19T04:21:54.000Z",
            "description": "Automatically added (via e879035433aebccae93effd473a7aea9)",
            "pattern": "[file:hashes.SHA256 = 'fce3ef7416ab81303352c5bf4a8ea18b24ca4d76ee54da65589a0de67299ae76']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:21:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69871-08b8-4820-87c2-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:22:09.000Z",
            "modified": "2016-02-19T04:22:09.000Z",
            "description": "Automatically added (via e8959fc0356c61f08802506cd68afe98)",
            "pattern": "[file:hashes.SHA256 = 'c109d73e86cc3b43a6aa36071e19116c4ac7dc26de9ab09b98b617eed99ad86f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:22:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69880-5a7c-4ef9-b15f-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:22:24.000Z",
            "modified": "2016-02-19T04:22:24.000Z",
            "description": "Automatically added (via e916a7604750e333fade42f12c96d650)",
            "pattern": "[file:hashes.SHA256 = '062ac3c2e84686d7055aa6f986f92fddf789c05604c8d525e6be195455de3fb1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:22:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6988e-b460-4dc0-b796-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:22:38.000Z",
            "modified": "2016-02-19T04:22:38.000Z",
            "description": "Automatically added (via e95cf5ca05dd60390ea69f925f352a51)",
            "pattern": "[file:hashes.SHA256 = 'b48e0e0c3091711bdb1bac1503c4e5d31deecd6dac833fe030d77ab9d8a2ba25']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:22:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6989d-878c-4d5b-bafa-441c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:22:53.000Z",
            "modified": "2016-02-19T04:22:53.000Z",
            "description": "Automatically added (via e985a36fa13e319b551ebed3b1100684)",
            "pattern": "[file:hashes.SHA256 = 'dea76c530480c88143f423c5d3ec75ae6f9cb10f609040f7588200bd3c80284b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:22:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698ab-7220-43af-b7ea-4dc8950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:23:07.000Z",
            "modified": "2016-02-19T04:23:07.000Z",
            "description": "Automatically added (via e98697a92a182252abea4af185439525)",
            "pattern": "[file:hashes.SHA256 = '8944f1d2f3dbff859ae4f7703b5710082b8247910181989216d6bcc67c07ab70']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:23:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698ba-0d08-4463-8a9e-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:23:22.000Z",
            "modified": "2016-02-19T04:23:22.000Z",
            "description": "Automatically added (via e9b34c6714e2923f4916c66c8efdea6c)",
            "pattern": "[file:hashes.SHA256 = '0c584294ebeb4c1f9f4cf9bc63de62fee2c3ccb61659aa6a204d62cbd443b1d8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:23:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698c9-1544-413c-959c-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:23:37.000Z",
            "modified": "2016-02-19T04:23:37.000Z",
            "description": "Automatically added (via e9e18902478825d17bc35aa95fe034d6)",
            "pattern": "[file:hashes.SHA256 = '7dcbcc252cab60f1be71cfbf5f3f89d0da76e50548ae20a3c3e91811483c39e3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:23:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698d7-7680-46f2-8cfb-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:23:51.000Z",
            "modified": "2016-02-19T04:23:51.000Z",
            "description": "Automatically added (via e9e8f4b286dff4bd0b3d2eaf8dea864f)",
            "pattern": "[file:hashes.SHA256 = '7e30a05f4fa18892b5ecc6cb5e0c474402d0db18153966311000c6ccbf1d4a03']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:23:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698e6-a86c-43f8-8de2-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:24:06.000Z",
            "modified": "2016-02-19T04:24:06.000Z",
            "description": "Automatically added (via ea2a8aa6783f2721ca58a7dbf7312239)",
            "pattern": "[file:hashes.SHA256 = '7608770c7802ea40028e48fede829d205faabedf36962307193d48260d94fda1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:24:06Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c698f4-b0f0-4fa0-8f02-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:24:20.000Z",
            "modified": "2016-02-19T04:24:20.000Z",
            "description": "Automatically added (via ea2ed2d9256144ae916fb07b2881cc52)",
            "pattern": "[file:hashes.SHA256 = '17906d976b840536e3e227206c2cd8ec2430404afc8da53032e586cb8a88d85f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:24:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69903-cba0-4bd2-baad-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:24:35.000Z",
            "modified": "2016-02-19T04:24:35.000Z",
            "description": "Automatically added (via ea31c5f66ff8bc980621f2dabd00a8ed)",
            "pattern": "[file:hashes.SHA256 = '2ba7931c113b3e04f17ce40a2606562509d1c18121aa5b1eebdb614ea88b08f3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:24:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69911-b724-4616-8ab1-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:24:49.000Z",
            "modified": "2016-02-19T04:24:49.000Z",
            "description": "Automatically added (via ea43e41c80bbaa473910bbc260b55fd2)",
            "pattern": "[file:hashes.SHA256 = '969acbe5ae28372c1d1bbecf190511cd860adeb3c6d283e0f777e83f2f1f2297']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:24:49Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69920-4eec-4575-bbde-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:25:04.000Z",
            "modified": "2016-02-19T04:25:04.000Z",
            "description": "Automatically added (via ea6e1895884681c40a7ec23ad1f27fac)",
            "pattern": "[file:hashes.SHA256 = 'f3bd427cef9dcb7c3d01adc28a392bb3a99eb8c4691c1e06bc1ead42788e9a82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:25:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6992c-9330-47ad-ba8b-4297950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:25:16.000Z",
            "modified": "2016-02-19T04:25:16.000Z",
            "description": "Automatically added (via ea758ddfbc0e43f1d73c74f199f4054b)",
            "pattern": "[file:hashes.SHA256 = '638f553a2fe25200fb6c84dc7cc97dc439df22e7ed2442014bd340653880c341']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:25:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69939-15ec-4925-8599-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:25:29.000Z",
            "modified": "2016-02-19T04:25:29.000Z",
            "description": "Automatically added (via eb165b7ec796c39e817267cdd47819e8)",
            "pattern": "[file:hashes.SHA256 = '4a248ea783da2d2d47999005047ee3372a6a81b3684965665c2072649daf4014']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:25:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69948-cb98-40bc-9e8f-4b4b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:25:44.000Z",
            "modified": "2016-02-19T04:25:44.000Z",
            "description": "Automatically added (via eb1deda6d695cd91c523a9ab4c21a934)",
            "pattern": "[file:hashes.SHA256 = 'f61cb0fe30ebcae9bbbcd140c1a34fa61b321d79e3cb59a01c15fae4442dfbfa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:25:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69956-7330-4195-8c6d-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:25:58.000Z",
            "modified": "2016-02-19T04:25:58.000Z",
            "description": "Automatically added (via ec006312334ad8eaa53eed0d18bfd7f7)",
            "pattern": "[file:hashes.SHA256 = '06204fc8f83611fab41a9449338403f8567a98dfefcdbafefcf79dcf2182f23e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:25:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69963-fad0-4236-918d-4c01950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:26:11.000Z",
            "modified": "2016-02-19T04:26:11.000Z",
            "description": "Automatically added (via ec3f4f3a01015d44e6198a3356f0ee1d)",
            "pattern": "[file:hashes.SHA256 = '0664d94a7b859af7982a2e54e08a1625c2f0f22b54d87c6916635d490b248736']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:26:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69971-dbe4-485f-b4d8-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:26:25.000Z",
            "modified": "2016-02-19T04:26:25.000Z",
            "description": "Automatically added (via ecc26da5b4f49db6363cc37c06fb56db)",
            "pattern": "[file:hashes.SHA256 = '46815597fc355b141593cd33a307fc9f1006f5fa0c1f6046186496001cd6aeb7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:26:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6997e-cb20-4800-b7af-47ab950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:26:38.000Z",
            "modified": "2016-02-19T04:26:38.000Z",
            "description": "Automatically added (via ecc965d6cccd5b032d1747bb53b9b03e)",
            "pattern": "[file:hashes.SHA256 = '51a0db30282bd428e71bbf9f6aeeaeaaa0046be144f1a996ed16a54e5f00b256']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:26:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c6998b-94e0-46d0-bc18-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:26:51.000Z",
            "modified": "2016-02-19T04:26:51.000Z",
            "description": "Automatically added (via eceb1deb6fda88a8d7fdd8a1f1adf45d)",
            "pattern": "[file:hashes.SHA256 = '903f4fc7f88b6a5cb8e34a4028622318d818cd1e29c6df92ffd35aa40fe2ba5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:26:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69997-41dc-4f5b-ba5f-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:27:03.000Z",
            "modified": "2016-02-19T04:27:03.000Z",
            "description": "Automatically added (via ed44b0a9c9ae95baf253dab31d6dd7f3)",
            "pattern": "[file:hashes.SHA256 = 'fee7dcf0ec7b962af323834f882f83a116cbec55f47029219aa7d55aaafea012']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:27:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699a6-8850-4d08-b87c-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:27:18.000Z",
            "modified": "2016-02-19T04:27:18.000Z",
            "description": "Automatically added (via ed9156660108a53a37cdfec3eb2f22a3)",
            "pattern": "[file:hashes.SHA256 = 'f77f68f6ee70f93892f4fe41f7edd9c9ef817800c011e51abd14bc8717a09762']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:27:18Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699b4-8e8c-44d7-9fa9-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:27:32.000Z",
            "modified": "2016-02-19T04:27:32.000Z",
            "description": "Automatically added (via edc0d00ae80e618bbf2ed37042a453d9)",
            "pattern": "[file:hashes.SHA256 = '27383c05b5d330de0a1bf42b38f9ac2918dc18953f99926a3956c6b05ca98aa2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:27:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699c1-396c-4a5d-a599-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:27:45.000Z",
            "modified": "2016-02-19T04:27:45.000Z",
            "description": "Automatically added (via edd3dd372b1c72c7418cb81e28152f9c)",
            "pattern": "[file:hashes.SHA256 = 'c4ca1dba458fb46505288e95d6f0e7ed13cb6784f971a4f482f2daf4bf2e525e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:27:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699cf-2694-42e8-bd6f-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:27:59.000Z",
            "modified": "2016-02-19T04:27:59.000Z",
            "description": "Automatically added (via eea07ed1b23eb19fddfeba44c76a67d9)",
            "pattern": "[file:hashes.SHA256 = '9de41e6f7c798c00294e4a626150b39b1cc194753382a43d59c9a9462607e411']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:27:59Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699de-a7ac-4e5a-8e6d-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:28:14.000Z",
            "modified": "2016-02-19T04:28:14.000Z",
            "description": "Automatically added (via eeb2a3f02021f5e4c6c90ab758a6c267)",
            "pattern": "[file:hashes.SHA256 = '7749697af39396306d828292d17e1e216d66993259deda80d6dba2f71c0f15d7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:28:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699ea-504c-4aa1-860d-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:28:26.000Z",
            "modified": "2016-02-19T04:28:26.000Z",
            "description": "Automatically added (via eeba7927b127773ee27de249d1a48c31)",
            "pattern": "[file:hashes.SHA256 = 'ecf473d242eb9be02b9923b065d0095258d98627fd72fbf2f669f0b7108815af']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:28:26Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c699f8-dde0-4e77-a53a-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:28:40.000Z",
            "modified": "2016-02-19T04:28:40.000Z",
            "description": "Automatically added (via ef7b734e244514ed72e21d02cc51ee7d)",
            "pattern": "[file:hashes.SHA256 = '81139e478d62523a4db65be2215723669cbde5620cefbb7085416184ffe2af93']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:28:40Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a04-367c-4dbe-ab0e-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:28:52.000Z",
            "modified": "2016-02-19T04:28:52.000Z",
            "description": "Automatically added (via efabad6f74ce00c012ad1b5013eacb5d)",
            "pattern": "[file:hashes.SHA256 = '312bdf5e5a146b92ad9634b2cda4cbf020788bd35dd7ce106bd2bb23c6aa6361']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:28:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a11-828c-45ed-9628-41ef950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:29:05.000Z",
            "modified": "2016-02-19T04:29:05.000Z",
            "description": "Automatically added (via efc17ae7983a678188508a823dc1179d)",
            "pattern": "[file:hashes.SHA256 = '55ab81a63820485ffa7b6f1caceaef587191849559bbf2055ae73027f610cc95']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:29:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a20-3ea4-4d53-ae6f-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:29:20.000Z",
            "modified": "2016-02-19T04:29:20.000Z",
            "description": "Automatically added (via f0a3cab3ac2bdcd79b9a51f6a6139786)",
            "pattern": "[file:hashes.SHA256 = 'd905f7db1f4f16ffa7beb12a6102dd27d92b1632c37388e67be3b424a78d30c1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:29:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a2c-1784-4c98-926b-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:29:32.000Z",
            "modified": "2016-02-19T04:29:32.000Z",
            "description": "Automatically added (via f0a9c32c9220762989e0e0fb1412423b)",
            "pattern": "[file:hashes.SHA256 = 'd65b2cf0159d6770b129685bfe72dba302f2d367572b484d11fd3fba7543bb5e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:29:32Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a3a-3770-4452-9a7f-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:29:46.000Z",
            "modified": "2016-02-19T04:29:46.000Z",
            "description": "Automatically added (via f0af51e3d818150d666f2e9719252b84)",
            "pattern": "[file:hashes.SHA256 = '81dd9b100caa011ac36bfb97bb9a4e6c955229591b7da6cdcf6d5f54ed52e30f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:29:46Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a48-bdc4-4b85-bfd2-4377950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:00.000Z",
            "modified": "2016-02-19T04:30:00.000Z",
            "description": "Automatically added (via f0dc1ff35f3b7ba2d461cc0cb66e96e4)",
            "pattern": "[file:hashes.SHA256 = 'de1d15f23d1067227fb74bb1c340884dea5c24e655c1a4b0fc1ff76d4c212a5b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:00Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a55-0b30-414c-b26b-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:13.000Z",
            "modified": "2016-02-19T04:30:13.000Z",
            "description": "Automatically added (via f1ed116f3a03ec7548e412b2f8835247)",
            "pattern": "[file:hashes.SHA256 = 'cd2392dc8cd8df9596eda15d9858931add4557f81a516d5208316619f5e8eb02']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:13Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a61-069c-4763-8eb3-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:25.000Z",
            "modified": "2016-02-19T04:30:25.000Z",
            "description": "Automatically added (via f21860cccb5fda26288a43cb4beed172)",
            "pattern": "[file:hashes.SHA256 = '438f342f0738b891bd95b7a68100050f35dedc1876de7299b22c9252b1ba3891']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a6e-aa14-4a3a-9a5f-4cc1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:38.000Z",
            "modified": "2016-02-19T04:30:38.000Z",
            "description": "Automatically added (via f25f59d9d570ddcf768b882b8cf32792)",
            "pattern": "[file:hashes.SHA256 = '9df590f0468419662570c346ee88a63fbcf8cb4e559b0363de01b341b41f4fdc']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a7b-1494-4321-9986-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:30:51.000Z",
            "modified": "2016-02-19T04:30:51.000Z",
            "description": "Automatically added (via f2b378570418a9863b35f9b16a478db6)",
            "pattern": "[file:hashes.SHA256 = '6d22bed1ca3f3c28fdc7cd6f06ef6433a8823466e1cbaf5cdb8e535361a91070']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:30:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a88-6bc8-4f8e-b956-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:31:04.000Z",
            "modified": "2016-02-19T04:31:04.000Z",
            "description": "Automatically added (via f2dcee208db5b9cfc59530245b2b4eb5)",
            "pattern": "[file:hashes.SHA256 = '175a7c3be0d9a78ca9d453b07c117d672e775ca79df871a85a4b6cf1f28dd3a7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:31:04Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69a94-a574-4d11-b394-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:31:16.000Z",
            "modified": "2016-02-19T04:31:16.000Z",
            "description": "Automatically added (via f30c0294613014154fd6f371c5f65243)",
            "pattern": "[file:hashes.SHA256 = '8a8ab77178bc6ff9fefc1d1a783b9b5aa5948805aac4e565ad5c46becbca08b4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:31:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69aa1-cb10-4219-9abd-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:31:29.000Z",
            "modified": "2016-02-19T04:31:29.000Z",
            "description": "Automatically added (via f3ae4d57eec53f68b62aa903150cbd99)",
            "pattern": "[file:hashes.SHA256 = 'b86b9bae64c0e384c8c0f8e3d56271a139d7d7136a2d3a1c9cc53a87facee98a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:31:29Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69aae-4800-414a-9232-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:31:42.000Z",
            "modified": "2016-02-19T04:31:42.000Z",
            "description": "Automatically added (via f3b3647d385023d525fae9e45a559cbe)",
            "pattern": "[file:hashes.SHA256 = '5b33f6a779ddf964f97485c3f787b9719e94d5ca2b267c44c7486719c46165a0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:31:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69aba-4c68-47bd-b9a8-4b0d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:31:54.000Z",
            "modified": "2016-02-19T04:31:54.000Z",
            "description": "Automatically added (via f3bc61dadab31f7ec7d757e1cadd9619)",
            "pattern": "[file:hashes.SHA256 = 'a3ada3bf3abdf02924f9132f4699bc77a038f26c360b6532e890d63b7e728e0b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:31:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ac8-5c54-4149-92aa-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:32:08.000Z",
            "modified": "2016-02-19T04:32:08.000Z",
            "description": "Automatically added (via f3c8049c1df9c9bda9de25f4fa3e94c1)",
            "pattern": "[file:hashes.SHA256 = '0332ff10a24c2cc1b26932d4f811d19560637bf4f7b0ac214c283d34bcbdf329']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:32:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ad6-1590-4f51-b3d4-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:32:22.000Z",
            "modified": "2016-02-19T04:32:22.000Z",
            "description": "Automatically added (via f3d6fe3cfd03fd7b72cbdf21bcc76ce8)",
            "pattern": "[file:hashes.SHA256 = 'b361a1fb7357cd12a859cfbbb476fd9efaaecb5612977cb2365b795199097bdb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:32:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ae2-de94-4d95-acdc-59a4950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:32:34.000Z",
            "modified": "2016-02-19T04:32:34.000Z",
            "description": "Automatically added (via f3e8d0f52975ca41a3afc77f2e2d5c66)",
            "pattern": "[file:hashes.SHA256 = '959247d505b20f990b02f3d2ab7260b8461be99be23c2534ff7e1a7c984bfdfe']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:32:34Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69af0-0364-44b2-b7eb-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:32:48.000Z",
            "modified": "2016-02-19T04:32:48.000Z",
            "description": "Automatically added (via f48bed8290c99001e9551b7979cc51a7)",
            "pattern": "[file:hashes.SHA256 = '4d7f1df9e9721206d2f8d661378db9a38dfc75b47028527c8597227beb4fad86']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:32:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69afe-f11c-459e-ba1a-4df3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:33:02.000Z",
            "modified": "2016-02-19T04:33:02.000Z",
            "description": "Automatically added (via f4ae2ca866ae2ebf38726d9bac3d3196)",
            "pattern": "[file:hashes.SHA256 = 'cb12b2ae1ff30f516ad5fd6580199e3bd68ad7b142bcf45b5ec1d7c7593a3d5f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:33:02Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b0c-b638-4046-b45d-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:33:16.000Z",
            "modified": "2016-02-19T04:33:16.000Z",
            "description": "Automatically added (via f4dbccae1da9c103fc0eaf5433266ddc)",
            "pattern": "[file:hashes.SHA256 = '678e2fe47961c8ca17fa5c4070447441f8cb3ca2587c7ada86abfc3d06db81d0']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:33:16Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b1a-3be8-4f05-bf37-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:33:30.000Z",
            "modified": "2016-02-19T04:33:30.000Z",
            "description": "Automatically added (via f5151ebddf3915066657fa2de95ebcef)",
            "pattern": "[file:hashes.SHA256 = '1c5064a807924639ca89d8b130de2800f1a56b73418f54325e27766f9f0d9fce']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:33:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b28-76b8-4ea3-ba4b-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:33:44.000Z",
            "modified": "2016-02-19T04:33:44.000Z",
            "description": "Automatically added (via f5155d9b4bd2f377d92c846630d1c65f)",
            "pattern": "[file:hashes.SHA256 = '38bc60d9bd46a3bf97032c3e8e490f26b87272643340d8900590666ad2de3058']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:33:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b36-bc44-42bc-8042-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:33:58.000Z",
            "modified": "2016-02-19T04:33:58.000Z",
            "description": "Automatically added (via f52b39f427aa404b543782960568e965)",
            "pattern": "[file:hashes.SHA256 = '05debef5de9f83a988e760663dd7f6f0363a6aff91e4376140fe1d4250634b5c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:33:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b43-00fc-432c-bb2f-4172950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:34:11.000Z",
            "modified": "2016-02-19T04:34:11.000Z",
            "description": "Automatically added (via f5594beed2d68a9a385653c76fe94980)",
            "pattern": "[file:hashes.SHA256 = '17bdb920b7d999f7a3deda05b84819616699301dea1f2907f218276cebc2348e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:34:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b50-f0b8-4c62-a95e-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:34:24.000Z",
            "modified": "2016-02-19T04:34:24.000Z",
            "description": "Automatically added (via f59c5a30c2c8360850b24fae19462611)",
            "pattern": "[file:hashes.SHA256 = 'c7147ccf35ecb4b994df36c7a1e7f2e440297dd9e6815469cf57e36f07e94301']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:34:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b5d-bb50-4ea3-9ca6-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:34:37.000Z",
            "modified": "2016-02-19T04:34:37.000Z",
            "description": "Automatically added (via f617a5e3eb0a50007ed44f795f12ac8f)",
            "pattern": "[file:hashes.SHA256 = 'c70e85b87433becf857f61c4afa75b12c693ff53be1339a963aff8a54994c8a3']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:34:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b6b-2b48-46e7-b3f2-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:34:51.000Z",
            "modified": "2016-02-19T04:34:51.000Z",
            "description": "Automatically added (via f64314fe6a7ddfa0afa9dbe3ebed4642)",
            "pattern": "[file:hashes.SHA256 = '9bc8d789b9630e3a25ada80ac9c2e44fdf802877c12cc4332824a7970f0f3b82']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:34:51Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b77-fc6c-40b6-89ee-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:35:03.000Z",
            "modified": "2016-02-19T04:35:03.000Z",
            "description": "Automatically added (via f652ed3430af60371071d54732daa0b1)",
            "pattern": "[file:hashes.SHA256 = '36df79d0b4291488d6b0b454b0ba9a1ac9fcf261277cd1369ff39d7b51d1d535']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:35:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b85-058c-47f9-8cc1-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:35:17.000Z",
            "modified": "2016-02-19T04:35:17.000Z",
            "description": "Automatically added (via f69a79a569c1efb319a4697a04421337)",
            "pattern": "[file:hashes.SHA256 = '186cf23f8c046d1eb363f9ce13a70cd61324ccdf948a45c2e034849cca26eb14']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:35:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b92-16b0-4352-84dd-5ca1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:35:30.000Z",
            "modified": "2016-02-19T04:35:30.000Z",
            "description": "Automatically added (via f6bf8fa011dfd21da519479dfa104a0a)",
            "pattern": "[file:hashes.SHA256 = '97688717412c8b461bdb81658dcee26eafa40693b78025af8c228a90e06aba86']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:35:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69b9f-4aa4-4fd7-83d3-c653950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:35:43.000Z",
            "modified": "2016-02-19T04:35:43.000Z",
            "description": "Automatically added (via f6c832757de5da318cbe76e3da6212b9)",
            "pattern": "[file:hashes.SHA256 = '29b3adeb416b7c0bd141e2eb708a3202e45e51961bd1d289459f8379f99b23fd']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:35:43Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bac-b8d8-4ff2-8b38-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:35:56.000Z",
            "modified": "2016-02-19T04:35:56.000Z",
            "description": "Automatically added (via f76887680190af12fd87baf112cc50d4)",
            "pattern": "[file:hashes.SHA256 = 'b58b1ead52f50196a9d24e8ca4fb430d1742c0ab2227fcb290c7bafcdd61dd49']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:35:56Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bba-a4cc-424b-91be-46de950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:36:10.000Z",
            "modified": "2016-02-19T04:36:10.000Z",
            "description": "Automatically added (via f778bb21032a00f4dbd2aa64c812df54)",
            "pattern": "[file:hashes.SHA256 = '2eeff8d6d9213be062c2be4ed82fa35e4a5d5ef83b33c136e4dfe1cadcf06b97']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:36:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bc8-15fc-4d1e-ab97-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:36:24.000Z",
            "modified": "2016-02-19T04:36:24.000Z",
            "description": "Automatically added (via f78a540fb23b5ce293786b57fe466993)",
            "pattern": "[file:hashes.SHA256 = '07940fc874ef23f9899e76f76cc2f6d824b4531ed180db4af78114cc77adec09']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:36:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bd7-40c8-4a2e-b4ce-4c81950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:36:39.000Z",
            "modified": "2016-02-19T04:36:39.000Z",
            "description": "Automatically added (via f790272b2bfb005f3e4dd17146403383)",
            "pattern": "[file:hashes.SHA256 = '6ff5285d1042ca8da10fd2982f88b7a475606828b05bbecc0ba44715dcde1625']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:36:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69be6-2728-4a3c-a474-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:36:54.000Z",
            "modified": "2016-02-19T04:36:54.000Z",
            "description": "Automatically added (via f7c7572e0897689f89a8f8f8a2a0e3e7)",
            "pattern": "[file:hashes.SHA256 = '1e7a3ac0a79f57dac05862e1fc3037d8b68d22809e082c5ee5ac84caabcb0d42']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:36:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69bf4-10e8-4022-92da-599e950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:37:08.000Z",
            "modified": "2016-02-19T04:37:08.000Z",
            "description": "Automatically added (via f7e8dcbaa7869c5469b1031a250e923d)",
            "pattern": "[file:hashes.SHA256 = '6b17c3ff57e5bb726791a7db81cba869a04dea4355c54d304a6d591aea651215']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:37:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c02-8d1c-4f5b-a0cf-4b49950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:37:22.000Z",
            "modified": "2016-02-19T04:37:22.000Z",
            "description": "Automatically added (via f7f71750d3b1fe4fd9148d62ae346606)",
            "pattern": "[file:hashes.SHA256 = 'ea9752091a62a7afd90577c2ab4c680cc4aecf2378cfe055d0e7f38974519408']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:37:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c0f-9210-4bcf-ab1f-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:37:35.000Z",
            "modified": "2016-02-19T04:37:35.000Z",
            "description": "Automatically added (via f8034d496a39e4399a4545f0b2da541a)",
            "pattern": "[file:hashes.SHA256 = 'aea01383d299a4c9bb04182ab2ff55b121e6dfc0acccaa8b2c4fa0f714285ea8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:37:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c1c-e8dc-4f17-bc66-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:37:48.000Z",
            "modified": "2016-02-19T04:37:48.000Z",
            "description": "Automatically added (via f885138e7c9ec2f0352cafe7e9421aa5)",
            "pattern": "[file:hashes.SHA256 = 'a0102be7ca11b8dda46f33b2ee2a179e683ff9ee3f1b10dd9b8122e22f801db7']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:37:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c29-cc30-41ee-b28a-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:38:01.000Z",
            "modified": "2016-02-19T04:38:01.000Z",
            "description": "Automatically added (via f8921fb6f239b86a624510198e83feda)",
            "pattern": "[file:hashes.SHA256 = 'f56c1f10d3c376024d05429f8aabdecf14d954b927adb178d5b6cc917bd837ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:38:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c37-f1d8-456c-befb-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:38:15.000Z",
            "modified": "2016-02-19T04:38:15.000Z",
            "description": "Automatically added (via f895b24dc38905b12bebe9d4b753e246)",
            "pattern": "[file:hashes.SHA256 = 'ab28386136d76a23a6dffd960626ffe5a574bde6512b7adef713203e772648b9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:38:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c44-0340-4ff8-9dce-4390950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:38:28.000Z",
            "modified": "2016-02-19T04:38:28.000Z",
            "description": "Automatically added (via f8cc9850f3d040e4e1aebe65bb1b2155)",
            "pattern": "[file:hashes.SHA256 = 'b13b77cc07d2d214f7f526aaf096f3d86261326c8362d70677d6db51e8b3be8d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:38:28Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c52-01bc-45ae-8676-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:38:42.000Z",
            "modified": "2016-02-19T04:38:42.000Z",
            "description": "Automatically added (via f950c2e9bce8f344a78e4750cfc52f31)",
            "pattern": "[file:hashes.SHA256 = '97b8a301e0b1db4e07e5ae741f05790b61b4cfa71b6ca107fab068425d46752a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:38:42Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c5f-d5e0-4c6f-b4b2-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:38:55.000Z",
            "modified": "2016-02-19T04:38:55.000Z",
            "description": "Automatically added (via f992f9caa16ceff8209dba10b5cd9cd8)",
            "pattern": "[file:hashes.SHA256 = '6a680df751e421a786abd0f4d57a384b39925b7c82ec5b7b9457fefab0c04e23']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:38:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c6d-d000-421c-82ee-4f3d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:39:09.000Z",
            "modified": "2016-02-19T04:39:09.000Z",
            "description": "Automatically added (via f9f5c5d73f04f4ef889448951fe4f988)",
            "pattern": "[file:hashes.SHA256 = '5ee6ef95bf4b3908993ed9c84b39b856de5246207cb53de4d49858e71e4f2043']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:39:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c7c-dd0c-4f73-a3de-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:39:24.000Z",
            "modified": "2016-02-19T04:39:24.000Z",
            "description": "Automatically added (via fa40b397a2bcdcf533422805fb2089a6)",
            "pattern": "[file:hashes.SHA256 = '5e2dc4cb20f78d15c85eb78986e412076bf1fb3c96a752a30304fab3c68d9dec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:39:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c89-c960-49a1-b3c7-c651950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:39:37.000Z",
            "modified": "2016-02-19T04:39:37.000Z",
            "description": "Automatically added (via fa8db5157be4f80185d579431a130f6e)",
            "pattern": "[file:hashes.SHA256 = '40abc8d5322b369852938b4245e014ef71c4c6975eee1ad9841a9d4108892f0a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:39:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69c96-f574-4ef2-8aac-59a2950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:39:50.000Z",
            "modified": "2016-02-19T04:39:50.000Z",
            "description": "Automatically added (via fa97b3a37c01cf2563d646a143f730a0)",
            "pattern": "[file:hashes.SHA256 = '6785576fe42b94afeaaa487a365670024024fe87defbc751bc478ab5db65c16f']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:39:50Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ca3-7364-45c2-878c-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:40:03.000Z",
            "modified": "2016-02-19T04:40:03.000Z",
            "description": "Automatically added (via faceb830c417c762688ed88b9ab4a56f)",
            "pattern": "[file:hashes.SHA256 = '9a6b05882f6ad91967ff5619fa60e8799afb5a97986c33610b51621c01d17702']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:40:03Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69cb1-73ec-4142-a37e-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:40:17.000Z",
            "modified": "2016-02-19T04:40:17.000Z",
            "description": "Automatically added (via fadbaf22a193f6d5f2d6e2d0af0cdc2a)",
            "pattern": "[file:hashes.SHA256 = '6cf1b0bcc1d8f1f547273dccb52900bf722fcfbf7446c0d4b252bd130845e95b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:40:17Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69cbf-dfb0-402b-9d15-c654950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:40:31.000Z",
            "modified": "2016-02-19T04:40:31.000Z",
            "description": "Automatically added (via fbcbec6073198c540b8be66b74c2008b)",
            "pattern": "[file:hashes.SHA256 = '774917abefd23d1d94b5d58d5f4278680356c831a0a0e080a291c72a414b1e0d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:40:31Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ccc-d4d8-445f-a368-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:40:44.000Z",
            "modified": "2016-02-19T04:40:44.000Z",
            "description": "Automatically added (via fbd56051c742b08ffcf37438c2e8f134)",
            "pattern": "[file:hashes.SHA256 = '9fccd38a8d99aa7b9082e1c3d6bfae4c8e165430db53fc12882524f1867af845']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:40:44Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69cd9-caa4-409e-899a-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:40:57.000Z",
            "modified": "2016-02-19T04:40:57.000Z",
            "description": "Automatically added (via fbd673d823d3c66449d436e1f4b95945)",
            "pattern": "[file:hashes.SHA256 = '7c79683f40b4c0ef13a54ba121d8aa9ef8e47cccdaec0e85e8b8c9365c0a09b8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:40:57Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69ce6-27b8-4ca4-af8d-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:41:10.000Z",
            "modified": "2016-02-19T04:41:10.000Z",
            "description": "Automatically added (via fc0b237c9e777c5a116160b56a60cfa1)",
            "pattern": "[file:hashes.SHA256 = '92c5b5ac3aa822b561d43f16e6b0737773f5b08c7351bdf92036582059c40262']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:41:10Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69cf4-02c0-4483-b98d-4f46950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:41:24.000Z",
            "modified": "2016-02-19T04:41:24.000Z",
            "description": "Automatically added (via fc0eebf0a7f709739614fda4e900f82d)",
            "pattern": "[file:hashes.SHA256 = 'a08d309836429053c7e9dacae1a956217733316baa8d543ed092fe925fc5a8a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:41:24Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d03-0164-4881-83ef-59a3950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:41:39.000Z",
            "modified": "2016-02-19T04:41:39.000Z",
            "description": "Automatically added (via fc81db0cc4896cec19d869228a921172)",
            "pattern": "[file:hashes.SHA256 = '5732fca1a1980b32f63eb81d62a203d058094f6d504924dab9bc6d98ad21f83a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:41:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d12-b7f8-48c5-99d5-40df950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:41:54.000Z",
            "modified": "2016-02-19T04:41:54.000Z",
            "description": "Automatically added (via fc85faae0c8315cc7c1579f35e45baca)",
            "pattern": "[file:hashes.SHA256 = 'd7c52721454d690b1da8e2d5f31d72aa5ce7a664580008b07e56b18a835236fb']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:41:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d21-f2d4-410b-abb0-4789950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:42:09.000Z",
            "modified": "2016-02-19T04:42:09.000Z",
            "description": "Automatically added (via fcc01b6d615c2888aa70c98e3c5792bb)",
            "pattern": "[file:hashes.SHA256 = '9b3cb538b1670d0247a1be3411cad6b22da14f7e092dd5321c5b1f62352a43e5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:42:09Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d31-b6cc-4b23-99a9-4031950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:42:25.000Z",
            "modified": "2016-02-19T04:42:25.000Z",
            "description": "Automatically added (via fce4b320e9a33ebd08edba53a7c53933)",
            "pattern": "[file:hashes.SHA256 = '6c71275d5f0e0835d0925b6030730c32ff2836dbe2f1970514644d5dfc0eb084']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:42:25Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d41-3ddc-417c-a10f-59a0950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:42:41.000Z",
            "modified": "2016-02-19T04:42:41.000Z",
            "description": "Automatically added (via fced21bb330926f582e5057ae6ccbd6f)",
            "pattern": "[file:hashes.SHA256 = 'c59622cc14bb3029ee41fb1a6cb93df89851ba62001781314d64ab487e44c5ea']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:42:41Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d4f-e964-4953-940e-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:42:55.000Z",
            "modified": "2016-02-19T04:42:55.000Z",
            "description": "Automatically added (via fd50a292881921c662c8beed60e1ddd2)",
            "pattern": "[file:hashes.SHA256 = 'a64097ccb40129453aed2be0d07cc4a371fab7e51d2fdef15cd9f6ba819c55ec']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:42:55Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d5c-f690-4450-9ab2-599f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:43:08.000Z",
            "modified": "2016-02-19T04:43:08.000Z",
            "description": "Automatically added (via fd6f12a84d35331b6156a9911d7d85bc)",
            "pattern": "[file:hashes.SHA256 = '12ed47f5239616530557d4cc5a84a0cfe5a71d01e975c571168b07abcca0238b']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:43:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d6a-dec8-48ed-a8c5-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:43:22.000Z",
            "modified": "2016-02-19T04:43:22.000Z",
            "description": "Automatically added (via fd70922ef7e69f73e28e17dbe981a5b4)",
            "pattern": "[file:hashes.SHA256 = '2453c5f03c3fcc5b369fd417683a14cb4176f4a19067b2d37d1cac01b91917be']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:43:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d79-1358-4559-9232-59a1950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:43:37.000Z",
            "modified": "2016-02-19T04:43:37.000Z",
            "description": "Automatically added (via fd75952659afbb74661f081cfe0d82c0)",
            "pattern": "[file:hashes.SHA256 = '557ad6587d3ab23719214d6776bd64ab84a72de9ab0e28d286f4a4d2d0a3a355']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:43:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d89-3b44-4fb9-acfc-5f51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:43:53.000Z",
            "modified": "2016-02-19T04:43:53.000Z",
            "description": "Automatically added (via fe04f99509a913658f0b1f14ea286ea6)",
            "pattern": "[file:hashes.SHA256 = '8f7511a67d1a68e3ea8b7cd95554c830f346fdf7298c1316e926b433c0262f88']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:43:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69d98-bf3c-4eb7-a63e-498b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:44:08.000Z",
            "modified": "2016-02-19T04:44:08.000Z",
            "description": "Automatically added (via fe9fdba44ea3a6bc29d8cee17410a124)",
            "pattern": "[file:hashes.SHA256 = 'c1073e2966a61822710415347563f3e336e99d1236a2081f9a6af5132c8543a9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:44:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69da7-1ea4-4550-8a02-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:44:23.000Z",
            "modified": "2016-02-19T04:44:23.000Z",
            "description": "Automatically added (via fea691a4e244515675d6eafcf3789600)",
            "pattern": "[file:hashes.SHA256 = '02c7ea5eaf1c69aa005deb61ba6cad9bf56c96d3a372ce8e5ddc031a1da1a26a']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:44:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69db6-3618-4882-9ccb-c650950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:44:38.000Z",
            "modified": "2016-02-19T04:44:38.000Z",
            "description": "Automatically added (via fec6c7c5c27b52813e5226d05d8ee4c2)",
            "pattern": "[file:hashes.SHA256 = '04f4186baf934a56320e27a51f14a1fe12898e983b9c2521d960b8714346eb4e']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:44:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69dc5-f750-4bbe-846a-c652950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:44:53.000Z",
            "modified": "2016-02-19T04:44:53.000Z",
            "description": "Automatically added (via fed62009b28ee275458b415a8408fd9e)",
            "pattern": "[file:hashes.SHA256 = 'f949727a23f6210af5802469ac30ff9aaed36c16a1b40b60d737b0ba67c069f5']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:44:53Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69dd3-a780-4fe6-a627-4f74950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:45:07.000Z",
            "modified": "2016-02-19T04:45:07.000Z",
            "description": "Automatically added (via ff075c22241a60924fbc82bbff614efc)",
            "pattern": "[file:hashes.SHA256 = '2564ce237065d298dc242ab07530dbf309d948c6ce220717f78faf9883913b24']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:45:07Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69de3-d78c-44b4-9194-599d950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:45:23.000Z",
            "modified": "2016-02-19T04:45:23.000Z",
            "description": "Automatically added (via ff71143c5fcf41f9526a41986c60c85d)",
            "pattern": "[file:hashes.SHA256 = '8fb7f8f64581615d16d99eeaed0a164c4289cbd0482d12a22f1f2f203b2446f2']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:45:23Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56c69df2-2fc0-4bf8-9f12-599c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-19T04:45:38.000Z",
            "modified": "2016-02-19T04:45:38.000Z",
            "description": "Automatically added (via ffc5ce7627333c505488250c12228583)",
            "pattern": "[file:hashes.SHA256 = 'b6467ca450cc76f5c3e44c2e8808261e75addd7746921b47cbcf6e36c26d0c12']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-19T04:45:38Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56cb5033-1a90-4e54-94ea-4e98950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-22T18:15:15.000Z",
            "modified": "2016-02-22T18:15:15.000Z",
            "description": "Automatically added (via 7e5599a3d9fe939fdadccccccdef2a48)",
            "pattern": "[file:hashes.SHA1 = 'ae12c56eecfb227aefd1715479cf9bd580d41776']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-22T18:15:15Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56cb5058-f308-43a6-aa60-4510950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-22T18:15:52.000Z",
            "modified": "2016-02-22T18:15:52.000Z",
            "description": "Automatically added (via ee427408989df507855ec90faa57d10a)",
            "pattern": "[file:hashes.SHA1 = '4b79e348bb952c122ecb9f86bbc754ede28e91ee']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-22T18:15:52Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56cb5037-619c-4d26-b654-4974950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-22T18:15:19.000Z",
            "modified": "2016-02-22T18:15:19.000Z",
            "description": "Automatically added (via 7e5599a3d9fe939fdadccccccdef2a48)",
            "pattern": "[file:hashes.SHA256 = '67a8b14ea8a12068df989d318a26d5c7539439398b0c4d8f06227b52850943a1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-22T18:15:19Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56cb505a-9bd4-46e7-8842-4c22950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-02-22T18:15:54.000Z",
            "modified": "2016-02-22T18:15:54.000Z",
            "description": "Automatically added (via ee427408989df507855ec90faa57d10a)",
            "pattern": "[file:hashes.SHA256 = 'a535f3a28e0acee4ff2fb172229fcb009b0b302e63aadaa7903f0df060ad7f4d']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-02-22T18:15:54Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61343-9684-41cc-83d2-45e6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:10:11.000Z",
            "modified": "2016-03-01T22:10:11.000Z",
            "description": "Automatically added (via 0cd7795cf60aa9e78d5e1e4332c2ee44)",
            "pattern": "[file:hashes.SHA1 = '1991e1a68c6c9193820dc08c5b11e174f6e58756']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:10:11Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61353-2694-46a2-bf05-4204950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:10:27.000Z",
            "modified": "2016-03-01T22:10:27.000Z",
            "description": "Automatically added (via 2c4aede78228811391c60c445eed87b5)",
            "pattern": "[file:hashes.SHA1 = '88b180e5ef91e3109910a66ce5aec7bab4e97628']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:10:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d6135b-1908-47d4-8958-4c51950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:10:35.000Z",
            "modified": "2016-03-01T22:10:35.000Z",
            "description": "Automatically added (via 31d41141847c1fa704e1e3b40ba1224c)",
            "pattern": "[file:hashes.SHA1 = 'b87c33a37a4d55c904734b4b22dddfd0802b1fe9']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:10:35Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61365-25d4-46ca-9dba-4201950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:10:45.000Z",
            "modified": "2016-03-01T22:10:45.000Z",
            "description": "Automatically added (via 4161ef7e5aef71dd2a424cdc7060fbb7)",
            "pattern": "[file:hashes.SHA1 = 'b4b07279366ef84fe5a1f55f6aea8e3cdaaf2caa']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:10:45Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61372-6624-40be-8e50-4543950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:10:58.000Z",
            "modified": "2016-03-01T22:10:58.000Z",
            "description": "Automatically added (via 57ef3f6c46e7a6ed55283979ce543def)",
            "pattern": "[file:hashes.SHA1 = 'ad32c7a8e0639731445666648c875818754a8f13']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:10:58Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61388-135c-4a16-96bd-45e6950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:11:20.000Z",
            "modified": "2016-03-01T22:11:20.000Z",
            "description": "Automatically added (via 8aa41647bb03bc822bb88e084f78c3e1)",
            "pattern": "[file:hashes.SHA1 = '5a775f47b42a92bdaa15dcc4e52052425ea39360']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:11:20Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d6138f-51a4-4a45-99ab-4843950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:11:27.000Z",
            "modified": "2016-03-01T22:11:27.000Z",
            "description": "Automatically added (via 9197a4aadd3384e3fad8c1b1cfdd725d)",
            "pattern": "[file:hashes.SHA1 = '2a19aa10cf143f45f58d8a6de41fdf9d3225a983']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:11:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61398-b85c-422e-8c5a-481a950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:11:36.000Z",
            "modified": "2016-03-01T22:11:36.000Z",
            "description": "Automatically added (via 9d7e345e4e9c942759fca4bc2a2c8628)",
            "pattern": "[file:hashes.SHA1 = '9bb50d66a8d186c4c517f674010f3d8bcededa30']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:11:36Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d613b5-72a0-4d4e-954d-4987950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:12:05.000Z",
            "modified": "2016-03-01T22:12:05.000Z",
            "description": "Automatically added (via d140f46edede12ef2c0475f633b30910)",
            "pattern": "[file:hashes.SHA1 = 'f90d976d019a6c1d2569f6e72cd5226234114eab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:12:05Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d613cb-1888-478c-adbf-4f3c950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:12:27.000Z",
            "modified": "2016-03-01T22:12:27.000Z",
            "description": "Automatically added (via ffbb576728ee551fcf2ba6729f97d1f5)",
            "pattern": "[file:hashes.SHA1 = 'c2005c8d1a79da5e02e6a15d00151018658c264c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:12:27Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha1\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61346-a9bc-4b52-8667-c664950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:10:14.000Z",
            "modified": "2016-03-01T22:10:14.000Z",
            "description": "Automatically added (via 0cd7795cf60aa9e78d5e1e4332c2ee44)",
            "pattern": "[file:hashes.SHA256 = '2d45ceb16f8a3c76d9b445b83c74b631ef07cdf4877b42108878f3d2fbc3bdb8']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:10:14Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61356-ec5c-4cd0-a319-4310950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:10:30.000Z",
            "modified": "2016-03-01T22:10:30.000Z",
            "description": "Automatically added (via 2c4aede78228811391c60c445eed87b5)",
            "pattern": "[file:hashes.SHA256 = '4d83fc04b81448eb294ea8a5e11418e5c3f94553be029ea89256743138a6148c']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:10:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d6135d-0094-452b-a011-4422950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:10:37.000Z",
            "modified": "2016-03-01T22:10:37.000Z",
            "description": "Automatically added (via 31d41141847c1fa704e1e3b40ba1224c)",
            "pattern": "[file:hashes.SHA256 = '1b59f2f789b59b36b4a2f1478977f49f777748553a96ac810f3a65433bbc9624']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:10:37Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61368-ce88-4220-81e1-407f950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:10:48.000Z",
            "modified": "2016-03-01T22:10:48.000Z",
            "description": "Automatically added (via 4161ef7e5aef71dd2a424cdc7060fbb7)",
            "pattern": "[file:hashes.SHA256 = '8f3c1247ff4d5a40da015c6c04f50267c767ca2ad5d6f8b936c8319775ee7223']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:10:48Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61375-cd68-4f2c-95b3-421b950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:11:01.000Z",
            "modified": "2016-03-01T22:11:01.000Z",
            "description": "Automatically added (via 57ef3f6c46e7a6ed55283979ce543def)",
            "pattern": "[file:hashes.SHA256 = '5b23bca9d51290ffd143d2bda03cea19b01df351d950256bf185c71acb936d00']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:11:01Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d6138a-15bc-42bc-bbfe-0b81950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:11:22.000Z",
            "modified": "2016-03-01T22:11:22.000Z",
            "description": "Automatically added (via 8aa41647bb03bc822bb88e084f78c3e1)",
            "pattern": "[file:hashes.SHA256 = '5bc83e885f413a3272c071f4cf33d7271d07ccf3e25c4a32e0d94127cd6c07e4']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:11:22Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d61392-100c-471e-877a-42eb950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:11:30.000Z",
            "modified": "2016-03-01T22:11:30.000Z",
            "description": "Automatically added (via 9197a4aadd3384e3fad8c1b1cfdd725d)",
            "pattern": "[file:hashes.SHA256 = '3319b55dfa99d0c061c7c0fd965ad7eba9883ad06d53bf3461df1f43e9a87999']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:11:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d6139b-a7d0-494e-965b-4d31950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:11:39.000Z",
            "modified": "2016-03-01T22:11:39.000Z",
            "description": "Automatically added (via 9d7e345e4e9c942759fca4bc2a2c8628)",
            "pattern": "[file:hashes.SHA256 = '4aec31a3853ff3a61bc1db5b2f28c68c9d77cb42a9068933f24e9b4fbfa25784']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:11:39Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d613b8-e1f4-4509-a3dd-0b81950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:12:08.000Z",
            "modified": "2016-03-01T22:12:08.000Z",
            "description": "Automatically added (via d140f46edede12ef2c0475f633b30910)",
            "pattern": "[file:hashes.SHA256 = '6c7dc5b12bce5433d5ce7f7d3bf8a1a9d613338f9507baf4426900e3d8c61ed1']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:12:08Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--56d613ce-f2a8-49b6-84ba-c664950d210f",
            "created_by_ref": "identity--55f6ea5f-fd34-43b8-ac1d-40cb950d210f",
            "created": "2016-03-01T22:12:30.000Z",
            "modified": "2016-03-01T22:12:30.000Z",
            "description": "Automatically added (via ffbb576728ee551fcf2ba6729f97d1f5)",
            "pattern": "[file:hashes.SHA256 = '4adc1c6b6df0e9457f6e7b8af2b93b4b1396ee03bff31a6e725d734c8f2948ab']",
            "pattern_type": "stix",
            "pattern_version": "2.1",
            "valid_from": "2016-03-01T22:12:30Z",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "misp-category",
                    "phase_name": "Payload delivery"
                }
            ],
            "labels": [
                "misp:type=\"sha256\"",
                "misp:category=\"Payload delivery\"",
                "misp:to_ids=\"True\""
            ]
        },
        {
            "type": "marking-definition",
            "spec_version": "2.1",
            "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
            "created": "2017-01-20T00:00:00.000Z",
            "definition_type": "tlp",
            "name": "TLP:WHITE",
            "definition": {
                "tlp": "white"
            }
        }
    ]
}